This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/1-BAmZG3dvN03W2538Z2Kui33D28.roa File: 1-BAmZG3dvN03W2538Z2Kui33D28.roa (raw, json) Hash identifier: UPXw/y87NllPKuFTPdlQ3OFpWVyZeSvIS1MAK2a56T8= Subject key identifier: F8:10:26:64:6D:DD:BC:DD:37:5B:6E:77:F1:9D:8A:BA:2D:F7:0F:6F Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355 Certificate serial: 019B7B35F6AEB3FD61CE03BB3EDB9C74726F Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/1-BAmZG3dvN03W2538Z2Kui33D28.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42273 IP address blocks: 194.50.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f6:ae:b3:fd:61:ce:03:bb:3e:db:9c:74:72:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc534d4c4343cd89918969d56da185674b166355 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f81026646dddbcdd375b6e77f19d8aba2df70f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:b4:ec:7b:ca:cd:89:04:ed:86:a7:ac:ee: ad:dd:f8:74:4e:e4:6f:fb:98:15:52:69:7c:93:3b: c0:59:7f:58:ac:3e:e7:32:7b:6c:96:fc:22:de:7b: 66:fc:1d:71:9f:30:06:39:5c:1b:fa:1a:30:8c:38: ec:0e:d0:4d:15:fa:7f:db:58:ec:56:fd:fc:04:11: 8d:8f:b2:09:0e:95:db:54:84:d1:62:f1:a6:e1:12: a5:6a:7e:e8:3e:cc:7b:f1:d9:cc:55:f9:8f:2f:27: 37:d8:d2:01:f8:a8:9f:95:02:67:b2:a3:6e:61:5b: e5:b6:29:0c:f6:b2:d3:41:0f:e7:24:3f:2a:99:4f: b5:77:9e:71:a9:de:48:15:58:ac:c2:80:c3:d2:84: c3:29:6c:3a:a7:8e:30:55:7b:4e:65:65:06:bb:c6: 82:b0:17:c8:8c:48:79:c8:fb:33:0e:87:11:41:7b: f0:a5:f7:d6:e9:0d:22:af:83:e0:00:3f:69:ba:21: 48:aa:9f:bb:14:2a:46:4c:e4:5a:a6:26:8a:33:18: 91:78:b4:f8:97:31:f9:fc:cf:de:fc:8d:8b:31:f2: f5:3d:8f:06:58:fd:66:21:95:e9:7a:f6:c9:20:25: 35:73:f3:b4:34:80:4c:3f:38:a0:6a:9f:b7:a6:f8: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:10:26:64:6D:DD:BC:DD:37:5B:6E:77:F1:9D:8A:BA:2D:F7:0F:6F X509v3 Authority Key Identifier: keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/1-BAmZG3dvN03W2538Z2Kui33D28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.166.0/24 Signature Algorithm: sha256WithRSAEncryption ba:9d:63:23:64:7a:db:4e:06:c5:2c:1c:49:30:01:10:37:5b: 0b:6f:05:99:1c:b7:37:26:2e:75:4d:90:7f:7a:a8:81:e2:fc: 0d:d6:3f:90:13:cb:92:9b:72:47:48:43:76:a1:3f:32:97:67: 11:dc:90:1e:ef:72:e2:85:b1:92:d6:45:36:44:3f:5f:a2:74: 47:23:ce:33:46:dc:03:51:d0:a3:4e:6f:99:b0:eb:4f:16:f2: a9:bf:77:7b:24:5d:a3:05:d6:98:d8:46:a4:e0:a7:2d:1c:a1: 4a:a1:70:75:6c:0c:e8:49:85:4b:bf:a3:04:76:3e:ec:be:49: 67:3e:a2:71:6c:27:c9:de:40:4d:f7:2a:49:0e:80:e5:62:72: bf:9f:9e:0e:9c:a9:ad:60:e3:07:45:81:0b:52:8a:ae:df:65: b0:6a:fd:3f:b2:a5:70:25:60:f8:ab:9c:7c:69:50:44:97:25: 67:2c:e1:3c:94:2a:3d:94:58:8c:1e:92:d5:4a:b2:6d:ef:60: 7c:2a:00:7e:77:e0:9f:3b:2c:24:fe:01:bf:a7:80:4c:f8:1e: 4d:13:4b:f2:e7:ee:5c:07:77:ff:d2:f3:2f:20:80:ed:65:f8: ae:c2:b3:e6:89:ab:3d:53:52:19:c5:d7:71:85:b1:6a:7f:25: 1f:ef:27:bd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nfaus/1hzgO7PtucdHJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTM0ZDRjNDM0M2NkODk5MTg5NjlkNTZkYTE4NTY3NGIx NjYzNTUwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODEwMjY2NDZkZGRiY2RkMzc1YjZlNzdmMTlkOGFiYTJkZjcwZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh207HvKzYkE7YanrO6t3fh0TuRv +5gVUml8kzvAWX9YrD7nMntslvwi3ntm/B1xnzAGOVwb+howjDjsDtBNFfp/21js Vv38BBGNj7IJDpXbVITRYvGm4RKlan7oPsx78dnMVfmPLyc32NIB+KiflQJnsqNu YVvltikM9rLTQQ/nJD8qmU+1d55xqd5IFViswoDD0oTDKWw6p44wVXtOZWUGu8aC sBfIjEh5yPszDocRQXvwpffW6Q0ir4PgAD9puiFIqp+7FCpGTORapiaKMxiReLT4 lzH5/M/e/I2LMfL1PY8GWP1mIZXpevbJICU1c/O0NIBMPzigap+3pvj2wQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgQJmRt3bzdN1tud/Gdirot9w9vMB8GA1UdIwQY MBaAFPxTTUxDQ82JkYlp1W2hhWdLFmNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82MGI2MmItOGUyYy00NDNlLWExNjIt YjRjMmRjYTU5M2IzLzEvMS1CQW1aRzNkdk4wM1cyNTM4WjJLdWkzM0QyOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODYvNjBiNjJiLThlMmMtNDQzZS1hMTYyLWI0YzJkY2E1OTNi My8xL19GTk5URU5EelltUmlXblZiYUdGWjBzV1kxVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIypjAN BgkqhkiG9w0BAQsFAAOCAQEAup1jI2R6204GxSwcSTABEDdbC28FmRy3NyYudU2Q f3qogeL8DdY/kBPLkptyR0hDdqE/MpdnEdyQHu9y4oWxktZFNkQ/X6J0RyPOM0bc A1HQo05vmbDrTxbyqb93eyRdowXWmNhGpOCnLRyhSqFwdWwM6EmFS7+jBHY+7L5J Zz6icWwnyd5ATfcqSQ6A5WJyv5+eDpyprWDjB0WBC1KKrt9lsGr9P7KlcCVg+Kuc fGlQRJclZyzhPJQqPZRYjB6S1Uqybe9gfCoAfnfgnzssJP4Bv6eATPgeTRNL8ufu XAd3/9LzLyCA7WX4rsKz5omrPVNSGcXXcYWxan8lH+8nvQ== -----END CERTIFICATE-----Generated at Tue Feb 10 08:36:54 2026 by rpki-client