This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/To1bIGbGp5M1LHEOYaAsoYMvFHM.roa File: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (raw, json) Hash identifier: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA= Subject key identifier: 4E:8D:5B:20:66:C6:A7:93:35:2C:71:0E:61:A0:2C:A1:83:2F:14:73 Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Certificate serial: 019B7AC7EF416A6CE2AA92B0FBBFD6335E41 Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/To1bIGbGp5M1LHEOYaAsoYMvFHM.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 185.155.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ef:41:6a:6c:e2:aa:92:b0:fb:bf:d6:33:5e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e8d5b2066c6a793352c710e61a02ca1832f1473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:3a:0e:44:37:05:67:23:03:f1:f0:b5:5b: 2c:c8:08:70:b7:ba:28:68:90:bd:d5:29:dd:e1:8c: 9a:97:53:2b:63:ff:9d:33:6a:95:02:5a:dd:52:e0: ae:ab:d3:7c:6a:f2:cb:01:b8:f0:37:4d:c9:dc:7d: 9b:ea:d8:a3:e4:b7:73:fa:ee:f5:ce:ea:ba:8d:76: 34:05:c9:8b:95:51:d2:2e:7a:07:2f:ff:86:21:60: 96:0f:0f:a7:ff:e2:b7:63:c3:d7:de:92:e4:c4:d3: d6:a0:69:ea:2c:5e:29:a0:a9:5d:44:c8:cc:db:8a: 5c:4d:c9:44:95:7b:39:b3:a4:b1:71:13:30:e3:14: a6:9e:7b:1e:4b:26:78:ac:db:01:dd:62:45:86:06: 85:84:40:52:37:27:59:ac:70:fd:dc:14:3f:87:f0: 4b:c6:32:fb:39:55:e9:e9:2f:c3:e0:18:a0:77:50: d8:7f:18:f9:e4:eb:e4:39:f7:2f:b6:8d:aa:60:aa: b9:92:4f:c2:4e:74:ab:15:7d:2c:e0:5c:99:47:4d: 7e:7b:52:e3:fa:7d:95:8e:e3:6e:e3:6d:54:8f:c5: c0:a8:fd:77:b8:e6:8f:6a:26:f8:b4:44:c3:e9:1a: 26:ef:db:70:a3:92:70:6a:04:0a:5f:37:0f:b7:bd: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8D:5B:20:66:C6:A7:93:35:2C:71:0E:61:A0:2C:A1:83:2F:14:73 X509v3 Authority Key Identifier: keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/To1bIGbGp5M1LHEOYaAsoYMvFHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.233.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ba:3c:71:9a:ec:9b:9d:f1:53:6b:02:bf:38:70:a1:b3:dc: f7:e9:1f:1c:5f:87:26:d4:d4:04:b9:8b:7a:e6:2c:59:22:c6: 3e:4e:c5:b6:bd:ad:e5:eb:b7:30:18:86:94:97:57:e5:35:90: 90:12:86:9d:cf:0e:f6:1c:ad:26:3e:55:2e:9e:c6:f4:c7:57: e9:2a:b2:ee:fb:da:9b:cb:da:17:e6:4a:94:e1:c1:52:cd:13: b6:4c:23:8d:79:f7:7f:c3:a0:61:27:0a:21:ba:91:53:5d:1e: 13:0e:a7:75:a8:3b:dc:32:a9:9c:29:9d:75:db:e4:ad:32:50: cc:fb:d0:d3:4c:5b:13:26:b8:dd:e6:d4:e8:45:09:db:9c:86: d8:36:52:6a:18:a3:c4:ba:b5:b1:6a:38:24:3d:67:a9:90:c9: 94:64:3b:d5:80:f9:c4:e5:42:e9:b7:f7:65:2b:85:5b:d6:74: c4:6b:58:03:62:f7:8f:21:37:a4:da:4b:6d:51:e1:fb:e5:34: dc:05:a2:ef:6c:93:0d:a4:ea:1d:38:dd:a1:27:82:ba:d5:b1: 3b:5a:3e:9f:e5:8b:ed:b1:8c:42:f7:98:d5:b2:52:5b:ff:0e: be:de:b5:64:74:8c:64:ca:e4:7d:ab:bf:f0:62:70:1c:dc:82: c5:b6:61:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+9BamziqpKw+7/WM15BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy YTBlZDYwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZThkNWIyMDY2YzZhNzkzMzUyYzcxMGU2MWEwMmNhMTgzMmYxNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+I6DkQ3BWcjA/HwtVssyAhwt7oo aJC91Snd4Yyal1MrY/+dM2qVAlrdUuCuq9N8avLLAbjwN03J3H2b6tij5Ldz+u71 zuq6jXY0BcmLlVHSLnoHL/+GIWCWDw+n/+K3Y8PX3pLkxNPWoGnqLF4poKldRMjM 24pcTclElXs5s6SxcRMw4xSmnnseSyZ4rNsB3WJFhgaFhEBSNydZrHD93BQ/h/BL xjL7OVXp6S/D4Bigd1DYfxj55OvkOfcvto2qYKq5kk/CTnSrFX0s4FyZR01+e1Lj +n2VjuNu421Uj8XAqP13uOaPaib4tETD6Rom79two5JwagQKXzcPt70b0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6NWyBmxqeTNSxxDmGgLKGDLxRzMB8GA1UdIwQY MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt ZmQzYjMwMDJjMGJiLzEvVG8xYklHYkdwNU0xTEhFT1lhQXNvWU12RkhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvpMA0G CSqGSIb3DQEBCwUAA4IBAQCVujxxmuybnfFTawK/OHChs9z36R8cX4cm1NQEuYt6 5ixZIsY+TsW2va3l67cwGIaUl1flNZCQEoadzw72HK0mPlUunsb0x1fpKrLu+9qb y9oX5kqU4cFSzRO2TCONefd/w6BhJwohupFTXR4TDqd1qDvcMqmcKZ112+StMlDM +9DTTFsTJrjd5tToRQnbnIbYNlJqGKPEurWxajgkPWepkMmUZDvVgPnE5ULpt/dl K4Vb1nTEa1gDYvePITek2kttUeH75TTcBaLvbJMNpOodON2hJ4K61bE7Wj6f5Yvt sYxC95jVslJb/w6+3rVkdIxkyuR9q7/wYnAc3ILFtmFB -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:40 2026 by rpki-client