This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-dWjubMK-ZG378AVVxlpRtm886g.roa File: 1-dWjubMK-ZG378AVVxlpRtm886g.roa (raw, json) Hash identifier: XUfTHXXvB7Ztf8qMC2cUQUCsIQoBbtPHSvdlGEpX3/M= Subject key identifier: F9:D5:A3:B9:B3:0A:F9:91:B7:EF:C0:15:57:19:69:46:D9:BC:F3:A8 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1385BCC15DFF2F4F9CD350A45CD5DD Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-dWjubMK-ZG378AVVxlpRtm886g.roa Signing time: Fri 02 Jan 2026 00:20:12 +0000 ROA not before: Fri 02 Jan 2026 00:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 185.251.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:85:bc:c1:5d:ff:2f:4f:9c:d3:50:a4:5c:d5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9d5a3b9b30af991b7efc01557196946d9bcf3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:b2:3e:38:6c:40:a3:b5:42:3c:af:76:d8: 3a:71:d3:14:3c:02:07:c0:8f:ed:28:19:22:02:4b: d5:c2:61:c6:04:28:60:3b:b4:6b:74:01:10:9b:5b: 5d:2e:19:b4:8a:68:44:6c:6b:e8:f4:c7:4a:33:fa: 16:f7:39:72:1b:d2:36:19:e5:3e:46:a2:2e:5f:ec: 95:36:cb:00:1b:e0:8a:ba:69:58:f9:3f:00:5c:e6: 32:2b:5b:e1:30:86:23:a9:3b:06:b4:52:5e:59:1b: 5f:62:7e:b8:e1:2f:47:c1:17:46:2a:3f:ed:6c:87: ce:c8:ba:c2:b2:3b:b9:0b:b4:65:81:9c:57:2b:7f: 17:15:be:68:f0:13:11:65:3c:e7:86:3c:a0:6b:ae: 5b:1e:b4:16:0f:9c:35:e7:ed:97:a5:40:0a:05:09: 87:eb:33:4a:0e:33:b7:f5:1b:52:b6:f3:db:95:dc: 60:4d:bc:0f:08:92:3b:5c:5a:ed:68:c3:89:7f:d3: 48:12:9b:d5:c5:ae:b3:46:d8:a8:72:55:f9:2b:5f: fd:5e:5a:30:24:25:f1:34:b3:5c:f0:7f:2b:0f:c4: 2d:a8:17:cd:d2:38:6f:cc:80:ca:c9:84:a5:1c:1a: 8b:04:ec:8b:b1:d9:a7:4a:70:7c:78:bf:0a:1b:8a: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D5:A3:B9:B3:0A:F9:91:B7:EF:C0:15:57:19:69:46:D9:BC:F3:A8 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-dWjubMK-ZG378AVVxlpRtm886g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.230.0/24 Signature Algorithm: sha256WithRSAEncryption 44:8c:8b:9d:01:84:d0:84:ae:69:02:c7:f5:64:5c:8c:27:5e: 54:28:45:d4:76:70:2f:d2:6a:77:63:23:14:9c:3d:d7:f2:2f: 07:8d:05:5e:94:27:30:2f:87:13:b5:e2:ad:18:32:8b:19:c2: 27:24:cc:e6:3c:3e:de:1f:2f:e8:3f:0e:07:bb:83:51:e5:1f: b9:46:05:e2:01:7a:cb:33:50:95:c2:15:70:a9:2d:06:df:c3: 14:31:4b:94:be:a7:eb:de:8c:a8:84:ac:b9:75:23:17:2a:55: 7b:5f:03:33:d7:cc:37:72:31:95:c6:0e:19:e5:68:5b:9d:3e: 50:d1:36:c7:99:23:76:4b:ff:59:57:68:49:4b:af:b2:ba:9e: ee:27:10:d5:59:1a:ca:13:99:59:b8:37:2a:ba:12:c8:de:38: b6:60:0f:ca:90:f4:0a:6d:64:23:30:2b:93:fe:9e:dc:f1:2c: 43:ee:5b:01:ce:9b:85:c8:9a:d7:8c:2e:d7:55:2e:99:d6:36: 93:29:99:57:c3:65:51:25:78:41:9b:4a:1f:f3:7a:29:61:9e: cd:f4:4a:73:70:04:b4:41:7c:f2:93:ec:63:4a:48:77:8a:d0: 59:2f:bc:fe:0b:71:24:99:9e:98:59:04:2d:a4:a4:25:1d:98: 08:32:9a:3b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8E4W8wV3/L0+c01CkXNXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWQ1YTNiOWIzMGFmOTkxYjdlZmMwMTU1NzE5Njk0NmQ5YmNmM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZGyPjhsQKO1Qjyvdtg6cdMUPAIH wI/tKBkiAkvVwmHGBChgO7RrdAEQm1tdLhm0imhEbGvo9MdKM/oW9zlyG9I2GeU+ RqIuX+yVNssAG+CKumlY+T8AXOYyK1vhMIYjqTsGtFJeWRtfYn644S9HwRdGKj/t bIfOyLrCsju5C7RlgZxXK38XFb5o8BMRZTznhjyga65bHrQWD5w15+2XpUAKBQmH 6zNKDjO39RtStvPbldxgTbwPCJI7XFrtaMOJf9NIEpvVxa6zRtioclX5K1/9Xlow JCXxNLNc8H8rD8QtqBfN0jhvzIDKyYSlHBqLBOyLsdmnSnB8eL8KG4r40wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnVo7mzCvmRt+/AFVcZaUbZvPOoMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvMS1kV2p1Yk1LLVpHMzc4QVZWeGxwUnRtODg2Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFi Yy8xL1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn75jAN BgkqhkiG9w0BAQsFAAOCAQEARIyLnQGE0ISuaQLH9WRcjCdeVChF1HZwL9Jqd2Mj FJw91/IvB40FXpQnMC+HE7XirRgyixnCJyTM5jw+3h8v6D8OB7uDUeUfuUYF4gF6 yzNQlcIVcKktBt/DFDFLlL6n696MqISsuXUjFypVe18DM9fMN3IxlcYOGeVoW50+ UNE2x5kjdkv/WVdoSUuvsrqe7icQ1VkayhOZWbg3KroSyN44tmAPypD0Cm1kIzAr k/6e3PEsQ+5bAc6bhcia14wu11UumdY2kymZV8NlUSV4QZtKH/N6KWGezfRKc3AE tEF88pPsY0pId4rQWS+8/gtxJJmemFkELaSkJR2YCDKaOw== -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:25 2026 by rpki-client