This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa File: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (raw, json) Hash identifier: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4= Subject key identifier: 88:B8:BB:7F:D6:54:85:11:48:78:F0:31:FC:26:E9:C8:A1:58:54:B6 Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762 Certificate serial: 019B7E3922F714B641D39E08A51F56DA5C72 Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59510 IP address blocks: 185.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:22:f7:14:b6:41:d3:9e:08:a5:1f:56:da:5c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509df728d1b46634054972d2945fda58073b5762 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b8bb7fd65485114878f031fc26e9c8a15854b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:ce:19:65:f7:51:fd:44:4f:b9:2a:bc:97: 3d:6e:bc:4f:64:1f:69:c8:9f:67:ef:5f:15:87:34: d1:35:ba:5a:ce:f0:ce:be:19:3b:69:f7:e1:6f:f7: db:05:78:fe:8f:b7:ca:ad:bd:6d:d0:d9:10:5c:dc: 1b:55:43:e0:e2:af:d1:99:91:22:d0:24:4f:be:27: f1:a4:70:ce:b9:c2:f4:28:4b:cf:2f:20:0c:ba:a4: f5:74:39:94:c8:23:e1:27:49:f6:da:0a:ef:e4:58: df:56:b7:5f:be:1a:2c:63:59:41:fb:fe:ad:df:d9: eb:af:aa:5d:a4:5a:77:77:c0:11:1c:f3:1f:87:e3: 7d:ce:9f:93:a7:90:49:2e:35:36:a5:42:2a:8f:1d: e1:d0:ae:19:3e:71:d1:0a:06:67:bd:48:b3:33:70: ab:96:39:59:60:37:50:70:c3:81:b6:1c:78:06:5c: 3f:c1:a7:be:09:3a:7a:f0:4a:be:6b:e4:4e:92:29: ee:d6:d8:5f:c1:0b:5a:94:5c:f9:4f:dd:a7:8f:91: 0e:2d:19:90:3a:1c:db:32:d1:b6:c0:64:c8:24:58: 59:4b:e2:10:97:b6:0f:a6:9e:3a:4b:55:91:12:1c: 9c:22:f1:31:82:61:67:b0:c5:44:15:5d:dc:5d:22: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B8:BB:7F:D6:54:85:11:48:78:F0:31:FC:26:E9:C8:A1:58:54:B6 X509v3 Authority Key Identifier: keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.221.0/24 Signature Algorithm: sha256WithRSAEncryption b0:63:d0:21:1c:9e:1a:a8:02:a0:e0:eb:4e:7b:36:95:43:fb: 5e:a7:15:7f:5b:ab:8a:7a:ca:b7:b6:50:6d:85:e3:56:2e:6e: 8a:64:c4:28:12:a0:42:53:c3:80:30:01:60:db:03:28:eb:81: 1a:88:c9:f2:46:d6:4c:bf:01:0e:53:d9:d5:4b:be:11:ba:11: 2c:6f:1a:8d:d3:58:6a:ec:aa:21:fd:3a:19:a2:3f:1d:91:b9: f7:91:38:01:53:f8:b7:ed:c2:a4:5a:d2:be:70:c9:ae:3c:ed: e9:36:c0:a4:db:45:02:6f:3e:e1:0a:74:36:21:ee:66:9b:7a: 18:4f:36:80:ff:71:80:c3:f9:37:76:66:e4:52:28:40:02:00: dc:9b:ec:72:bd:c1:ed:30:6b:53:ce:16:bb:32:04:b0:73:f1: a9:b2:eb:4f:7b:ab:24:12:e4:15:1e:a6:ea:7a:44:da:39:ff: 9d:0c:9a:75:1d:79:41:38:9e:1b:2d:4b:c8:a9:f5:ad:e0:f4: 32:d5:15:eb:a6:9f:fa:e1:7d:30:2e:a2:28:d5:fd:25:a1:ef: de:d4:4c:7b:1d:12:b9:d2:c9:90:80:47:76:4e:24:bd:30:8c: 55:26:cc:54:53:9c:27:5b:76:b0:02:a3:a9:23:3f:c4:57:50: 5e:ac:02:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSL3FLZB054IpR9W2lxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz YjU3NjIwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGI4YmI3ZmQ2NTQ4NTExNDg3OGYwMzFmYzI2ZTljOGExNTg1NGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNrOGWX3Uf1ET7kqvJc9brxPZB9p yJ9n718VhzTRNbpazvDOvhk7affhb/fbBXj+j7fKrb1t0NkQXNwbVUPg4q/RmZEi 0CRPvifxpHDOucL0KEvPLyAMuqT1dDmUyCPhJ0n22grv5FjfVrdfvhosY1lB+/6t 39nrr6pdpFp3d8ARHPMfh+N9zp+Tp5BJLjU2pUIqjx3h0K4ZPnHRCgZnvUizM3Cr ljlZYDdQcMOBthx4Blw/wae+CTp68Eq+a+ROkinu1thfwQtalFz5T92nj5EOLRmQ OhzbMtG2wGTIJFhZS+IQl7YPpp46S1WREhycIvExgmFnsMVEFV3cXSLL7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIi4u3/WVIURSHjwMfwm6cihWFS2MB8GA1UdIwQY MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt ZGQzYjRmODM4MWM0LzEvaUxpN2Y5WlVoUkZJZVBBeF9DYnB5S0ZZVkxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0 LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQHdMA0G CSqGSIb3DQEBCwUAA4IBAQCwY9AhHJ4aqAKg4OtOezaVQ/tepxV/W6uKesq3tlBt heNWLm6KZMQoEqBCU8OAMAFg2wMo64EaiMnyRtZMvwEOU9nVS74RuhEsbxqN01hq 7Koh/ToZoj8dkbn3kTgBU/i37cKkWtK+cMmuPO3pNsCk20UCbz7hCnQ2Ie5mm3oY TzaA/3GAw/k3dmbkUihAAgDcm+xyvcHtMGtTzha7MgSwc/GpsutPe6skEuQVHqbq ekTaOf+dDJp1HXlBOJ4bLUvIqfWt4PQy1RXrpp/64X0wLqIo1f0loe/e1Ex7HRK5 0smQgEd2TiS9MIxVJsxUU5wnW3awAqOpIz/EV1BerAIz -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:29 2026 by rpki-client