This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/1-9gvKq__4lJz8gAUeJNid7QoH3Q.roa File: 1-9gvKq__4lJz8gAUeJNid7QoH3Q.roa (raw, json) Hash identifier: wA+VlinM94/cgwLiDz7GxnE6c830kychbDf4ciSXoIQ= Subject key identifier: FB:D8:2F:2A:AF:FF:E2:52:73:F2:00:14:78:93:62:77:B4:28:1F:74 Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72 Certificate serial: 019B7C803AF5B049702C6DE81CB2E3881C36 Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/1-9gvKq__4lJz8gAUeJNid7QoH3Q.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60887 IP address blocks: 185.196.148.0/24 maxlen: 24 185.196.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3a:f5:b0:49:70:2c:6d:e8:1c:b2:e3:88:1c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=435e41960d590e99804e90b9af0365584c712c72 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd82f2aafffe25273f2001478936277b4281f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:0f:fd:ba:fa:f4:93:b8:e6:ab:23:d4:c2: a3:fc:fe:0f:84:8e:b6:0e:e4:4d:32:00:7f:64:1e: 9e:68:be:9c:15:a9:4b:4f:41:b2:a5:3b:21:94:ce: ec:34:1e:72:6b:f0:23:a1:39:54:56:61:b3:34:71: af:c4:f5:63:4c:53:f5:f3:aa:ba:2f:5c:e4:73:ca: 6b:40:13:7f:5d:6f:04:41:03:89:89:43:b5:06:93: df:ed:eb:99:e4:85:19:a2:47:01:b8:8f:22:a8:48: e3:55:b6:9f:73:ca:33:b7:53:a9:5c:5d:89:c6:bb: 56:82:af:22:ec:1d:40:77:7b:6e:86:f0:c0:35:12: c6:f2:ea:b9:d1:85:d3:7f:af:f8:7b:09:b4:6a:a9: e8:ee:00:bf:4e:4d:f9:18:04:f4:5f:f6:a9:f0:fe: 50:8b:f0:7a:f9:93:e9:84:3c:29:0f:13:83:74:bc: 39:d7:39:50:1f:29:82:03:7c:ca:c3:85:54:2c:ba: 75:66:3d:6f:1b:95:b3:06:5e:9e:43:e9:ef:db:d9: 94:3d:a9:a9:a3:f4:05:83:47:41:27:4d:9b:38:40: 17:5f:b1:88:73:1b:d5:45:11:75:31:91:1b:e7:97: fe:bc:62:51:26:eb:f0:c8:cf:08:08:1e:28:e0:49: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D8:2F:2A:AF:FF:E2:52:73:F2:00:14:78:93:62:77:B4:28:1F:74 X509v3 Authority Key Identifier: keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/1-9gvKq__4lJz8gAUeJNid7QoH3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.148.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:0c:e8:c3:2d:38:db:01:2a:43:f1:49:a6:b2:a9:a3:a6:d7: b9:e0:54:c9:be:14:39:17:49:e8:b1:48:71:b2:02:ee:41:b6: 60:cb:36:b8:a5:33:7f:2a:b7:42:02:9e:a8:b2:07:cf:3a:27: 38:b5:81:11:10:3b:58:f6:a4:8f:49:2f:f6:42:63:b5:49:d8: 61:e2:a9:a8:39:88:3c:e1:1d:d9:30:2f:77:10:21:9c:14:a8: f1:97:bb:85:2c:82:36:f5:67:cb:e7:6b:e2:02:b8:7c:66:74: 34:93:f9:d8:91:cb:ea:44:ed:1e:15:77:d0:da:3a:8b:a0:71: 94:b7:83:68:25:d1:3f:fd:e4:53:d1:3c:5c:55:58:dd:e8:4e: 6d:66:d1:b8:ec:1e:a1:89:11:4b:88:f9:42:d8:f9:f0:4e:1e: ab:24:cf:f2:66:17:8d:3f:07:14:28:87:46:85:17:6c:67:39: be:ec:79:be:23:7a:c2:5d:72:2b:38:d6:37:94:c5:7b:5f:90: e1:b3:c6:88:ae:b9:53:fd:f1:75:b2:ed:76:7d:38:ba:6b:7f: 59:55:66:bb:95:ae:85:4b:ee:98:07:72:24:cc:a5:7b:77:63: 6e:ad:21:10:76:91:68:9b:68:97:e5:86:28:10:64:ba:86:7d: 6f:3b:e5:15 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gDr1sElwLG3oHLLjiBw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3 MTJjNzIwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQ4MmYyYWFmZmZlMjUyNzNmMjAwMTQ3ODkzNjI3N2I0MjgxZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA134P/br69JO45qsj1MKj/P4PhI62 DuRNMgB/ZB6eaL6cFalLT0GypTshlM7sNB5ya/AjoTlUVmGzNHGvxPVjTFP186q6 L1zkc8prQBN/XW8EQQOJiUO1BpPf7euZ5IUZokcBuI8iqEjjVbafc8ozt1OpXF2J xrtWgq8i7B1Ad3tuhvDANRLG8uq50YXTf6/4ewm0aqno7gC/Tk35GAT0X/ap8P5Q i/B6+ZPphDwpDxODdLw51zlQHymCA3zKw4VULLp1Zj1vG5WzBl6eQ+nv29mUPamp o/QFg0dBJ02bOEAXX7GIcxvVRRF1MZEb55f+vGJRJuvwyM8ICB4o4Ekk7QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvYLyqv/+JSc/IAFHiTYne0KB90MB8GA1UdIwQY MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt MDFiYjVmZDUzNGY1LzEvMS05Z3ZLcV9fNGxKejhnQVVlSk5pZDdRb0gzUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDgvN2UyZjI4LTVjYWUtNGU2Zi1hNWYwLTAxYmI1ZmQ1MzRm NS8xL1ExNUJsZzFaRHBtQVRwQzVyd05sV0V4eExISS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnElDAN BgkqhkiG9w0BAQsFAAOCAQEAPAzowy042wEqQ/FJprKpo6bXueBUyb4UORdJ6LFI cbIC7kG2YMs2uKUzfyq3QgKeqLIHzzonOLWBERA7WPakj0kv9kJjtUnYYeKpqDmI POEd2TAvdxAhnBSo8Ze7hSyCNvVny+dr4gK4fGZ0NJP52JHL6kTtHhV30No6i6Bx lLeDaCXRP/3kU9E8XFVY3ehObWbRuOweoYkRS4j5Qtj58E4eqyTP8mYXjT8HFCiH RoUXbGc5vux5viN6wl1yKzjWN5TFe1+Q4bPGiK65U/3xdbLtdn04umt/WVVmu5Wu hUvumAdyJMyle3djbq0hEHaRaJtol+WGKBBkuoZ9bzvlFQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:12 2026 by rpki-client