This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa File: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (raw, json) Hash identifier: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8= Subject key identifier: F9:CB:67:CC:EB:B6:02:A4:68:4E:8B:6E:53:2A:9F:99:66:7A:F5:2C Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019B78A220482140AF59338B121CD6B65EB9 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa Signing time: Thu 01 Jan 2026 08:17:29 +0000 ROA not before: Thu 01 Jan 2026 08:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47376 IP address blocks: 185.86.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:20:48:21:40:af:59:33:8b:12:1c:d6:b6:5e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9cb67ccebb602a4684e8b6e532a9f99667af52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:a4:16:52:ec:51:f0:68:88:b9:f8:f1:1e: d3:87:48:89:f4:6d:7b:d0:6d:70:22:2e:71:60:89: 49:49:f3:14:20:78:2b:bb:d6:b7:69:bf:6e:53:e2: e5:cd:ef:c1:9d:37:3e:92:fc:c9:4b:df:d9:1a:08: 6b:fb:3d:22:fd:86:cc:9e:5a:5c:23:cd:2c:da:63: d8:a8:97:5a:61:1e:a4:7c:07:82:61:22:10:dc:3e: f6:7c:6d:e8:be:df:b5:37:04:5a:df:69:22:bd:a8: fa:70:27:9c:27:6a:51:76:ff:cf:5c:9e:ce:51:cb: 7c:49:2c:54:c5:fd:1d:c5:25:1f:62:71:10:3c:13: b8:cf:cc:cd:89:92:04:31:2c:d4:d1:42:66:68:a5: cb:9f:17:0f:f0:97:59:34:99:58:65:f7:30:23:24: 41:aa:96:8b:dd:2f:08:4a:bc:b7:66:10:c2:2c:44: fb:87:b0:23:1e:8f:15:a0:db:68:88:d2:ce:42:4f: e2:57:30:d4:a5:fc:0c:80:53:37:e7:b9:75:17:65: 44:4f:48:c1:f0:80:0d:f0:63:d0:68:59:31:3f:04: db:f4:74:47:5d:eb:05:55:ae:cc:49:30:00:48:89: 77:76:0f:71:26:48:64:31:8b:76:7c:3b:ae:95:98: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CB:67:CC:EB:B6:02:A4:68:4E:8B:6E:53:2A:9F:99:66:7A:F5:2C X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.183.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d2:5f:9a:fc:24:01:87:20:ee:84:12:f6:c2:6a:8a:70:46: 82:ba:16:25:9b:4a:6e:48:c0:72:ed:28:1d:ab:30:aa:58:ce: 77:38:c5:62:6a:37:a6:3d:25:50:24:7f:4c:a5:f4:b7:da:1e: 24:9f:13:87:81:88:36:e1:d7:68:85:cc:c5:d6:7d:e1:f8:ef: f1:7a:fe:36:e3:46:47:a6:d8:df:7e:36:af:a2:c7:4b:cc:81: d3:3a:de:01:18:bb:1b:75:94:25:11:d7:8a:b5:26:4e:21:e4: cc:16:a7:c2:f8:d6:c5:b1:c2:e5:8b:3f:36:53:bd:89:9f:42: c9:e8:5b:ef:fb:0b:46:55:9a:fc:9f:08:64:50:b7:9d:b2:56: 1b:1b:e3:2e:ed:8a:08:98:64:95:d2:d5:32:2c:80:e6:5f:43: 06:c9:ee:62:2a:c9:4b:4e:90:dc:92:13:af:78:a5:b8:e2:1c: d7:d3:7d:72:5f:51:bb:6f:1e:fa:2e:22:ec:e6:77:c7:03:09: 8a:be:68:d8:6d:6c:62:4b:c9:7a:91:76:c9:0d:ce:aa:31:d3: 63:dc:15:13:06:ec:e1:d5:e0:ed:49:0c:55:29:9c:ab:91:9f: 77:6c:75:44:b8:fb:c8:cd:5c:fb:47:86:c9:bc:8b:86:55:a6: 64:ec:f5:78 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oiBIIUCvWTOLEhzWtl65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWNiNjdjY2ViYjYwMmE0Njg0ZThiNmU1MzJhOWY5OTY2N2FmNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqmkFlLsUfBoiLn48R7Th0iJ9G17 0G1wIi5xYIlJSfMUIHgru9a3ab9uU+Llze/BnTc+kvzJS9/ZGghr+z0i/YbMnlpc I80s2mPYqJdaYR6kfAeCYSIQ3D72fG3ovt+1NwRa32kivaj6cCecJ2pRdv/PXJ7O Uct8SSxUxf0dxSUfYnEQPBO4z8zNiZIEMSzU0UJmaKXLnxcP8JdZNJlYZfcwIyRB qpaL3S8ISry3ZhDCLET7h7AjHo8VoNtoiNLOQk/iVzDUpfwMgFM357l1F2VET0jB 8IAN8GPQaFkxPwTb9HRHXesFVa7MSTAASIl3dg9xJkhkMYt2fDuulZghqQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnLZ8zrtgKkaE6LblMqn5lmevUsMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvMS1jdG56T3UyQXFSb1RvdHVVeXFmbVdaNjlTdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTYvZjU2MGUxLTc4NDAtNDk1MS1hYjc4LTUwMDE1MzlkNzE4 NS8xL2kwZXFDZkxHRVBiMFMwNTF3YzJkelRpRTVWMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlWtzAN BgkqhkiG9w0BAQsFAAOCAQEAHdJfmvwkAYcg7oQS9sJqinBGgroWJZtKbkjAcu0o HaswqljOdzjFYmo3pj0lUCR/TKX0t9oeJJ8Th4GINuHXaIXMxdZ94fjv8Xr+NuNG R6bY3342r6LHS8yB0zreARi7G3WUJRHXirUmTiHkzBanwvjWxbHC5Ys/NlO9iZ9C yehb7/sLRlWa/J8IZFC3nbJWGxvjLu2KCJhkldLVMiyA5l9DBsnuYirJS06Q3JIT r3iluOIc19N9cl9Ru28e+i4i7OZ3xwMJir5o2G1sYkvJepF2yQ3OqjHTY9wVEwbs 4dXg7UkMVSmcq5Gfd2x1RLj7yM1c+0eGybyLhlWmZOz1eA== -----END CERTIFICATE-----Generated at Mon Jan 26 23:01:45 2026 by rpki-client