This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa File: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (raw, json) Hash identifier: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q= Subject key identifier: D5:1C:55:3A:B1:A4:E2:39:0E:88:43:C3:C6:CC:AB:E7:B0:59:91:04 Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb Certificate serial: 019B7F83EE33AC0FF791469CD36F5FA1CEB7 Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa Signing time: Fri 02 Jan 2026 16:21:51 +0000 ROA not before: Fri 02 Jan 2026 16:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50474 IP address blocks: 78.40.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ee:33:ac:0f:f7:91:46:9c:d3:6f:5f:a1:ce:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb Validity Not Before: Jan 2 16:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51c553ab1a4e2390e8843c3c6ccabe7b0599104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:d0:59:08:f5:f3:50:04:71:f4:b3:65:13: 76:35:4f:3e:fc:d5:71:3b:91:52:42:ec:fa:51:49: bd:42:f4:5a:a4:8b:15:8f:fa:3c:9c:b1:d6:76:26: d2:7f:9d:e3:28:ac:37:97:d6:a2:83:ea:e4:d8:5a: 04:69:93:46:23:aa:38:ac:5d:d4:7c:37:d4:ff:45: e4:5a:d8:5b:51:c6:71:ea:61:22:bb:28:77:a3:b5: e1:d0:0f:7d:6f:8b:97:f9:11:76:1d:1b:22:01:ff: 6b:32:8e:6a:ce:cc:97:0a:a8:cd:8c:d2:89:61:52: 96:c0:8c:9b:60:aa:f1:4a:d6:48:89:07:a6:46:e1: 49:7d:1e:19:ac:1f:c6:8d:f8:74:c3:e9:9c:2d:f6: 11:9d:07:00:44:16:b9:6b:5f:ba:38:7f:1e:26:45: 23:4d:93:2e:22:7e:a5:c7:3b:81:cc:9d:f3:f9:ab: d4:2b:3f:c4:0c:16:ac:20:b2:34:bb:29:eb:bd:ae: 94:67:14:75:f9:35:c2:aa:c8:24:e9:4b:9c:0c:fc: 16:5f:0b:0d:1b:70:a3:d9:eb:2b:cc:d4:ad:d6:33: d7:f0:5c:72:e9:91:50:02:f1:ab:d3:c3:e1:32:7d: 73:96:af:3a:ce:8e:1b:3d:ce:4a:75:6b:b5:76:40: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:55:3A:B1:A4:E2:39:0E:88:43:C3:C6:CC:AB:E7:B0:59:91:04 X509v3 Authority Key Identifier: keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.8.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:23:9c:c8:46:da:bf:93:9d:b8:0a:40:a4:ff:5c:e6:b0:12: e3:b5:48:4f:35:41:fd:fb:b2:19:88:89:20:51:eb:ca:2e:39: bd:af:18:90:e5:ca:8d:0f:c5:27:4c:7d:9a:9b:04:b8:28:15: a1:09:9b:a4:e2:06:2b:89:97:24:7f:c4:02:4c:45:73:d8:44: d1:5e:f4:74:17:f6:9a:54:e8:e4:4e:28:fb:86:4f:93:85:70: 89:96:b9:50:6d:90:ef:f7:09:75:cf:4a:04:d1:51:c1:e8:61: b9:ea:e1:0e:58:e5:ae:a1:6c:96:0e:c5:22:e0:ed:12:73:84: 09:51:f1:63:ff:e9:29:77:ed:60:0e:97:0a:00:4a:62:75:be: 1d:d5:96:a0:ae:b3:c7:69:d5:6a:c8:aa:7e:65:2b:c8:26:c4: 48:9b:53:47:51:d6:3e:19:ec:3f:dd:3c:4f:54:41:fa:6c:a3: 10:f7:5b:90:02:7a:ff:e3:e1:8d:70:82:b8:f9:72:16:f6:c9: e3:64:be:c8:4b:89:cc:5b:4e:45:40:9b:48:98:4f:ab:aa:44: 10:10:6f:36:8e:85:9f:ed:3c:b1:78:93:31:fd:c1:a3:61:0e: 16:a6:df:db:80:0b:0b:c8:e9:a1:1d:93:da:7d:3d:85:c1:0c: 62:0f:01:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+4zrA/3kUac029foc63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYjQ2NGJhMDM4YmMwYmJiZWU0MDBmM2U5MDhkZjUxNDgy YzUxYmIwHhcNMjYwMTAyMTYyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTFjNTUzYWIxYTRlMjM5MGU4ODQzYzNjNmNjYWJlN2IwNTk5MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyjQWQj181AEcfSzZRN2NU8+/NVx O5FSQuz6UUm9QvRapIsVj/o8nLHWdibSf53jKKw3l9aig+rk2FoEaZNGI6o4rF3U fDfU/0XkWthbUcZx6mEiuyh3o7Xh0A99b4uX+RF2HRsiAf9rMo5qzsyXCqjNjNKJ YVKWwIybYKrxStZIiQemRuFJfR4ZrB/Gjfh0w+mcLfYRnQcARBa5a1+6OH8eJkUj TZMuIn6lxzuBzJ3z+avUKz/EDBasILI0uynrva6UZxR1+TXCqsgk6UucDPwWXwsN G3Cj2esrzNSt1jPX8Fxy6ZFQAvGr08PhMn1zlq86zo4bPc5KdWu1dkA6RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUcVTqxpOI5DohDw8bMq+ewWZEEMB8GA1UdIwQY MBaAFBy0ZLoDi8C7vuQA8+kI31FILFG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEt YmIyNjE0M2M1ZWRjLzEvMVJ4Vk9yR2s0amtPaUVQRHhzeXI1N0Jaa1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEtYmIyNjE0M2M1ZWRj LzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTigIMA0G CSqGSIb3DQEBCwUAA4IBAQBLI5zIRtq/k524CkCk/1zmsBLjtUhPNUH9+7IZiIkg UevKLjm9rxiQ5cqND8UnTH2amwS4KBWhCZuk4gYriZckf8QCTEVz2ETRXvR0F/aa VOjkTij7hk+ThXCJlrlQbZDv9wl1z0oE0VHB6GG56uEOWOWuoWyWDsUi4O0Sc4QJ UfFj/+kpd+1gDpcKAEpidb4d1ZagrrPHadVqyKp+ZSvIJsRIm1NHUdY+Gew/3TxP VEH6bKMQ91uQAnr/4+GNcIK4+XIW9snjZL7IS4nMW05FQJtImE+rqkQQEG82joWf 7TyxeJMx/cGjYQ4Wpt/bgAsLyOmhHZPafT2FwQxiDwHe -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:31 2026 by rpki-client