This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/1WsHGlHkp2WjNpTEWov_RNt1288.roa File: 1WsHGlHkp2WjNpTEWov_RNt1288.roa (raw, json) Hash identifier: pr8q/7m/guyhubc0Lv+HgEZYXjReEisDa6/5dcWRxog= Subject key identifier: D5:6B:07:1A:51:E4:A7:65:A3:36:94:C4:5A:8B:FF:44:DB:75:DB:CF Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c Certificate serial: 019B7A5ACE1456B351EF5875CB3198A21033 Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/1WsHGlHkp2WjNpTEWov_RNt1288.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35435 IP address blocks: 194.187.84.0/24 maxlen: 24 194.187.85.0/24 maxlen: 24 194.187.86.0/24 maxlen: 24 194.187.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ce:14:56:b3:51:ef:58:75:cb:31:98:a2:10:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d56b071a51e4a765a33694c45a8bff44db75dbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:d0:a9:a4:90:e6:03:12:95:c7:52:2d:bc: 8c:35:ab:ab:d2:87:04:27:fa:4d:23:44:36:6b:a2: 23:1a:20:cc:a4:b6:b8:7f:3f:3d:d1:b5:bb:2b:e8: 5d:50:2f:12:98:e6:b4:dd:70:54:3b:38:68:9e:03: 3a:b6:b2:b9:29:37:6c:a7:15:6e:86:ea:fb:9a:a3: e9:34:11:61:f4:c1:65:10:b6:d8:43:e7:f9:1a:85: b2:ac:8c:9a:88:13:c8:36:77:15:4c:27:ee:e8:84: 26:58:2a:e6:c6:d8:40:b1:e4:3b:83:ed:83:cb:5b: 24:cf:0f:58:9c:10:52:e5:7e:21:25:1f:7a:c4:8f: 9e:c4:0a:cf:b1:e0:97:90:e8:6d:58:4f:fb:29:62: 67:0d:9e:3a:f9:df:d3:e4:01:e6:af:15:f9:e2:3b: f4:9d:c0:ef:7f:fb:92:33:6b:26:b8:27:4a:b5:68: 3f:71:7a:c9:74:0c:03:4c:f3:ce:84:35:2e:1f:8b: 3f:57:00:b5:b8:81:7f:ae:f6:88:c0:58:0e:cb:94: 6e:a8:5f:7b:32:29:c1:bb:d8:53:17:53:02:3a:a2: 98:62:6d:99:39:3f:e8:82:d4:a7:9e:6f:fb:d6:54: 4c:f1:4f:17:13:cd:27:e3:3c:7b:e9:74:a0:e3:25: fd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6B:07:1A:51:E4:A7:65:A3:36:94:C4:5A:8B:FF:44:DB:75:DB:CF X509v3 Authority Key Identifier: keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/1WsHGlHkp2WjNpTEWov_RNt1288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.84.0/22 Signature Algorithm: sha256WithRSAEncryption 30:cc:26:01:2d:d7:24:0a:e6:c4:ef:00:a0:3c:20:ce:1b:2a: 42:9c:29:7f:c9:46:80:5b:85:ee:da:8e:15:64:59:39:f4:19: 3b:6c:c1:c2:73:48:48:72:b5:cd:f0:e0:ae:7a:65:b8:63:06: ec:8e:f8:6b:24:c8:3b:27:fb:b4:76:1f:95:ec:5a:e2:9b:44: 0d:78:de:87:21:a7:4d:b9:42:bd:16:9a:77:c4:69:e4:73:3c: 85:9a:8f:e1:ad:38:49:9e:c9:aa:66:b6:47:9b:a6:8b:46:50: b8:11:38:68:b1:38:b9:2d:40:35:ef:ef:53:06:02:1c:28:c7: 7f:f3:48:0f:6d:5b:65:f0:64:26:3d:02:21:30:2d:a0:f2:f5: 63:61:e8:1e:2a:d9:11:74:1a:db:e9:0d:42:d7:dc:4e:5b:d5: 10:83:24:e4:38:fc:6e:cb:f2:b4:84:98:c8:94:80:9e:2e:54: 20:44:77:9f:35:a4:fa:99:c3:d0:30:fc:ed:5c:d6:f6:1f:fc: 20:31:ad:5a:58:4e:d8:9e:30:42:44:91:ce:58:47:0a:47:97: 4b:16:81:5f:6e:92:03:ee:f2:c9:3e:cc:13:57:4b:b0:30:f9: 33:0e:c9:1b:52:81:7c:98:ff:d6:f8:86:e3:e1:fd:9d:8a:61: 33:14:10:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ws4UVrNR71h1yzGYohAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzYxMjRiOWY3YWRhODliN2UyMjY0MWM4NTZkMzA1MzAz YzFmN2MwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTZiMDcxYTUxZTRhNzY1YTMzNjk0YzQ1YThiZmY0NGRiNzVkYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7fQqaSQ5gMSlcdSLbyMNaur0ocE J/pNI0Q2a6IjGiDMpLa4fz890bW7K+hdUC8SmOa03XBUOzhongM6trK5KTdspxVu hur7mqPpNBFh9MFlELbYQ+f5GoWyrIyaiBPINncVTCfu6IQmWCrmxthAseQ7g+2D y1skzw9YnBBS5X4hJR96xI+exArPseCXkOhtWE/7KWJnDZ46+d/T5AHmrxX54jv0 ncDvf/uSM2smuCdKtWg/cXrJdAwDTPPOhDUuH4s/VwC1uIF/rvaIwFgOy5RuqF97 MinBu9hTF1MCOqKYYm2ZOT/ogtSnnm/71lRM8U8XE80n4zx76XSg4yX9sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVrBxpR5KdlozaUxFqL/0TbddvPMB8GA1UdIwQY MBaAFCU2EkufetqJt+ImQchW0wUwPB98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAt Nzc0MmQyNjQ1MmVkLzEvMVdzSEdsSGtwMldqTnBURVdvdl9STnQxMjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAtNzc0MmQyNjQ1MmVk LzEvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrtUMA0G CSqGSIb3DQEBCwUAA4IBAQAwzCYBLdckCubE7wCgPCDOGypCnCl/yUaAW4Xu2o4V ZFk59Bk7bMHCc0hIcrXN8OCuemW4YwbsjvhrJMg7J/u0dh+V7Frim0QNeN6HIadN uUK9Fpp3xGnkczyFmo/hrThJnsmqZrZHm6aLRlC4EThosTi5LUA17+9TBgIcKMd/ 80gPbVtl8GQmPQIhMC2g8vVjYegeKtkRdBrb6Q1C19xOW9UQgyTkOPxuy/K0hJjI lICeLlQgRHefNaT6mcPQMPztXNb2H/wgMa1aWE7YnjBCRJHOWEcKR5dLFoFfbpID 7vLJPswTV0uwMPkzDskbUoF8mP/W+Ibj4f2dimEzFBBl -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:28 2026 by rpki-client