This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa File: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (raw, json) Hash identifier: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0= Subject key identifier: D5:AC:3C:36:FF:7B:C4:E7:A5:80:23:F7:F9:89:F0:9D:AC:44:9B:96 Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824 Certificate serial: 019B76EB21C25CF41EAA7A8D432D5E9ADF60 Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9155 IP address blocks: 185.62.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:21:c2:5c:f4:1e:aa:7a:8d:43:2d:5e:9a:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5ac3c36ff7bc4e7a58023f7f989f09dac449b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:bb:8a:a4:e3:b8:2b:9e:12:8b:70:8f:9d: d3:b2:fb:04:5c:65:10:73:1a:74:a0:32:79:eb:da: 05:e8:f7:bc:eb:50:c1:c9:81:30:e9:7b:b8:ae:7f: 86:69:f2:db:7d:ab:29:a4:48:4c:ba:f7:56:c6:c8: 21:26:93:e0:01:da:ff:b7:02:31:d1:26:e1:84:c7: 9c:5a:a3:9c:d0:9c:e4:02:47:5f:14:19:29:15:5c: 39:30:48:09:30:07:eb:64:d0:ec:fe:0c:c5:67:3e: 32:4d:46:ab:b1:f1:b1:e6:c2:08:d4:68:51:85:25: 0d:65:aa:ae:1b:68:19:99:40:a0:b8:be:4e:88:eb: a4:d7:b5:3e:a0:97:8a:7a:7f:99:9a:55:0e:ac:9c: 05:aa:85:a9:5e:d8:27:b7:00:05:66:c8:50:5a:b7: e3:47:ac:d4:2d:91:0c:98:37:bb:c4:e7:82:9c:a9: 99:46:9d:f7:41:3b:c2:f1:a4:33:81:ba:ea:1b:61: 2d:c9:b8:97:1d:50:de:7b:32:f4:2a:0f:52:97:c7: 7a:95:01:d3:37:8c:94:5d:ee:b1:7d:c9:3c:a4:98: de:56:2f:b8:f7:89:c6:07:4e:b0:9a:c8:36:45:a9: cc:06:60:8d:50:fc:ab:4a:7d:11:11:4f:bd:46:b0: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AC:3C:36:FF:7B:C4:E7:A5:80:23:F7:F9:89:F0:9D:AC:44:9B:96 X509v3 Authority Key Identifier: keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.230.0/24 Signature Algorithm: sha256WithRSAEncryption 04:23:42:75:61:b9:fc:d9:8d:48:7c:e7:0c:a9:cb:5b:a5:a3: a1:81:96:11:96:07:95:b6:5d:43:4d:8e:cc:18:55:04:04:9d: c5:42:fd:c4:c3:27:c8:48:d9:d4:ec:41:94:4c:96:a5:82:bd: fd:86:87:ed:ba:a1:d9:2f:06:07:8a:85:cc:73:c4:3b:16:40: 0c:b4:f9:fb:ad:68:b8:75:a6:9a:0a:89:3c:76:b3:87:a1:3e: cf:aa:b9:9d:7d:56:bc:cb:2e:38:fb:a8:c1:a0:61:b5:3a:d7: ff:88:90:0b:36:84:b6:19:fb:93:17:71:ef:bd:ec:14:0b:ff: 1c:a7:b3:00:c3:64:62:e6:37:e5:97:59:c8:b6:25:92:e4:32: 6b:00:2b:2d:b8:00:cb:2a:0a:56:26:5d:e4:cd:d4:ba:41:53: 40:c4:00:fc:d7:7e:9c:81:68:1a:cf:cc:d8:70:58:54:64:06: dc:53:4a:cc:8b:32:c4:fd:1b:aa:8c:b7:bb:bd:67:71:69:59: 09:ab:5d:38:0d:c3:9e:17:c5:ab:75:b4:45:ee:d1:df:79:ac: f1:49:68:ed:fc:c8:e1:23:e5:6c:46:54:cb:14:d0:fc:38:fb: 9a:bb:4a:2f:e6:b7:1d:a7:7e:dc:f4:b9:fa:5f:93:92:7b:a9: fe:34:92:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yHCXPQeqnqNQy1emt9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0 NjU4MjQwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWFjM2MzNmZmN2JjNGU3YTU4MDIzZjdmOTg5ZjA5ZGFjNDQ5Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymO7iqTjuCueEotwj53TsvsEXGUQ cxp0oDJ569oF6Pe861DByYEw6Xu4rn+GafLbfasppEhMuvdWxsghJpPgAdr/twIx 0SbhhMecWqOc0JzkAkdfFBkpFVw5MEgJMAfrZNDs/gzFZz4yTUarsfGx5sII1GhR hSUNZaquG2gZmUCguL5OiOuk17U+oJeKen+ZmlUOrJwFqoWpXtgntwAFZshQWrfj R6zULZEMmDe7xOeCnKmZRp33QTvC8aQzgbrqG2EtybiXHVDeezL0Kg9Sl8d6lQHT N4yUXe6xfck8pJjeVi+494nGB06wmsg2RanMBmCNUPyrSn0REU+9RrATGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWsPDb/e8TnpYAj9/mJ8J2sRJuWMB8GA1UdIwQY MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt ZTFiNTM1NTZjMWMzLzEvMWF3OE52OTd4T2VsZ0NQMy1ZbnduYXhFbTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT7mMA0G CSqGSIb3DQEBCwUAA4IBAQAEI0J1Ybn82Y1IfOcMqctbpaOhgZYRlgeVtl1DTY7M GFUEBJ3FQv3EwyfISNnU7EGUTJalgr39hoftuqHZLwYHioXMc8Q7FkAMtPn7rWi4 daaaCok8drOHoT7PqrmdfVa8yy44+6jBoGG1Otf/iJALNoS2GfuTF3HvvewUC/8c p7MAw2Ri5jfll1nItiWS5DJrACstuADLKgpWJl3kzdS6QVNAxAD8136cgWgaz8zY cFhUZAbcU0rMizLE/RuqjLe7vWdxaVkJq104DcOeF8WrdbRF7tHfeazxSWjt/Mjh I+VsRlTLFND8OPuau0ov5rcdp37c9Ln6X5OSe6n+NJJt -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:26 2026 by rpki-client