This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/1sinQA6h7dImfS-hLQXdEPPUS7o.roa File: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (raw, json) Hash identifier: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y= Subject key identifier: D6:C8:A7:40:0E:A1:ED:D2:26:7D:2F:A1:2D:05:DD:10:F3:D4:4B:BA Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27 Certificate serial: 019B7BA54542BEEB332F2CC938CCF5ADD21E Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/1sinQA6h7dImfS-hLQXdEPPUS7o.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.144.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:45:42:be:eb:33:2f:2c:c9:38:cc:f5:ad:d2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6c8a7400ea1edd2267d2fa12d05dd10f3d44bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:5e:1d:09:8a:a2:33:b9:cc:e2:fd:f9:30: bd:77:2f:e9:75:9a:55:c2:83:07:c7:5d:f2:11:eb: b0:b9:3e:1c:20:90:8c:9f:b5:69:e5:30:ce:bb:4d: bf:04:b2:3d:a7:2f:64:2e:07:f1:74:83:b8:6f:78: 9a:c7:24:c7:07:9c:0c:27:7e:9d:cf:7b:5a:44:51: 66:09:43:97:be:c8:cc:b9:fa:38:14:61:93:4b:5b: 08:02:34:a1:04:73:89:e0:c7:95:47:88:b9:5f:75: e2:63:8d:f6:3e:25:36:eb:9b:7c:bb:b7:4d:cf:ef: 00:3c:08:57:08:d9:6a:b3:7b:b3:f2:48:75:36:8a: 48:3f:99:fd:69:c6:55:cc:2d:c8:e8:e6:66:12:f3: d5:fc:16:cf:45:9c:91:85:7f:bf:4f:d8:c0:9e:3e: 5e:ec:d5:ea:1d:ac:5f:3e:c7:bb:16:f5:9c:6a:4f: f9:db:bf:c7:fa:92:57:03:35:45:c1:38:f9:92:4d: 4c:9d:7b:5f:3d:d2:ad:a2:16:ef:1e:f2:64:a6:ff: 33:2c:e0:ab:05:61:80:0f:48:f8:32:6d:a9:3a:f0: 37:f1:1e:bb:5c:08:2e:d5:6b:84:58:83:b8:e6:96: d5:76:0a:53:4f:88:55:fa:64:1b:5b:46:d9:ac:78: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:A7:40:0E:A1:ED:D2:26:7D:2F:A1:2D:05:DD:10:F3:D4:4B:BA X509v3 Authority Key Identifier: keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/1sinQA6h7dImfS-hLQXdEPPUS7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.240.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:18:1d:49:05:eb:9f:7d:80:06:b2:7a:ea:06:c0:83:19:e1: 48:0e:e1:09:1a:d3:ff:a4:91:7d:81:e8:63:c6:81:d7:a1:7c: 0a:b3:97:1c:fb:a6:4b:40:93:2d:22:05:56:cf:f5:a2:cc:c9: ca:ef:0b:13:f7:55:8e:5d:3d:7d:f4:05:26:61:43:b3:2a:95: a5:dc:47:36:8a:88:0f:15:51:cc:30:fd:0f:bb:5a:f9:25:47: cf:82:b9:6c:fc:26:a3:52:69:fc:9e:2a:ca:fc:10:60:a5:91: 47:d9:f5:14:63:01:ba:f9:75:18:80:0b:38:c2:bf:2b:37:4b: 2b:80:c4:a8:04:96:6c:21:2a:cc:83:18:4c:7b:40:37:38:f8: 70:c6:33:f0:93:18:cb:4a:fb:4f:e1:00:e5:6a:12:3d:85:2c: 4c:17:49:00:4f:67:fd:a3:9e:b3:46:7e:1f:ed:04:e9:99:da: ad:98:e3:4c:d6:2b:9b:8b:ed:3a:ee:eb:1c:08:d5:7a:6e:44: 5f:69:b1:a0:aa:bf:8c:87:f0:a8:61:11:f9:06:7d:e9:b2:8c: 4c:69:2f:2a:7b:70:81:90:cf:16:4c:64:db:ce:34:e2:8e:67: 90:10:c5:24:df:59:8b:e9:98:ee:92:6b:94:68:d4:2a:54:0d: c2:22:1c:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUVCvuszLyzJOMz1rdIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh ZWFjMjcwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmM4YTc0MDBlYTFlZGQyMjY3ZDJmYTEyZDA1ZGQxMGYzZDQ0YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL5eHQmKojO5zOL9+TC9dy/pdZpV woMHx13yEeuwuT4cIJCMn7Vp5TDOu02/BLI9py9kLgfxdIO4b3iaxyTHB5wMJ36d z3taRFFmCUOXvsjMufo4FGGTS1sIAjShBHOJ4MeVR4i5X3XiY432PiU265t8u7dN z+8APAhXCNlqs3uz8kh1NopIP5n9acZVzC3I6OZmEvPV/BbPRZyRhX+/T9jAnj5e 7NXqHaxfPse7FvWcak/527/H+pJXAzVFwTj5kk1MnXtfPdKtohbvHvJkpv8zLOCr BWGAD0j4Mm2pOvA38R67XAgu1WuEWIO45pbVdgpTT4hV+mQbW0bZrHiD7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbIp0AOoe3SJn0voS0F3RDz1Eu6MB8GA1UdIwQY MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt YzMyMTg0MGMxZmFhLzEvMXNpblFBNmg3ZEltZlMtaExRWGRFUFBVUzdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZDwMA0G CSqGSIb3DQEBCwUAA4IBAQCdGB1JBeuffYAGsnrqBsCDGeFIDuEJGtP/pJF9gehj xoHXoXwKs5cc+6ZLQJMtIgVWz/WizMnK7wsT91WOXT199AUmYUOzKpWl3Ec2iogP FVHMMP0Pu1r5JUfPgrls/CajUmn8nirK/BBgpZFH2fUUYwG6+XUYgAs4wr8rN0sr gMSoBJZsISrMgxhMe0A3OPhwxjPwkxjLSvtP4QDlahI9hSxMF0kAT2f9o56zRn4f 7QTpmdqtmONM1iubi+067uscCNV6bkRfabGgqr+Mh/CoYRH5Bn3psoxMaS8qe3CB kM8WTGTbzjTijmeQEMUk31mL6ZjukmuUaNQqVA3CIhxu -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:15 2026 by rpki-client