This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa File: 1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa (raw, json) Hash identifier: tXskn9qxJGgIuj8H/bglOap8ueKyjcb9VQBsaau/B14= Subject key identifier: FA:92:4B:FD:1A:8E:D5:89:8C:AE:46:FC:A2:AB:B9:8E:46:AC:0E:AC Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898 Certificate serial: 019B7CECEE554F58C6322F3DD0B6CC1BF01B Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa Signing time: Fri 02 Jan 2026 04:17:40 +0000 ROA not before: Fri 02 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57736 IP address blocks: 185.59.104.0/23 maxlen: 24 185.59.106.0/23 maxlen: 24 2a04:e3c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ee:55:4f:58:c6:32:2f:3d:d0:b6:cc:1b:f0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898 Validity Not Before: Jan 2 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa924bfd1a8ed5898cae46fca2abb98e46ac0eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:d7:9d:c5:41:b1:9d:65:cb:a0:bc:c5:71: bb:28:6f:54:d4:60:58:28:2d:e5:d8:90:19:7c:9d: de:9d:c2:39:78:55:9f:aa:6c:3c:93:1a:05:01:fa: 7e:02:41:2e:c8:db:00:5b:d8:4e:7e:a3:67:1d:d5: 65:3c:ee:a1:26:c1:9a:a0:51:44:0a:3e:d3:c9:5d: 7e:8f:59:22:c9:20:4f:10:4f:50:5b:47:f3:3b:17: 3f:ab:cf:59:6d:8b:a2:4e:06:1e:6b:7d:d6:43:52: b7:2b:7e:6f:ab:ef:ce:bb:0e:64:55:4f:87:e6:c6: 02:c2:61:72:b3:ec:b7:a8:2b:96:52:85:b4:b7:4f: a5:17:b5:32:db:22:b4:73:46:b2:0d:95:f0:de:19: 43:9a:3c:1e:51:0b:f7:5f:fe:6c:38:1f:b0:80:8f: 07:21:dd:5b:20:61:2f:bd:cb:8e:11:2b:fc:e1:e0: 90:ef:45:a2:85:d7:6c:e1:d7:72:fc:af:1e:1a:e1: d3:2a:1b:54:7a:de:24:cc:1c:01:07:94:9b:cb:95: 59:f7:12:1d:19:dd:7c:36:5f:1e:0d:08:b1:6b:4c: 5d:4c:89:75:33:51:3d:35:be:a4:f3:9f:d1:b5:d6: 34:e9:f0:08:27:0e:a2:b1:bf:cf:f5:49:6e:4f:ae: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:4B:FD:1A:8E:D5:89:8C:AE:46:FC:A2:AB:B9:8E:46:AC:0E:AC X509v3 Authority Key Identifier: keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.104.0/22 IPv6: 2a04:e3c0::/29 Signature Algorithm: sha256WithRSAEncryption c1:33:d8:b5:2f:a2:cc:bf:02:71:49:4b:42:7a:f9:0d:21:86: e0:ac:95:00:2f:33:5e:7a:73:8c:07:3d:7b:7f:81:f2:87:2c: 78:d3:63:55:18:60:69:da:6e:80:02:58:21:f1:6d:1e:e8:07: e8:a9:0a:bb:ee:05:a5:b3:88:62:2e:7f:4a:30:27:f1:09:cb: 42:6f:a3:3a:f0:92:54:d9:c0:3e:af:3b:4d:95:82:8e:a4:79: 1c:45:66:76:8b:3e:0d:88:72:bc:3f:fa:98:88:2e:8b:e0:b5: 83:68:4a:d4:9d:e5:1e:48:17:40:7d:15:c0:4a:68:88:a1:04: ac:d4:0a:a8:e9:d0:61:6f:e2:9d:3a:ef:19:df:83:8c:5a:b0: c9:60:5e:ac:d7:b2:ff:85:16:40:5f:47:53:1e:14:bb:f0:99: 3b:42:bd:5c:35:b2:1f:61:6e:6b:c0:7d:4c:af:e4:00:63:a6: 8a:30:8e:d8:07:d9:ef:3c:38:31:46:9f:88:0f:54:56:36:f9: 5c:7c:b7:a8:7d:aa:6e:75:42:af:6b:3b:7b:b7:fd:42:8a:c4: a3:35:3a:cd:ca:ec:9c:71:42:a5:11:b8:1a:4d:89:ce:b2:7d: c1:a6:36:f6:57:94:05:53:44:bc:13:c3:ce:ea:df:b3:3f:03: 01:c8:e8:60 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt87O5VT1jGMi890LbMG/AbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2NGRjZjcxOWVkODk5OWRhNzkyZjZmYmZjM2ZlOWJj NzA4OTgwHhcNMjYwMTAyMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTkyNGJmZDFhOGVkNTg5OGNhZTQ2ZmNhMmFiYjk4ZTQ2YWMwZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq07XncVBsZ1ly6C8xXG7KG9U1GBY KC3l2JAZfJ3encI5eFWfqmw8kxoFAfp+AkEuyNsAW9hOfqNnHdVlPO6hJsGaoFFE Cj7TyV1+j1kiySBPEE9QW0fzOxc/q89ZbYuiTgYea33WQ1K3K35vq+/Ouw5kVU+H 5sYCwmFys+y3qCuWUoW0t0+lF7Uy2yK0c0ayDZXw3hlDmjweUQv3X/5sOB+wgI8H Id1bIGEvvcuOESv84eCQ70Wihdds4ddy/K8eGuHTKhtUet4kzBwBB5Sby5VZ9xId Gd18Nl8eDQixa0xdTIl1M1E9Nb6k85/RtdY06fAIJw6isb/P9UluT659jwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPqSS/0ajtWJjK5G/KKruY5GrA6sMB8GA1UdIwQY MBaAFOYAZNz3Ge2Jmdp5L2+/w/6bxwiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83MzRlMGMtNzg2ZS00NjMxLWE5MjMt ZThiOGZjYzQxZTg1LzEvMS1wSkxfUnFPMVltTXJrYjhvcXU1amthc0Rxdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2MvNzM0ZTBjLTc4NmUtNDYzMS1hOTIzLWU4YjhmY2M0MWU4 NS8xLzVnQmszUGNaN1ltWjJua3ZiN19EX3B2SENKZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArk7aDAN BAIAAjAHAwUDKgTjwDANBgkqhkiG9w0BAQsFAAOCAQEAwTPYtS+izL8CcUlLQnr5 DSGG4KyVAC8zXnpzjAc9e3+B8ocseNNjVRhgadpugAJYIfFtHugH6KkKu+4FpbOI Yi5/SjAn8QnLQm+jOvCSVNnAPq87TZWCjqR5HEVmdos+DYhyvD/6mIgui+C1g2hK 1J3lHkgXQH0VwEpoiKEErNQKqOnQYW/inTrvGd+DjFqwyWBerNey/4UWQF9HUx4U u/CZO0K9XDWyH2Fua8B9TK/kAGOmijCO2AfZ7zw4MUafiA9UVjb5XHy3qH2qbnVC r2s7e7f9QorEozU6zcrsnHFCpRG4Gk2JzrJ9waY29leUBVNEvBPDzurfsz8DAcjo YA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:28 2026 by rpki-client