This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa File: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (raw, json) Hash identifier: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0= Subject key identifier: FA:BC:68:A4:7E:4B:27:D5:33:8B:92:12:1C:95:D1:F9:DB:AB:D2:37 Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69 Certificate serial: 019B7EA6ACA6BFE86251705EB81D160D52FE Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.246.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ac:a6:bf:e8:62:51:70:5e:b8:1d:16:0d:52:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69 Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fabc68a47e4b27d5338b92121c95d1f9dbabd237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6c:87:3a:38:f3:65:c4:67:3d:8d:3b:ad:ed: 13:49:49:eb:af:7e:7e:3b:15:ee:98:b7:69:0a:48: 54:d1:fe:ca:38:8b:ab:e6:98:52:58:0a:cc:7e:11: b9:dd:01:ff:2d:6d:58:d2:93:a0:62:4b:76:bd:d2: d8:78:dd:34:4d:e6:b2:9c:c0:bc:9e:8b:a0:06:bf: 0a:c6:be:85:45:26:e4:4a:41:47:11:02:e1:58:e0: 80:38:50:e6:22:bd:38:29:28:75:60:08:60:51:69: 1b:15:c6:69:0d:7a:ac:60:f4:c2:83:f3:04:97:d2: a3:77:50:1b:9c:f4:2b:c4:0d:10:16:b4:11:7c:f9: 49:76:f0:90:72:0a:2f:20:d9:ef:dd:4a:8e:98:28: 6d:49:43:81:aa:49:a2:b6:00:ec:a1:f0:0a:b2:28: 86:c2:ca:94:23:22:9d:82:25:a6:5e:f1:e7:95:6b: a2:08:24:61:4e:4e:06:b6:27:7a:45:5d:c6:5d:d4: 8c:02:73:bb:cc:d5:be:17:9b:92:54:58:9d:c4:26: ec:35:aa:14:21:b6:75:75:18:55:fd:0e:8e:3b:f7: 47:92:55:17:35:62:b9:a4:04:fe:8a:19:34:1c:35: 9d:be:ed:97:ed:92:24:69:04:e4:3e:bf:c7:8d:86: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:68:A4:7E:4B:27:D5:33:8B:92:12:1C:95:D1:F9:DB:AB:D2:37 X509v3 Authority Key Identifier: keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.43.0/24 Signature Algorithm: sha256WithRSAEncryption 87:1d:66:d8:3e:c7:ed:f6:59:d3:de:ae:8b:be:b9:6c:c5:b8: 68:f7:42:ba:fb:1c:f6:3e:9c:39:e7:b3:83:55:2c:7a:ee:a2: fa:a9:e5:f7:1f:66:f9:13:7e:e2:1e:73:a8:4a:c4:ca:f1:12: 51:86:92:ab:16:b8:50:82:8a:8b:0f:46:d9:3c:e0:80:ff:76: 8d:00:89:ce:b3:ca:37:41:9f:bf:58:ee:2f:81:24:31:9f:1c: f2:75:a0:be:57:89:db:42:37:f8:5e:8d:25:ea:cf:3e:c6:53: 0d:9c:fb:69:3c:00:79:5e:55:a9:8e:db:2b:6b:40:13:ee:62: 32:1e:04:68:ca:a9:7d:49:f9:24:06:ca:34:25:d5:b4:75:92: 88:72:5b:ab:1e:56:27:87:97:0c:62:46:cf:57:4d:a0:8a:a1: 6f:a5:82:41:35:d7:ee:94:59:bf:84:83:b8:dd:63:99:a8:fb: 2b:9e:9e:4b:ae:29:82:76:4f:a5:bb:c6:da:e8:c5:6f:ab:1d: 72:3c:81:27:c9:a8:37:92:1c:e9:a1:01:28:25:d3:82:fc:fe: e2:ee:4c:fb:69:38:0f:1f:bf:1f:1b:19:4e:1b:65:70:42:c3: 49:4c:4d:7f:d0:de:05:de:7c:85:81:37:58:6d:e9:32:2e:35: 83:d4:92:4c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pqymv+hiUXBeuB0WDVL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MjFlMTc0Zjg0ZjcxNjU5NjFkNDFiNjhlYTcyNjJlMjgz MzdkNjkwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWJjNjhhNDdlNGIyN2Q1MzM4YjkyMTIxYzk1ZDFmOWRiYWJkMjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8myHOjjzZcRnPY07re0TSUnrr35+ OxXumLdpCkhU0f7KOIur5phSWArMfhG53QH/LW1Y0pOgYkt2vdLYeN00TeaynMC8 nougBr8Kxr6FRSbkSkFHEQLhWOCAOFDmIr04KSh1YAhgUWkbFcZpDXqsYPTCg/ME l9Kjd1AbnPQrxA0QFrQRfPlJdvCQcgovINnv3UqOmChtSUOBqkmitgDsofAKsiiG wsqUIyKdgiWmXvHnlWuiCCRhTk4Gtid6RV3GXdSMAnO7zNW+F5uSVFidxCbsNaoU IbZ1dRhV/Q6OO/dHklUXNWK5pAT+ihk0HDWdvu2X7ZIkaQTkPr/HjYYiGwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPq8aKR+SyfVM4uSEhyV0fnbq9I3MB8GA1UdIwQY MBaAFPUh4XT4T3Fllh1Bto6nJi4oM31pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOWEwMTAtZDVmNy00NjYxLThkMzIt ZGQwNjExMWYzZjk2LzEvMS1yeG9wSDVMSjlVemk1SVNISlhSLWR1cjBqYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTkvZDlhMDEwLWQ1ZjctNDY2MS04ZDMyLWRkMDYxMTFmM2Y5 Ni8xLzlTSGhkUGhQY1dXV0hVRzJqcWNtTGlnemZXay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn2KzAN BgkqhkiG9w0BAQsFAAOCAQEAhx1m2D7H7fZZ096ui765bMW4aPdCuvsc9j6cOeez g1Useu6i+qnl9x9m+RN+4h5zqErEyvESUYaSqxa4UIKKiw9G2TzggP92jQCJzrPK N0Gfv1juL4EkMZ8c8nWgvleJ20I3+F6NJerPPsZTDZz7aTwAeV5VqY7bK2tAE+5i Mh4EaMqpfUn5JAbKNCXVtHWSiHJbqx5WJ4eXDGJGz1dNoIqhb6WCQTXX7pRZv4SD uN1jmaj7K56eS64pgnZPpbvG2ujFb6sdcjyBJ8moN5Ic6aEBKCXTgvz+4u5M+2k4 Dx+/HxsZThtlcELDSUxNf9DeBd58hYE3WG3pMi41g9SSTA== -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:27 2026 by rpki-client