This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa File: 1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa (raw, json) Hash identifier: 82tasXTqmj9u9YWsMF9gFr7ezWFi2yhFOj1F8O/axqQ= Subject key identifier: F9:88:EF:FF:D9:94:FE:44:56:A1:8E:95:D4:9C:32:1F:97:83:CE:A3 Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def Certificate serial: 019B78A2A9E193213D7DADA16CB3C9AA8A97 Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa Signing time: Thu 01 Jan 2026 08:18:04 +0000 ROA not before: Thu 01 Jan 2026 08:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201117 IP address blocks: 185.245.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a9:e1:93:21:3d:7d:ad:a1:6c:b3:c9:aa:8a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def Validity Not Before: Jan 1 08:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f988efffd994fe4456a18e95d49c321f9783cea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:c5:7c:52:85:be:70:b5:5f:c3:74:c4:29: a8:62:5d:07:35:a2:67:0c:3b:f5:c6:d6:60:df:db: c5:fe:7c:89:43:ab:e4:ea:da:ed:c3:24:7e:7b:aa: 4d:a2:b5:59:f3:5e:93:ae:1f:26:74:46:bd:2f:db: 80:6d:b6:d4:16:41:e1:fb:76:80:5e:50:9e:0c:19: ac:53:9f:b5:fb:ff:58:3d:b3:4d:5d:a4:ed:3c:12: a3:f5:dc:4d:fd:8f:f8:5d:77:a5:23:00:76:21:c2: 22:f0:dc:bd:4b:0d:6e:53:ce:bb:c7:07:8b:de:7b: 95:61:f7:bf:49:c8:fb:0e:3c:0a:3b:1e:03:a9:d7: 0d:bd:20:9f:b7:8a:20:62:c3:71:2b:8e:61:8f:f3: a1:44:c0:d5:6b:d3:52:c3:0e:e2:be:e7:cd:4d:06: f0:f8:ae:0a:88:b2:1d:62:13:48:56:f6:3c:e7:2a: f9:28:b1:19:dd:15:5d:9d:52:a8:36:af:aa:96:2b: 68:7d:61:bc:44:c0:60:62:27:cb:a1:ff:2c:1a:a3: be:58:61:8f:bb:d7:d8:ec:6d:46:5b:0c:7e:19:07: 80:80:4e:11:ea:b6:b6:94:3e:6e:6a:b0:24:46:cd: 5f:8a:53:5d:89:17:5c:80:c2:cf:15:8a:23:74:53: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:EF:FF:D9:94:FE:44:56:A1:8E:95:D4:9C:32:1F:97:83:CE:A3 X509v3 Authority Key Identifier: keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/1-Yjv_9mU_kRWoY6V1JwyH5eDzqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.156.0/22 Signature Algorithm: sha256WithRSAEncryption 08:95:d5:c7:a0:98:cb:86:fa:24:70:b1:98:08:35:b9:a7:23: f5:97:35:3f:88:72:78:c6:81:19:3b:bc:ea:94:ee:03:e8:ff: 63:6d:5b:fe:4c:81:c6:f1:5c:b1:af:65:6d:61:3a:76:7e:9a: de:30:06:2e:08:3d:28:bd:da:c8:da:90:9b:9a:ac:d6:ea:4d: cd:45:56:d3:34:19:e3:0d:f8:48:58:d6:7f:36:f4:2d:0d:5f: cf:f8:ed:8e:ff:63:65:eb:bb:fe:7a:b6:36:2e:19:87:17:df: 3f:6d:6c:74:24:d1:6e:03:ce:ac:e5:d0:46:69:86:1f:f7:4c: 64:f1:79:49:59:0e:bb:68:74:26:aa:25:f4:ae:e1:50:8a:e4: 9c:ca:1b:86:9d:9c:71:ee:5a:14:6d:b9:d5:28:9c:2e:19:10: 0b:4a:9b:d5:22:4b:4e:1d:d5:5e:29:d8:b1:1e:cc:e9:63:5b: 9c:03:4b:a3:8a:18:37:6d:5e:c6:81:83:e7:57:0d:a3:24:34: 38:23:c2:8b:18:b2:a9:4b:b1:e3:f1:e3:fc:d1:07:7a:02:39: d1:1c:79:2f:76:50:8a:e9:e1:86:a0:80:2f:63:32:b7:4a:76: a2:87:0d:6d:08:be:46:e6:7a:02:15:07:42:16:a8:72:61:0d: cc:74:3e:17 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oqnhkyE9fa2hbLPJqoqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi YjFkZWYwHhcNMjYwMTAxMDgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTg4ZWZmZmQ5OTRmZTQ0NTZhMThlOTVkNDljMzIxZjk3ODNjZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWfFfFKFvnC1X8N0xCmoYl0HNaJn DDv1xtZg39vF/nyJQ6vk6trtwyR+e6pNorVZ816Trh8mdEa9L9uAbbbUFkHh+3aA XlCeDBmsU5+1+/9YPbNNXaTtPBKj9dxN/Y/4XXelIwB2IcIi8Ny9Sw1uU867xweL 3nuVYfe/Scj7DjwKOx4DqdcNvSCft4ogYsNxK45hj/OhRMDVa9NSww7ivufNTQbw +K4KiLIdYhNIVvY85yr5KLEZ3RVdnVKoNq+qlitofWG8RMBgYifLof8sGqO+WGGP u9fY7G1GWwx+GQeAgE4R6ra2lD5uarAkRs1filNdiRdcgMLPFYojdFOMiwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmI7//ZlP5EVqGOldScMh+Xg86jMB8GA1UdIwQY MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt YThkMzgzODA1MmQwLzEvMS1ZanZfOW1VX2tSV29ZNlYxSnd5SDVlRHpxTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDYvMjNlMDdiLWU5ZTQtNDJhNS1iOGUwLWE4ZDM4MzgwNTJk MC8xLzk2V05HeEt1dFZnektOMmxKZEJwaG5TN0hlOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn1nDAN BgkqhkiG9w0BAQsFAAOCAQEACJXVx6CYy4b6JHCxmAg1uacj9Zc1P4hyeMaBGTu8 6pTuA+j/Y21b/kyBxvFcsa9lbWE6dn6a3jAGLgg9KL3ayNqQm5qs1upNzUVW0zQZ 4w34SFjWfzb0LQ1fz/jtjv9jZeu7/nq2Ni4ZhxffP21sdCTRbgPOrOXQRmmGH/dM ZPF5SVkOu2h0Jqol9K7hUIrknMobhp2cce5aFG251SicLhkQC0qb1SJLTh3VXinY sR7M6WNbnANLo4oYN21exoGD51cNoyQ0OCPCixiyqUux4/Hj/NEHegI50Rx5L3ZQ iunhhqCAL2Myt0p2oocNbQi+RuZ6AhUHQhaocmENzHQ+Fw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:59 2026 by rpki-client