This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/1-DM1gd0DhDPlBxIiN43VyzDdiBc.roa File: 1-DM1gd0DhDPlBxIiN43VyzDdiBc.roa (raw, json) Hash identifier: OQEFPc3xHZLNWfUSpSuD4aqC+ajoqGZTHNMTBwY2RZs= Subject key identifier: F8:33:35:81:DD:03:84:33:E5:07:12:22:37:8D:D5:CB:30:DD:88:17 Certificate issuer: /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07 Certificate serial: 019B7BA38980BF91A42D90454381FDA27C5D Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/1-DM1gd0DhDPlBxIiN43VyzDdiBc.roa Signing time: Thu 01 Jan 2026 22:17:53 +0000 ROA not before: Thu 01 Jan 2026 22:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212975 IP address blocks: 185.115.72.0/23 maxlen: 23 185.115.74.0/23 maxlen: 23 2a01:9647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:89:80:bf:91:a4:2d:90:45:43:81:fd:a2:7c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07 Validity Not Before: Jan 1 22:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8333581dd038433e5071222378dd5cb30dd8817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:db:0d:32:63:8c:f8:9a:5c:79:47:31:2a:04: 04:a2:c4:de:90:bb:1a:1d:d4:2c:ee:87:d4:ae:52: 01:c6:f1:14:0f:67:51:ca:25:f3:54:26:d4:e5:fc: 06:1e:62:b1:e4:45:fb:cc:47:a6:ae:2b:ad:64:97: bb:52:32:6a:94:a6:c7:86:b5:08:b0:ac:80:7d:5b: 05:d1:d6:3a:66:28:17:04:b0:48:ff:82:20:43:7b: ca:30:d6:3e:48:98:b3:dd:61:82:a7:e2:18:0d:04: ca:39:b9:62:84:2f:f0:7e:df:b3:78:22:5d:37:6e: 18:3d:6d:ca:81:14:51:c4:1c:52:37:72:c9:c3:2d: f9:83:b8:c7:6b:2b:37:51:6d:66:7c:bd:3a:c4:45: 6a:dc:54:4b:a8:3e:9c:b8:1d:af:f3:16:d3:86:6d: ab:86:9c:b7:89:e3:e2:eb:11:68:1f:bf:4b:e9:df: ef:ba:61:2d:9d:1b:4f:b8:e3:2d:2c:1f:db:79:5b: 85:9d:10:a0:ac:c5:13:da:d7:91:db:d0:4e:e6:36: 8b:d6:09:4e:b2:a3:8d:e7:e2:1c:e8:f2:3a:52:52: 2c:28:f2:4c:c5:a7:95:32:42:85:7a:ba:30:d2:a8: 21:30:c2:9f:d0:12:a2:85:43:ea:ee:4c:86:99:ff: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:35:81:DD:03:84:33:E5:07:12:22:37:8D:D5:CB:30:DD:88:17 X509v3 Authority Key Identifier: keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/1-DM1gd0DhDPlBxIiN43VyzDdiBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.72.0/22 IPv6: 2a01:9647::/32 Signature Algorithm: sha256WithRSAEncryption 05:09:46:dd:13:15:70:2d:fb:eb:26:7d:28:5d:c0:9c:fc:dc: 58:ad:97:4c:e9:38:19:e5:61:eb:df:70:01:0d:46:74:0c:a1: 8a:8d:79:78:ae:f8:ab:de:78:21:df:59:9f:1e:b3:f2:f8:ff: 16:f2:62:28:5b:7b:31:b4:29:5f:ec:06:07:9d:19:2f:2f:b2: fa:20:84:46:5d:dc:c1:2b:81:b9:17:98:9b:57:1e:06:43:09: b7:cd:ec:f4:a1:73:b3:8b:06:af:ec:f9:9a:6b:57:7e:7c:19: 66:b0:97:e5:96:f5:e0:42:2e:c4:3a:90:09:29:71:b3:57:49: dd:69:01:89:b8:ca:13:40:19:92:9c:14:ef:64:a4:58:32:0d: ac:8d:58:85:56:1d:bf:01:d9:19:c3:90:01:d5:c1:0b:cc:7a: 2a:f3:19:7b:b9:d1:6c:29:ab:2a:44:b4:59:72:cd:ca:1d:13: f3:0c:20:99:63:55:f7:1f:ee:e0:1b:b7:51:e3:1d:c3:97:45: 14:76:78:22:c7:ec:0e:84:69:e2:88:81:30:df:86:fe:e3:fb: 96:cf:46:c6:5b:c1:7a:ed:19:a1:11:a4:1e:e1:4b:eb:bb:f1: 6b:21:bb:44:94:27:4e:5b:0b:9f:90:49:f5:2f:de:b6:71:72: 88:87:e1:3d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7o4mAv5GkLZBFQ4H9onxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYThlYTNhMjI4OGE2YWY4ZjY0YTgzODMwMDJjNzQwODU1 NzlhMDcwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODMzMzU4MWRkMDM4NDMzZTUwNzEyMjIzNzhkZDVjYjMwZGQ4ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tsNMmOM+JpceUcxKgQEosTekLsa HdQs7ofUrlIBxvEUD2dRyiXzVCbU5fwGHmKx5EX7zEemriutZJe7UjJqlKbHhrUI sKyAfVsF0dY6ZigXBLBI/4IgQ3vKMNY+SJiz3WGCp+IYDQTKOblihC/wft+zeCJd N24YPW3KgRRRxBxSN3LJwy35g7jHays3UW1mfL06xEVq3FRLqD6cuB2v8xbThm2r hpy3iePi6xFoH79L6d/vumEtnRtPuOMtLB/beVuFnRCgrMUT2teR29BO5jaL1glO sqON5+Ic6PI6UlIsKPJMxaeVMkKFerow0qghMMKf0BKihUPq7kyGmf9vDQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPgzNYHdA4Qz5QcSIjeN1csw3YgXMB8GA1UdIwQY MBaAFBuo6joiiKavj2SoODACx0CFV5oHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZqcU9pS0lwcS1QWktnNE1BTEhRSVZYbWdjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jMGIyODMtODhiOS00M2NkLWIwOGYt YThlYTQzMjUzZWQ1LzEvMS1ETTFnZDBEaERQbEJ4SWlONDNWeXpEZGlCYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzcvYzBiMjgzLTg4YjktNDNjZC1iMDhmLWE4ZWE0MzI1M2Vk NS8xL0c2anFPaUtJcHEtUFpLZzRNQUxIUUlWWG1nYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlzSDAN BAIAAjAHAwUAKgGWRzANBgkqhkiG9w0BAQsFAAOCAQEABQlG3RMVcC376yZ9KF3A nPzcWK2XTOk4GeVh699wAQ1GdAyhio15eK74q954Id9Znx6z8vj/FvJiKFt7MbQp X+wGB50ZLy+y+iCERl3cwSuBuReYm1ceBkMJt83s9KFzs4sGr+z5mmtXfnwZZrCX 5Zb14EIuxDqQCSlxs1dJ3WkBibjKE0AZkpwU72SkWDINrI1YhVYdvwHZGcOQAdXB C8x6KvMZe7nRbCmrKkS0WXLNyh0T8wwgmWNV9x/u4Bu3UeMdw5dFFHZ4IsfsDoRp 4oiBMN+G/uP7ls9GxlvBeu0ZoRGkHuFL67vxayG7RJQnTlsLn5BJ9S/etnFyiIfh PQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:56 2026 by rpki-client