This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa File: 1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa (raw, json) Hash identifier: l9YOL5ccV4wpNvqiY9jOOj6NYS8DfEzSYMTJWVgq4u8= Subject key identifier: F9:D4:62:97:46:D5:D5:24:56:A4:FA:52:6C:DE:94:DE:AF:AA:70:D2 Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Certificate serial: 019B79106DCBC378427034306B26A6664C0A Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34661 IP address blocks: 195.123.0.0/22 maxlen: 22 195.123.12.0/22 maxlen: 22 195.123.168.0/22 maxlen: 22 195.123.180.0/22 maxlen: 22 195.123.196.0/22 maxlen: 22 195.123.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6d:cb:c3:78:42:70:34:30:6b:26:a6:66:4c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9d4629746d5d52456a4fa526cde94deafaa70d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:29:be:fb:b0:94:21:f5:2f:9f:4d:d2:d4: 92:62:1a:c6:f4:8c:f6:c8:18:5d:9c:91:77:2a:8d: 22:a5:ab:71:1f:92:5d:24:f5:6e:58:48:1b:25:68: f2:04:67:85:a7:6c:1c:71:16:9f:c5:19:d5:d2:d5: 04:98:32:6d:d2:b1:ac:6c:23:a3:1b:0c:c0:2e:52: 6b:a1:03:5f:eb:ad:87:f4:e2:72:aa:8a:28:c0:4f: 93:31:10:20:13:87:08:1e:12:05:db:1b:0d:0e:80: ab:c1:5a:21:c7:b8:88:e3:f5:f3:27:ed:68:92:1e: 8f:a3:0a:49:20:26:4a:b9:a2:09:4d:3f:cc:cd:4a: c4:f9:0d:32:a6:7d:18:99:68:30:a8:05:55:b5:f0: f5:9b:3f:33:71:f8:41:7b:a6:3b:55:a6:dd:f6:96: c0:9c:96:d0:ae:de:19:78:e2:1b:ba:4c:f6:f2:18: 33:42:19:b6:ba:b1:f1:47:c5:ae:59:1b:48:5e:b4: 06:e5:d5:74:4d:77:00:bc:d9:9e:c7:b6:b8:17:9d: ea:67:40:10:9a:4b:61:c0:a3:e2:fb:16:c9:f1:d3: 9f:84:3d:97:33:29:12:de:f4:48:c3:3b:c1:43:eb: 20:6f:3d:d8:41:ab:86:fc:f1:da:43:9c:19:c6:5d: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D4:62:97:46:D5:D5:24:56:A4:FA:52:6C:DE:94:DE:AF:AA:70:D2 X509v3 Authority Key Identifier: keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-dRil0bV1SRWpPpSbN6U3q-qcNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.123.0.0/22 195.123.12.0/22 195.123.168.0/22 195.123.180.0/22 195.123.196.0/22 195.123.252.0/22 Signature Algorithm: sha256WithRSAEncryption 44:7b:e2:18:bb:06:3f:e0:da:e7:22:73:29:99:27:92:48:62: b6:10:90:16:02:d1:8a:3d:d0:fb:46:e5:ee:91:fd:a0:40:ad: 36:5c:e6:4d:57:92:6e:d2:a2:47:ec:41:a1:69:82:a3:75:a6: cb:0f:55:4f:5e:79:2c:d2:3d:f2:aa:fe:81:af:40:69:6d:d0: dc:0c:81:2c:85:7c:b1:93:c4:55:b5:50:5c:94:e7:c7:68:55: 98:66:5f:af:74:78:2e:4f:1e:5b:d3:75:4b:61:64:23:13:37: 60:2a:c4:4e:68:59:8e:58:c2:1b:92:97:8e:41:46:d8:77:d5: df:9b:a2:6c:51:73:8b:e1:6a:b3:3f:d1:68:63:24:f5:41:a3: a3:3d:ff:85:f5:d6:34:41:9b:66:6f:87:9b:e3:8f:17:77:b4: 1a:21:61:50:86:1c:4a:a8:9d:ca:0c:50:29:de:4e:89:e0:6a: 95:e2:4f:f7:ff:ed:72:b2:4c:b2:ae:ae:b2:83:68:b5:1e:66: 03:cf:01:57:5a:e6:65:15:74:c9:35:9f:50:97:35:d4:cd:6f: 2c:a7:93:4c:4f:ec:fc:36:c8:a0:a6:26:66:e9:a0:d9:2a:f2: e0:f3:f4:69:99:63:53:30:e7:a2:0e:0e:be:c4:82:a1:3a:e1: 78:bd:f9:75 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt5EG3Lw3hCcDQwayamZkwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk NzY2Y2UwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWQ0NjI5NzQ2ZDVkNTI0NTZhNGZhNTI2Y2RlOTRkZWFmYWE3MGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fQpvvuwlCH1L59N0tSSYhrG9Iz2 yBhdnJF3Ko0ipatxH5JdJPVuWEgbJWjyBGeFp2wccRafxRnV0tUEmDJt0rGsbCOj GwzALlJroQNf662H9OJyqooowE+TMRAgE4cIHhIF2xsNDoCrwVohx7iI4/XzJ+1o kh6PowpJICZKuaIJTT/MzUrE+Q0ypn0YmWgwqAVVtfD1mz8zcfhBe6Y7Vabd9pbA nJbQrt4ZeOIbukz28hgzQhm2urHxR8WuWRtIXrQG5dV0TXcAvNmex7a4F53qZ0AQ mkthwKPi+xbJ8dOfhD2XMykS3vRIwzvBQ+sgbz3YQauG/PHaQ5wZxl1HbwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPnUYpdG1dUkVqT6UmzelN6vqnDSMB8GA1UdIwQY MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt NTE1ODQ1ZTZjMzE3LzEvMS1kUmlsMGJWMVNSV3BQcFNiTjZVM3EtcWNOSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGMvYzQ5MTcyLWY4ZGEtNDEyOC04Njg5LTUxNTg0NWU2YzMx Ny8xL3dRV3R4Y1FtTGY5clB6NWdhRERILVhIWFpzNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAsN7AAME AsN7DAMEAsN7qAMEAsN7tAMEAsN7xAMEAsN7/DANBgkqhkiG9w0BAQsFAAOCAQEA RHviGLsGP+Da5yJzKZknkkhithCQFgLRij3Q+0bl7pH9oECtNlzmTVeSbtKiR+xB oWmCo3Wmyw9VT155LNI98qr+ga9AaW3Q3AyBLIV8sZPEVbVQXJTnx2hVmGZfr3R4 Lk8eW9N1S2FkIxM3YCrETmhZjljCG5KXjkFG2HfV35uibFFzi+Fqsz/RaGMk9UGj oz3/hfXWNEGbZm+Hm+OPF3e0GiFhUIYcSqidygxQKd5OieBqleJP9//tcrJMsq6u soNotR5mA88BV1rmZRV0yTWfUJc11M1vLKeTTE/s/DbIoKYmZumg2Sry4PP0aZlj UzDnog4OvsSCoTrheL35dQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:06:04 2026 by rpki-client