This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/1n-fLpwGNv0XEKkYGc5i5IYYKE4.roa File: 1n-fLpwGNv0XEKkYGc5i5IYYKE4.roa (raw, json) Hash identifier: LdbcjYgR0sUT6a/ZumcXflfofrXMjG43yFEGklbWfOk= Subject key identifier: D6:7F:9F:2E:9C:06:36:FD:17:10:A9:18:19:CE:62:E4:86:18:28:4E Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Certificate serial: 019B7E388039B10F375431DF07327AAEBAAE Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/1n-fLpwGNv0XEKkYGc5i5IYYKE4.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201393 IP address blocks: 185.76.112.0/22 maxlen: 22 185.76.112.0/24 maxlen: 24 185.76.113.0/24 maxlen: 24 185.76.114.0/24 maxlen: 24 185.76.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:80:39:b1:0f:37:54:31:df:07:32:7a:ae:ba:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d67f9f2e9c0636fd1710a91819ce62e48618284e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:97:5f:b1:de:40:e5:bb:64:f1:b8:bd:e4: 7a:e9:da:75:ef:ef:b5:af:90:e0:64:0b:8e:7c:9e: 27:f4:94:a3:18:e4:80:88:65:d6:30:ef:d5:e3:fd: 33:fd:2d:01:44:08:e1:91:e6:4a:0d:c0:dd:03:46: 69:c7:f3:a5:ce:29:38:71:c5:59:17:66:ea:e5:23: 62:d2:d8:73:21:4d:78:c9:1b:f7:df:28:c1:03:8c: f7:73:e1:40:1c:c8:32:03:14:ba:ff:be:e8:98:0e: 3e:71:74:85:ca:4e:19:72:db:49:6a:69:58:f1:a5: 69:43:91:49:08:c6:2c:1d:c4:6f:f6:b3:d5:bf:13: 9d:f4:08:9b:3c:55:e8:81:45:bd:23:b3:36:45:8a: 5e:9b:d8:d9:cf:18:63:7e:81:48:f4:74:a2:27:b6: b6:40:71:cd:f1:41:4e:80:a5:e8:0b:d6:d9:f9:42: 87:55:27:c3:3f:b5:7e:26:55:39:0b:18:29:2f:59: 03:eb:bf:a4:94:65:d9:8f:d6:d7:5f:44:11:93:09: 6d:0e:fb:97:8f:49:37:41:89:a1:bc:6d:63:26:3b: 39:1d:ac:4a:2c:ae:aa:cf:40:2d:6f:ec:96:cf:a8: 45:fe:e3:d2:dd:d4:b0:57:ba:bd:ec:61:8d:da:3d: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7F:9F:2E:9C:06:36:FD:17:10:A9:18:19:CE:62:E4:86:18:28:4E X509v3 Authority Key Identifier: keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/1n-fLpwGNv0XEKkYGc5i5IYYKE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.112.0/22 Signature Algorithm: sha256WithRSAEncryption 81:04:db:8c:52:2b:63:78:8e:01:5e:99:b2:91:95:9c:ea:b3: c8:51:f3:9a:a2:8d:ee:b1:cd:40:f5:e6:e3:47:a4:bf:36:02: 7c:1c:20:ba:26:e3:57:d2:d9:b0:bd:56:27:cf:70:b9:cc:2d: 27:ab:29:ee:98:5f:30:b6:ac:e2:c7:25:38:5a:53:a0:37:ee: 03:76:12:4b:0b:6f:01:f1:bd:56:37:58:8d:bb:6b:42:53:a6: d1:75:c7:9c:0c:0f:b2:4c:9e:d5:5f:a6:09:e4:99:71:c1:7a: a8:89:93:58:03:15:e8:21:e9:19:5b:6b:7b:fb:c3:11:3d:ab: d2:16:89:cf:22:a4:4e:45:67:e5:76:27:46:e8:29:43:05:28: 61:c1:1b:c3:c4:0c:06:c1:e3:08:53:9b:28:2e:ab:a5:f1:59: d0:d0:bc:dd:9b:b5:a9:f5:2f:12:29:bd:b3:e1:d5:a9:58:88: b8:ae:6f:62:23:c1:f0:0f:08:07:44:22:14:12:de:88:26:80: 1f:60:0b:1a:58:c2:6f:1b:50:25:4d:92:bb:02:dc:c8:76:6f: 2a:fe:2c:03:e4:d1:be:1b:67:6e:be:90:8f:4c:a5:d5:c8:21: df:fd:77:1d:7a:5a:98:ab:71:a0:c7:e8:8b:5b:c1:44:3f:3a: 81:be:96:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIA5sQ83VDHfBzJ6rrquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YWFiY2RhYzNhZDlmYjMyZDI0YWQ2MGM4YTI2Y2I5ZWFi OGQ1ODUwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjdmOWYyZTljMDYzNmZkMTcxMGE5MTgxOWNlNjJlNDg2MTgyODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OmXX7HeQOW7ZPG4veR66dp17++1 r5DgZAuOfJ4n9JSjGOSAiGXWMO/V4/0z/S0BRAjhkeZKDcDdA0Zpx/Olzik4ccVZ F2bq5SNi0thzIU14yRv33yjBA4z3c+FAHMgyAxS6/77omA4+cXSFyk4ZcttJamlY 8aVpQ5FJCMYsHcRv9rPVvxOd9AibPFXogUW9I7M2RYpem9jZzxhjfoFI9HSiJ7a2 QHHN8UFOgKXoC9bZ+UKHVSfDP7V+JlU5CxgpL1kD67+klGXZj9bXX0QRkwltDvuX j0k3QYmhvG1jJjs5HaxKLK6qz0Atb+yWz6hF/uPS3dSwV7q97GGN2j1WOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZ/ny6cBjb9FxCpGBnOYuSGGChOMB8GA1UdIwQY MBaAFOeqvNrDrZ+zLSStYMiibLnquNWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTIt ZTM2ZDBiOWI2NDVkLzEvMW4tZkxwd0dOdjBYRUtrWUdjNWk1SVlZS0U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTItZTM2ZDBiOWI2NDVk LzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUxwMA0G CSqGSIb3DQEBCwUAA4IBAQCBBNuMUitjeI4BXpmykZWc6rPIUfOaoo3usc1A9ebj R6S/NgJ8HCC6JuNX0tmwvVYnz3C5zC0nqynumF8wtqzixyU4WlOgN+4DdhJLC28B 8b1WN1iNu2tCU6bRdcecDA+yTJ7VX6YJ5JlxwXqoiZNYAxXoIekZW2t7+8MRPavS FonPIqRORWfldidG6ClDBShhwRvDxAwGweMIU5soLqul8VnQ0Lzdm7Wp9S8SKb2z 4dWpWIi4rm9iI8HwDwgHRCIUEt6IJoAfYAsaWMJvG1AlTZK7AtzIdm8q/iwD5NG+ G2duvpCPTKXVyCHf/XcdelqYq3Ggx+iLW8FEPzqBvpbC -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:49 2026 by rpki-client