This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/1Pl1iEj3pOl4af_S0pcP4CMrG30.roa File: 1Pl1iEj3pOl4af_S0pcP4CMrG30.roa (raw, json) Hash identifier: Bfn9XfoIj04iU0Dz8XIWd4MRuYoMEdKPDCStjjkmGQI= Subject key identifier: D4:F9:75:88:48:F7:A4:E9:78:69:FF:D2:D2:97:0F:E0:23:2B:1B:7D Certificate issuer: /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652 Certificate serial: 019B775959EF3E9912D675DE359185DD9BC4 Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/1Pl1iEj3pOl4af_S0pcP4CMrG30.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44165 IP address blocks: 195.130.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:59:ef:3e:99:12:d6:75:de:35:91:85:dd:9b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4f9758848f7a4e97869ffd2d2970fe0232b1b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:ed:09:dc:84:f6:00:77:5f:32:53:e4:fa: a4:f0:ab:71:cc:e8:0b:a0:56:0f:31:91:ac:b2:ea: 32:e2:f2:d7:5d:4b:36:30:71:ce:c7:6d:82:32:5d: 2e:18:9e:0d:c4:b1:bb:52:5e:c0:00:3b:7e:21:a7: 6b:3b:64:f6:13:1a:c0:26:48:b3:3d:19:6d:0c:6e: ab:93:35:8a:c9:89:85:c1:48:70:8c:83:e3:22:9e: 7f:f1:46:7a:08:f1:45:f1:ee:ab:03:62:5a:25:d5: 20:1e:12:55:54:b2:50:55:41:86:3d:ba:12:d5:15: 5d:eb:67:21:18:51:ff:53:9d:b8:48:68:3a:5f:79: c0:f4:73:6b:6b:9c:a1:86:c6:70:49:08:35:cd:80: 31:e5:b0:95:a4:a9:dc:fd:f1:6f:fd:8b:06:de:7e: 24:2c:7a:1c:0b:94:79:f9:f2:aa:a6:e9:e3:af:b8: 1d:1a:27:1e:cc:b1:1a:f5:7e:e1:a0:8f:dc:d4:ed: f2:be:f4:2e:6c:9e:9f:92:99:e9:43:fd:18:fd:7e: a5:ac:22:aa:2e:73:8a:76:c8:bc:f2:86:38:69:34: b6:73:db:59:8c:1f:bb:3b:d4:31:0a:68:15:ec:d9: 40:a1:a7:bf:f2:82:da:ce:32:35:28:5b:35:f7:0b: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:75:88:48:F7:A4:E9:78:69:FF:D2:D2:97:0F:E0:23:2B:1B:7D X509v3 Authority Key Identifier: keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/1Pl1iEj3pOl4af_S0pcP4CMrG30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.130.216.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:db:7f:39:a8:90:2a:8c:b8:60:44:16:8d:b7:de:2f:31:ba: 69:a5:a4:48:c8:04:06:e0:13:08:72:0d:1f:09:42:37:03:d0: b6:58:d7:8f:47:c3:29:03:12:52:a7:fe:14:75:bf:9f:eb:87: 87:5f:ac:ad:c7:29:69:36:29:d3:22:53:05:ff:e3:37:d8:06: ab:ea:a3:24:37:0c:76:72:ec:e7:92:26:6e:e5:c7:56:ca:cf: d5:31:19:ac:bb:74:cf:98:5a:1f:9f:1f:4e:56:82:2c:03:cc: e7:86:7e:c8:d3:01:4b:5d:48:c4:d6:51:c1:43:6e:e3:45:9e: 53:ca:14:8e:47:67:5e:83:e8:4f:66:67:21:71:d0:6a:0f:32: e5:5f:e3:e8:0c:9d:f5:60:73:89:39:c5:f8:aa:5e:87:eb:dd: 61:e5:55:25:14:24:29:51:4b:f4:18:9e:a0:0a:da:61:99:65: ef:65:5e:5f:e8:a6:91:fa:9e:93:2d:1a:cb:e1:4e:b8:90:c0: 5e:52:b7:ef:ee:5f:5d:c6:78:47:00:f5:0f:80:ba:ed:44:09: 48:02:18:be:48:a2:e7:d5:a8:3b:0c:fd:df:bb:52:4a:21:ea: a8:1a:b0:3b:48:2f:d5:0d:4d:77:82:69:77:57:b8:f1:59:8b: 26:72:4d:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVnvPpkS1nXeNZGF3ZvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZTFjZmVjYzkyYjEwNGZjZmE5ZWZlYzZhNThmMGMxOTc5 MDE2NTIwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGY5NzU4ODQ4ZjdhNGU5Nzg2OWZmZDJkMjk3MGZlMDIzMmIxYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyftCdyE9gB3XzJT5Pqk8KtxzOgL oFYPMZGssuoy4vLXXUs2MHHOx22CMl0uGJ4NxLG7Ul7AADt+IadrO2T2ExrAJkiz PRltDG6rkzWKyYmFwUhwjIPjIp5/8UZ6CPFF8e6rA2JaJdUgHhJVVLJQVUGGPboS 1RVd62chGFH/U524SGg6X3nA9HNra5yhhsZwSQg1zYAx5bCVpKnc/fFv/YsG3n4k LHocC5R5+fKqpunjr7gdGicezLEa9X7hoI/c1O3yvvQubJ6fkpnpQ/0Y/X6lrCKq LnOKdsi88oY4aTS2c9tZjB+7O9QxCmgV7NlAoae/8oLazjI1KFs19wsaUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNT5dYhI96TpeGn/0tKXD+AjKxt9MB8GA1UdIwQY MBaAFM3hz+zJKxBPz6nv7GpY8MGXkBZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYt ODc0NWRlMmY0MzIxLzEvMVBsMWlFajNwT2w0YWZfUzBwY1A0Q01yRzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYtODc0NWRlMmY0MzIx LzEvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4LYMA0G CSqGSIb3DQEBCwUAA4IBAQB72385qJAqjLhgRBaNt94vMbpppaRIyAQG4BMIcg0f CUI3A9C2WNePR8MpAxJSp/4Udb+f64eHX6ytxylpNinTIlMF/+M32Aar6qMkNwx2 cuznkiZu5cdWys/VMRmsu3TPmFofnx9OVoIsA8znhn7I0wFLXUjE1lHBQ27jRZ5T yhSOR2deg+hPZmchcdBqDzLlX+PoDJ31YHOJOcX4ql6H691h5VUlFCQpUUv0GJ6g CtphmWXvZV5f6KaR+p6TLRrL4U64kMBeUrfv7l9dxnhHAPUPgLrtRAlIAhi+SKLn 1ag7DP3fu1JKIeqoGrA7SC/VDU13gml3V7jxWYsmck0u -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:10 2026 by rpki-client