This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/1-_ZqwD1tkyihP0p_xOpgCamFwYg.roa File: 1-_ZqwD1tkyihP0p_xOpgCamFwYg.roa (raw, json) Hash identifier: F81sM0OCtB2ODGT9/S6GdyEh6LEPRfN0s7OuOK9nmhI= Subject key identifier: FB:F6:6A:C0:3D:6D:93:28:A1:3F:4A:7F:C4:EA:60:09:A9:85:C1:88 Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e Certificate serial: 019B79EC99BF4C43EE5DAFD2CA50689053D5 Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/1-_ZqwD1tkyihP0p_xOpgCamFwYg.roa Signing time: Thu 01 Jan 2026 14:18:27 +0000 ROA not before: Thu 01 Jan 2026 14:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 194.45.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:99:bf:4c:43:ee:5d:af:d2:ca:50:68:90:53:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbf66ac03d6d9328a13f4a7fc4ea6009a985c188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:02:cb:bf:79:f2:32:09:95:3c:89:85:4d: fb:77:9a:85:9d:47:d1:2d:4d:9e:85:b4:03:ac:ee: c7:82:ae:e0:00:ae:77:38:59:20:e9:10:06:e7:a4: 7d:22:ad:29:1c:7b:3a:d4:54:93:8d:e6:19:62:dd: 2f:ea:01:92:21:b2:46:c2:fa:11:81:60:f5:c5:02: 2b:cf:10:ff:8c:52:e0:e1:95:fa:3b:d5:a1:86:90: 94:4b:c4:a0:2c:58:66:29:f8:94:b3:44:3e:76:02: 61:86:ef:a2:a3:57:83:ea:bc:0b:c2:5b:8d:a2:a3: 50:b7:a9:95:6a:52:67:cd:05:e7:ec:11:86:4b:52: 21:b1:0b:d0:f6:d1:b2:60:91:77:e1:47:7b:01:92: 84:12:d2:5f:6a:2f:87:ca:5a:2f:c0:94:98:44:b7: ae:7e:8a:4d:dc:19:42:ce:ec:ca:12:9f:db:f2:5a: 10:6e:a2:77:40:9e:dd:59:a1:88:ad:75:46:32:6a: 5c:c8:81:66:f4:67:c0:9c:70:ab:e1:7b:12:14:3c: 10:be:ad:51:40:d2:3a:e3:d5:58:7a:4f:a0:46:0f: f8:33:f5:0b:b8:21:ae:fa:d4:4c:b4:06:48:77:63: 99:6f:67:87:16:5e:95:10:8c:50:87:75:77:14:30: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F6:6A:C0:3D:6D:93:28:A1:3F:4A:7F:C4:EA:60:09:A9:85:C1:88 X509v3 Authority Key Identifier: keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/1-_ZqwD1tkyihP0p_xOpgCamFwYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.45.103.0/24 Signature Algorithm: sha256WithRSAEncryption 67:8a:20:ef:70:fe:13:8d:0d:4e:c3:04:f7:f7:99:0b:6c:b8: 66:ae:38:20:77:3e:5b:c6:d8:27:15:77:ba:f3:73:7b:7d:85: e9:d1:26:3a:df:ac:69:f2:7a:90:31:dc:8a:90:94:84:1a:fa: f1:16:02:65:70:2c:78:71:92:30:1d:6d:b3:ea:e6:ae:89:37: 89:d3:21:d9:f7:03:c9:d8:cf:7c:a2:95:bf:98:6d:f2:3f:23: 37:51:da:de:f1:f8:1e:e9:ee:19:41:36:8c:79:d1:27:ac:bd: 3c:1f:a7:27:d6:eb:39:0d:61:2f:4a:d6:25:72:30:d2:9e:6a: 64:5c:2a:9a:d1:be:e9:27:2a:e0:bd:cd:29:67:81:18:0a:76: 17:5b:44:f5:64:bd:9a:19:5b:4c:fd:ca:58:23:81:70:f6:40: 73:61:10:51:c8:fa:ea:2b:18:cd:b4:55:87:3c:48:99:ee:7a: 77:e0:29:57:ea:5c:0d:5f:82:7a:bf:8b:41:7d:9c:9d:84:36: 67:6c:81:29:98:57:ec:5e:bd:7b:33:94:ef:44:ac:ac:be:28: ee:fe:70:3e:6f:25:6a:b9:90:e6:b2:5e:78:24:6e:03:1e:fb: b2:01:d6:98:4e:66:c3:f6:13:e8:60:28:e4:d1:9e:67:0f:24: 71:6b:11:00 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57Jm/TEPuXa/SylBokFPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTRlMTA3MjMzNTEyNzBjZDhjOWNjNjRiMDk2NDg4ZTY0 ZTIzMGUwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmY2NmFjMDNkNmQ5MzI4YTEzZjRhN2ZjNGVhNjAwOWE5ODVjMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1wCy7958jIJlTyJhU37d5qFnUfR LU2ehbQDrO7Hgq7gAK53OFkg6RAG56R9Iq0pHHs61FSTjeYZYt0v6gGSIbJGwvoR gWD1xQIrzxD/jFLg4ZX6O9WhhpCUS8SgLFhmKfiUs0Q+dgJhhu+io1eD6rwLwluN oqNQt6mValJnzQXn7BGGS1IhsQvQ9tGyYJF34Ud7AZKEEtJfai+HylovwJSYRLeu fopN3BlCzuzKEp/b8loQbqJ3QJ7dWaGIrXVGMmpcyIFm9GfAnHCr4XsSFDwQvq1R QNI649VYek+gRg/4M/ULuCGu+tRMtAZId2OZb2eHFl6VEIxQh3V3FDDj+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPv2asA9bZMooT9Kf8TqYAmphcGIMB8GA1UdIwQY MBaAFBak4QcjNRJwzYycxksJZIjmTiMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYt OWI2NDQ0NGZmNjg4LzEvMS1fWnF3RDF0a3lpaFAwcF94T3BnQ2FtRndZZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWQvMjc1ZGM1LTZmMTUtNDVmZS05NDFmLTliNjQ0NDRmZjY4 OC8xL0ZxVGhCeU0xRW5ETmpKekdTd2xraU9aT0l3NC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMItZzAN BgkqhkiG9w0BAQsFAAOCAQEAZ4og73D+E40NTsME9/eZC2y4Zq44IHc+W8bYJxV3 uvNze32F6dEmOt+safJ6kDHcipCUhBr68RYCZXAseHGSMB1ts+rmrok3idMh2fcD ydjPfKKVv5ht8j8jN1Ha3vH4HunuGUE2jHnRJ6y9PB+nJ9brOQ1hL0rWJXIw0p5q ZFwqmtG+6Scq4L3NKWeBGAp2F1tE9WS9mhlbTP3KWCOBcPZAc2EQUcj66isYzbRV hzxIme56d+ApV+pcDV+Cer+LQX2cnYQ2Z2yBKZhX7F69ezOU70SsrL4o7v5wPm8l armQ5rJeeCRuAx77sgHWmE5mw/YT6GAo5NGeZw8kcWsRAA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:06:11 2026 by rpki-client