This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/RM97ggIra4Cqnk_opXca71a_8pU.roa File: RM97ggIra4Cqnk_opXca71a_8pU.roa (raw, json) Hash identifier: vJp1dB7WwROzbWvLGcNp8RoRTx3NiiHamzM5eZdu7DE= Subject key identifier: 44:CF:7B:82:02:2B:6B:80:AA:9E:4F:E8:A5:77:1A:EF:56:BF:F2:95 Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e Certificate serial: 019B7A5AB5136B4667F65C2219F31D472581 Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/RM97ggIra4Cqnk_opXca71a_8pU.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61080 IP address blocks: 185.1.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:13:6b:46:67:f6:5c:22:19:f3:1d:47:25:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44cf7b82022b6b80aa9e4fe8a5771aef56bff295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:2b:aa:fd:20:b9:e9:c7:7a:a0:79:41:62: 1b:b3:1c:70:29:39:d0:c2:55:73:a1:4f:23:9c:6b: aa:bf:be:cb:2a:87:84:2a:38:7e:68:69:51:c8:61: db:5f:00:c0:47:2f:a7:90:dd:fe:9a:b4:94:71:73: 3f:40:96:35:32:a3:9c:a3:09:f6:8d:01:0a:a0:d4: ca:0f:50:a3:75:45:23:d3:8d:75:89:4d:4a:d1:b4: 97:66:98:5f:83:1d:75:08:f6:55:26:6d:39:06:f4: 43:56:d8:74:bc:34:70:7b:27:13:43:54:51:41:9e: 6a:1d:aa:50:d7:dd:bc:03:26:92:d6:48:88:16:fd: 22:bc:48:14:c3:65:da:be:02:26:de:9b:ad:54:a8: 53:bf:b4:bc:94:14:db:88:7c:d0:e9:f7:53:f5:b8: 2e:15:3e:36:d9:94:96:57:4b:ff:0c:a5:7b:2c:79: d8:b1:1f:bb:fb:36:10:ae:39:85:8f:57:9a:6c:31: f8:02:ae:31:c3:c3:4c:28:7d:c0:a1:37:f3:f6:16: 35:86:ce:54:c6:de:91:72:93:44:ea:ef:f5:2a:45: c4:e5:78:c4:fd:ab:61:70:40:d9:12:c2:32:4d:cc: 9d:f3:71:a2:e5:cd:27:fd:01:fa:1d:cd:af:df:54: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CF:7B:82:02:2B:6B:80:AA:9E:4F:E8:A5:77:1A:EF:56:BF:F2:95 X509v3 Authority Key Identifier: keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/RM97ggIra4Cqnk_opXca71a_8pU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.95.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a0:96:86:78:cd:15:71:65:a0:cf:07:15:bf:e2:bc:4d:32: be:47:9e:2b:b6:aa:07:2b:dc:ec:07:4e:4e:b6:89:41:bf:73: 7f:a1:f4:88:6d:fa:f6:c4:7a:03:ed:0e:79:ac:49:b1:28:b1: fc:11:ff:9d:c2:bc:1e:af:da:02:6a:93:e3:9d:c5:29:21:40: c8:14:d4:e4:31:f9:c4:dd:af:ba:45:21:36:50:b6:a7:9a:ab: 0c:ce:63:68:86:65:d9:a0:94:90:59:b4:ca:ee:e0:0e:32:a9: 50:11:27:f0:e6:a9:b3:88:e9:ed:24:59:b8:9a:8e:33:0d:82: 88:d7:22:bb:79:51:c0:90:be:61:6c:f1:f3:84:9d:25:31:e7: c0:a3:64:a1:0b:5e:27:95:e9:28:a4:fa:28:5e:74:c5:75:25: c2:d3:35:00:b4:01:73:2d:fe:d7:a8:54:af:2f:49:0e:84:61: c2:b0:fc:15:22:2b:11:f5:e5:8b:6b:07:88:e8:c4:db:d8:10: ea:e5:01:f9:4b:15:87:f2:a0:83:d6:b8:12:e6:af:1e:e6:89: 58:1d:86:bc:c9:a3:8e:77:1e:b8:ee:60:d6:f7:68:30:c5:4f: d5:b1:0f:4c:5d:10:68:cd:4b:d9:d0:4b:6e:ae:89:b7:43:65: c8:e8:c6:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrUTa0Zn9lwiGfMdRyWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZjEwZTM0NDIxYmFmZjE3NGQ2MDY3OGYzMmZhNWUzNWNk Zjk1N2UwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGNmN2I4MjAyMmI2YjgwYWE5ZTRmZThhNTc3MWFlZjU2YmZmMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVkrqv0guenHeqB5QWIbsxxwKTnQ wlVzoU8jnGuqv77LKoeEKjh+aGlRyGHbXwDARy+nkN3+mrSUcXM/QJY1MqOcown2 jQEKoNTKD1CjdUUj0411iU1K0bSXZphfgx11CPZVJm05BvRDVth0vDRweycTQ1RR QZ5qHapQ1928AyaS1kiIFv0ivEgUw2XavgIm3putVKhTv7S8lBTbiHzQ6fdT9bgu FT422ZSWV0v/DKV7LHnYsR+7+zYQrjmFj1eabDH4Aq4xw8NMKH3AoTfz9hY1hs5U xt6RcpNE6u/1KkXE5XjE/athcEDZEsIyTcyd83Gi5c0n/QH6Hc2v31Q+/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFETPe4ICK2uAqp5P6KV3Gu9Wv/KVMB8GA1UdIwQY MBaAFCHxDjRCG6/xdNYGePMvpeNc35V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTct OWE5ZWQxZWYyZThkLzEvUk05N2dnSXJhNENxbmtfb3BYY2E3MWFfOHBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTctOWE5ZWQxZWYyZThk LzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQFfMA0G CSqGSIb3DQEBCwUAA4IBAQBKoJaGeM0VcWWgzwcVv+K8TTK+R54rtqoHK9zsB05O tolBv3N/ofSIbfr2xHoD7Q55rEmxKLH8Ef+dwrwer9oCapPjncUpIUDIFNTkMfnE 3a+6RSE2ULanmqsMzmNohmXZoJSQWbTK7uAOMqlQESfw5qmziOntJFm4mo4zDYKI 1yK7eVHAkL5hbPHzhJ0lMefAo2ShC14nlekopPooXnTFdSXC0zUAtAFzLf7XqFSv L0kOhGHCsPwVIisR9eWLaweI6MTb2BDq5QH5SxWH8qCD1rgS5q8e5olYHYa8yaOO dx647mDW92gwxU/VsQ9MXRBozUvZ0Eturom3Q2XI6Ma9 -----END CERTIFICATE-----Generated at Thu Jan 29 03:09:57 2026 by rpki-client