This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa File: 1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa (raw, json) Hash identifier: t/bF8BVKmcIucBirQ4iHEKuh8d9LX26p0NPMDv8nEak= Subject key identifier: F8:F4:DD:B0:CF:C0:18:2E:57:35:31:44:0F:F0:5D:D6:52:89:52:B6 Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Certificate serial: 019B77C6688D7A7EF3515558A13A3C833384 Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.117.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:68:8d:7a:7e:f3:51:55:58:a1:3a:3c:83:33:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8f4ddb0cfc0182e573531440ff05dd6528952b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:15:62:a4:61:44:6c:32:03:5a:73:47:fb: 6e:ca:3e:32:67:51:b4:da:ce:c4:03:ea:ff:91:0c: f6:f6:f1:ef:42:7b:11:50:16:64:b2:91:8a:47:c6: 7d:fb:1c:37:67:0d:60:48:79:7a:d1:71:73:2d:1c: c3:9b:6c:37:04:34:17:b8:db:fe:33:a9:41:34:bc: f7:eb:77:12:33:6f:44:45:2c:ed:20:b5:86:a6:cf: 9f:a9:52:d5:c4:1a:03:20:6e:7f:f7:b2:a5:de:f3: 07:c1:31:51:bd:22:ef:09:af:85:6f:54:be:d1:82: f3:13:16:f2:60:ec:56:91:d1:77:1b:dd:94:10:39: 73:05:e9:1a:e0:9e:1d:c7:0c:73:2a:a8:fb:e1:e9: 89:64:e9:bd:71:a9:91:8d:e7:c7:d9:ed:d8:52:53: 33:57:e2:26:77:e4:81:c2:34:e4:6c:8e:d7:91:30: ca:9f:c0:de:dc:92:15:60:3f:eb:44:8d:66:f7:35: 8d:c6:63:a8:9e:56:1d:9b:f5:c5:b5:15:52:cc:8e: 78:c1:fd:3d:b9:95:b5:d5:7e:de:0b:aa:06:9e:7a: 46:61:6f:54:4c:76:78:d5:ed:a8:5d:8d:60:0e:db: 98:c5:38:9e:ae:2c:0e:52:ce:30:44:00:10:22:86: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:DD:B0:CF:C0:18:2E:57:35:31:44:0F:F0:5D:D6:52:89:52:B6 X509v3 Authority Key Identifier: keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.225.0/24 Signature Algorithm: sha256WithRSAEncryption 21:42:42:a5:0b:36:2b:5f:26:e7:ab:9f:67:c8:e7:b2:e0:48: 2c:f9:be:98:ac:06:cc:91:80:98:24:19:b0:54:b1:69:aa:97: c5:0c:cd:d8:7b:73:c6:e6:ff:4a:84:8d:cc:ef:79:9c:9b:aa: 07:30:7b:f5:39:db:4b:35:ad:b3:6b:ed:c4:8d:05:bb:7b:47: 69:4f:d0:1e:54:c6:fc:9d:ab:e3:c1:00:a6:c3:10:53:93:4b: 3d:09:0b:d6:a4:a2:a3:2f:20:de:2c:03:7c:77:5a:82:f4:3a: 87:b7:09:0c:c6:9d:b4:8f:06:e6:d4:21:05:d5:f0:a1:f1:3d: ee:9d:36:93:32:04:31:e6:a5:d4:41:a1:c5:80:27:6d:05:01: 41:fe:89:be:0e:f1:18:42:4c:d0:37:af:cc:6b:ff:4a:42:60: 9f:b8:b0:a8:35:a6:83:0a:be:1c:0f:73:c6:21:d7:d4:a3:96: 51:d6:25:12:95:22:98:65:e4:d1:2b:d6:0b:0a:50:56:d8:71: 91:8c:d8:00:aa:03:0b:24:19:fa:5a:f1:47:16:b8:b5:3d:97: 5b:95:85:3c:be:87:d4:58:97:e7:a6:30:04:bb:3a:14:cc:30: a3:99:53:1c:e9:d5:00:0a:5f:b5:78:58:f7:8f:1a:dd:5c:c4: 4e:df:63:91 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xmiNen7zUVVYoTo8gzOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2ZhYzg2NDVhM2M2ZjEwMDQyZGM0YTc0ZDcwMGQ5ZDA2 YWYxN2EwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGY0ZGRiMGNmYzAxODJlNTczNTMxNDQwZmYwNWRkNjUyODk1MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujsVYqRhRGwyA1pzR/tuyj4yZ1G0 2s7EA+r/kQz29vHvQnsRUBZkspGKR8Z9+xw3Zw1gSHl60XFzLRzDm2w3BDQXuNv+ M6lBNLz363cSM29ERSztILWGps+fqVLVxBoDIG5/97Kl3vMHwTFRvSLvCa+Fb1S+ 0YLzExbyYOxWkdF3G92UEDlzBeka4J4dxwxzKqj74emJZOm9camRjefH2e3YUlMz V+Imd+SBwjTkbI7XkTDKn8De3JIVYD/rRI1m9zWNxmOonlYdm/XFtRVSzI54wf09 uZW11X7eC6oGnnpGYW9UTHZ41e2oXY1gDtuYxTieriwOUs4wRAAQIoaH4QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPj03bDPwBguVzUxRA/wXdZSiVK2MB8GA1UdIwQY MBaAFErPrIZFo8bxAELcSnTXANnQavF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Mtc2hrV2p4dkVBUXR4S2ROY0EyZEJxOFhvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yYzE3Y2ItNDc0Mi00NGNmLTg5MWYt N2JmODI3N2Q4YTJmLzEvMS1QVGRzTV9BR0M1WE5URkVEX0JkMWxLSlVyWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGYvMmMxN2NiLTQ3NDItNDRjZi04OTFmLTdiZjgyNzdkOGEy Zi8xL1NzLXNoa1dqeHZFQVF0eEtkTmNBMmRCcThYby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALl14TAN BgkqhkiG9w0BAQsFAAOCAQEAIUJCpQs2K18m56ufZ8jnsuBILPm+mKwGzJGAmCQZ sFSxaaqXxQzN2Htzxub/SoSNzO95nJuqBzB79TnbSzWts2vtxI0Fu3tHaU/QHlTG /J2r48EApsMQU5NLPQkL1qSioy8g3iwDfHdagvQ6h7cJDMadtI8G5tQhBdXwofE9 7p02kzIEMeal1EGhxYAnbQUBQf6Jvg7xGEJM0DevzGv/SkJgn7iwqDWmgwq+HA9z xiHX1KOWUdYlEpUimGXk0SvWCwpQVthxkYzYAKoDCyQZ+lrxRxa4tT2XW5WFPL6H 1FiX56YwBLs6FMwwo5lTHOnVAApftXhY948a3VzETt9jkQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:35 2026 by rpki-client