This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa File: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (raw, json) Hash identifier: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4= Subject key identifier: FB:0F:FF:16:05:5B:60:61:2F:67:35:F9:1B:B5:AF:E9:6A:50:30:57 Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d Certificate serial: 019B7D5C3680379533A9065B159B07AA2CFF Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15704 IP address blocks: 185.252.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:36:80:37:95:33:a9:06:5b:15:9b:07:aa:2c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb0fff16055b60612f6735f91bb5afe96a503057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:f1:53:40:3f:53:68:72:41:82:99:c0:dd: 68:2e:0f:23:47:3f:70:2b:47:63:91:3a:a2:f8:83: 78:af:51:9d:4a:be:b4:87:f7:59:15:ed:66:1e:4a: f7:dd:e5:b8:49:ac:b3:5e:4a:72:a6:ea:7a:b2:17: 99:6d:dd:10:a7:65:a9:dd:c7:3c:48:01:a7:29:74: 74:46:9a:30:61:cb:58:4c:02:23:3d:bb:b3:8a:8b: 7e:63:6b:3b:8f:38:dc:74:07:fb:28:f5:23:9d:69: 5e:5f:01:9c:5a:d3:40:f6:92:5c:fa:a7:7c:c3:73: 1c:27:49:a4:12:8a:34:20:e0:c6:46:24:25:99:89: 88:af:20:e0:13:02:86:83:c8:db:1e:1f:1c:03:97: 53:f6:42:c8:e5:a0:de:2c:aa:fb:b7:62:57:7b:0d: 3e:8b:c8:bf:ba:94:1a:06:61:80:e0:89:3a:d3:50: 22:c1:63:31:5c:d5:8a:e1:c7:c7:70:a2:d7:54:56: 48:80:bd:ea:8b:6f:72:f4:fd:0b:70:ad:db:e2:9e: 45:09:af:d3:0d:97:f6:93:b4:1c:e0:de:bf:40:eb: 48:39:cc:00:9c:ab:28:d1:7a:cf:0c:21:92:18:19: 75:1f:22:53:11:c2:9c:d8:0d:d6:02:12:3e:3c:f1: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0F:FF:16:05:5B:60:61:2F:67:35:F9:1B:B5:AF:E9:6A:50:30:57 X509v3 Authority Key Identifier: keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.4.0/24 Signature Algorithm: sha256WithRSAEncryption c1:96:09:e4:d2:d5:77:5f:2b:f4:0e:92:73:dc:fc:e7:ef:80: 4e:95:a8:4b:61:c1:35:89:0d:8d:3b:6c:c0:30:81:2e:1a:d5: c9:ad:8f:76:69:eb:0c:cd:14:a5:b8:59:56:ab:09:cd:aa:68: cc:fd:6d:56:48:98:be:db:5b:2f:72:2d:a3:1c:7f:8a:d9:6a: 54:db:eb:6f:ff:e8:2d:d5:2e:0e:91:98:e2:f3:02:fa:af:a7: eb:77:26:14:00:5f:01:02:b3:de:42:17:aa:9a:a4:41:22:53: df:3b:e4:cd:f3:3e:52:7c:91:20:d3:d8:6f:b5:11:09:8d:27: f8:1a:a9:9b:8c:fb:f5:65:96:dd:38:e8:d7:53:fa:04:3a:85: cb:aa:0e:15:cc:6e:38:7c:f4:35:1e:a5:92:69:fe:c9:c5:ed: 9c:35:48:e9:41:4c:ff:c7:8e:c7:b7:74:bc:d8:8f:14:f6:d5: 7b:7a:55:20:32:d7:43:81:77:dd:23:48:02:39:64:ca:b7:bb: 26:d3:c6:19:34:27:2c:59:75:15:2a:7d:3e:ce:cb:a4:b9:5e: d4:c1:6f:6b:eb:83:51:b3:45:0b:78:95:41:17:9e:d7:c6:9f: a1:3d:5f:17:6d:a7:60:07:4c:45:cf:05:59:90:df:57:e6:b8: b6:3d:ea:c1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XDaAN5UzqQZbFZsHqiz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUx M2IyNWQwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBmZmYxNjA1NWI2MDYxMmY2NzM1ZjkxYmI1YWZlOTZhNTAzMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFTxU0A/U2hyQYKZwN1oLg8jRz9w K0djkTqi+IN4r1GdSr60h/dZFe1mHkr33eW4SayzXkpypup6sheZbd0Qp2Wp3cc8 SAGnKXR0RpowYctYTAIjPbuziot+Y2s7jzjcdAf7KPUjnWleXwGcWtNA9pJc+qd8 w3McJ0mkEoo0IODGRiQlmYmIryDgEwKGg8jbHh8cA5dT9kLI5aDeLKr7t2JXew0+ i8i/upQaBmGA4Ik601AiwWMxXNWK4cfHcKLXVFZIgL3qi29y9P0LcK3b4p5FCa/T DZf2k7Qc4N6/QOtIOcwAnKso0XrPDCGSGBl1HyJTEcKc2A3WAhI+PPFRdQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsP/xYFW2BhL2c1+Ru1r+lqUDBXMB8GA1UdIwQY MBaAFBqgoyjG/g8byl5lmQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUt MzhlODQ2MTQ4Yzc4LzEvMS13X19GZ1ZiWUdFdlp6WDVHN1d2NldwUU1GYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWMvMzQ0ZDI0LTJlMTEtNDY2ZC04YWRlLTM4ZTg0NjE0OGM3 OC8xL0dxQ2pLTWItRHh2S1htV1pCQzNfV2VVVHNsMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn8BDAN BgkqhkiG9w0BAQsFAAOCAQEAwZYJ5NLVd18r9A6Sc9z85++ATpWoS2HBNYkNjTts wDCBLhrVya2PdmnrDM0UpbhZVqsJzapozP1tVkiYvttbL3Itoxx/itlqVNvrb//o LdUuDpGY4vMC+q+n63cmFABfAQKz3kIXqpqkQSJT3zvkzfM+UnyRINPYb7URCY0n +Bqpm4z79WWW3Tjo11P6BDqFy6oOFcxuOHz0NR6lkmn+ycXtnDVI6UFM/8eOx7d0 vNiPFPbVe3pVIDLXQ4F33SNIAjlkyre7JtPGGTQnLFl1FSp9Ps7LpLle1MFva+uD UbNFC3iVQRee18afoT1fF22nYAdMRc8FWZDfV+a4tj3qwQ== -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:25 2026 by rpki-client