This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa File: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (raw, json) Hash identifier: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8= Subject key identifier: FA:BE:0B:BF:64:66:BF:3F:0F:4B:7B:84:CA:A2:C7:0E:0E:FD:7B:AA Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a Certificate serial: 019B78A33B38C77C1E840F33BE7E965E7274 Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.213.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:38:c7:7c:1e:84:0f:33:be:7e:96:5e:72:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fabe0bbf6466bf3f0f4b7b84caa2c70e0efd7baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:1d:94:5e:0f:ea:a8:5c:a2:a2:e8:73:62: ae:c8:12:2d:5f:f6:1a:49:3b:1b:db:4c:a7:9b:17: 13:18:15:67:07:4c:c3:31:32:10:bc:67:6b:7b:a8: 09:1b:7e:28:5b:a9:15:37:0a:56:00:a4:00:2b:f2: 14:5c:27:15:51:eb:55:96:9b:32:be:e9:2b:0c:c3: 92:c7:8d:1a:d0:3d:77:13:da:8a:b9:20:a3:57:c0: cd:88:8d:96:9d:8d:16:c5:4e:03:fe:81:27:90:e2: d5:04:38:45:98:04:2c:e6:10:ca:24:02:a0:50:00: 5d:9f:c1:ad:5d:3d:2a:cb:1b:cf:2f:ef:0d:ed:3a: 86:ae:72:24:09:9b:fe:f1:10:d1:c9:ea:9d:e5:9c: 91:43:d9:c6:76:b2:e6:f3:26:bd:4e:02:33:e6:9a: e8:77:34:13:56:0c:a4:9b:96:1c:82:ff:87:92:6e: 84:93:2f:c9:07:1e:1a:1f:e4:27:4a:a0:98:ae:9d: b2:7d:b7:37:1d:9b:36:ae:9f:b3:38:31:51:ca:5a: 5a:80:75:3f:38:36:e8:f1:16:79:2d:95:cd:35:f9: e3:15:67:69:00:3c:f6:f3:42:9a:2c:cc:74:70:08: 22:af:05:08:d5:d5:c9:f0:91:81:1f:14:9d:7b:fa: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BE:0B:BF:64:66:BF:3F:0F:4B:7B:84:CA:A2:C7:0E:0E:FD:7B:AA X509v3 Authority Key Identifier: keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.47.0/24 Signature Algorithm: sha256WithRSAEncryption 77:7f:78:9f:43:aa:25:9b:2e:da:54:4e:bf:40:0a:46:83:b8: ac:31:c5:ad:d0:b9:4b:d5:45:db:ec:21:05:fa:97:55:4d:fc: fd:2f:fb:fc:e0:79:7d:51:e3:09:44:e8:9a:81:45:c3:59:17: 6e:7e:aa:b9:96:fc:76:f2:f4:a0:b1:2c:fd:5b:8f:28:49:a9: 55:13:e7:d0:50:8e:81:38:d4:de:46:c0:8c:c7:22:2d:ac:75: e9:71:86:03:44:67:b6:f0:df:c6:1b:ff:f8:9f:c9:00:a4:95: 16:95:37:5d:0e:2b:eb:a2:58:a0:ec:45:40:a3:84:86:78:d5: f0:ff:c1:71:da:1b:76:d4:62:b8:53:94:9a:26:d6:f5:23:99: e7:6d:80:1c:91:2d:43:86:63:95:97:7b:70:77:d5:ac:3c:c9: 98:55:6c:79:8c:8e:a7:11:0e:30:b0:db:cd:a9:0d:51:d3:7f: 7a:2d:e3:1b:da:9a:ed:57:60:37:60:82:d5:bc:ae:48:bf:8d: 09:b4:bb:4c:6f:50:28:67:43:d8:2c:9e:83:50:74:f5:63:53: 32:c1:bf:77:e1:24:33:03:d0:5a:52:7e:ef:ed:34:5e:8e:6f: 89:af:74:25:5b:db:0d:ce:01:c8:2d:8f:7d:f2:7b:d5:25:56: 62:b8:18:e7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ozs4x3wehA8zvn6WXnJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3 NjU2MmEwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWJlMGJiZjY0NjZiZjNmMGY0YjdiODRjYWEyYzcwZTBlZmQ3YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRAdlF4P6qhcoqLoc2KuyBItX/Ya STsb20ynmxcTGBVnB0zDMTIQvGdre6gJG34oW6kVNwpWAKQAK/IUXCcVUetVlpsy vukrDMOSx40a0D13E9qKuSCjV8DNiI2WnY0WxU4D/oEnkOLVBDhFmAQs5hDKJAKg UABdn8GtXT0qyxvPL+8N7TqGrnIkCZv+8RDRyeqd5ZyRQ9nGdrLm8ya9TgIz5pro dzQTVgykm5Ycgv+Hkm6Eky/JBx4aH+QnSqCYrp2yfbc3HZs2rp+zODFRylpagHU/ ODbo8RZ5LZXNNfnjFWdpADz280KaLMx0cAgirwUI1dXJ8JGBHxSde/oaDwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPq+C79kZr8/D0t7hMqixw4O/XuqMB8GA1UdIwQY MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt YzYzNDlkYjk0OTliLzEvMS1yNEx2MlJtdno4UFMzdUV5cUxIRGc3OWU2by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWMvN2Q1NjA3LTBhOGEtNDQ0Ny04NjUxLWM2MzQ5ZGI5NDk5 Yi8xLzI0MEk3Y1E1T29aeEtXLU9yTHZzLVUxMlZpby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnVLzAN BgkqhkiG9w0BAQsFAAOCAQEAd394n0OqJZsu2lROv0AKRoO4rDHFrdC5S9VF2+wh BfqXVU38/S/7/OB5fVHjCUTomoFFw1kXbn6quZb8dvL0oLEs/VuPKEmpVRPn0FCO gTjU3kbAjMciLax16XGGA0RntvDfxhv/+J/JAKSVFpU3XQ4r66JYoOxFQKOEhnjV 8P/BcdobdtRiuFOUmibW9SOZ522AHJEtQ4ZjlZd7cHfVrDzJmFVseYyOpxEOMLDb zakNUdN/ei3jG9qa7VdgN2CC1byuSL+NCbS7TG9QKGdD2Cyeg1B09WNTMsG/d+Ek MwPQWlJ+7+00Xo5via90JVvbDc4ByC2PffJ71SVWYrgY5w== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:06 2026 by rpki-client