This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/1-PobHP3upTno8bW2i6EzwJRlSdc.roa File: 1-PobHP3upTno8bW2i6EzwJRlSdc.roa (raw, json) Hash identifier: k3oArZicPTjQ+oty+7iOYo7+c4L7ieRd9ba75n0lEZ0= Subject key identifier: F8:FA:1B:1C:FD:EE:A5:39:E8:F1:B5:B6:8B:A1:33:C0:94:65:49:D7 Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Certificate serial: 019B7B35B9FCC624E0A3F3633A37D1D27CC7 Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/1-PobHP3upTno8bW2i6EzwJRlSdc.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59945 IP address blocks: 185.80.57.0/24 maxlen: 24 185.80.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b9:fc:c6:24:e0:a3:f3:63:3a:37:d1:d2:7c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8fa1b1cfdeea539e8f1b5b68ba133c0946549d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:47:e4:ce:0e:49:f0:e6:b5:2b:a4:c4:f9:84: eb:21:1d:71:33:23:5d:41:41:ed:5d:95:e1:3a:26: f0:cf:af:a4:2b:a1:b4:00:eb:8d:bb:7e:94:c7:82: 03:c3:58:28:c4:aa:a4:97:37:a2:0e:58:e2:75:64: 35:c7:cf:d1:46:1e:be:72:35:17:54:3a:1c:69:6f: 6c:fa:e6:96:f1:38:b9:c2:e0:bf:56:6c:a8:1e:42: 83:fe:14:65:eb:06:1d:48:3f:9c:bb:8c:d8:f2:6a: 08:c6:7f:d4:d6:0e:64:fd:7c:6c:e5:41:35:0a:df: 79:f8:e5:a3:1c:51:e0:91:f6:b1:3a:69:f3:58:2d: dd:75:ea:cb:42:35:b1:15:37:7e:87:e5:e3:a7:1b: 1c:a8:e6:39:bc:8a:35:12:97:1c:78:0a:05:29:67: f6:17:c3:b2:69:7c:eb:63:f0:73:07:9d:f6:02:6f: 35:a7:4e:7f:70:6b:6c:94:73:d0:7c:e2:30:83:f6: 25:c3:7c:a3:49:18:4d:86:8f:d1:4e:1f:d5:b1:16: 86:ea:d5:fa:ee:ec:1a:07:7c:53:29:9c:80:7e:8a: f1:04:fa:ce:6e:0a:a1:68:fe:c8:05:5c:e6:91:14: 3d:f8:90:65:33:06:81:31:76:4f:1e:08:6f:cf:51: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:1B:1C:FD:EE:A5:39:E8:F1:B5:B6:8B:A1:33:C0:94:65:49:D7 X509v3 Authority Key Identifier: keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/1-PobHP3upTno8bW2i6EzwJRlSdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.57.0-185.80.58.255 Signature Algorithm: sha256WithRSAEncryption ce:04:d6:5f:56:87:43:7c:1e:97:ab:6f:1c:62:db:a3:14:65: cb:7c:a9:9e:6f:cf:7e:c4:4b:25:91:91:1f:a6:b2:6e:f7:fc: d5:0b:a4:7e:68:eb:d7:b9:f6:62:f4:ca:b5:38:fb:6e:aa:5f: 55:85:8d:42:d8:6f:bd:a6:61:5e:e7:dc:e5:07:2a:b7:ae:ea: b4:b1:d9:c3:55:90:3b:b3:74:e9:64:a7:05:84:d2:14:f9:b1: 31:be:3d:cf:96:e4:85:25:82:8d:ce:73:de:00:3a:01:f2:f8: 20:95:35:35:ea:28:48:7e:0e:2d:cd:10:3e:f3:ef:13:8c:ae: f4:37:97:25:59:03:94:c9:52:38:31:37:b9:68:9d:0b:3b:36: e6:91:4c:33:d5:18:7f:10:55:a2:bc:39:d6:2d:bf:d2:b4:e8: 4b:25:77:b6:2b:3e:e3:32:ff:6a:50:ef:d6:fb:ec:0a:2e:a8: f3:d8:a9:1a:a3:d9:2c:a4:ce:49:fd:dc:ba:b1:fe:b4:72:77: 51:cc:f5:d9:15:b7:f1:bb:2f:0c:44:7a:cb:3d:df:3e:ad:04: ad:c1:53:86:34:a5:61:34:07:83:be:a5:30:54:ac:01:05:3a: dd:ca:b0:09:2d:7c:2a:1c:8e:52:56:62:ba:48:18:a2:ea:08: aa:59:58:e5 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt7Nbn8xiTgo/NjOjfR0nzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDYxNGUxOTVjMTY1NmEyOGU4YjE5YjIyNzg0ZThiNTVi YjQ1MzMwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGZhMWIxY2ZkZWVhNTM5ZThmMWI1YjY4YmExMzNjMDk0NjU0OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90fkzg5J8Oa1K6TE+YTrIR1xMyNd QUHtXZXhOibwz6+kK6G0AOuNu36Ux4IDw1goxKqklzeiDljidWQ1x8/RRh6+cjUX VDocaW9s+uaW8Ti5wuC/VmyoHkKD/hRl6wYdSD+cu4zY8moIxn/U1g5k/Xxs5UE1 Ct95+OWjHFHgkfaxOmnzWC3dderLQjWxFTd+h+XjpxscqOY5vIo1EpcceAoFKWf2 F8OyaXzrY/BzB532Am81p05/cGtslHPQfOIwg/Ylw3yjSRhNho/RTh/VsRaG6tX6 7uwaB3xTKZyAforxBPrObgqhaP7IBVzmkRQ9+JBlMwaBMXZPHghvz1E6hQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPj6Gxz97qU56PG1touhM8CUZUnXMB8GA1UdIwQY MBaAFB8GFOGVwWVqKOixmyJ4TotVu0UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUt YmVmODcyZGFlY2U3LzEvMS1Qb2JIUDN1cFRubzhiVzJpNkV6d0pSbFNkYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWUvMTBlYmNjLWM4MzItNGQzMy04OGI1LWJlZjg3MmRhZWNl Ny8xL0h3WVU0WlhCWldvbzZMR2JJbmhPaTFXN1JUTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAuVA5 AwQAuVA6MA0GCSqGSIb3DQEBCwUAA4IBAQDOBNZfVodDfB6Xq28cYtujFGXLfKme b89+xEslkZEfprJu9/zVC6R+aOvXufZi9Mq1OPtuql9VhY1C2G+9pmFe59zlByq3 ruq0sdnDVZA7s3TpZKcFhNIU+bExvj3PluSFJYKNznPeADoB8vgglTU16ihIfg4t zRA+8+8TjK70N5clWQOUyVI4MTe5aJ0LOzbmkUwz1Rh/EFWivDnWLb/StOhLJXe2 Kz7jMv9qUO/W++wKLqjz2Kkao9kspM5J/dy6sf60cndRzPXZFbfxuy8MRHrLPd8+ rQStwVOGNKVhNAeDvqUwVKwBBTrdyrAJLXwqHI5SVmK6SBii6giqWVjl -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:42 2026 by rpki-client