This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/1-5irUW2h7Wp7EQ54nX7slyi3BNc.roa File: 1-5irUW2h7Wp7EQ54nX7slyi3BNc.roa (raw, json) Hash identifier: XVMImneJ+lt7Bh7aCUyU0VyaVfMOa36wyhi799Wx0XU= Subject key identifier: FB:98:AB:51:6D:A1:ED:6A:7B:11:0E:78:9D:7E:EC:97:28:B7:04:D7 Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Certificate serial: 019B7E3873C7608E3B3251C8A29A8ED71FAB Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/1-5irUW2h7Wp7EQ54nX7slyi3BNc.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60195 IP address blocks: 185.238.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:73:c7:60:8e:3b:32:51:c8:a2:9a:8e:d7:1f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb98ab516da1ed6a7b110e789d7eec9728b704d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:6e:64:ab:16:d6:25:60:75:11:3a:40:4b: 07:70:2c:4e:fa:0b:ec:ff:e3:74:4b:95:ab:29:02: f0:65:99:d4:37:26:78:d0:75:47:e0:b9:73:fa:cc: 0d:05:17:ef:8c:5b:70:61:2c:31:ac:8f:0d:fe:d2: 0f:ed:ed:34:16:21:9c:45:4e:d7:6c:27:c5:3b:c9: b3:f8:fa:6a:d7:a5:8d:44:13:bc:02:f5:6c:14:27: cc:3a:b4:83:cf:81:7c:e1:d3:e4:35:26:d5:d8:4f: 05:f5:a7:2a:a0:98:82:74:51:0a:12:21:c4:bc:fc: cd:81:92:e7:46:cd:47:32:65:80:ce:a3:f8:32:64: 60:f1:38:5c:6b:3a:16:86:53:77:ad:da:64:10:dd: 6a:5f:c3:3e:93:11:fc:d8:ac:94:7b:4e:e1:7f:cd: 89:5b:29:e3:8f:b7:97:9d:b2:77:f6:e3:e0:9b:9b: bf:c4:26:cb:52:c0:5e:e7:5c:eb:6b:c5:00:cd:54: dc:f9:07:13:5b:f1:db:b5:48:dd:1d:7c:3a:91:c5: 5b:83:31:34:83:d8:af:f2:74:bb:e1:f2:08:0e:25: a2:6a:ce:0f:9f:91:14:01:00:3c:24:5b:b6:47:d5: da:41:2a:5c:53:18:9a:30:ce:a9:56:9c:60:cc:fc: 72:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:AB:51:6D:A1:ED:6A:7B:11:0E:78:9D:7E:EC:97:28:B7:04:D7 X509v3 Authority Key Identifier: keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/1-5irUW2h7Wp7EQ54nX7slyi3BNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.61.0/24 Signature Algorithm: sha256WithRSAEncryption ad:e5:05:fd:d7:a1:d5:75:7e:48:4c:7e:4b:81:f9:22:5d:06: 3d:03:23:a7:ec:2d:1b:e3:1a:d1:21:62:ed:fb:be:47:97:11: 84:4c:68:17:bf:1e:ae:b5:00:93:11:bd:40:fe:ae:c2:0f:20: 99:0e:b9:8a:91:a3:67:69:de:2d:7d:51:34:51:01:a4:1a:32: 01:b6:0e:63:1d:fc:fe:94:8f:0e:54:e7:63:1c:56:0a:4f:5b: 97:83:67:82:38:a1:ce:ee:d9:7e:9c:f6:40:a8:6d:7e:bd:40: 2c:78:64:73:5a:c8:7f:22:09:91:ce:9a:cb:0f:aa:26:66:38: 4f:55:1c:43:e3:32:49:21:8c:f5:34:da:91:42:3b:01:01:5a: 14:a9:23:c3:c7:1d:96:db:3d:8f:79:ac:ef:eb:32:b8:74:17: ff:bc:35:ea:5f:45:09:a5:b7:d8:55:0d:2a:c6:20:56:bf:1c: ae:15:99:0c:6f:57:a3:53:b8:b9:ba:ba:51:6d:6b:f1:39:fc: 43:84:2a:28:c1:0d:1c:d0:d1:9e:a2:9d:3d:1b:dc:fb:08:db: 1d:ab:f8:66:4c:fe:1a:9d:7c:f8:8e:16:39:9e:24:00:e9:f6: d7:93:e1:8b:a4:3a:9d:6a:4f:9a:c8:1d:af:f3:3c:6b:3d:26: 64:fe:b3:0b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OHPHYI47MlHIopqO1x+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk NjNhYjgwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjk4YWI1MTZkYTFlZDZhN2IxMTBlNzg5ZDdlZWM5NzI4YjcwNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dZuZKsW1iVgdRE6QEsHcCxO+gvs /+N0S5WrKQLwZZnUNyZ40HVH4Llz+swNBRfvjFtwYSwxrI8N/tIP7e00FiGcRU7X bCfFO8mz+Ppq16WNRBO8AvVsFCfMOrSDz4F84dPkNSbV2E8F9acqoJiCdFEKEiHE vPzNgZLnRs1HMmWAzqP4MmRg8ThcazoWhlN3rdpkEN1qX8M+kxH82KyUe07hf82J Wynjj7eXnbJ39uPgm5u/xCbLUsBe51zra8UAzVTc+QcTW/HbtUjdHXw6kcVbgzE0 g9iv8nS74fIIDiWias4Pn5EUAQA8JFu2R9XaQSpcUxiaMM6pVpxgzPxyGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuYq1Ftoe1qexEOeJ1+7JcotwTXMB8GA1UdIwQY MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt YzRhY2I4OTY5YzQ5LzEvMS01aXJVVzJoN1dwN0VRNTRuWDdzbHlpM0JOYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGYvZTEwMGI1LTZmMGEtNGZlOS1iZWZiLWM0YWNiODk2OWM0 OS8xL2VJOWJJUTg4UHJRZ1paWU9oZEJoNmRuV09yZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnuPTAN BgkqhkiG9w0BAQsFAAOCAQEAreUF/deh1XV+SEx+S4H5Il0GPQMjp+wtG+Ma0SFi 7fu+R5cRhExoF78errUAkxG9QP6uwg8gmQ65ipGjZ2neLX1RNFEBpBoyAbYOYx38 /pSPDlTnYxxWCk9bl4Nngjihzu7Zfpz2QKhtfr1ALHhkc1rIfyIJkc6ayw+qJmY4 T1UcQ+MySSGM9TTakUI7AQFaFKkjw8cdlts9j3ms7+syuHQX/7w16l9FCaW32FUN KsYgVr8crhWZDG9Xo1O4ubq6UW1r8Tn8Q4QqKMENHNDRnqKdPRvc+wjbHav4Zkz+ Gp18+I4WOZ4kAOn215Phi6Q6nWpPmsgdr/M8az0mZP6zCw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:27 2026 by rpki-client