This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa File: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (raw, json) Hash identifier: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs= Subject key identifier: F9:11:39:2E:D2:3E:A1:81:14:33:9A:B4:70:A8:49:0B:82:4E:FF:75 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F150989734E48E9E4B661D8D583547E Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210542 IP address blocks: 185.179.218.0/23 maxlen: 24 188.64.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:09:89:73:4e:48:e9:e4:b6:61:d8:d5:83:54:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f911392ed23ea18114339ab470a8490b824eff75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:16:50:96:27:cb:ac:a9:23:4b:19:f6:e6: b7:27:a9:e4:51:23:58:9b:4d:a4:d3:3a:9a:2c:92: cd:74:0f:69:57:04:5c:0a:a4:28:2a:d9:a6:2b:d4: 32:fb:2b:1b:c5:51:e0:50:16:64:c1:cb:1e:82:7a: 7b:3d:b2:55:34:99:c8:9d:c6:e8:2c:f9:e7:44:b2: bc:18:34:05:eb:eb:fd:fa:22:1c:be:5f:db:5c:e5: 62:2d:00:b3:58:2b:b6:26:b7:0a:00:67:7b:e4:d6: 52:71:cb:cf:93:74:d8:43:d1:16:dd:a6:71:bd:e0: e3:59:e1:e1:56:c5:9b:a8:3d:9a:cd:d9:8a:74:52: 9a:52:0d:5a:59:17:ce:2e:13:25:e8:02:e8:a1:e5: b6:21:a9:31:ae:d4:a9:29:09:4b:aa:71:64:d3:bf: 20:53:a1:08:34:4c:16:eb:ce:ae:b5:8b:da:b2:3b: 55:8b:79:30:99:fc:6e:64:80:ad:79:b3:3e:44:45: d5:48:7f:cd:b6:5d:9d:a4:d9:7e:17:db:2a:c8:84: 42:42:c2:0e:18:2d:fe:21:ae:8d:79:eb:b5:8e:7c: b0:db:32:2f:48:dc:7b:2d:33:c6:73:38:6a:d9:33: 83:cf:4a:2f:ed:25:14:90:9e:bf:88:66:9b:e7:44: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:39:2E:D2:3E:A1:81:14:33:9A:B4:70:A8:49:0B:82:4E:FF:75 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.218.0/23 188.64.104.0/22 Signature Algorithm: sha256WithRSAEncryption aa:08:6f:fd:20:6c:e9:31:9f:01:fd:00:5d:3b:37:05:c0:d6: d0:13:ce:d4:81:fd:da:19:d6:80:98:85:22:99:38:46:87:4f: 92:5b:79:09:2c:8d:b0:34:2e:2d:88:c0:b2:57:ef:86:c2:f1: 2f:de:00:21:e6:8b:b5:93:2b:17:a7:85:54:c6:54:a3:84:be: b3:8d:ec:ae:68:56:66:52:06:3d:25:ac:22:48:ab:37:ea:fc: f1:30:80:88:28:98:d9:fc:30:8d:1d:b3:66:02:0f:e4:30:d9: 0b:8e:aa:cc:2e:8a:ad:55:dc:b6:31:7d:8e:3e:c0:e4:71:bf: 4b:09:48:37:a9:1c:49:79:bc:ae:fe:77:90:bb:44:77:77:5b: f8:91:6c:ee:ee:33:17:d1:c7:bf:41:fb:8f:26:5b:9d:8e:df: d2:37:63:73:ae:e2:17:d9:99:c2:a8:28:34:3b:7c:67:da:4f: b5:92:9f:82:2f:85:60:c5:0f:29:d7:e9:cf:2e:a4:3e:d9:b5: ce:1b:88:1e:24:80:71:05:23:b7:c9:6c:2d:7a:e1:7e:7a:f7: 7a:f3:33:4f:cd:58:bd:0d:2c:74:f8:5a:3e:55:24:ea:64:80: 9f:70:e8:54:37:f8:d2:ed:18:e6:95:0f:e9:d5:9d:88:1a:fa: e3:9c:26:db -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/FQmJc05I6eS2YdjVg1R+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTExMzkyZWQyM2VhMTgxMTQzMzlhYjQ3MGE4NDkwYjgyNGVmZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uMWUJYny6ypI0sZ9ua3J6nkUSNY m02k0zqaLJLNdA9pVwRcCqQoKtmmK9Qy+ysbxVHgUBZkwcsegnp7PbJVNJnIncbo LPnnRLK8GDQF6+v9+iIcvl/bXOViLQCzWCu2JrcKAGd75NZSccvPk3TYQ9EW3aZx veDjWeHhVsWbqD2azdmKdFKaUg1aWRfOLhMl6ALooeW2IakxrtSpKQlLqnFk078g U6EINEwW686utYvasjtVi3kwmfxuZICtebM+REXVSH/Ntl2dpNl+F9sqyIRCQsIO GC3+Ia6Neeu1jnyw2zIvSNx7LTPGczhq2TODz0ov7SUUkJ6/iGab50SC7QIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPkROS7SPqGBFDOatHCoSQuCTv91MB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvMS1SRTVMdEktb1lFVU01cTBjS2hKQzRKT18zVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODEvMjBhNWE1LTBiYTItNDA1Mi1iZWI0LTNjYzg1YWQzYzE5 MC8xL0dCQVhjaVNKbHJoOWtJUU1MU2ZXSlVsRmdYTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbmz2gME ArxAaDANBgkqhkiG9w0BAQsFAAOCAQEAqghv/SBs6TGfAf0AXTs3BcDW0BPO1IH9 2hnWgJiFIpk4RodPklt5CSyNsDQuLYjAslfvhsLxL94AIeaLtZMrF6eFVMZUo4S+ s43srmhWZlIGPSWsIkirN+r88TCAiCiY2fwwjR2zZgIP5DDZC46qzC6KrVXctjF9 jj7A5HG/SwlIN6kcSXm8rv53kLtEd3db+JFs7u4zF9HHv0H7jyZbnY7f0jdjc67i F9mZwqgoNDt8Z9pPtZKfgi+FYMUPKdfpzy6kPtm1zhuIHiSAcQUjt8lsLXrhfnr3 evMzT81YvQ0sdPhaPlUk6mSAn3DoVDf40u0Y5pUP6dWdiBr645wm2w== -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:56 2026 by rpki-client