This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/s1klTuHYju5_QdEwsVpzi68oxxA.roa File: s1klTuHYju5_QdEwsVpzi68oxxA.roa (raw, json) Hash identifier: omFlhHjycorhExN/W2gQfYI/+t4Tv/LJed0Sq0FsJeA= Subject key identifier: B3:59:25:4E:E1:D8:8E:EE:7F:41:D1:30:B1:5A:73:8B:AF:28:C7:10 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74DAF4D30E9F5433293D014B8D1FF Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/s1klTuHYju5_QdEwsVpzi68oxxA.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56382 IP address blocks: 185.133.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4d:af:4d:30:e9:f5:43:32:93:d0:14:b8:d1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b359254ee1d88eee7f41d130b15a738baf28c710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:0c:bd:c5:68:12:75:05:5f:0b:52:ac:f6: c2:89:b8:b3:27:3c:71:a3:c4:17:95:b8:57:e4:58: 79:08:63:61:1e:a3:31:0c:31:a1:72:9b:6a:70:07: 71:9a:7e:92:99:ae:74:66:56:b3:83:a3:61:0a:51: af:32:24:d1:52:95:12:76:37:76:bb:9f:f3:4e:79: 4e:b5:78:4d:bb:42:c1:3e:13:c9:1f:95:4e:bd:b9: 52:f8:f8:b0:18:78:c6:5f:aa:04:0f:66:a0:d6:50: 31:28:43:c6:5f:3f:7f:5a:9c:e4:36:26:7f:b4:68: ce:dd:74:52:bf:85:61:f5:29:35:a9:28:f8:ea:58: 52:12:86:81:53:e2:cb:84:c0:a9:3f:bc:5f:7b:22: 40:c6:32:4f:ea:a0:c1:95:60:7b:51:85:21:f6:7e: 94:70:ab:44:2f:0c:c2:5f:30:6a:7b:86:04:57:34: 44:3b:b2:e5:59:4b:a8:9d:16:85:4b:fc:1e:e0:ed: 48:82:36:85:c6:1f:83:e9:ac:7e:ce:d0:79:d6:9a: 99:51:bd:23:39:97:d9:52:d9:2a:0d:3e:24:81:4b: 02:3c:cf:4a:fd:7c:62:db:bd:83:a1:0a:18:38:76: d7:17:f6:f6:7c:1d:22:ed:b0:5b:04:03:2b:f4:50: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:59:25:4E:E1:D8:8E:EE:7F:41:D1:30:B1:5A:73:8B:AF:28:C7:10 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/s1klTuHYju5_QdEwsVpzi68oxxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.208.0/24 Signature Algorithm: sha256WithRSAEncryption 18:88:14:4b:59:66:42:27:de:27:89:bb:89:96:e9:db:94:25: 16:ed:f5:c9:97:39:91:3c:51:21:01:07:14:bc:2f:4d:fe:7c: 97:19:a6:b0:5a:2f:09:f9:2d:3d:65:49:7e:42:a3:ac:b3:69: 7e:9a:eb:31:b7:1c:2f:93:ec:f0:5e:8c:ba:b7:71:b9:f1:80: 63:7b:37:24:ce:b1:09:9d:b5:22:8f:a6:7d:d3:f8:a3:06:62: 71:72:8c:54:9a:bc:1c:ba:64:c5:2d:80:a3:1c:59:70:3a:b3: 4d:90:bb:fe:83:e3:99:1a:fa:9d:46:99:c5:3c:e3:2d:0b:71: 10:70:fa:0c:99:7f:7c:de:30:21:45:5a:66:07:29:fb:b5:76: 5a:d3:3e:ab:27:ee:03:97:2a:5d:eb:2d:4c:76:97:85:e2:21: c7:be:63:49:a9:ed:b2:20:f7:e4:53:18:77:b4:c5:fb:cf:ac: b7:e5:38:2a:49:ba:e7:f1:c0:ca:8f:09:92:f7:2c:de:82:ad: 9d:44:c3:9d:bf:b0:ca:4f:cf:fa:ec:78:d8:0f:9f:78:d3:1f: b5:6b:6d:b8:a4:a6:c3:5c:94:fd:22:44:3d:c4:d0:6f:01:0a: 81:a4:98:9f:93:7a:c0:f8:34:28:86:90:b9:4b:b2:bc:84:8a: ca:a4:52:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p02vTTDp9UMyk9AUuNH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzU5MjU0ZWUxZDg4ZWVlN2Y0MWQxMzBiMTVhNzM4YmFmMjhjNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxkMvcVoEnUFXwtSrPbCibizJzxx o8QXlbhX5Fh5CGNhHqMxDDGhcptqcAdxmn6Sma50Zlazg6NhClGvMiTRUpUSdjd2 u5/zTnlOtXhNu0LBPhPJH5VOvblS+PiwGHjGX6oED2ag1lAxKEPGXz9/WpzkNiZ/ tGjO3XRSv4Vh9Sk1qSj46lhSEoaBU+LLhMCpP7xfeyJAxjJP6qDBlWB7UYUh9n6U cKtELwzCXzBqe4YEVzREO7LlWUuonRaFS/we4O1IgjaFxh+D6ax+ztB51pqZUb0j OZfZUtkqDT4kgUsCPM9K/Xxi272DoQoYOHbXF/b2fB0i7bBbBAMr9FCdewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNZJU7h2I7uf0HRMLFac4uvKMcQMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvczFrbFR1SFlqdTVfUWRFd3NWcHppNjhveHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYXQMA0G CSqGSIb3DQEBCwUAA4IBAQAYiBRLWWZCJ94nibuJlunblCUW7fXJlzmRPFEhAQcU vC9N/nyXGaawWi8J+S09ZUl+QqOss2l+musxtxwvk+zwXoy6t3G58YBjezckzrEJ nbUij6Z90/ijBmJxcoxUmrwcumTFLYCjHFlwOrNNkLv+g+OZGvqdRpnFPOMtC3EQ cPoMmX983jAhRVpmByn7tXZa0z6rJ+4Dlypd6y1MdpeF4iHHvmNJqe2yIPfkUxh3 tMX7z6y35TgqSbrn8cDKjwmS9yzegq2dRMOdv7DKT8/67HjYD5940x+1a224pKbD XJT9IkQ9xNBvAQqBpJifk3rA+DQohpC5S7K8hIrKpFId -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:52 2026 by rpki-client