This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1fCKtzPJ1_45f-LiWD3bxmByJVY.roa File: 1fCKtzPJ1_45f-LiWD3bxmByJVY.roa (raw, json) Hash identifier: S5MFM5vElDoehjQ4z/xQ1lwyRX3CEWSME3qF1TOOSoM= Subject key identifier: D5:F0:8A:B7:33:C9:D7:FE:39:7F:E2:E2:58:3D:DB:C6:60:72:25:56 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFF4943D8D3F08FF7A5DD4728C2BE Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1fCKtzPJ1_45f-LiWD3bxmByJVY.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12402 IP address blocks: 83.212.28.0/22 maxlen: 22 83.212.236.0/22 maxlen: 22 195.251.224.0/21 maxlen: 21 195.251.236.0/23 maxlen: 23 2001:648:24a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ff:49:43:d8:d3:f0:8f:f7:a5:dd:47:28:c2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f08ab733c9d7fe397fe2e2583ddbc660722556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:ce:5e:fc:65:ee:47:9b:1a:6c:78:54:16: 62:8f:bb:a6:e2:ad:3b:d9:16:60:73:41:8a:9d:bf: 2a:ca:6b:99:8f:39:dc:8c:48:c9:50:db:c0:c2:8a: f5:2c:76:26:96:30:83:bd:4e:ec:d0:fa:e0:e8:90: c0:ac:d9:e1:d0:30:89:65:ec:00:ef:1e:0d:e3:ba: 9c:3a:a9:57:85:9c:47:89:84:ca:47:91:ef:35:f9: ee:2d:eb:38:16:b0:12:aa:e5:c9:6b:96:0b:dc:8f: 9f:ed:83:2a:b8:19:06:b0:5c:fe:9c:94:f3:02:4b: c2:7e:69:1f:09:42:37:f3:e3:8c:0a:80:63:aa:14: 66:77:71:a8:77:97:33:bb:a7:9f:c5:a5:5f:ab:75: 1a:c4:a1:3d:d8:50:07:8c:de:6a:26:2f:1c:a5:ab: bc:c9:35:07:26:ac:71:6a:33:bd:87:7c:0c:4a:85: 80:31:52:3a:dc:35:bb:47:00:62:6a:26:01:ec:aa: cf:1a:16:5c:c8:f4:e0:2e:85:94:08:6a:51:c7:f6: bb:c7:3d:fa:5f:a1:76:e7:a5:9e:39:50:da:1c:3b: e9:d9:2b:c0:35:a4:a0:f1:9d:54:2a:8b:5c:29:aa: 54:bc:25:6e:6b:c2:48:42:3c:e1:01:a1:be:4c:8a: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F0:8A:B7:33:C9:D7:FE:39:7F:E2:E2:58:3D:DB:C6:60:72:25:56 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1fCKtzPJ1_45f-LiWD3bxmByJVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.212.28.0/22 83.212.236.0/22 195.251.224.0/21 195.251.236.0/23 IPv6: 2001:648:24a0::/48 Signature Algorithm: sha256WithRSAEncryption a8:4d:a2:b6:2c:96:e9:c4:c1:14:9b:69:56:6d:b5:3b:54:4a: 5b:3f:f9:4e:30:3a:fc:75:2d:39:9c:8d:42:5b:83:5d:48:be: 95:5d:17:13:a8:e9:28:63:2c:28:3e:11:85:58:ef:19:08:0b: 1e:df:52:1f:c7:72:1e:4b:aa:ce:16:be:0f:f9:72:2d:f8:64: 11:21:e7:9e:07:3b:e9:23:91:53:ee:e2:78:85:8c:b0:0e:e7: 2b:f9:c1:91:24:bb:3c:8c:d0:07:cb:f4:42:c7:c3:81:a7:bf: 7e:49:80:ac:bf:cb:67:09:9b:23:88:f4:d4:c3:5d:a5:96:d6: ef:5e:ae:35:b6:fd:7a:97:e9:69:80:2a:c5:c7:48:0f:8e:18: a2:97:73:99:e4:5b:d6:58:f6:3c:65:df:86:b4:3c:f7:0f:0c: be:3a:a6:b7:2e:67:6c:8d:f7:3d:1d:c0:42:6a:34:55:b2:73: b2:01:e8:ed:af:33:c0:06:02:4c:cd:b6:ce:ad:b3:d0:57:d8: 58:56:46:ca:7d:b5:f9:90:e0:8e:d8:0e:70:58:34:e8:fd:30: 8c:57:7a:97:9e:f1:73:5f:6e:12:d7:7e:87:97:2c:3f:51:ba: 8d:37:9f:cc:92:3b:f5:f5:05:81:d8:f1:14:78:75:2b:fc:81: 61:6b:53:94 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt87P9JQ9jT8I/3pd1HKMK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWYwOGFiNzMzYzlkN2ZlMzk3ZmUyZTI1ODNkZGJjNjYwNzIyNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3LOXvxl7kebGmx4VBZij7um4q07 2RZgc0GKnb8qymuZjzncjEjJUNvAwor1LHYmljCDvU7s0Prg6JDArNnh0DCJZewA 7x4N47qcOqlXhZxHiYTKR5HvNfnuLes4FrASquXJa5YL3I+f7YMquBkGsFz+nJTz AkvCfmkfCUI38+OMCoBjqhRmd3God5czu6efxaVfq3UaxKE92FAHjN5qJi8cpau8 yTUHJqxxajO9h3wMSoWAMVI63DW7RwBiaiYB7KrPGhZcyPTgLoWUCGpRx/a7xz36 X6F256WeOVDaHDvp2SvANaSg8Z1UKotcKapUvCVua8JIQjzhAaG+TIqvmQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNXwirczydf+OX/i4lg928ZgciVWMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvMWZDS3R6UEoxXzQ1Zi1MaVdEM2J4bUJ5SlZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCU9QcAwQC U9TsAwQDw/vgAwQBw/vsMA8EAgACMAkDBwAgAQZIJKAwDQYJKoZIhvcNAQELBQAD ggEBAKhNorYslunEwRSbaVZttTtUSls/+U4wOvx1LTmcjUJbg11IvpVdFxOo6Shj LCg+EYVY7xkICx7fUh/Hch5Lqs4Wvg/5ci34ZBEh554HO+kjkVPu4niFjLAO5yv5 wZEkuzyM0AfL9ELHw4Gnv35JgKy/y2cJmyOI9NTDXaWW1u9erjW2/XqX6WmAKsXH SA+OGKKXc5nkW9ZY9jxl34a0PPcPDL46prcuZ2yN9z0dwEJqNFWyc7IB6O2vM8AG AkzNts6ts9BX2FhWRsp9tfmQ4I7YDnBYNOj9MIxXepee8XNfbhLXfoeXLD9Ruo03 n8ySO/X1BYHY8RR4dSv8gWFrU5Q= -----END CERTIFICATE-----Generated at Mon Feb 2 09:38:54 2026 by rpki-client