This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1pTycHFkZhAwSrZcd5K7Gg55kdk.roa File: 1pTycHFkZhAwSrZcd5K7Gg55kdk.roa (raw, json) Hash identifier: GgY2NMruljSgs07BzEPbVGMZRXcEfdYykwi+o1qRn2A= Subject key identifier: D6:94:F2:70:71:64:66:10:30:4A:B6:5C:77:92:BB:1A:0E:79:91:D9 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F817746ECF2CB7EB0F5BB98293BD53A Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1pTycHFkZhAwSrZcd5K7Gg55kdk.roa Signing time: Fri 02 Jan 2026 16:19:09 +0000 ROA not before: Fri 02 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136523 IP address blocks: 168.199.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:77:46:ec:f2:cb:7e:b0:f5:bb:98:29:3b:d5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d694f27071646610304ab65c7792bb1a0e7991d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:25:bb:02:f4:6f:6c:e4:19:01:04:ad:ba: 44:ff:b9:5d:40:c4:31:df:3c:eb:bb:0e:58:14:63: 9b:2b:c7:e9:95:f1:51:fd:ed:90:76:e3:bf:9b:79: e9:4e:9a:85:2b:67:38:bb:e7:1e:20:c9:47:9a:eb: ee:d5:f6:c1:79:46:4f:62:96:26:55:28:f1:77:bf: b2:bc:55:84:57:e7:4b:ba:ef:0e:5f:b1:47:c1:aa: 7e:73:29:7d:dd:bf:68:a0:6a:bb:9b:06:53:4f:f9: a0:46:34:3f:9d:d8:a1:72:1e:53:0d:a9:65:88:20: 15:2b:35:a5:9a:0d:11:01:af:c6:94:5c:32:be:43: 6f:57:ef:6f:77:dd:58:ef:34:65:c1:ad:94:36:f3: 6e:c9:45:0d:25:6f:4f:a5:b8:75:af:50:a4:bd:5c: be:05:78:26:f6:c6:72:78:c1:ff:7f:a8:0f:13:90: d1:77:89:7f:7b:25:13:e7:b5:08:ac:e0:e1:4c:38: 8f:c8:e4:5f:26:c9:ce:a8:aa:89:e6:27:64:3d:b6: d1:aa:50:61:a9:35:fa:00:3d:74:98:ce:59:3b:b6: 05:17:7d:0c:6d:03:d4:29:a4:a4:ce:a6:5f:28:34: 14:24:bf:b0:14:e1:af:17:ae:f2:f3:f5:01:4e:2e: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:94:F2:70:71:64:66:10:30:4A:B6:5C:77:92:BB:1A:0E:79:91:D9 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1pTycHFkZhAwSrZcd5K7Gg55kdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.20.0/23 Signature Algorithm: sha256WithRSAEncryption 68:b4:89:dd:3b:ba:26:01:98:f1:4e:9b:0a:78:94:15:60:7d: b3:3e:cb:9a:6c:4c:33:5a:a9:9c:be:3f:a6:cc:9f:c7:00:62: f9:10:ba:48:e4:41:57:0c:63:e1:93:c4:85:58:ff:b1:bd:15: 90:25:6f:82:de:34:15:c7:c9:2e:51:f4:b8:21:94:8a:fd:d1: a8:f7:5d:79:92:51:fe:2a:42:34:ef:b8:94:6d:58:d5:be:e0: 66:57:6a:bc:3f:be:b7:1d:bc:36:35:ff:0f:9d:ed:39:a6:04: 5e:a3:40:10:e0:c0:9f:b9:f9:37:69:fd:5f:27:de:de:88:2a: c1:b4:04:ff:b5:e5:79:72:d9:47:d3:73:f0:68:9e:11:4e:06: d9:a3:5f:6c:a9:44:da:df:46:cc:58:5a:fd:37:bb:58:45:ca: 38:9f:64:58:9b:ef:22:47:f3:c2:14:a1:69:3f:fc:92:59:f8: 23:79:1b:e1:a5:45:b0:04:1b:06:44:76:d1:e8:3c:10:a5:c2: 10:f2:d6:34:32:1d:7b:48:ac:cb:66:5b:c6:4e:f9:25:f6:a9: 0f:20:b6:7e:db:7e:c6:80:2c:b6:72:4e:2b:da:34:db:11:00: 5d:8e:23:dd:ce:02:7d:c7:ce:be:28:28:a7:bc:88:f5:e6:20: ff:b5:93:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gXdG7PLLfrD1u5gpO9U6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjk0ZjI3MDcxNjQ2NjEwMzA0YWI2NWM3NzkyYmIxYTBlNzk5MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHsluwL0b2zkGQEErbpE/7ldQMQx 3zzruw5YFGObK8fplfFR/e2QduO/m3npTpqFK2c4u+ceIMlHmuvu1fbBeUZPYpYm VSjxd7+yvFWEV+dLuu8OX7FHwap+cyl93b9ooGq7mwZTT/mgRjQ/ndihch5TDall iCAVKzWlmg0RAa/GlFwyvkNvV+9vd91Y7zRlwa2UNvNuyUUNJW9Ppbh1r1CkvVy+ BXgm9sZyeMH/f6gPE5DRd4l/eyUT57UIrODhTDiPyORfJsnOqKqJ5idkPbbRqlBh qTX6AD10mM5ZO7YFF30MbQPUKaSkzqZfKDQUJL+wFOGvF67y8/UBTi4Q7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaU8nBxZGYQMEq2XHeSuxoOeZHZMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvMXBUeWNIRmtaaEF3U3JaY2Q1SzdHZzU1a2RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMcUMA0G CSqGSIb3DQEBCwUAA4IBAQBotIndO7omAZjxTpsKeJQVYH2zPsuabEwzWqmcvj+m zJ/HAGL5ELpI5EFXDGPhk8SFWP+xvRWQJW+C3jQVx8kuUfS4IZSK/dGo9115klH+ KkI077iUbVjVvuBmV2q8P763Hbw2Nf8Pne05pgReo0AQ4MCfufk3af1fJ97eiCrB tAT/teV5ctlH03PwaJ4RTgbZo19sqUTa30bMWFr9N7tYRco4n2RYm+8iR/PCFKFp P/ySWfgjeRvhpUWwBBsGRHbR6DwQpcIQ8tY0Mh17SKzLZlvGTvkl9qkPILZ+237G gCy2ck4r2jTbEQBdjiPdzgJ9x86+KCinvIj15iD/tZPv -----END CERTIFICATE-----Generated at Fri Jan 9 16:50:37 2026 by rpki-client