This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1TrO_2QXOs4ws94dhqYyKBz0bHM.roa File: 1TrO_2QXOs4ws94dhqYyKBz0bHM.roa (raw, json) Hash identifier: Ey59AA0KuyADSpp05wiPpigWt7/yZ3FbbIAOHS5yrug= Subject key identifier: D5:3A:CE:FF:64:17:3A:CE:30:B3:DE:1D:86:A6:32:28:1C:F4:6C:73 Certificate issuer: /CN=d55d0f8888edc920868c661622f643744e6e56c8 Certificate serial: 019B7CED40CFE0F507F74C2C0C637EF8E732 Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1TrO_2QXOs4ws94dhqYyKBz0bHM.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51001 IP address blocks: 185.158.236.0/24 maxlen: 24 185.158.237.0/24 maxlen: 24 185.158.238.0/24 maxlen: 24 185.158.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:40:cf:e0:f5:07:f7:4c:2c:0c:63:7e:f8:e7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d53aceff64173ace30b3de1d86a632281cf46c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:96:62:95:d5:ce:53:7a:cc:64:48:ec:58: d9:00:83:59:15:fa:02:7b:d7:8c:d6:21:8a:c1:34: 3c:a3:bb:4d:95:2f:6c:5d:ac:a7:ef:86:42:af:cc: 6a:00:ef:ac:e9:9e:21:3d:1e:30:b0:a9:3c:b3:c7: 74:5f:48:ce:c5:5a:b6:34:44:0a:21:7c:52:4d:46: 6b:53:99:85:0c:55:35:f7:65:11:a2:58:7b:72:81: 36:b0:5f:56:3c:08:73:0a:3c:75:99:fa:a8:d6:f6: ef:89:ba:30:69:59:ce:f7:c3:7c:1b:f3:a5:59:aa: c4:4e:7c:8c:86:3e:70:fb:c6:7d:90:9e:28:0f:de: 8b:0e:7c:56:f9:a9:41:d6:17:1f:18:d9:6a:de:f8: ef:67:b3:de:ea:d5:d8:cf:e0:e0:67:bd:82:a1:4b: e7:53:e8:ff:9e:60:88:d4:7b:f2:8e:b0:66:c6:dc: f5:2d:86:7c:d2:13:f2:3f:80:c9:89:86:53:36:68: fa:c5:3e:62:82:2b:b1:9d:a4:1e:74:48:a7:f2:58: 0b:3d:9d:e4:55:42:31:b3:c1:d6:98:e7:7c:68:27: 83:17:f9:cc:9f:e8:06:3c:ed:23:96:6d:07:a3:d1: e2:9a:22:0b:a3:6b:d2:1e:7c:9c:ea:c3:eb:1e:be: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3A:CE:FF:64:17:3A:CE:30:B3:DE:1D:86:A6:32:28:1C:F4:6C:73 X509v3 Authority Key Identifier: keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1TrO_2QXOs4ws94dhqYyKBz0bHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.236.0/22 Signature Algorithm: sha256WithRSAEncryption 89:6c:a7:f9:e4:3f:42:9e:d3:67:4f:66:c5:eb:cd:2b:43:e6: 75:e3:df:70:20:f3:92:7e:55:b3:18:87:4b:80:cc:c0:45:50: 7c:a2:df:cb:98:28:2b:83:de:8c:75:84:62:1b:22:f3:8e:aa: 77:86:6c:bb:d9:e8:a7:04:ed:34:b4:2d:a5:06:aa:3d:46:fc: 48:ef:81:f8:0b:2b:c1:c3:82:6f:bf:f6:14:2f:18:0a:ef:d2: c4:90:13:e9:2a:a8:8e:42:45:5d:5a:5f:e3:f4:73:35:6f:88: 3c:c8:01:6f:04:11:2c:16:31:69:a4:7b:64:ad:8f:dd:7f:cb: df:e1:63:95:df:3f:78:41:70:52:b8:49:d4:65:84:2a:47:23: 55:77:64:9f:f4:a3:bc:83:2f:0f:37:89:6e:f3:56:fa:46:b9: cd:d3:bb:bc:f6:3f:72:e7:f6:33:a9:05:ac:7e:fd:d5:fa:f4: be:00:56:95:4c:10:7f:95:af:c2:56:7a:d0:e7:a9:29:82:03: fe:9f:a2:3a:b9:4f:b1:c4:dd:e6:85:00:44:85:a8:2d:8d:ae: 7a:ef:73:e9:9a:77:89:7e:62:55:17:1d:b8:8d:96:e7:4f:98: 80:ae:1b:3e:53:82:88:d9:16:f7:52:91:9d:50:7f:26:be:42: 1e:8f:40:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87UDP4PUH90wsDGN++OcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NWQwZjg4ODhlZGM5MjA4NjhjNjYxNjIyZjY0Mzc0NGU2 ZTU2YzgwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTNhY2VmZjY0MTczYWNlMzBiM2RlMWQ4NmE2MzIyODFjZjQ2YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQyWYpXVzlN6zGRI7FjZAINZFfoC e9eM1iGKwTQ8o7tNlS9sXayn74ZCr8xqAO+s6Z4hPR4wsKk8s8d0X0jOxVq2NEQK IXxSTUZrU5mFDFU192URolh7coE2sF9WPAhzCjx1mfqo1vbvibowaVnO98N8G/Ol WarETnyMhj5w+8Z9kJ4oD96LDnxW+alB1hcfGNlq3vjvZ7Pe6tXYz+DgZ72CoUvn U+j/nmCI1HvyjrBmxtz1LYZ80hPyP4DJiYZTNmj6xT5igiuxnaQedEin8lgLPZ3k VUIxs8HWmOd8aCeDF/nMn+gGPO0jlm0Ho9HimiILo2vSHnyc6sPrHr4PyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNU6zv9kFzrOMLPeHYamMigc9GxzMB8GA1UdIwQY MBaAFNVdD4iI7ckghoxmFiL2Q3ROblbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgt ZGU0MGRhYTI2ODRkLzEvMVRyT18yUVhPczR3czk0ZGhxWXlLQnowYkhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgtZGU0MGRhYTI2ODRk LzEvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ7sMA0G CSqGSIb3DQEBCwUAA4IBAQCJbKf55D9CntNnT2bF680rQ+Z1499wIPOSflWzGIdL gMzARVB8ot/LmCgrg96MdYRiGyLzjqp3hmy72einBO00tC2lBqo9RvxI74H4CyvB w4Jvv/YULxgK79LEkBPpKqiOQkVdWl/j9HM1b4g8yAFvBBEsFjFppHtkrY/df8vf 4WOV3z94QXBSuEnUZYQqRyNVd2Sf9KO8gy8PN4lu81b6RrnN07u89j9y5/YzqQWs fv3V+vS+AFaVTBB/la/CVnrQ56kpggP+n6I6uU+xxN3mhQBEhagtja5673PpmneJ fmJVFx24jZbnT5iArhs+U4KI2Rb3UpGdUH8mvkIej0CN -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:15 2026 by rpki-client