This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-7A1nR-RiR1xUfwDIFglj82ZNsU.roa File: 1-7A1nR-RiR1xUfwDIFglj82ZNsU.roa (raw, json) Hash identifier: oT5BcmJQ5nG41/kQwA2xrNpN2REdH6+xJ7g3cDF3wc4= Subject key identifier: FB:B0:35:9D:1F:91:89:1D:71:51:FC:03:20:58:25:8F:CD:99:36:C5 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79104E7E3277F31F389C760F0D38E350 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-7A1nR-RiR1xUfwDIFglj82ZNsU.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42910 IP address blocks: 31.210.51.0/24 maxlen: 24 77.92.148.0/24 maxlen: 24 188.132.170.0/24 maxlen: 24 188.132.191.0/24 maxlen: 24 188.132.227.0/24 maxlen: 24 212.68.36.0/24 maxlen: 24 212.68.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4e:7e:32:77:f3:1f:38:9c:76:0f:0d:38:e3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbb0359d1f91891d7151fc032058258fcd9936c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:25:24:22:a9:f2:6b:ca:f6:84:25:4b:b6: 64:6d:22:5b:ba:9c:ff:e1:f2:26:89:a2:dd:8c:6c: 71:ee:a4:b0:05:a1:26:97:fa:d2:d3:59:04:ef:20: 6e:db:8e:cc:77:8a:d8:66:1b:f3:2e:67:9b:6b:bd: 6b:f2:93:2e:59:e2:61:51:02:16:5a:f0:84:9f:b4: b1:ec:82:62:7f:fd:c2:fa:8d:fb:aa:dd:13:50:2a: 5d:85:17:a5:38:46:3c:b9:cb:49:0d:0b:17:d2:ed: cd:11:c8:6c:98:82:28:01:fc:43:03:82:e0:f1:48: 54:ba:40:d2:41:7f:6c:85:7b:26:c9:53:83:90:7b: e9:6e:9f:44:f8:ca:56:6a:21:15:f2:1e:aa:0b:9d: ab:78:17:59:69:55:e4:a0:cb:41:fd:87:d4:25:74: 12:ff:ca:35:e2:79:a8:20:0c:06:93:84:04:c3:a3: ab:53:63:93:43:f4:a6:89:68:6d:9d:14:08:c5:13: 76:38:2c:60:94:2c:3b:7a:74:17:4b:64:7e:dd:59: 5b:37:b9:d1:09:5e:1e:ee:4a:23:41:f0:47:31:38: d1:43:fc:36:bd:ba:84:50:07:c7:c5:77:8e:ea:c0: 68:00:0f:8d:d1:78:8a:68:9a:24:f5:0d:af:5c:cb: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B0:35:9D:1F:91:89:1D:71:51:FC:03:20:58:25:8F:CD:99:36:C5 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-7A1nR-RiR1xUfwDIFglj82ZNsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.51.0/24 77.92.148.0/24 188.132.170.0/24 188.132.191.0/24 188.132.227.0/24 212.68.36.0/24 212.68.49.0/24 Signature Algorithm: sha256WithRSAEncryption 24:6c:04:15:92:96:69:34:5c:35:86:c1:8a:b4:4a:f6:4f:73: 38:76:5b:03:8f:b6:35:43:a3:fc:d2:a9:12:d9:41:f1:cd:af: 0f:e2:e8:da:34:ca:24:b6:aa:c3:d8:43:58:77:aa:5b:bb:ca: 99:dd:98:c3:82:b3:c4:e2:bc:28:68:1a:95:45:bc:a7:f2:eb: ac:ab:0a:ef:d6:31:7d:55:20:09:23:d2:7c:10:c1:4e:2d:13: 9b:05:bd:a1:78:44:81:b0:99:c4:8c:42:18:a2:47:da:40:06: 66:f4:5e:c8:a0:60:82:09:21:a3:4e:17:3f:52:27:4a:ef:1c: f5:4e:0f:1f:65:5b:5d:ed:49:d2:97:17:75:74:48:e0:63:09: 81:ec:ee:58:6e:d3:f6:b7:fd:b2:bb:f8:7f:7e:f7:6a:78:58: 12:7d:90:ca:74:0a:58:f1:a5:c4:73:31:fd:4c:6e:72:7d:af: d2:bf:e0:a7:ed:33:ac:95:8d:8d:64:1b:40:8c:81:23:84:25: f4:e9:b9:d6:b1:7c:bd:60:46:b2:49:e1:c6:c9:2d:1b:5b:ea: 5b:e1:32:88:58:e5:fd:ac:ed:7a:2b:7e:9c:31:f8:8a:2b:b7: e1:65:bc:eb:59:fd:a5:a9:10:58:9c:be:2e:15:ff:7f:1f:7a: 6b:f4:d1:06 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt5EE5+MnfzHzicdg8NOONQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmIwMzU5ZDFmOTE4OTFkNzE1MWZjMDMyMDU4MjU4ZmNkOTkzNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjslJCKp8mvK9oQlS7ZkbSJbupz/ 4fImiaLdjGxx7qSwBaEml/rS01kE7yBu247Md4rYZhvzLmeba71r8pMuWeJhUQIW WvCEn7Sx7IJif/3C+o37qt0TUCpdhRelOEY8uctJDQsX0u3NEchsmIIoAfxDA4Lg 8UhUukDSQX9shXsmyVODkHvpbp9E+MpWaiEV8h6qC52reBdZaVXkoMtB/YfUJXQS /8o14nmoIAwGk4QEw6OrU2OTQ/SmiWhtnRQIxRN2OCxglCw7enQXS2R+3VlbN7nR CV4e7kojQfBHMTjRQ/w2vbqEUAfHxXeO6sBoAA+N0XiKaJok9Q2vXMtg8wIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFPuwNZ0fkYkdcVH8AyBYJY/NmTbFMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMS03QTFuUi1SaVIxeFVmd0RJRmdsajgyWk5zVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAx My8xL3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAB/SMwME AE1clAMEALyEqgMEALyEvwMEALyE4wMEANREJAMEANREMTANBgkqhkiG9w0BAQsF AAOCAQEAJGwEFZKWaTRcNYbBirRK9k9zOHZbA4+2NUOj/NKpEtlB8c2vD+Lo2jTK JLaqw9hDWHeqW7vKmd2Yw4KzxOK8KGgalUW8p/LrrKsK79YxfVUgCSPSfBDBTi0T mwW9oXhEgbCZxIxCGKJH2kAGZvReyKBgggkho04XP1InSu8c9U4PH2VbXe1J0pcX dXRI4GMJgezuWG7T9rf9srv4f373anhYEn2QynQKWPGlxHMx/Uxucn2v0r/gp+0z rJWNjWQbQIyBI4Ql9Om51rF8vWBGsknhxsktG1vqW+EyiFjl/azteit+nDH4iiu3 4WW861n9pakQWJy+LhX/fx96a/TRBg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:47 2026 by rpki-client