This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-1nP27bm3gAzWksm3Aa1woQLmTg.roa File: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (raw, json) Hash identifier: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q= Subject key identifier: FB:59:CF:DB:B6:E6:DE:00:33:5A:4B:26:DC:06:B5:C2:84:0B:99:38 Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019B7E38BB8E04B7ACF9A48E5A068BA666AA Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-1nP27bm3gAzWksm3Aa1woQLmTg.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215523 IP address blocks: 213.18.240.0/23 maxlen: 23 217.180.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bb:8e:04:b7:ac:f9:a4:8e:5a:06:8b:a6:66:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb59cfdbb6e6de00335a4b26dc06b5c2840b9938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:a5:9d:a9:69:83:5f:f4:ad:52:04:89:fc: 5b:f0:cf:16:8a:90:a8:c4:57:54:24:bb:83:29:b8: ba:37:2f:31:d9:55:3c:5a:4d:10:76:f4:77:2e:bf: c8:ca:7c:11:83:c9:aa:37:da:06:19:f2:6a:fb:77: 58:be:d4:41:70:91:13:bd:b5:bc:5f:3c:ca:e1:a5: a3:81:52:87:6c:94:ee:f2:93:3a:21:cc:62:42:ca: 75:4c:f1:f8:78:25:62:a5:53:f3:58:73:d6:51:69: de:c0:81:ce:e0:3e:8d:21:6c:36:35:26:11:24:2b: ff:75:92:b6:f7:76:6b:df:fe:09:38:95:b1:29:00: 44:7d:82:df:d6:4b:33:d4:60:93:e1:10:5a:11:cd: 55:4e:3d:ae:b2:22:21:d2:1c:90:69:05:88:e5:1a: 79:34:fa:da:d3:de:32:48:ed:c7:be:eb:66:89:98: e6:a3:1c:ee:a3:61:38:3c:a3:1b:bb:e8:8e:89:a2: 8e:df:32:9d:1a:8a:98:44:dd:e9:ca:99:06:69:a6: 86:d5:37:a6:24:3a:81:9a:2c:4a:40:3f:5f:81:f5: 41:27:4f:12:61:57:b0:e3:71:72:70:a7:35:0a:4a: 21:85:27:4f:dd:13:53:95:01:a3:82:42:66:69:d5: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:59:CF:DB:B6:E6:DE:00:33:5A:4B:26:DC:06:B5:C2:84:0B:99:38 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1-1nP27bm3gAzWksm3Aa1woQLmTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.18.240.0/23 217.180.36.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:29:50:25:8e:26:e3:ce:46:e4:d0:8d:75:be:b2:e3:ee:b5: 8e:97:fd:1b:17:70:71:3e:c4:ae:f3:8d:58:e9:f7:99:5e:10: ba:70:f9:c9:1c:34:b3:c7:e3:08:95:81:10:e6:75:93:fe:92: 66:57:d0:8e:db:bc:d5:21:c7:86:45:48:86:1b:95:f6:56:d0: 83:01:d2:cc:cf:f6:0a:21:fa:8d:54:aa:93:69:a5:d2:69:f0: d8:16:20:d4:b3:f7:1f:e0:f2:0f:4b:27:90:0c:27:fa:71:99: 3d:11:aa:7a:b1:58:10:b4:3d:d1:7b:1c:52:6c:ad:be:d6:b1: 9b:15:85:8d:a9:97:57:67:67:53:9d:b8:64:14:11:fb:61:38: c5:34:5e:d5:45:d5:5e:2c:bc:6b:c1:d6:b8:cb:ab:90:f5:e7: 8c:14:6c:6a:10:ba:ba:a4:ec:a1:d4:09:d4:f5:1e:6a:90:00: 26:57:9e:82:1f:2c:02:62:0e:56:51:64:43:56:01:b3:0a:c3: a3:dd:fc:bc:9f:b2:ef:0c:7c:60:e8:3d:86:4b:76:02:54:49: 16:28:86:a7:65:af:fd:70:aa:0a:74:1c:0c:d2:65:14:1d:50: 73:c6:05:85:3f:b9:a5:dc:8f:d0:04:97:0a:a8:1a:3a:22:ca: c2:67:cc:45 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+OLuOBLes+aSOWgaLpmaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjU5Y2ZkYmI2ZTZkZTAwMzM1YTRiMjZkYzA2YjVjMjg0MGI5OTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCKlnalpg1/0rVIEifxb8M8WipCo xFdUJLuDKbi6Ny8x2VU8Wk0QdvR3Lr/IynwRg8mqN9oGGfJq+3dYvtRBcJETvbW8 XzzK4aWjgVKHbJTu8pM6IcxiQsp1TPH4eCVipVPzWHPWUWnewIHO4D6NIWw2NSYR JCv/dZK293Zr3/4JOJWxKQBEfYLf1ksz1GCT4RBaEc1VTj2usiIh0hyQaQWI5Rp5 NPra094ySO3HvutmiZjmoxzuo2E4PKMbu+iOiaKO3zKdGoqYRN3pypkGaaaG1Tem JDqBmixKQD9fgfVBJ08SYVew43FycKc1CkohhSdP3RNTlQGjgkJmadXvOwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPtZz9u25t4AM1pLJtwGtcKEC5k4MB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvMS0xblAyN2JtM2dBeldrc20zQWExd29RTG1UZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2IvODM4MDMyLWRiOTctNDk3Zi04Yzk1LWMxOTk0MjczN2U2 ZC8xL2FsZzIzZW01MnU4MXFLZjNUV01tOXJRdHAwMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAdUS8AME Adm0JDANBgkqhkiG9w0BAQsFAAOCAQEAHSlQJY4m485G5NCNdb6y4+61jpf9Gxdw cT7ErvONWOn3mV4QunD5yRw0s8fjCJWBEOZ1k/6SZlfQjtu81SHHhkVIhhuV9lbQ gwHSzM/2CiH6jVSqk2ml0mnw2BYg1LP3H+DyD0snkAwn+nGZPRGqerFYELQ90Xsc UmytvtaxmxWFjamXV2dnU524ZBQR+2E4xTRe1UXVXiy8a8HWuMurkPXnjBRsahC6 uqTsodQJ1PUeapAAJleegh8sAmIOVlFkQ1YBswrDo938vJ+y7wx8YOg9hkt2AlRJ FiiGp2Wv/XCqCnQcDNJlFB1Qc8YFhT+5pdyP0ASXCqgaOiLKwmfMRQ== -----END CERTIFICATE-----Generated at Tue Jan 13 21:10:28 2026 by rpki-client