This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa File: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (raw, json) Hash identifier: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU= Subject key identifier: D5:6A:B1:63:74:6E:EB:05:00:D5:B0:52:2D:15:D4:6C:63:E7:AC:6B Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Certificate serial: 019B7F8404C45CB0F97FD56335A889851454 Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa Signing time: Fri 02 Jan 2026 16:21:56 +0000 ROA not before: Fri 02 Jan 2026 16:21:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 194.150.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:04:c4:5c:b0:f9:7f:d5:63:35:a8:89:85:14:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Validity Not Before: Jan 2 16:21:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d56ab163746eeb0500d5b0522d15d46c63e7ac6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:f2:66:86:10:6d:00:d9:53:59:ab:5f:6f: 11:f8:22:fb:00:5e:ac:c8:74:20:50:59:9b:26:7b: 9c:f1:d0:09:81:7e:18:7e:70:c7:be:30:a4:fa:da: 6c:1a:a3:cc:97:b0:77:fd:cb:5b:30:75:43:d1:03: 59:5d:a4:7d:bc:32:58:08:e6:6f:8b:67:cf:97:23: 55:e9:d4:b4:9c:0d:c8:27:5a:8b:d7:bf:61:3c:6c: 01:84:db:4b:f8:80:14:ff:3c:c2:9b:30:6d:08:2a: a0:ee:d6:bb:6b:7b:32:61:99:d9:c6:23:f0:81:f0: 00:cc:b6:52:c7:c0:1d:1f:a3:2b:b9:b6:b6:6e:f6: 6a:b5:a8:e0:ce:74:3c:59:33:31:a4:62:51:a1:ef: 30:bd:ab:4b:36:a0:2c:51:b4:8e:ef:6f:b1:e3:d7: 0a:92:81:df:6a:67:da:21:44:6e:13:2f:74:aa:4d: 63:a6:e7:68:88:ff:3a:b5:e3:84:20:cb:5b:c3:e1: 57:4f:89:7f:d3:08:9a:16:c3:f0:85:ff:db:cc:dc: 12:a3:03:a9:5d:ab:07:a1:ee:ce:11:85:82:4b:b8: 11:fb:ad:5b:99:2e:2a:c2:23:52:ab:d4:5c:48:e2: 7c:b9:2c:1b:dc:af:6c:eb:53:19:2c:c8:72:4a:5e: f4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6A:B1:63:74:6E:EB:05:00:D5:B0:52:2D:15:D4:6C:63:E7:AC:6B X509v3 Authority Key Identifier: keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.150.192.0/24 Signature Algorithm: sha256WithRSAEncryption 98:61:99:07:c8:70:9a:20:bd:4e:50:eb:fc:99:e9:69:c4:9b: b0:e4:54:c8:87:15:95:60:c1:ad:40:c1:b8:42:2d:c8:65:04: 7f:a6:11:89:ff:1c:e8:8e:a3:31:88:4a:d1:f2:a3:e4:35:c4: 5c:e6:94:56:22:05:5a:da:a1:27:ff:bb:40:3f:6e:05:e4:cb: 18:dc:44:b6:fc:22:56:04:ac:99:20:29:dc:22:bb:fc:25:7f: b9:12:f3:da:0d:b4:8f:a2:c5:8b:b1:23:ab:86:c7:21:89:31: 34:bb:69:7f:d6:39:60:48:6d:10:b4:06:8d:36:02:6e:ee:cb: 1b:bc:11:be:7a:e7:f4:90:a1:ea:ad:04:f8:14:85:cb:14:55: da:d6:d8:cb:dc:8d:3f:50:98:54:0e:bc:29:ab:ce:5e:45:74: c8:6c:b6:a8:62:44:9d:94:ce:1e:22:17:11:83:81:8c:4d:b2: 8b:8b:8d:e7:5b:b9:58:11:2f:b9:10:8a:02:6d:0f:78:9c:44: fb:6a:42:17:5e:a1:19:dd:d5:c1:77:91:24:f5:5b:59:8d:07: 24:ee:23:43:ea:bd:a7:b1:6e:52:d6:78:40:de:4f:cb:6f:68: 3b:ec:3f:88:a4:2c:80:ef:a7:bd:d5:1c:6c:bf:17:9e:d9:6a: 64:33:16:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hATEXLD5f9VjNaiJhRRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk NWRiMzQwHhcNMjYwMTAyMTYyMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTZhYjE2Mzc0NmVlYjA1MDBkNWIwNTIyZDE1ZDQ2YzYzZTdhYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTDyZoYQbQDZU1mrX28R+CL7AF6s yHQgUFmbJnuc8dAJgX4YfnDHvjCk+tpsGqPMl7B3/ctbMHVD0QNZXaR9vDJYCOZv i2fPlyNV6dS0nA3IJ1qL179hPGwBhNtL+IAU/zzCmzBtCCqg7ta7a3syYZnZxiPw gfAAzLZSx8AdH6Mruba2bvZqtajgznQ8WTMxpGJRoe8wvatLNqAsUbSO72+x49cK koHfamfaIURuEy90qk1jpudoiP86teOEIMtbw+FXT4l/0wiaFsPwhf/bzNwSowOp XasHoe7OEYWCS7gR+61bmS4qwiNSq9RcSOJ8uSwb3K9s61MZLMhySl70AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVqsWN0busFANWwUi0V1Gxj56xrMB8GA1UdIwQY MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt ZjdhYmVmM2M4YTJiLzEvMVdxeFkzUnU2d1VBMWJCU0xSWFViR1BuckdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpbAMA0G CSqGSIb3DQEBCwUAA4IBAQCYYZkHyHCaIL1OUOv8melpxJuw5FTIhxWVYMGtQMG4 Qi3IZQR/phGJ/xzojqMxiErR8qPkNcRc5pRWIgVa2qEn/7tAP24F5MsY3ES2/CJW BKyZICncIrv8JX+5EvPaDbSPosWLsSOrhschiTE0u2l/1jlgSG0QtAaNNgJu7ssb vBG+euf0kKHqrQT4FIXLFFXa1tjL3I0/UJhUDrwpq85eRXTIbLaoYkSdlM4eIhcR g4GMTbKLi43nW7lYES+5EIoCbQ94nET7akIXXqEZ3dXBd5Ek9VtZjQck7iND6r2n sW5S1nhA3k/Lb2g77D+IpCyA76e91Rxsvxee2WpkMxb/ -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:24 2026 by rpki-client