This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa File: 1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa (raw, json) Hash identifier: NsL25xCV1UtSE0/W9VwZvUIiaucE1NUxNcTSiDnaYao= Subject key identifier: F9:FF:E0:01:BF:94:42:EC:A9:B3:F2:0F:23:73:3C:BD:08:51:B4:6A Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245 Certificate serial: 019B7D5C71207C757829A0B6F640994ED089 Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa Signing time: Fri 02 Jan 2026 06:19:28 +0000 ROA not before: Fri 02 Jan 2026 06:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.243.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:71:20:7c:75:78:29:a0:b6:f6:40:99:4e:d0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245 Validity Not Before: Jan 2 06:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9ffe001bf9442eca9b3f20f23733cbd0851b46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:1a:23:69:a8:ea:f0:95:89:0b:a0:51:42: a4:35:d4:75:3d:17:96:1b:5b:d2:eb:25:06:ba:d1: b0:70:e3:7e:6e:a6:5d:4f:7d:f5:64:99:22:b9:86: 97:71:3c:7b:f5:a8:17:1e:85:fe:aa:33:63:a6:85: f4:49:d8:38:3c:36:3e:98:13:e0:de:de:ec:c0:6a: 8e:e3:f6:82:1c:57:48:94:7b:a0:9b:e5:52:f5:50: fc:6e:69:b4:3c:2b:dd:2a:cf:5e:20:7c:84:79:7d: cb:a1:35:d8:c3:25:60:f5:0c:83:01:d4:e1:88:38: c7:d4:ba:03:d9:a1:6a:85:1c:99:33:a2:1e:ce:30: a7:a5:43:01:f2:d8:3f:89:fb:06:27:d7:0e:4b:68: 79:bc:2f:56:75:73:03:8f:b0:a6:92:ba:05:f5:c1: 55:59:f1:45:e2:c6:da:32:f3:3a:8c:35:44:df:54: 5d:85:56:79:e2:5b:d2:4d:00:34:f9:74:ea:21:20: 25:c2:89:9a:08:9d:f8:0f:cd:30:f2:85:ff:ff:91: 9b:48:93:74:9e:f1:c1:37:17:66:e7:1a:fc:36:69: ea:cd:aa:d1:e5:c8:64:a1:99:cd:f5:b9:94:09:93: ba:81:85:63:db:a9:be:c7:18:8e:27:40:4f:be:43: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:E0:01:BF:94:42:EC:A9:B3:F2:0F:23:73:3C:BD:08:51:B4:6A X509v3 Authority Key Identifier: keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.128.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:60:34:30:fa:8e:bb:85:3c:8e:8a:73:63:aa:3f:fb:4b:d9: 35:ce:da:88:ed:53:a9:4f:7c:66:25:bb:49:43:9b:b3:21:91: 59:6c:a1:eb:b4:95:96:bd:e9:f3:34:39:dd:75:0b:7d:15:57: 5f:6a:3d:55:46:83:69:98:22:03:f6:d2:7b:92:6c:ce:14:ab: 88:b1:88:80:e8:b5:61:5d:c2:ae:3b:73:86:59:4a:56:70:9b: cc:2b:cd:dd:3f:01:98:f7:0a:bb:5d:b1:f4:ea:c9:de:51:ef: b3:45:6a:d0:bc:15:b5:8b:cc:15:9a:dd:bb:0b:22:f9:b4:25: d5:15:35:be:98:e6:1a:62:28:ee:ce:1b:97:18:13:31:0e:00: 1c:d0:bc:4c:de:8f:a0:ae:92:1b:cf:d1:e4:7e:71:df:e7:34: 46:82:72:47:0e:8b:28:11:b9:e7:2d:f8:8f:50:31:2c:42:4b: 50:8a:70:dd:85:04:65:14:dd:eb:0b:af:85:6e:31:5c:44:ab: 3a:b8:19:bf:03:e4:cc:88:80:5e:fe:e7:a6:e1:f8:1d:97:ed: bb:10:63:1f:5e:64:35:a6:d9:83:45:d6:2e:53:ea:f4:aa:63: e5:25:c5:cf:4f:1e:6d:ce:f5:f4:07:89:c5:46:f5:25:ee:d3: c7:ce:74:a2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XHEgfHV4KaC29kCZTtCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDViM2QzNzlkMjExNjJlMmI1MjJjNDM4MDFmYjk2MDM5 ODgyNDUwHhcNMjYwMTAyMDYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWZmZTAwMWJmOTQ0MmVjYTliM2YyMGYyMzczM2NiZDA4NTFiNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpsaI2mo6vCViQugUUKkNdR1PReW G1vS6yUGutGwcON+bqZdT331ZJkiuYaXcTx79agXHoX+qjNjpoX0Sdg4PDY+mBPg 3t7swGqO4/aCHFdIlHugm+VS9VD8bmm0PCvdKs9eIHyEeX3LoTXYwyVg9QyDAdTh iDjH1LoD2aFqhRyZM6IezjCnpUMB8tg/ifsGJ9cOS2h5vC9WdXMDj7CmkroF9cFV WfFF4sbaMvM6jDVE31RdhVZ54lvSTQA0+XTqISAlwomaCJ34D80w8oX//5GbSJN0 nvHBNxdm5xr8NmnqzarR5chkoZnN9bmUCZO6gYVj26m+xxiOJ0BPvkNy+QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPn/4AG/lELsqbPyDyNzPL0IUbRqMB8GA1UdIwQY MBaAFLjVs9N50hFi4rUixDgB+5YDmIJFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMt YjNlOTI1NWQyYjNlLzEvMS1mX2dBYi1VUXV5cHNfSVBJM004dlFoUnRHby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzUvZWYzZTQzLTdiZjctNDA0Zi1hOWEzLWIzZTkyNTVkMmIz ZS8xL3VOV3owM25TRVdMaXRTTEVPQUg3bGdPWWdrVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnzgDAN BgkqhkiG9w0BAQsFAAOCAQEAjWA0MPqOu4U8jopzY6o/+0vZNc7aiO1TqU98ZiW7 SUObsyGRWWyh67SVlr3p8zQ53XULfRVXX2o9VUaDaZgiA/bSe5JszhSriLGIgOi1 YV3CrjtzhllKVnCbzCvN3T8BmPcKu12x9OrJ3lHvs0Vq0LwVtYvMFZrduwsi+bQl 1RU1vpjmGmIo7s4blxgTMQ4AHNC8TN6PoK6SG8/R5H5x3+c0RoJyRw6LKBG55y34 j1AxLEJLUIpw3YUEZRTd6wuvhW4xXESrOrgZvwPkzIiAXv7npuH4HZftuxBjH15k NabZg0XWLlPq9Kpj5SXFz08ebc719AeJxUb1Je7Tx850og== -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:53 2026 by rpki-client