This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa File: 1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa (raw, json) Hash identifier: u9ro5Rvo3czSNujsVQtq0Ez7XFyuHSIaTIk3k7PO73o= Subject key identifier: D5:2D:9B:65:98:FD:A9:DC:91:44:1E:E7:47:F6:F8:3D:0D:33:D5:2C Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c Certificate serial: 019B76EAE18E44E25F23670136CBCCCB6431 Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 141.37.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e1:8e:44:e2:5f:23:67:01:36:cb:cc:cb:64:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d52d9b6598fda9dc91441ee747f6f83d0d33d52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:b3:4f:ee:d3:39:8b:85:44:a3:81:71:f2: c4:2b:c2:41:f8:de:17:c7:f5:3a:d0:2c:f9:16:05: 97:23:a0:88:9b:5b:88:c1:c0:b1:20:ea:bd:b4:6e: c4:3f:77:61:f3:40:2a:b6:cf:ad:7e:1e:2e:56:dc: 1b:7f:25:8e:2a:8e:90:0a:bf:b1:47:0e:8f:87:0c: be:1f:67:c4:b8:56:8c:4a:27:41:18:5e:83:5b:4c: 7d:c4:82:3e:4e:1b:76:39:78:0e:85:7a:c7:68:8b: 21:30:b6:3b:99:74:c2:0d:72:4f:07:27:b9:ea:4b: c5:b7:44:73:34:5f:b8:7f:7b:43:7b:c5:6f:ed:8b: dd:ab:03:c8:5a:78:b8:b9:ae:ef:b2:04:74:d0:2a: 89:8e:9a:32:40:d9:67:c9:c0:d4:38:eb:2f:5c:67: 24:fd:86:0d:4c:0e:2f:50:c7:a1:79:9b:f2:bd:d4: a6:43:2d:74:9e:01:4c:d6:41:97:f4:74:cb:78:25: 30:d9:40:9c:8d:fd:e3:31:cd:04:aa:36:19:e2:f4: 6d:07:cc:72:b4:0f:b3:af:c7:76:51:d3:7e:79:f1: 2d:38:59:a9:74:75:e5:d3:ae:3a:20:36:d1:03:f3: 1b:6f:c6:d2:7a:5a:8d:24:0f:e4:1b:d7:9e:28:53: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2D:9B:65:98:FD:A9:DC:91:44:1E:E7:47:F6:F8:3D:0D:33:D5:2C X509v3 Authority Key Identifier: keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.37.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:e5:64:eb:7e:27:71:9f:17:3c:b4:8e:ae:e2:ff:08:b1:52: 05:8a:20:d2:90:d8:97:a1:b7:73:8b:3b:e3:a9:ae:fb:de:13: 76:94:39:ad:ed:57:81:d3:01:f2:38:e3:0e:fa:05:52:d0:25: c7:f1:6c:b7:06:56:21:c4:da:d2:19:02:76:20:85:ae:dd:b5: 78:9c:35:cd:25:1e:31:2a:6e:8a:bd:c4:dc:9d:4b:b7:13:82: 8a:66:8d:9c:b2:26:27:e3:65:5b:0c:e6:f7:33:3c:f7:06:97: 8c:b8:e9:37:72:d8:35:0c:d6:06:e9:93:5e:9a:69:9e:7b:8e: 44:b5:16:7e:58:83:78:bc:14:e5:9f:b0:cb:97:59:d3:7d:2f: e2:de:2c:24:2d:34:c9:da:ac:09:ff:98:6b:ff:dd:f5:3e:af: 03:6c:03:b4:ce:24:61:03:7f:fc:83:a6:f5:d3:79:7f:96:62: 15:13:01:98:af:86:e9:1e:f6:ce:d7:ca:42:e4:33:0e:5a:6a: 44:23:02:01:7b:39:27:49:7e:fe:60:37:06:8a:13:f4:d7:68: 9a:fe:83:20:17:b9:fb:7b:a7:06:93:71:68:41:25:4a:20:bb: 3b:3f:93:31:e9:da:19:10:18:ea:7d:ae:83:3c:db:dd:3d:92: 74:e6:56:82 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt26uGOROJfI2cBNsvMy2QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZGQwYjcwODUwZTFmOTg5NTY1OGVkYWJlMjhiOWQ4ZDll YTAxN2MwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTJkOWI2NTk4ZmRhOWRjOTE0NDFlZTc0N2Y2ZjgzZDBkMzNkNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueezT+7TOYuFRKOBcfLEK8JB+N4X x/U60Cz5FgWXI6CIm1uIwcCxIOq9tG7EP3dh80Aqts+tfh4uVtwbfyWOKo6QCr+x Rw6Phwy+H2fEuFaMSidBGF6DW0x9xII+Tht2OXgOhXrHaIshMLY7mXTCDXJPBye5 6kvFt0RzNF+4f3tDe8Vv7YvdqwPIWni4ua7vsgR00CqJjpoyQNlnycDUOOsvXGck /YYNTA4vUMeheZvyvdSmQy10ngFM1kGX9HTLeCUw2UCcjf3jMc0EqjYZ4vRtB8xy tA+zr8d2UdN+efEtOFmpdHXl0646IDbRA/Mbb8bSelqNJA/kG9eeKFOaGQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNUtm2WY/anckUQe50f2+D0NM9UsMB8GA1UdIwQY MBaAFDDdC3CFDh+YlWWO2r4oudjZ6gF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4Njgt ODEwZGM5ZTFhYTU0LzEvMVMyYlpaajlxZHlSUkI3blJfYjRQUTB6MVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4NjgtODEwZGM5ZTFhYTU0 LzEvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjSUwDQYJ KoZIhvcNAQELBQADggEBAD3lZOt+J3GfFzy0jq7i/wixUgWKINKQ2Jeht3OLO+Op rvveE3aUOa3tV4HTAfI44w76BVLQJcfxbLcGViHE2tIZAnYgha7dtXicNc0lHjEq boq9xNydS7cTgopmjZyyJifjZVsM5vczPPcGl4y46Tdy2DUM1gbpk16aaZ57jkS1 Fn5Yg3i8FOWfsMuXWdN9L+LeLCQtNMnarAn/mGv/3fU+rwNsA7TOJGEDf/yDpvXT eX+WYhUTAZivhuke9s7XykLkMw5aakQjAgF7OSdJfv5gNwaKE/TXaJr+gyAXuft7 pwaTcWhBJUoguzs/kzHp2hkQGOp9roM82909knTmVoI= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:40 2026 by rpki-client