This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa File: 1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa (raw, json) Hash identifier: P4rr0sjF2JMQ0Puk//ntxlDU0c1i5ZoIeElt4H2LfSA= Subject key identifier: F8:5E:9A:E7:42:AD:41:CB:B7:D4:F4:FA:C7:F1:7D:67:FB:9A:0D:FB Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617 Certificate serial: 019B78A32FD0E065FD01146E4BC2F51C6CAC Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57711 IP address blocks: 171.25.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2f:d0:e0:65:fd:01:14:6e:4b:c2:f5:1c:6c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f85e9ae742ad41cbb7d4f4fac7f17d67fb9a0dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:43:3e:b3:b1:f6:01:08:9c:a0:71:40:7d: f4:5c:ae:54:67:0e:f7:26:43:1d:58:30:18:13:10: 84:db:68:54:f1:2f:22:f4:f0:71:99:e9:6f:8e:ce: 68:55:d5:65:ec:f6:da:6d:77:7f:c0:86:6a:37:f1: 53:2c:06:94:6a:fb:0e:62:ef:f7:20:66:2e:5e:71: a9:0c:43:2f:9d:39:0a:fe:11:72:e7:18:48:57:fa: 79:14:a7:db:ad:ed:01:be:3a:0c:0e:b3:a2:f0:61: f6:0e:de:a9:70:1b:cb:d7:4f:6e:a6:58:be:ea:ff: 60:32:3f:79:3e:01:a9:cf:0d:fb:94:2c:b4:62:f8: 66:18:46:63:af:07:53:62:08:17:9c:ea:55:49:71: 40:e9:92:2f:21:fe:b6:32:4b:d4:e0:ec:e4:b6:ba: e3:7f:f3:ba:8e:58:32:78:64:84:10:fe:0e:9c:86: f7:5c:62:29:bc:1b:d8:b2:70:d9:48:3d:fc:b4:02: 3e:72:b7:77:bc:68:d7:84:36:2d:a3:c5:36:dc:2b: ec:f1:d3:44:ad:b7:e5:8f:be:15:52:2c:44:84:8a: f2:19:54:bf:e6:a0:d2:12:41:49:95:6f:58:f0:67: 3a:ff:c4:ac:b3:6f:95:c8:4a:42:52:a6:08:34:87: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5E:9A:E7:42:AD:41:CB:B7:D4:F4:FA:C7:F1:7D:67:FB:9A:0D:FB X509v3 Authority Key Identifier: keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.248.0/22 Signature Algorithm: sha256WithRSAEncryption 41:a9:d9:5f:16:62:f4:93:71:fd:31:8e:5e:07:c0:86:59:bf: 15:dd:f5:b9:3e:ea:26:69:49:8b:6f:ae:00:55:93:7b:48:c0: b7:79:df:6b:2f:69:18:64:12:1b:22:eb:a0:53:25:b9:a2:c5: 3d:39:85:52:13:8a:ea:bc:aa:d7:2a:8c:b9:eb:68:14:8c:14: fd:44:b0:cb:b4:42:f2:41:b7:09:78:34:56:06:d7:a6:35:46: a4:2a:ef:d7:94:bd:9d:8d:86:7f:22:91:7c:7f:7f:cf:62:ae: 67:92:50:0e:5e:b7:7a:42:58:b6:4c:90:75:8d:0a:cc:45:64: c9:57:2b:a0:79:17:4c:6c:e5:45:3a:b8:44:e2:8a:5f:90:51: 60:39:66:9a:8b:82:68:4a:cf:b5:f7:df:ce:4d:0b:ea:ae:2b: 77:d8:b2:db:0c:20:f8:7e:23:4a:3f:d9:4f:5f:01:5f:19:61: 7b:a8:cf:06:e1:f4:0d:35:9d:fd:b6:dc:41:bf:59:f1:a0:53: 61:79:0b:94:ab:27:d9:b3:73:4e:91:f4:ec:96:3f:f0:be:ee: 9e:d2:12:94:0b:7c:c3:e2:58:bc:f5:94:88:d1:5e:7e:4d:97: dc:bf:af:7b:43:b3:7b:fe:ab:17:17:f9:47:a6:86:bf:ec:0e: fa:2f:e4:04 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oy/Q4GX9ARRuS8L1HGysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZGU0YzNiNmRhYTVhNjk4YmYzMDdjYzM5MTI4MmFiMjk4 N2Q2MTcwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODVlOWFlNzQyYWQ0MWNiYjdkNGY0ZmFjN2YxN2Q2N2ZiOWEwZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6JDPrOx9gEInKBxQH30XK5UZw73 JkMdWDAYExCE22hU8S8i9PBxmelvjs5oVdVl7PbabXd/wIZqN/FTLAaUavsOYu/3 IGYuXnGpDEMvnTkK/hFy5xhIV/p5FKfbre0BvjoMDrOi8GH2Dt6pcBvL109upli+ 6v9gMj95PgGpzw37lCy0YvhmGEZjrwdTYggXnOpVSXFA6ZIvIf62MkvU4Ozktrrj f/O6jlgyeGSEEP4OnIb3XGIpvBvYsnDZSD38tAI+crd3vGjXhDYto8U23Cvs8dNE rbflj74VUixEhIryGVS/5qDSEkFJlW9Y8Gc6/8Sss2+VyEpCUqYINIftWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhemudCrUHLt9T0+sfxfWf7mg37MB8GA1UdIwQY MBaAFKPeTDttqlppi/MHzDkSgqsph9YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzlmYmUtMTcyNS00MTE2LTllZjMt MGFmMmM1YzRjYzBmLzEvMS1GNmE1MEt0UWN1MzFQVDZ4X0Y5Wl91YURmcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzUvNGM5ZmJlLTE3MjUtNDExNi05ZWYzLTBhZjJjNWM0Y2Mw Zi8xL285NU1PMjJxV21tTDh3Zk1PUktDcXltSDFoYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqsZ+DAN BgkqhkiG9w0BAQsFAAOCAQEAQanZXxZi9JNx/TGOXgfAhlm/Fd31uT7qJmlJi2+u AFWTe0jAt3nfay9pGGQSGyLroFMluaLFPTmFUhOK6ryq1yqMuetoFIwU/USwy7RC 8kG3CXg0VgbXpjVGpCrv15S9nY2GfyKRfH9/z2KuZ5JQDl63ekJYtkyQdY0KzEVk yVcroHkXTGzlRTq4ROKKX5BRYDlmmouCaErPtfffzk0L6q4rd9iy2wwg+H4jSj/Z T18BXxlhe6jPBuH0DTWd/bbcQb9Z8aBTYXkLlKsn2bNzTpH07JY/8L7untISlAt8 w+JYvPWUiNFefk2X3L+ve0Oze/6rFxf5R6aGv+wO+i/kBA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:01 2026 by rpki-client