This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa File: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (raw, json) Hash identifier: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw= Subject key identifier: FA:CA:71:AE:D0:03:E2:85:DB:AC:4D:11:1F:38:E0:C0:4C:A8:F5:D7 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA7FD3747FB8A667164B1DDDC0DE95 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 185.217.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7f:d3:74:7f:b8:a6:67:16:4b:1d:dd:c0:de:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faca71aed003e285dbac4d111f38e0c04ca8f5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e4:64:d4:f9:4b:ff:9b:0f:e3:af:78:97:dc: 92:be:ef:f7:39:9d:ca:46:4d:ab:99:7c:9d:11:dc: a6:07:19:19:c3:fb:09:b3:6e:9d:71:10:33:2b:91: 75:c5:50:85:2a:71:e5:eb:64:cd:d1:85:c7:56:5f: 85:cc:13:43:cb:9c:f1:82:ec:a5:b4:4f:ed:8b:5f: 3d:31:96:98:c1:ea:b5:1d:51:44:5d:ed:af:38:3c: bd:f4:0a:91:f4:68:b6:bd:67:6b:08:f7:d6:f2:6e: e5:b1:97:4e:19:4b:9f:d9:f3:8f:e4:02:d1:c2:a5: d0:b1:46:37:46:e2:3f:27:24:6a:01:ed:bb:27:13: b3:01:bc:c5:51:f1:91:33:60:c5:70:15:f1:77:64: dc:63:38:1c:1f:8d:dd:59:e6:2f:de:83:fa:0e:af: b6:03:4e:20:85:af:ed:0e:cd:fd:4f:32:e4:fe:48: e2:c7:9e:be:35:35:7b:3a:5d:5a:ae:50:1d:c4:d9: 96:3f:1b:9b:b7:eb:fa:ea:b0:41:89:4b:64:6d:62: 72:80:f7:ff:24:ee:0f:51:6c:b9:65:6a:85:c3:86: 44:cf:7f:7f:a0:2e:dd:83:58:61:7d:ca:64:f7:39: 29:e0:db:02:a6:b2:b0:41:8e:03:00:12:d4:63:16: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CA:71:AE:D0:03:E2:85:DB:AC:4D:11:1F:38:E0:C0:4C:A8:F5:D7 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.194.0/24 Signature Algorithm: sha256WithRSAEncryption 91:3a:6b:e4:38:b2:2d:de:9e:05:ca:a0:da:12:79:3a:25:3c: b2:36:14:57:63:36:6e:93:81:f9:b4:20:5e:bd:d9:e9:d5:95: bb:33:18:0a:2f:08:f3:99:05:47:42:ec:98:72:6e:db:4a:58: 39:74:4c:a5:2a:75:31:df:5c:0f:5b:16:37:7e:81:92:29:da: 8d:d8:e6:cb:19:f0:1b:b6:ea:7a:94:76:1b:47:6b:85:22:5f: b0:ba:0f:52:0f:31:2f:ba:e9:91:ef:bc:89:58:7e:01:05:2d: cf:ba:55:84:49:a2:45:75:c5:00:be:f9:e5:d2:41:19:bf:6c: 01:5b:9d:5d:08:26:5c:ea:23:f1:a9:06:a0:3c:86:86:af:ae: cc:3e:e0:2a:dd:b4:fb:6b:55:3c:7b:19:58:89:74:41:c2:09: 50:ff:04:d1:b2:eb:68:7f:45:5c:c3:f0:e1:00:e9:8b:c5:5f: 4e:fb:e3:2e:6e:82:da:23:f8:d9:38:59:52:4b:27:12:7a:78: 7e:d3:dd:72:a6:89:87:67:2a:05:d6:50:0d:c1:a9:63:8c:24: 38:4f:0c:ab:de:36:2d:f5:57:9a:c0:27:18:ce:55:b2:4f:f1: 69:50:d7:d7:fe:de:ab:3d:cf:b1:44:23:1e:c5:ef:a1:ef:9c: cd:05:78:a0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yn/TdH+4pmcWSx3dwN6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWNhNzFhZWQwMDNlMjg1ZGJhYzRkMTExZjM4ZTBjMDRjYThmNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uRk1PlL/5sP4694l9ySvu/3OZ3K Rk2rmXydEdymBxkZw/sJs26dcRAzK5F1xVCFKnHl62TN0YXHVl+FzBNDy5zxguyl tE/ti189MZaYweq1HVFEXe2vODy99AqR9Gi2vWdrCPfW8m7lsZdOGUuf2fOP5ALR wqXQsUY3RuI/JyRqAe27JxOzAbzFUfGRM2DFcBXxd2TcYzgcH43dWeYv3oP6Dq+2 A04gha/tDs39TzLk/kjix56+NTV7Ol1arlAdxNmWPxubt+v66rBBiUtkbWJygPf/ JO4PUWy5ZWqFw4ZEz39/oC7dg1hhfcpk9zkp4NsCprKwQY4DABLUYxYoAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPrKca7QA+KF26xNER844MBMqPXXMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvMS1zcHhydEFENG9YYnJFMFJIempnd0V5bzlkYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmEvYzVhOWUzLTY3MjItNGI2YS1iZTU4LWFkYTVjMjBlM2Y3 Yi8xL0hIclhkVWVWM2RZRjhvZzR1M3pEV2Q5Nkptby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnZwjAN BgkqhkiG9w0BAQsFAAOCAQEAkTpr5DiyLd6eBcqg2hJ5OiU8sjYUV2M2bpOB+bQg Xr3Z6dWVuzMYCi8I85kFR0LsmHJu20pYOXRMpSp1Md9cD1sWN36Bkinajdjmyxnw G7bqepR2G0drhSJfsLoPUg8xL7rpke+8iVh+AQUtz7pVhEmiRXXFAL755dJBGb9s AVudXQgmXOoj8akGoDyGhq+uzD7gKt20+2tVPHsZWIl0QcIJUP8E0bLraH9FXMPw 4QDpi8VfTvvjLm6C2iP42ThZUksnEnp4ftPdcqaJh2cqBdZQDcGpY4wkOE8Mq942 LfVXmsAnGM5Vsk/xaVDX1/7eqz3PsUQjHsXvoe+czQV4oA== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:43 2026 by rpki-client