This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa File: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (raw, json) Hash identifier: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs= Subject key identifier: 45:29:4A:27:8E:D9:38:7F:46:08:2A:FE:C4:86:0C:2B:62:CB:49:67 Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Certificate serial: 019B77C751A3B808BA381CB3BAFEAA25225C Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1241 IP address blocks: 185.247.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:51:a3:b8:08:ba:38:1c:b3:ba:fe:aa:25:22:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45294a278ed9387f46082afec4860c2b62cb4967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6b:a2:08:f6:51:bb:72:fc:6c:c3:78:a0:a4: 14:e0:75:a3:40:c5:28:4d:e1:42:08:26:8e:79:e5: c9:6b:c0:c6:3a:4e:bf:dd:ef:26:8e:b1:f0:10:d7: f6:02:5c:21:0d:af:7d:fe:42:43:65:8d:de:57:9f: a0:a5:ff:4b:31:13:2f:c5:48:77:6e:ce:21:ff:ce: be:09:2a:4a:d9:45:32:07:9e:12:ff:d2:70:29:d1: 71:d8:30:8b:dc:e6:ca:d2:c2:59:49:52:48:66:2f: eb:d3:00:08:21:4e:d6:99:f1:a7:0f:70:94:34:fd: 37:07:16:e0:2d:48:00:e1:c8:f6:5d:fb:4f:43:5b: 60:49:4c:d4:a9:f2:54:26:8c:ee:e1:84:b2:81:f7: 10:c4:fa:09:3d:43:19:87:ae:07:96:de:37:e7:6d: f1:89:df:9d:90:af:0d:db:4d:32:88:7d:05:2f:20: 9f:b2:75:5b:6c:7e:7c:f4:72:05:1a:9d:76:b1:c6: 4d:e6:7f:35:9a:0f:f2:cd:a9:a7:9d:58:9a:8a:59: 91:d5:8f:70:36:e6:24:cf:75:4f:7c:5d:e6:5e:e4: 17:e5:31:66:3f:18:1c:27:1c:21:15:ee:e8:be:50: 6c:3f:f4:64:4f:c6:48:ec:55:15:ea:cb:b6:aa:57: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:29:4A:27:8E:D9:38:7F:46:08:2A:FE:C4:86:0C:2B:62:CB:49:67 X509v3 Authority Key Identifier: keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.160.0/22 Signature Algorithm: sha256WithRSAEncryption 85:97:86:af:71:5e:68:70:bc:a0:59:ab:a3:3b:fe:41:b0:e4: 6a:45:9e:a5:aa:92:57:3d:01:b2:70:c0:63:5e:d2:90:f3:d5: 6d:9e:ef:96:98:d7:c9:5f:83:7c:b7:4f:67:0f:12:0d:8a:ad: 4c:a7:dd:8a:bd:1e:7d:e0:6c:3f:61:30:e9:cf:80:59:6e:ae: 41:91:0f:7a:86:6c:8f:39:17:65:a6:f8:cf:7b:24:16:d6:96: 87:d0:47:24:84:c4:fb:a5:c7:a6:30:54:56:1b:eb:9c:7e:20: 0d:1b:10:f7:c1:a3:1f:a7:8f:15:fe:71:ba:49:aa:cd:a5:28: b7:3b:eb:c2:52:e8:0a:e2:d2:0c:49:f0:06:dd:5c:74:f2:9d: 6e:aa:84:9e:d9:37:46:fb:c4:9c:ba:3c:fe:d9:85:ca:ec:64: ea:76:4a:12:11:b2:50:f9:98:7e:fe:67:b3:88:59:a9:44:dd: 29:c8:e1:6f:d7:7c:48:9b:e8:52:74:1d:02:61:3b:aa:a9:c2: bd:84:79:ad:82:0c:50:50:d0:8d:24:44:1c:fe:6d:a6:25:16: b2:39:93:09:13:b4:8e:cc:b5:5c:af:af:df:94:c1:db:51:e8: 60:14:07:f7:4f:e2:b9:00:de:0c:07:0c:eb:33:6d:14:21:60: 8b:04:45:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1GjuAi6OByzuv6qJSJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNWNmNmQxMjBlMjgxMzhiMGFhMmZjODNjYmE5YjBlOTY3 OTZjMzYwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTI5NGEyNzhlZDkzODdmNDYwODJhZmVjNDg2MGMyYjYyY2I0OTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WuiCPZRu3L8bMN4oKQU4HWjQMUo TeFCCCaOeeXJa8DGOk6/3e8mjrHwENf2AlwhDa99/kJDZY3eV5+gpf9LMRMvxUh3 bs4h/86+CSpK2UUyB54S/9JwKdFx2DCL3ObK0sJZSVJIZi/r0wAIIU7WmfGnD3CU NP03BxbgLUgA4cj2XftPQ1tgSUzUqfJUJozu4YSygfcQxPoJPUMZh64Hlt43523x id+dkK8N200yiH0FLyCfsnVbbH589HIFGp12scZN5n81mg/yzamnnViailmR1Y9w NuYkz3VPfF3mXuQX5TFmPxgcJxwhFe7ovlBsP/RkT8ZI7FUV6su2qlezYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUpSieO2Th/Rggq/sSGDCtiy0lnMB8GA1UdIwQY MBaAFB9c9tEg4oE4sKovyDy6mw6WeWw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTIt NjM4MzFhZTk1MWVmLzEvUlNsS0o0N1pPSDlHQ0NyLXhJWU1LMkxMU1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTItNjM4MzFhZTk1MWVm LzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufegMA0G CSqGSIb3DQEBCwUAA4IBAQCFl4avcV5ocLygWaujO/5BsORqRZ6lqpJXPQGycMBj XtKQ89Vtnu+WmNfJX4N8t09nDxINiq1Mp92KvR594Gw/YTDpz4BZbq5BkQ96hmyP ORdlpvjPeyQW1paH0EckhMT7pcemMFRWG+ucfiANGxD3waMfp48V/nG6SarNpSi3 O+vCUugK4tIMSfAG3Vx08p1uqoSe2TdG+8Scujz+2YXK7GTqdkoSEbJQ+Zh+/mez iFmpRN0pyOFv13xIm+hSdB0CYTuqqcK9hHmtggxQUNCNJEQc/m2mJRayOZMJE7SO zLVcr6/flMHbUehgFAf3T+K5AN4MBwzrM20UIWCLBEXD -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:55 2026 by rpki-client