This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/1-Vth4z2v9uFJG-6e6yAh4OoK6zE.roa File: 1-Vth4z2v9uFJG-6e6yAh4OoK6zE.roa (raw, json) Hash identifier: c8s0rn9oSVHOm4SDzolaenn55CGT9XGpo6G1tmj95qA= Subject key identifier: F9:5B:61:E3:3D:AF:F6:E1:49:1B:EE:9E:EB:20:21:E0:EA:0A:EB:31 Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Certificate serial: 019B77589C3909CF8B0B421FC24EA517D27B Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/1-Vth4z2v9uFJG-6e6yAh4OoK6zE.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209199 IP address blocks: 185.124.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9c:39:09:cf:8b:0b:42:1f:c2:4e:a5:17:d2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f95b61e33daff6e1491bee9eeb2021e0ea0aeb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:29:ea:a4:48:db:8e:70:44:e8:f1:05:18: 4f:53:42:33:dd:ec:a0:c8:8c:65:55:7e:5b:3f:d8: 98:9c:12:ad:3f:31:7a:a6:c5:20:34:52:24:9b:72: b8:0e:b0:b9:0a:66:e9:dc:8b:c3:f4:34:6c:b1:d2: 2e:de:e0:2e:d3:b8:69:41:31:61:c6:f6:62:37:49: d9:39:de:a4:08:4e:ea:80:ff:77:32:ce:c5:50:f5: 1d:cd:d8:5c:8e:aa:c8:ac:d6:ec:38:43:d1:8c:1f: 60:e1:2f:8b:8e:6c:e8:7d:04:1e:c2:d9:98:88:95: cb:6b:6b:90:d4:25:8b:5e:63:9d:43:6f:55:b0:47: e9:16:02:b5:e5:76:7c:19:10:27:28:6a:27:1a:0d: 9d:2f:06:79:6a:86:0d:00:ee:bf:04:f3:ee:6d:64: 97:6f:7d:de:68:51:34:8d:e8:53:f9:2e:88:9e:5d: 03:93:6d:e1:06:8f:7a:0f:d8:25:43:07:9d:80:e0: dc:30:d2:a9:92:c3:f4:f4:b2:b6:65:c4:87:9d:52: a7:d8:39:49:ac:ee:39:4d:ce:27:1a:bd:c8:82:aa: 37:08:f6:48:7b:19:b5:d1:0a:46:a0:45:47:cf:33: a8:78:ec:6c:95:d9:68:5e:18:23:5d:49:34:65:d9: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5B:61:E3:3D:AF:F6:E1:49:1B:EE:9E:EB:20:21:E0:EA:0A:EB:31 X509v3 Authority Key Identifier: keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/1-Vth4z2v9uFJG-6e6yAh4OoK6zE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.160.0/22 Signature Algorithm: sha256WithRSAEncryption 30:47:7b:c6:9b:6a:a2:d9:05:e9:27:f2:1b:b8:33:b3:dc:39: 7e:03:1e:78:f2:e8:4e:7d:5a:8c:d6:a6:fc:c8:7b:48:ca:84: ec:77:11:f2:bb:cd:a7:74:13:f6:6c:c1:2b:b1:42:7c:ad:4e: 68:32:05:1c:8a:cc:93:f0:d7:23:64:bb:e2:82:43:2c:b8:cd: 73:a8:ba:d2:0b:03:59:f0:ed:83:40:71:14:54:ef:d2:ca:cf: 5c:72:3c:cd:6e:43:91:91:29:4a:5b:86:6f:ce:c2:6b:4e:12: 20:7c:48:c4:4f:28:f1:a4:52:c8:ed:16:e9:4d:c2:5b:00:a2: da:98:27:38:08:ed:0b:53:fa:24:8f:ba:d4:37:92:e9:29:b5: 08:7c:40:3a:bb:34:7f:ff:48:08:f0:9c:d8:ba:08:57:ce:81: 43:d7:d9:d3:c6:45:96:b3:1a:df:92:fb:03:3f:8b:33:f0:ea: 81:4e:52:57:bd:16:0a:5c:c2:8f:6c:33:37:d7:d4:82:e6:98: e3:f3:7d:70:80:01:f0:2b:5c:15:3e:c7:98:a9:04:e7:6e:58: b6:a9:5c:cb:33:57:f9:6d:61:b2:8d:6d:10:70:2e:65:35:51: cc:f2:0e:37:67:b8:99:2e:d3:e2:87:82:d6:71:48:21:a5:ac: cd:21:8a:48 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WJw5Cc+LC0Ifwk6lF9J7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWJiMTBhNTU3MjE3NWIwM2EzYzdjYmZiZTkzOGI3YjE0 NDFhYzAwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTViNjFlMzNkYWZmNmUxNDkxYmVlOWVlYjIwMjFlMGVhMGFlYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTUp6qRI245wROjxBRhPU0Iz3eyg yIxlVX5bP9iYnBKtPzF6psUgNFIkm3K4DrC5Cmbp3IvD9DRssdIu3uAu07hpQTFh xvZiN0nZOd6kCE7qgP93Ms7FUPUdzdhcjqrIrNbsOEPRjB9g4S+LjmzofQQewtmY iJXLa2uQ1CWLXmOdQ29VsEfpFgK15XZ8GRAnKGonGg2dLwZ5aoYNAO6/BPPubWSX b33eaFE0jehT+S6Inl0Dk23hBo96D9glQwedgODcMNKpksP09LK2ZcSHnVKn2DlJ rO45Tc4nGr3Igqo3CPZIexm10QpGoEVHzzOoeOxsldloXhgjXUk0ZdkDkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlbYeM9r/bhSRvunusgIeDqCusxMB8GA1UdIwQY MBaAFGmbsQpVchdbA6PHy/vpOLexRBrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMt OGFhZTQzMDYzYmNhLzEvMS1WdGg0ejJ2OXVGSkctNmU2eUFoNE9vSzZ6RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjMvYmZhMDdiLTg3YzItNDUyYS1iZDBjLThhYWU0MzA2M2Jj YS8xL2FadXhDbFZ5RjFzRG84ZkwtLWs0dDdGRUdzQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl8oDAN BgkqhkiG9w0BAQsFAAOCAQEAMEd7xptqotkF6SfyG7gzs9w5fgMeePLoTn1ajNam /Mh7SMqE7HcR8rvNp3QT9mzBK7FCfK1OaDIFHIrMk/DXI2S74oJDLLjNc6i60gsD WfDtg0BxFFTv0srPXHI8zW5DkZEpSluGb87Ca04SIHxIxE8o8aRSyO0W6U3CWwCi 2pgnOAjtC1P6JI+61DeS6Sm1CHxAOrs0f/9ICPCc2LoIV86BQ9fZ08ZFlrMa35L7 Az+LM/DqgU5SV70WClzCj2wzN9fUguaY4/N9cIAB8CtcFT7HmKkE525YtqlcyzNX +W1hso1tEHAuZTVRzPION2e4mS7T4oeC1nFIIaWszSGKSA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:26 2026 by rpki-client