This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/1wpYXstfYyorfkn1_ZYkHrWY0tY.roa File: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (raw, json) Hash identifier: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic= Subject key identifier: D7:0A:58:5E:CB:5F:63:2A:2B:7E:49:F5:FD:96:24:1E:B5:98:D2:D6 Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Certificate serial: 019B7C128AC7EAD515A2308149742E48302B Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/1wpYXstfYyorfkn1_ZYkHrWY0tY.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 185.117.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8a:c7:ea:d5:15:a2:30:81:49:74:2e:48:30:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d70a585ecb5f632a2b7e49f5fd96241eb598d2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:f9:cf:69:fd:c2:11:95:50:6f:b2:0e:ac: 73:a6:21:56:db:ee:50:f5:d5:a1:9b:5a:e6:e4:c0: 01:73:6b:c4:f2:05:e7:17:d1:d6:38:60:36:cd:bc: 27:46:32:91:57:1d:91:8a:67:87:81:9c:b6:8f:53: 15:f2:f7:f4:72:0d:65:8f:ae:ab:29:2e:49:cd:da: c6:b5:53:d1:e3:2e:80:89:92:bc:e7:7a:3f:ad:01: 6e:47:57:1a:51:b0:36:11:76:cd:f2:2c:5d:ab:5a: dd:1e:ab:45:95:8b:31:37:3b:c7:6b:05:43:85:2f: 17:e9:06:c1:2f:46:0d:52:32:6b:74:84:bc:b8:f9: 4f:ff:aa:5a:37:bf:c2:20:26:28:ce:cd:f4:e9:84: ad:64:b3:b7:03:3b:ad:f3:a0:22:56:ae:ad:fb:0d: 1f:5b:66:94:b6:67:84:ad:03:af:18:f2:65:e6:b8: 61:38:2d:51:09:64:78:45:bd:e2:25:2a:5c:32:96: 21:aa:f2:2b:5f:3a:58:dd:0e:af:81:03:aa:dd:48: 51:21:13:6d:32:c9:4f:84:66:87:64:86:58:b6:1a: ae:cb:78:74:6c:cc:2a:cf:1d:f7:d0:1e:91:12:38: 69:fe:e2:fe:06:a2:5a:a8:de:bd:ec:96:60:9f:2d: a0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:58:5E:CB:5F:63:2A:2B:7E:49:F5:FD:96:24:1E:B5:98:D2:D6 X509v3 Authority Key Identifier: keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/1wpYXstfYyorfkn1_ZYkHrWY0tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.209.0/24 Signature Algorithm: sha256WithRSAEncryption b0:c4:e8:ed:9f:a7:81:48:ca:f7:a8:d7:b2:2c:2a:e6:3d:73: da:6f:83:33:01:d9:f9:d9:32:0a:0c:ca:63:5b:5d:ff:04:db: 34:39:ee:cc:25:57:48:c1:93:b2:df:ac:ea:12:90:f4:60:54: 27:c7:c0:ca:ce:75:78:e2:5c:1c:17:75:13:9a:9b:bd:4d:93: 42:df:4b:aa:ec:ea:6e:ee:f5:36:52:74:af:5c:74:de:d3:de: cd:36:02:c8:f9:03:ab:4c:54:a1:9c:5e:58:10:47:09:29:d1: 0d:ef:21:37:13:78:8d:a0:cd:e5:ed:59:c4:cb:e5:a7:a5:77: 8c:7f:26:db:8c:f6:7d:89:b9:db:f3:59:29:49:c5:0a:9b:d5: 57:70:32:12:b2:9d:29:9f:68:ba:2a:67:78:87:80:ea:96:30: f8:3f:a0:9d:c5:5e:cb:1b:28:c6:38:b3:09:f0:4d:06:f1:82: b3:44:0e:43:4e:5d:6a:ce:78:36:8b:b4:6e:02:95:2f:b1:5f: eb:c9:45:e9:19:fc:c2:9c:bc:a3:13:36:99:4d:cd:a7:39:7e: 1b:20:8b:e9:2b:cd:d3:8c:9b:80:91:f8:d0:34:5a:4a:15:3f: 35:f1:19:08:2c:62:d4:a5:56:fa:18:0c:fb:c0:72:e7:8c:23: 3b:03:b7:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EorH6tUVojCBSXQuSDArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5 NjRiNDAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzBhNTg1ZWNiNWY2MzJhMmI3ZTQ5ZjVmZDk2MjQxZWI1OThkMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfP5z2n9whGVUG+yDqxzpiFW2+5Q 9dWhm1rm5MABc2vE8gXnF9HWOGA2zbwnRjKRVx2RimeHgZy2j1MV8vf0cg1lj66r KS5JzdrGtVPR4y6AiZK853o/rQFuR1caUbA2EXbN8ixdq1rdHqtFlYsxNzvHawVD hS8X6QbBL0YNUjJrdIS8uPlP/6paN7/CICYozs306YStZLO3Azut86AiVq6t+w0f W2aUtmeErQOvGPJl5rhhOC1RCWR4Rb3iJSpcMpYhqvIrXzpY3Q6vgQOq3UhRIRNt MslPhGaHZIZYthquy3h0bMwqzx330B6REjhp/uL+BqJaqN697JZgny2gCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcKWF7LX2MqK35J9f2WJB61mNLWMB8GA1UdIwQY MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt ZWMxNjczNWEzMzgyLzEvMXdwWVhzdGZZeW9yZmtuMV9aWWtIcldZMHRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXRMA0G CSqGSIb3DQEBCwUAA4IBAQCwxOjtn6eBSMr3qNeyLCrmPXPab4MzAdn52TIKDMpj W13/BNs0Oe7MJVdIwZOy36zqEpD0YFQnx8DKznV44lwcF3UTmpu9TZNC30uq7Opu 7vU2UnSvXHTe097NNgLI+QOrTFShnF5YEEcJKdEN7yE3E3iNoM3l7VnEy+WnpXeM fybbjPZ9ibnb81kpScUKm9VXcDISsp0pn2i6Kmd4h4DqljD4P6CdxV7LGyjGOLMJ 8E0G8YKzRA5DTl1qzng2i7RuApUvsV/ryUXpGfzCnLyjEzaZTc2nOX4bIIvpK83T jJuAkfjQNFpKFT818RkILGLUpVb6GAz7wHLnjCM7A7cf -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:35 2026 by rpki-client