This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/1-OdbV9pffyE-MtyJfK7HNQXo7NI.roa File: 1-OdbV9pffyE-MtyJfK7HNQXo7NI.roa (raw, json) Hash identifier: BTb2LGVfDU/NF7VOnzuEayBkQx1CY6SsEpcdjflREFo= Subject key identifier: F8:E7:5B:57:DA:5F:7F:21:3E:32:DC:89:7C:AE:C7:35:05:E8:EC:D2 Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001 Certificate serial: 019B7A5B5DA96D7BEBBDBA9EDA8E7B2DA7A2 Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/1-OdbV9pffyE-MtyJfK7HNQXo7NI.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205265 IP address blocks: 185.222.16.0/22 maxlen: 24 2a0c:f000::/48 maxlen: 48 2a0c:f000:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5d:a9:6d:7b:eb:bd:ba:9e:da:8e:7b:2d:a7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535a0905ad5684f414182c99e1ed998163093001 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8e75b57da5f7f213e32dc897caec73505e8ecd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:ad:18:d7:cb:7b:25:ea:9b:7b:a4:73:18: d9:ad:47:58:c4:ce:68:1f:8a:bf:d5:12:c1:b5:73: fa:60:3d:25:d8:1d:fb:3f:3e:55:1b:c1:76:ed:24: 94:a9:89:9b:0e:4b:33:ea:3b:63:ee:93:1e:92:86: 18:4b:bd:df:32:e6:5e:f9:6a:34:00:d9:6e:93:6d: 5a:be:94:99:ac:c2:73:65:f3:4f:dc:f3:a9:84:ad: eb:23:d5:11:c4:55:66:2e:1c:b7:f1:95:bb:a9:c2: aa:57:41:12:ea:1c:bc:a1:a3:53:b8:2d:7e:c6:96: 1b:76:09:66:a2:36:a3:06:07:e5:13:4b:0e:61:ed: 4d:4d:43:54:14:62:a6:70:45:e6:df:63:df:20:be: 2d:76:e8:9e:e6:49:71:ec:91:67:96:87:e0:ac:90: 5c:33:34:29:ab:0b:aa:06:74:9a:b1:46:e5:e8:2f: 6e:e3:b2:e5:53:02:c6:7c:aa:4c:2e:5a:fc:9a:b3: 73:0e:51:64:0c:1b:69:43:fd:87:f6:e8:79:f3:53: 7f:57:6f:ff:79:ea:03:7b:fc:ce:4d:61:87:52:f2: af:f4:ae:8c:b5:a0:e1:d8:7a:0d:3b:0a:24:d2:54: 93:14:e1:ed:69:4b:b5:d4:7d:28:cf:2f:1d:5b:b8: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E7:5B:57:DA:5F:7F:21:3E:32:DC:89:7C:AE:C7:35:05:E8:EC:D2 X509v3 Authority Key Identifier: keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/1-OdbV9pffyE-MtyJfK7HNQXo7NI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.16.0/22 IPv6: 2a0c:f000::/48 2a0c:f000:2000::/48 Signature Algorithm: sha256WithRSAEncryption 10:40:b0:56:70:c2:d4:1d:2b:ac:44:4d:9e:57:de:8a:6d:c2: e7:ff:fe:0b:66:93:00:96:82:0a:f9:57:3d:58:38:b9:1b:a8: 76:e2:13:a4:80:7c:41:1b:80:73:d8:75:d1:06:b8:ff:47:74: 8e:28:a6:5d:fc:4c:db:c6:bb:48:cf:56:21:1b:d1:81:5b:f5: b4:0c:ad:45:58:1c:35:5d:47:9d:ca:dd:ce:c3:71:d4:91:6f: d5:12:c4:4d:a6:6e:36:67:cf:2f:62:60:43:d0:3e:f4:ae:7e: 3b:2f:3a:7a:1b:fd:6a:0c:a9:15:51:4c:bf:14:6a:a3:4d:5f: 87:40:71:06:de:fd:6d:12:c1:d0:91:0f:4a:ea:76:6b:38:18: 36:cc:21:2b:23:25:d5:a8:73:40:95:9c:5a:d6:ba:50:b8:ed: fe:6a:00:82:95:91:ca:3f:d3:8d:7e:de:30:21:1d:0a:72:97: d5:cf:79:db:ec:32:fb:2d:81:5b:62:84:ff:b8:7f:02:d1:1f: ce:22:7e:50:ac:af:9f:23:c1:5f:e0:6a:a6:9d:81:ce:4d:c9: a5:6a:b4:15:b4:f2:48:82:64:06:fa:81:57:b5:93:57:a5:10: 8a:02:45:9c:b7:11:11:cb:a6:35:7a:53:e2:24:8f:31:3c:2f: f5:2a:fe:3f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6W12pbXvrvbqe2o57LaeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWEwOTA1YWQ1Njg0ZjQxNDE4MmM5OWUxZWQ5OTgxNjMw OTMwMDEwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGU3NWI1N2RhNWY3ZjIxM2UzMmRjODk3Y2FlYzczNTA1ZThlY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrqtGNfLeyXqm3ukcxjZrUdYxM5o H4q/1RLBtXP6YD0l2B37Pz5VG8F27SSUqYmbDksz6jtj7pMekoYYS73fMuZe+Wo0 ANluk21avpSZrMJzZfNP3POphK3rI9URxFVmLhy38ZW7qcKqV0ES6hy8oaNTuC1+ xpYbdglmojajBgflE0sOYe1NTUNUFGKmcEXm32PfIL4tduie5klx7JFnlofgrJBc MzQpqwuqBnSasUbl6C9u47LlUwLGfKpMLlr8mrNzDlFkDBtpQ/2H9uh581N/V2// eeoDe/zOTWGHUvKv9K6MtaDh2HoNOwok0lSTFOHtaUu11H0ozy8dW7j9GwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPjnW1faX38hPjLciXyuxzUF6OzSMB8GA1UdIwQY MBaAFFNaCQWtVoT0FBgsmeHtmYFjCTABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFvSkJhMVdoUFFVR0N5WjRlMlpnV01KTUFFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMjdiYWYtZTY4MS00YWI2LWI5MDMt NmExMGM2ZTMyMjJkLzEvMS1PZGJWOXBmZnlFLU10eUpmSzdITlFYbzdOSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTUvYjI3YmFmLWU2ODEtNGFiNi1iOTAzLTZhMTBjNmUzMjIy ZC8xL1Uxb0pCYTFXaFBRVUdDeVo0ZTJaZ1dNSk1BRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEArneEDAY BAIAAjASAwcAKgzwAAAAAwcAKgzwACAAMA0GCSqGSIb3DQEBCwUAA4IBAQAQQLBW cMLUHSusRE2eV96KbcLn//4LZpMAloIK+Vc9WDi5G6h24hOkgHxBG4Bz2HXRBrj/ R3SOKKZd/EzbxrtIz1YhG9GBW/W0DK1FWBw1XUedyt3Ow3HUkW/VEsRNpm42Z88v YmBD0D70rn47Lzp6G/1qDKkVUUy/FGqjTV+HQHEG3v1tEsHQkQ9K6nZrOBg2zCEr IyXVqHNAlZxa1rpQuO3+agCClZHKP9ONft4wIR0KcpfVz3nb7DL7LYFbYoT/uH8C 0R/OIn5QrK+fI8Ff4GqmnYHOTcmlarQVtPJIgmQG+oFXtZNXpRCKAkWctxERy6Y1 elPiJI8xPC/1Kv4/ -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:34 2026 by rpki-client