This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/1-n1vM7Ljft18bock9zc_fcUgFqk.roa File: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (raw, json) Hash identifier: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M= Subject key identifier: FA:7D:6F:33:B2:E3:7E:DD:7C:6E:87:24:F7:37:3F:7D:C5:20:16:A9 Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2 Certificate serial: 019B791074259312644EFCF56F618E675083 Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/1-n1vM7Ljft18bock9zc_fcUgFqk.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197183 IP address blocks: 185.114.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:74:25:93:12:64:4e:fc:f5:6f:61:8e:67:50:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709d69957d333432accac810231e289388e302e2 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7d6f33b2e37edd7c6e8724f7373f7dc52016a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:66:33:40:86:00:7d:d9:17:05:f3:90:96: 1e:66:f2:53:a5:63:09:36:10:81:ae:78:52:2f:6a: 84:2b:84:3c:85:c3:c8:4f:c0:1d:95:26:ce:01:a6: f2:72:1c:33:2b:8f:53:ca:67:95:47:9a:1b:0c:fe: dd:9c:92:59:be:1a:c6:bc:5a:cb:90:d5:1c:78:d9: d0:6a:17:2e:fc:20:51:af:f7:de:71:27:f9:29:77: 5c:d1:ff:06:ca:7b:9a:b7:69:a7:af:ac:c9:47:87: b8:aa:7a:62:db:86:27:19:be:28:1b:28:fb:3d:0e: 93:65:c2:e3:8c:f9:04:70:93:a1:9a:24:e9:bb:70: aa:dd:4a:25:d7:d1:0e:8c:46:f5:ab:21:5a:d3:46: 6a:5c:ea:e8:c0:f1:3b:69:79:10:f7:85:b1:7d:a1: b1:0d:3f:7c:eb:aa:6a:ac:e3:69:f2:09:de:47:ea: ea:7a:45:8a:70:9e:51:9b:f2:9d:3b:d1:5a:c9:05: 9b:7f:a5:5b:db:1f:03:f0:98:fe:4a:0c:f3:89:13: bc:9f:a4:13:60:91:e0:c7:d6:64:00:be:24:de:f0: 84:bb:09:f7:8b:04:ee:ff:64:46:9f:d8:88:d5:43: 0f:e1:c3:b4:2c:97:df:00:97:68:77:37:50:ad:16: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7D:6F:33:B2:E3:7E:DD:7C:6E:87:24:F7:37:3F:7D:C5:20:16:A9 X509v3 Authority Key Identifier: keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/1-n1vM7Ljft18bock9zc_fcUgFqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.175.0/24 Signature Algorithm: sha256WithRSAEncryption 50:3b:77:b7:42:1d:43:21:22:14:91:15:7c:cc:e6:72:ac:b0: 7d:6f:55:cd:0d:be:5f:91:81:d6:b6:00:6c:1a:f5:df:5d:3a: b7:a7:5c:f4:21:e7:6a:53:19:a3:a9:87:e9:ab:82:69:9f:b9: b1:91:a6:a5:c4:bf:fd:6d:af:94:ed:17:cf:17:28:b4:4f:ee: f9:f7:87:8d:90:c6:0e:6a:26:3f:97:93:86:74:ae:05:92:82: a4:9b:2c:ed:18:a7:d8:7c:9b:ab:8c:82:81:fe:4f:1a:26:71: f2:a9:5b:00:f4:d5:7b:7d:6d:fa:ba:fe:b8:7b:a3:ba:c2:08: 7c:db:17:fe:5e:27:63:f5:1d:d0:63:d2:99:68:58:6f:75:bb: 52:ff:79:67:1f:c6:2f:3b:72:80:ef:fb:15:f9:af:af:52:5d: 39:e0:94:49:5b:ca:bc:52:55:b3:cb:ae:91:9f:19:a1:db:12: d0:8f:84:00:80:24:ad:c9:b1:33:e6:7d:01:02:c8:d8:15:98: 42:e8:7d:fd:4e:64:b9:8a:d6:7c:bf:19:81:ee:9a:03:00:e9: 32:7f:07:e5:00:e3:46:79:7e:ea:14:77:2e:be:da:31:6b:dd: 09:3c:21:52:d8:98:cc:30:83:e0:71:f3:13:50:65:96:77:43: 49:c6:e2:0d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EHQlkxJkTvz1b2GOZ1CDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl MzAyZTIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTdkNmYzM2IyZTM3ZWRkN2M2ZTg3MjRmNzM3M2Y3ZGM1MjAxNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnChmM0CGAH3ZFwXzkJYeZvJTpWMJ NhCBrnhSL2qEK4Q8hcPIT8AdlSbOAabychwzK49TymeVR5obDP7dnJJZvhrGvFrL kNUceNnQahcu/CBRr/fecSf5KXdc0f8Gynuat2mnr6zJR4e4qnpi24YnGb4oGyj7 PQ6TZcLjjPkEcJOhmiTpu3Cq3Uol19EOjEb1qyFa00ZqXOrowPE7aXkQ94WxfaGx DT9866pqrONp8gneR+rqekWKcJ5Rm/KdO9FayQWbf6Vb2x8D8Jj+SgzziRO8n6QT YJHgx9ZkAL4k3vCEuwn3iwTu/2RGn9iI1UMP4cO0LJffAJdodzdQrRZRxwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPp9bzOy437dfG6HJPc3P33FIBapMB8GA1UdIwQY MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt MDhhNjg2MzJhNjNhLzEvMS1uMXZNN0xqZnQxOGJvY2s5emNfZmNVZ0Zxay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvNTNkNTZhLTA5NmUtNDU4YS05YTk0LTA4YTY4NjMyYTYz YS8xL2NKMXBsWDB6TkRLc3lzZ1FJeDRvazRqakF1SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlyrzAN BgkqhkiG9w0BAQsFAAOCAQEAUDt3t0IdQyEiFJEVfMzmcqywfW9VzQ2+X5GB1rYA bBr13106t6dc9CHnalMZo6mH6auCaZ+5sZGmpcS//W2vlO0XzxcotE/u+feHjZDG DmomP5eThnSuBZKCpJss7Rin2Hybq4yCgf5PGiZx8qlbAPTVe31t+rr+uHujusII fNsX/l4nY/Ud0GPSmWhYb3W7Uv95Zx/GLztygO/7Ffmvr1JdOeCUSVvKvFJVs8uu kZ8ZodsS0I+EAIAkrcmxM+Z9AQLI2BWYQuh9/U5kuYrWfL8Zge6aAwDpMn8H5QDj Rnl+6hR3Lr7aMWvdCTwhUtiYzDCD4HHzE1BllndDScbiDQ== -----END CERTIFICATE-----Generated at Thu Jan 29 00:37:14 2026 by rpki-client