This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/1-D7_xDdnahTC7f8t337Uhdz6OlA.roa File: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (raw, json) Hash identifier: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4= Subject key identifier: F8:3E:FF:C4:37:67:6A:14:C2:ED:FF:2D:DF:7E:D4:85:DC:FA:3A:50 Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Certificate serial: 019B7B35A5BB5A1A863C74379FF805369144 Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/1-D7_xDdnahTC7f8t337Uhdz6OlA.roa Signing time: Thu 01 Jan 2026 20:17:51 +0000 ROA not before: Thu 01 Jan 2026 20:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210754 IP address blocks: 94.156.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a5:bb:5a:1a:86:3c:74:37:9f:f8:05:36:91:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f83effc437676a14c2edff2ddf7ed485dcfa3a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:f7:4d:e5:4e:b1:7e:c6:18:3b:da:28:77: 69:ba:4f:5f:5d:d6:58:32:58:28:54:0c:90:95:2f: af:81:ca:8b:16:78:42:67:7f:04:ed:15:de:fe:f3: 62:d8:fe:28:f3:62:68:5c:f7:96:cd:30:f0:3a:f1: 4a:24:c7:98:b5:45:d5:d8:bc:79:b6:c1:9f:fd:73: 61:67:22:90:6a:59:f4:84:d2:88:20:f4:b8:0d:19: 79:6d:bd:f5:55:f8:51:c3:3c:1d:e1:22:1d:ad:23: d6:f6:ed:f3:08:82:4e:8e:19:c6:e2:34:d6:7c:c4: 0a:92:2b:65:bd:b1:c9:57:46:b6:51:b2:89:39:c2: 07:bf:18:6a:89:5a:2d:09:e9:82:fc:d4:a1:2c:52: 44:ac:08:2f:b6:31:96:cd:81:41:e5:bc:f1:5e:1c: 93:cf:50:f5:c4:f4:4c:7a:01:88:8a:2d:01:21:97: 29:c6:81:96:43:c6:81:7d:ae:3b:64:03:a7:fd:a5: 77:f6:11:44:6c:f8:f2:7b:c5:b5:61:a9:20:78:b4: 4d:33:75:78:29:26:a8:b6:67:b2:36:53:6b:97:ff: 79:79:c2:35:60:37:4c:74:5f:83:61:fb:33:39:1d: 49:10:2b:26:ba:23:01:9a:ed:cf:9e:21:f7:05:62: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:FF:C4:37:67:6A:14:C2:ED:FF:2D:DF:7E:D4:85:DC:FA:3A:50 X509v3 Authority Key Identifier: keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/1-D7_xDdnahTC7f8t337Uhdz6OlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.190.0/23 Signature Algorithm: sha256WithRSAEncryption 23:3d:a5:bb:ac:ce:cc:4e:93:93:28:58:5d:19:f1:50:be:ff: 04:66:f6:3c:e9:bc:78:94:ce:d0:95:c4:de:11:d0:44:1b:8a: 67:cd:e8:08:89:81:fb:82:7a:95:10:36:e0:d5:7e:96:0d:c6: 6f:3e:ab:8a:1d:ed:40:f5:86:8d:3d:2f:db:d3:0b:37:68:c9: a8:39:3b:da:4c:4d:a3:1b:b0:ff:4b:7f:9c:16:1a:2c:9d:9d: f8:86:23:cb:7e:2d:4a:28:b0:9b:bc:06:e7:cf:0b:ce:5a:06: 25:1f:23:e5:d3:13:bc:99:c0:96:10:f1:d8:6d:a4:22:44:2c: b9:82:43:4f:81:b9:9f:3e:42:97:27:36:f3:0d:ae:9f:2f:b5: 0e:de:7b:c1:c6:92:c1:a4:ee:f5:a2:31:34:04:d3:76:1f:1c: 2f:40:8f:09:3d:32:2c:7d:84:e7:b6:e9:22:03:ef:70:a1:47: e0:79:3b:cc:c1:f5:fe:c7:9f:9a:17:1b:8b:44:97:85:ad:bb: 02:50:d5:6f:26:1c:38:d6:62:41:de:ca:da:b1:bb:76:23:69: a8:00:00:d5:ec:6e:4f:5d:7a:18:b2:84:e8:02:b9:af:15:00: f1:89:65:cf:ce:8a:b2:68:47:3f:05:9e:31:01:b5:33:1c:d7: f1:c8:d2:e8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NaW7WhqGPHQ3n/gFNpFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNWU1MDJjMzE0ZDUxMDRmN2M2MGNjZDY5Nzg5Y2I4NDhm ZjVlMDcwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNlZmZjNDM3Njc2YTE0YzJlZGZmMmRkZjdlZDQ4NWRjZmEzYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xn3TeVOsX7GGDvaKHdpuk9fXdZY MlgoVAyQlS+vgcqLFnhCZ38E7RXe/vNi2P4o82JoXPeWzTDwOvFKJMeYtUXV2Lx5 tsGf/XNhZyKQaln0hNKIIPS4DRl5bb31VfhRwzwd4SIdrSPW9u3zCIJOjhnG4jTW fMQKkitlvbHJV0a2UbKJOcIHvxhqiVotCemC/NShLFJErAgvtjGWzYFB5bzxXhyT z1D1xPRMegGIii0BIZcpxoGWQ8aBfa47ZAOn/aV39hFEbPjye8W1YakgeLRNM3V4 KSaotmeyNlNrl/95ecI1YDdMdF+DYfszOR1JECsmuiMBmu3PniH3BWJAPQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPg+/8Q3Z2oUwu3/Ld9+1IXc+jpQMB8GA1UdIwQY MBaAFCNeUCwxTVEE98YMzWl4nLhI/14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAt YTU2ZTY3ODQ4ZjExLzEvMS1EN194RGRuYWhUQzdmOHQzMzdVaGR6Nk9sQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjEvZmEyNDVmLWRjNzQtNDk3NC04MmUwLWE1NmU2Nzg0OGYx MS8xL0kxNVFMREZOVVFUM3hnek5hWGljdUVqX1hnYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV6cvjAN BgkqhkiG9w0BAQsFAAOCAQEAIz2lu6zOzE6TkyhYXRnxUL7/BGb2POm8eJTO0JXE 3hHQRBuKZ83oCImB+4J6lRA24NV+lg3Gbz6rih3tQPWGjT0v29MLN2jJqDk72kxN oxuw/0t/nBYaLJ2d+IYjy34tSiiwm7wG588LzloGJR8j5dMTvJnAlhDx2G2kIkQs uYJDT4G5nz5Clyc28w2uny+1Dt57wcaSwaTu9aIxNATTdh8cL0CPCT0yLH2E57bp IgPvcKFH4Hk7zMH1/sefmhcbi0SXha27AlDVbyYcONZiQd7K2rG7diNpqAAA1exu T116GLKE6AK5rxUA8Yllz86KsmhHPwWeMQG1MxzX8cjS6A== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:26 2026 by rpki-client