This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa File: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (raw, json) Hash identifier: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo= Subject key identifier: F9:0A:E4:27:54:5E:7B:37:20:17:BD:C4:80:66:EA:9B:14:A9:F6:21 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019B7C11EC3965278D6FE5DF0A34E994E48D Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa Signing time: Fri 02 Jan 2026 00:18:27 +0000 ROA not before: Fri 02 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 185.189.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ec:39:65:27:8d:6f:e5:df:0a:34:e9:94:e4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jan 2 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f90ae427545e7b372017bdc48066ea9b14a9f621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:89:f2:d2:ea:3a:c1:05:f8:fb:47:cc:09: 91:7b:5c:2b:53:f3:f0:37:dc:29:32:41:a5:77:63: f6:6e:16:34:25:16:b1:fa:ac:a0:19:fe:dc:c8:d5: 33:60:83:d7:5b:f3:e9:ab:0f:da:d4:f5:10:78:61: 21:3c:21:59:4d:63:1d:dd:f9:76:40:86:1c:1e:00: a2:08:e0:97:bd:af:e3:36:b5:38:5d:49:1f:2f:0c: 32:2a:82:1c:56:c6:d5:00:c4:63:85:8e:89:24:64: b9:cc:92:4f:f5:87:de:57:ce:c2:53:0b:59:e9:a4: 5b:98:94:16:65:98:39:9a:cc:ee:e1:c8:f9:8f:72: 44:9d:41:e6:5f:f6:87:e5:29:ab:50:75:fe:db:be: e0:d3:c8:87:90:90:3a:e8:e5:e4:91:01:b6:9e:16: 0f:28:16:1e:44:ff:71:56:f8:24:f4:78:6d:c1:6c: 8e:f0:34:cc:ee:70:c6:62:96:0d:01:6b:41:76:78: 05:94:56:87:a2:c2:dd:2e:ca:08:10:33:05:a4:96: fb:e7:88:63:6d:4a:8f:2b:af:1f:fd:ce:a5:aa:23: 34:95:84:2b:b6:89:ca:9f:12:1f:ab:0a:b1:63:81: 3a:ca:e1:ae:1d:34:48:14:ad:14:6e:48:cd:5e:f1: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0A:E4:27:54:5E:7B:37:20:17:BD:C4:80:66:EA:9B:14:A9:F6:21 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.32.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:14:b3:31:98:7a:1b:a1:94:df:f4:e8:5b:2f:d4:e8:14:71: 79:88:73:68:0b:bf:d9:3c:81:fd:6d:19:ff:fe:f9:48:51:9a: bd:c8:69:ca:8a:66:53:ff:fb:cc:7a:2a:4e:6c:4f:1f:4f:28: 67:6d:6b:6a:ae:02:58:07:cc:5c:a9:0c:52:8c:d4:aa:8c:62: ab:36:b8:2e:42:50:47:be:e6:c2:d7:b9:67:2b:ef:7b:79:ec: 8a:a1:74:30:85:e4:66:1b:33:97:c4:79:ee:e7:85:f7:4f:43: cb:44:39:a4:92:84:bc:3a:42:eb:64:15:48:08:03:d2:3a:17: f7:c9:ad:a4:cc:96:68:09:94:dd:a6:04:90:1e:ca:d1:93:ea: 51:54:d0:35:52:7a:0e:a6:3f:40:bb:84:66:c6:bd:23:ac:25: 58:bd:fb:22:b5:36:9c:87:3c:06:16:0f:fa:c7:ff:b6:72:33: d4:86:6d:ef:5a:9e:01:97:63:ab:14:c8:cd:cc:f0:84:b1:8b: 46:d4:9d:69:40:89:df:e7:9f:58:a1:c9:3f:81:8e:23:3b:45: a4:3a:c0:e8:90:49:c2:f1:7b:d3:ce:4d:52:f0:05:9f:e7:5f: 35:cf:ba:88:81:4b:56:af:1e:b2:db:26:cf:07:70:8f:04:c8: 74:a0:0c:70 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8Eew5ZSeNb+XfCjTplOSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMTAyMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTBhZTQyNzU0NWU3YjM3MjAxN2JkYzQ4MDY2ZWE5YjE0YTlmNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R+J8tLqOsEF+PtHzAmRe1wrU/Pw N9wpMkGld2P2bhY0JRax+qygGf7cyNUzYIPXW/Ppqw/a1PUQeGEhPCFZTWMd3fl2 QIYcHgCiCOCXva/jNrU4XUkfLwwyKoIcVsbVAMRjhY6JJGS5zJJP9YfeV87CUwtZ 6aRbmJQWZZg5mszu4cj5j3JEnUHmX/aH5SmrUHX+277g08iHkJA66OXkkQG2nhYP KBYeRP9xVvgk9HhtwWyO8DTM7nDGYpYNAWtBdngFlFaHosLdLsoIEDMFpJb754hj bUqPK68f/c6lqiM0lYQrtonKnxIfqwqxY4E6yuGuHTRIFK0UbkjNXvFAWQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkK5CdUXns3IBe9xIBm6psUqfYhMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEvMS1RcmtKMVJlZXpjZ0Y3M0VnR2JxbXhTcDlpRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjEvZjhhOWViLTdmOGQtNGJmNy04M2Q5LTkwOTZlMTY3NGUy Mi8xL2t1Y2dSbHhjME5xY2FoTzBUNkRZYjJTZVVGVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm9IDAN BgkqhkiG9w0BAQsFAAOCAQEACxSzMZh6G6GU3/ToWy/U6BRxeYhzaAu/2TyB/W0Z //75SFGavchpyopmU//7zHoqTmxPH08oZ21raq4CWAfMXKkMUozUqoxiqza4LkJQ R77mwte5Zyvve3nsiqF0MIXkZhszl8R57ueF909Dy0Q5pJKEvDpC62QVSAgD0joX 98mtpMyWaAmU3aYEkB7K0ZPqUVTQNVJ6DqY/QLuEZsa9I6wlWL37IrU2nIc8BhYP +sf/tnIz1IZt71qeAZdjqxTIzczwhLGLRtSdaUCJ3+efWKHJP4GOIztFpDrA6JBJ wvF7085NUvAFn+dfNc+6iIFLVq8estsmzwdwjwTIdKAMcA== -----END CERTIFICATE-----Generated at Fri Jan 2 18:05:05 2026 by rpki-client