This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-V84oobFXIlKZ3Dls5nBGbkUta8.roa File: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (raw, json) Hash identifier: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA= Subject key identifier: F9:5F:38:A2:86:C5:5C:89:4A:67:70:E5:B3:99:C1:19:B9:14:B5:AF Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA84171CE25092576B5FB8FB391FB7 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-V84oobFXIlKZ3Dls5nBGbkUta8.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142146 IP address blocks: 185.217.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:84:17:1c:e2:50:92:57:6b:5f:b8:fb:39:1f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f95f38a286c55c894a6770e5b399c119b914b5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:e9:39:50:f4:28:ad:74:c4:a2:6b:b0:e5: ca:a1:3a:2f:c0:b4:57:03:e2:19:c6:92:52:46:27: 1d:a8:5d:e9:2b:7c:10:af:66:fe:6a:41:ea:54:33: d1:f8:f8:ea:a9:9c:16:33:6d:7e:b9:8e:2a:73:bc: 1b:07:44:af:4d:a2:22:8c:42:4c:1e:e2:05:85:62: 51:b8:74:8c:b0:c0:51:e0:a9:86:98:13:3f:4f:64: 3c:b9:32:69:46:65:0b:bc:3e:c7:9a:cf:f6:aa:fa: 5d:60:05:3e:cf:49:aa:81:7d:bc:40:ba:0c:c9:dd: 7e:a8:e0:e0:55:3c:45:65:ce:80:68:51:24:45:8d: 9e:a9:fd:42:97:c9:b0:6e:7d:fc:0e:c4:53:a1:7b: 04:d4:a7:8d:37:92:c5:d6:1f:fd:4c:37:76:d3:7f: 09:ce:6f:9a:13:2a:84:ae:4d:f8:45:ec:12:84:bb: fa:8a:f5:50:15:6c:1c:7a:d8:69:a2:56:c1:46:fd: 7e:80:0d:0c:46:73:ca:f5:5e:12:85:c6:8b:0b:73: 57:02:bc:2c:c7:a1:2e:be:84:55:c9:9d:f5:26:07: b5:e7:a3:f8:54:ec:38:6e:c8:00:4b:88:52:a9:89: 76:c1:78:1b:93:f7:ef:68:e0:ab:63:a4:8f:6e:a5: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5F:38:A2:86:C5:5C:89:4A:67:70:E5:B3:99:C1:19:B9:14:B5:AF X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-V84oobFXIlKZ3Dls5nBGbkUta8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.195.0/24 Signature Algorithm: sha256WithRSAEncryption a2:ba:ad:4a:98:07:d1:4f:ca:40:7f:03:bd:af:7c:a1:1e:4b: 23:7a:71:05:58:0d:c0:b6:93:79:55:6f:d2:2a:93:d3:ac:be: 84:93:d6:d4:c3:1f:28:b9:63:aa:2d:26:63:68:ba:68:4c:8d: 24:e7:31:2a:7e:a4:6b:c6:f3:ca:15:0a:5c:5b:4d:c7:f8:ae: 15:7f:b6:f4:58:24:e4:11:39:47:cb:46:8b:da:b8:14:04:43: a1:cd:18:12:d5:0d:73:3b:fc:0f:e6:82:5a:68:e5:8e:fa:ec: 86:fd:63:56:72:24:57:0a:d0:3f:1e:b9:d1:f4:18:0b:14:72: cf:5d:c7:4b:b1:c3:5c:3f:85:0a:80:c7:16:35:74:75:ec:65: 3f:c3:fb:84:27:c8:a9:dc:e0:0a:3f:56:95:ed:38:85:de:2d: 34:10:40:23:a4:4b:9b:5b:99:4a:2e:d0:27:85:28:51:d1:d9: cd:18:ba:34:88:41:91:bb:ea:63:28:b0:d0:93:eb:99:9e:65: b0:63:94:ec:92:d8:69:8a:87:6c:81:18:8e:67:1d:00:6f:dc: dd:7d:02:26:1b:98:be:84:33:75:d6:65:96:df:0f:a4:10:8a: 89:9a:18:70:27:e6:34:3f:93:87:d7:c7:d1:46:2f:32:4b:b1: 9f:ca:f9:c5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yoQXHOJQkldrX7j7OR+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTVmMzhhMjg2YzU1Yzg5NGE2NzcwZTViMzk5YzExOWI5MTRiNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf3pOVD0KK10xKJrsOXKoTovwLRX A+IZxpJSRicdqF3pK3wQr2b+akHqVDPR+PjqqZwWM21+uY4qc7wbB0SvTaIijEJM HuIFhWJRuHSMsMBR4KmGmBM/T2Q8uTJpRmULvD7Hms/2qvpdYAU+z0mqgX28QLoM yd1+qODgVTxFZc6AaFEkRY2eqf1Cl8mwbn38DsRToXsE1KeNN5LF1h/9TDd2038J zm+aEyqErk34RewShLv6ivVQFWwcethpolbBRv1+gA0MRnPK9V4ShcaLC3NXArws x6EuvoRVyZ31Jge156P4VOw4bsgAS4hSqYl2wXgbk/fvaOCrY6SPbqXSnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlfOKKGxVyJSmdw5bOZwRm5FLWvMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvMS1WODRvb2JGWElsS1ozRGxzNW5CR2JrVXRhOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmEvYzVhOWUzLTY3MjItNGI2YS1iZTU4LWFkYTVjMjBlM2Y3 Yi8xL0hIclhkVWVWM2RZRjhvZzR1M3pEV2Q5Nkptby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnZwzAN BgkqhkiG9w0BAQsFAAOCAQEAorqtSpgH0U/KQH8Dva98oR5LI3pxBVgNwLaTeVVv 0iqT06y+hJPW1MMfKLljqi0mY2i6aEyNJOcxKn6ka8bzyhUKXFtNx/iuFX+29Fgk 5BE5R8tGi9q4FARDoc0YEtUNczv8D+aCWmjljvrshv1jVnIkVwrQPx650fQYCxRy z13HS7HDXD+FCoDHFjV0dexlP8P7hCfIqdzgCj9Wle04hd4tNBBAI6RLm1uZSi7Q J4UoUdHZzRi6NIhBkbvqYyiw0JPrmZ5lsGOU7JLYaYqHbIEYjmcdAG/c3X0CJhuY voQzddZllt8PpBCKiZoYcCfmND+Th9fH0UYvMkuxn8r5xQ== -----END CERTIFICATE-----Generated at Wed Jan 21 18:21:46 2026 by rpki-client