This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/1wi2b2zvXYOQb6fb9ZGQlqgjTV4.roa File: 1wi2b2zvXYOQb6fb9ZGQlqgjTV4.roa (raw, json) Hash identifier: /WLcLqxm8e7HJSestWXx0nHEBjwh3y9r5DzebbE7Z0Q= Subject key identifier: D7:08:B6:6F:6C:EF:5D:83:90:6F:A7:DB:F5:91:90:96:A8:23:4D:5E Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224 Certificate serial: 019B7E3862DCC53AB616161584015C65A3D0 Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/1wi2b2zvXYOQb6fb9ZGQlqgjTV4.roa Signing time: Fri 02 Jan 2026 10:19:43 +0000 ROA not before: Fri 02 Jan 2026 10:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206908 IP address blocks: 185.172.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:62:dc:c5:3a:b6:16:16:15:84:01:5c:65:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224 Validity Not Before: Jan 2 10:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d708b66f6cef5d83906fa7dbf5919096a8234d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d8:8c:54:77:e7:9f:25:ce:13:de:a0:36:8a: 98:4a:fc:50:65:1f:54:38:26:58:96:4f:92:f3:6b: 9d:ee:a1:45:43:d0:13:48:5c:7f:c8:c4:39:16:9d: e1:74:84:c0:af:72:fd:6f:ed:01:17:2d:a8:16:08: b8:54:26:4b:7a:72:e8:cc:e6:f8:80:34:d9:7f:86: 0d:ab:46:cd:a5:04:a6:ff:f2:5a:2a:d7:77:18:ec: 04:63:3b:f1:ea:a5:76:36:b2:bd:fa:da:5f:d6:e2: 33:2a:cf:bb:bd:16:d4:42:8d:a3:04:12:1a:3a:c1: b3:bd:34:6d:cb:40:f2:a8:59:b0:02:ff:60:2e:6c: 20:fe:12:6f:73:d3:a7:54:40:34:69:99:03:92:0c: 26:63:4c:d6:cc:89:8a:17:01:98:5d:41:0a:b6:02: 56:ff:e6:a5:1f:42:39:fe:76:98:73:3a:89:d9:d1: 24:75:02:a7:71:23:26:b0:28:e9:aa:0d:47:b7:dc: 11:94:3e:a5:c3:39:0c:5e:0f:3c:d8:29:ac:ef:77: 9a:1e:f6:3c:88:d4:14:f6:33:39:e3:31:e0:fc:9e: 41:eb:63:9b:d1:22:18:a7:e9:c3:10:08:99:ba:ab: 91:81:17:16:53:89:0f:79:ef:83:00:31:8c:02:f3: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:08:B6:6F:6C:EF:5D:83:90:6F:A7:DB:F5:91:90:96:A8:23:4D:5E X509v3 Authority Key Identifier: keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/1wi2b2zvXYOQb6fb9ZGQlqgjTV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.118.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c3:17:cc:cb:19:f8:97:2f:18:a0:31:62:8a:94:68:c5:a4: 83:68:3b:46:eb:93:51:ed:80:b8:9c:18:1a:52:94:bf:10:fb: ed:af:c0:92:d1:9b:2a:c2:bb:4f:27:03:99:00:a5:05:b6:64: 82:8f:96:ca:e9:37:27:ba:f0:c5:2e:e5:0a:52:10:de:e0:f7: 51:91:7c:6a:5a:38:a6:24:81:03:37:c0:6e:a0:fd:79:04:10: b2:3f:92:c0:96:41:3a:c1:f6:ca:2b:ea:cd:d9:7d:5b:61:79: 14:72:40:89:97:1e:62:40:f3:8c:7c:d5:e6:e5:1f:89:af:0d: 03:39:4e:d0:36:18:fd:ed:82:36:da:9e:c5:a5:fc:5a:50:c6: 02:ad:a9:23:13:fd:72:05:64:56:80:d4:5e:89:4a:e3:bd:6f: 72:c6:e1:8a:0d:9b:6c:ec:af:32:99:c6:88:9e:05:92:3d:3a: 56:af:b1:28:ba:38:ae:82:ee:a5:f0:8f:d6:de:37:cd:96:b4: 95:25:38:b2:07:ee:3c:a7:0b:9b:0e:a6:f5:2b:58:2a:ba:d3: a2:87:eb:a7:65:cb:d4:f3:14:48:d4:bc:3d:4b:6f:23:31:bc: 8c:68:58:a0:4d:fd:cf:76:19:7c:5c:c6:c7:0d:76:4c:e6:d3: f0:a2:11:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGLcxTq2FhYVhAFcZaPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzIyZjE2YTg3Y2ZmZDc4ZmQ3OTA1MDU2OGExYjRjOTU5 YjEyMjQwHhcNMjYwMTAyMTAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzA4YjY2ZjZjZWY1ZDgzOTA2ZmE3ZGJmNTkxOTA5NmE4MjM0ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8diMVHfnnyXOE96gNoqYSvxQZR9U OCZYlk+S82ud7qFFQ9ATSFx/yMQ5Fp3hdITAr3L9b+0BFy2oFgi4VCZLenLozOb4 gDTZf4YNq0bNpQSm//JaKtd3GOwEYzvx6qV2NrK9+tpf1uIzKs+7vRbUQo2jBBIa OsGzvTRty0DyqFmwAv9gLmwg/hJvc9OnVEA0aZkDkgwmY0zWzImKFwGYXUEKtgJW /+alH0I5/naYczqJ2dEkdQKncSMmsCjpqg1Ht9wRlD6lwzkMXg882Cms73eaHvY8 iNQU9jM54zHg/J5B62Ob0SIYp+nDEAiZuquRgRcWU4kPee+DADGMAvMP6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcItm9s712DkG+n2/WRkJaoI01eMB8GA1UdIwQY MBaAFHRyLxaofP/Xj9eQUFaKG0yVmxIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQt MzNmNzNkOWZkZGI1LzEvMXdpMmIyenZYWU9RYjZmYjlaR1FscWdqVFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQtMzNmNzNkOWZkZGI1 LzEvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuax2MA0G CSqGSIb3DQEBCwUAA4IBAQAEwxfMyxn4ly8YoDFiipRoxaSDaDtG65NR7YC4nBga UpS/EPvtr8CS0ZsqwrtPJwOZAKUFtmSCj5bK6TcnuvDFLuUKUhDe4PdRkXxqWjim JIEDN8BuoP15BBCyP5LAlkE6wfbKK+rN2X1bYXkUckCJlx5iQPOMfNXm5R+Jrw0D OU7QNhj97YI22p7FpfxaUMYCrakjE/1yBWRWgNReiUrjvW9yxuGKDZts7K8ymcaI ngWSPTpWr7Eoujiugu6l8I/W3jfNlrSVJTiyB+48pwubDqb1K1gqutOih+unZcvU 8xRI1Lw9S28jMbyMaFigTf3Pdhl8XMbHDXZM5tPwohFv -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:45 2026 by rpki-client