This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/1Ftg2WrEWLscVrjfa0eX21TL5ys.roa File: 1Ftg2WrEWLscVrjfa0eX21TL5ys.roa (raw, json) Hash identifier: TxsOnjQ4e16o8H9v1Jos/KbHQj33cJ2zR4Och16WrB8= Subject key identifier: D4:5B:60:D9:6A:C4:58:BB:1C:56:B8:DF:6B:47:97:DB:54:CB:E7:2B Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b Certificate serial: 019B7D5CCA80F815034669CE04E18CDF7856 Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/1Ftg2WrEWLscVrjfa0eX21TL5ys.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 185.239.216.0/22 maxlen: 22 2a0c:6380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ca:80:f8:15:03:46:69:ce:04:e1:8c:df:78:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d45b60d96ac458bb1c56b8df6b4797db54cbe72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:c5:16:f7:da:3c:b5:3f:cb:ed:3e:f4:b1: bf:76:7b:c8:d6:c7:40:89:12:83:f9:74:72:2b:ce: 52:ef:76:97:85:5b:57:03:20:e6:af:66:66:f6:2f: 3a:6b:8a:ed:87:32:06:3a:a6:ee:5b:c3:d3:4d:7c: 58:9b:b1:89:c2:fd:cf:f9:21:f4:25:01:60:5f:4b: f1:0c:83:f1:90:e5:2c:54:3b:02:e7:ba:89:ef:97: 64:16:8d:35:7a:45:7c:47:71:a9:43:bc:f4:3d:5d: 1c:de:5b:e7:f2:a6:04:80:d4:85:fa:84:54:55:47: d8:5f:3b:37:76:7d:b4:b5:08:70:76:f5:cf:84:f3: 7d:d9:a0:88:de:a7:75:57:98:9f:e7:e8:18:4e:99: 46:be:f3:06:02:f4:c1:bf:1d:c8:c5:21:d1:b7:98: e7:b8:e5:a8:7d:31:3e:ac:57:24:b2:21:01:6a:4c: fc:9d:ba:8d:51:8c:27:de:d7:21:0d:c0:ac:3a:6f: da:69:65:b6:5f:0e:2b:ac:c6:08:6a:58:db:32:ca: 46:f8:8e:e6:97:4e:ad:8d:00:67:b2:0c:d2:23:f3: 56:4e:65:03:44:f9:05:93:12:66:6e:0b:34:03:ab: a1:10:ae:f4:ae:f3:e8:c4:21:3e:c9:34:1c:7b:06: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5B:60:D9:6A:C4:58:BB:1C:56:B8:DF:6B:47:97:DB:54:CB:E7:2B X509v3 Authority Key Identifier: keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/1Ftg2WrEWLscVrjfa0eX21TL5ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.216.0/22 IPv6: 2a0c:6380::/29 Signature Algorithm: sha256WithRSAEncryption 05:a2:e2:1d:0b:f3:93:bb:64:d2:e8:67:58:47:d5:b0:e4:09: 86:98:58:27:71:ed:ea:fe:d4:3a:80:2f:d6:30:3a:a1:02:44: 50:a0:b8:d3:41:6f:bd:5c:62:20:c5:e5:c5:84:2b:6d:1e:87: 4b:4f:57:88:69:9b:c6:66:5f:e3:89:9a:1d:40:3b:fb:ec:c8: fa:33:16:c0:7c:04:67:97:86:a9:46:b0:2c:3f:96:95:a2:15: f4:97:53:5c:9a:5f:e1:f2:cc:47:c0:a5:bf:eb:53:82:03:f7: 8b:9e:76:18:de:83:40:dc:4c:40:9e:24:b6:fe:e2:97:15:2c: 72:17:36:7a:dd:8b:b3:87:8d:73:f8:95:09:d5:a3:f4:99:c7: 42:86:59:ec:ca:1b:a0:40:01:88:0e:a0:aa:9c:39:8f:23:a4: 4b:e0:78:e7:6c:36:e8:90:10:dc:1c:1e:c5:04:27:f4:97:f7: 25:6d:0b:87:c7:09:34:72:59:fd:cc:61:e9:d5:bc:e2:e1:7c: 9d:8d:78:27:c5:e8:5d:c9:8d:78:3a:d7:37:d7:59:87:d3:7f: 96:91:77:0f:d9:51:42:64:a3:6b:42:3b:a7:66:b6:21:52:cb: 26:e1:cf:51:68:eb:09:65:bc:0f:6b:36:8c:dc:67:1b:72:52: c6:33:41:30 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XMqA+BUDRmnOBOGM33hWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTE5MmMwNzM4NjJlNjIyMGM1ZjkxMDZkN2M1NWUzZmM2 YzVkNGIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDViNjBkOTZhYzQ1OGJiMWM1NmI4ZGY2YjQ3OTdkYjU0Y2JlNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OnFFvfaPLU/y+0+9LG/dnvI1sdA iRKD+XRyK85S73aXhVtXAyDmr2Zm9i86a4rthzIGOqbuW8PTTXxYm7GJwv3P+SH0 JQFgX0vxDIPxkOUsVDsC57qJ75dkFo01ekV8R3GpQ7z0PV0c3lvn8qYEgNSF+oRU VUfYXzs3dn20tQhwdvXPhPN92aCI3qd1V5if5+gYTplGvvMGAvTBvx3IxSHRt5jn uOWofTE+rFcksiEBakz8nbqNUYwn3tchDcCsOm/aaWW2Xw4rrMYIaljbMspG+I7m l06tjQBnsgzSI/NWTmUDRPkFkxJmbgs0A6uhEK70rvPoxCE+yTQcewZh3QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNRbYNlqxFi7HFa432tHl9tUy+crMB8GA1UdIwQY MBaAFBCRksBzhi5iIMX5EG18VeP8bF1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYt ZTZmZTY5MWQ5NDg5LzEvMUZ0ZzJXckVXTHNjVnJqZmEwZVgyMVRMNXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81M2MwNTEtNTU3Mi00ZjgzLWE3ZDYtZTZmZTY5MWQ5NDg5 LzEvRUpHU3dIT0dMbUlneGZrUWJYeFY0X3hzWFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCue/YMA0E AgACMAcDBQMqDGOAMA0GCSqGSIb3DQEBCwUAA4IBAQAFouIdC/OTu2TS6GdYR9Ww 5AmGmFgnce3q/tQ6gC/WMDqhAkRQoLjTQW+9XGIgxeXFhCttHodLT1eIaZvGZl/j iZodQDv77Mj6MxbAfARnl4apRrAsP5aVohX0l1Ncml/h8sxHwKW/61OCA/eLnnYY 3oNA3ExAniS2/uKXFSxyFzZ63Yuzh41z+JUJ1aP0mcdChlnsyhugQAGIDqCqnDmP I6RL4HjnbDbokBDcHB7FBCf0l/clbQuHxwk0cln9zGHp1bzi4XydjXgnxehdyY14 Otc311mH03+WkXcP2VFCZKNrQjunZrYhUssm4c9RaOsJZbwPazaM3GcbclLGM0Ew -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:12 2026 by rpki-client