This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa
File: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (raw, json)
Hash identifier: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=
Subject key identifier: D6:07:62:52:0A:A4:54:D7:2E:89:9D:95:84:77:86:18:A8:B7:14:E7
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019B7E3931C71FB382AF24A6148EA276F176
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa
Signing time: Fri 02 Jan 2026 10:20:36 +0000
ROA not before: Fri 02 Jan 2026 10:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197450
IP address blocks: 185.113.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:31:c7:1f:b3:82:af:24:a6:14:8e:a2:76:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jan 2 10:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d60762520aa454d72e899d9584778618a8b714e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:b7:21:8a:6d:21:df:b9:f4:b5:27:a6:b2:
ae:54:13:76:79:18:c9:ea:5d:1c:b0:f8:e1:a0:18:
a9:c7:e3:7f:34:05:ab:f6:7b:75:02:02:bb:4a:ad:
68:94:6e:76:96:24:66:e5:61:7d:51:24:53:ec:ef:
38:f8:fc:29:1e:51:81:b3:6f:ca:d9:f4:39:a6:bc:
65:9b:39:8a:06:9e:51:ac:2a:00:06:fc:85:d5:63:
8e:9b:dc:99:7b:7d:eb:19:6e:ad:b0:d7:bc:1a:51:
72:c8:03:2d:1e:5d:df:5b:6a:eb:5f:3d:da:ca:e5:
8d:19:b1:23:81:f8:2d:2a:25:11:43:57:9d:3f:32:
17:f1:73:8c:d6:20:6d:21:00:5d:63:3d:23:24:d0:
c1:fa:5b:bc:d1:d8:6f:20:4f:92:ad:9c:57:34:08:
8f:66:7a:4c:8d:01:93:ea:ae:d0:76:b5:98:49:db:
e1:65:82:98:5c:82:c4:8a:09:fc:31:8f:76:e6:1c:
e2:53:3d:00:fc:25:5a:16:6c:ee:4e:91:ef:eb:f5:
60:33:83:04:ee:01:d8:08:e1:54:f8:44:a9:92:8a:
eb:15:6c:00:17:e8:68:aa:99:33:4c:90:e9:0a:f7:
12:17:1a:83:2c:0f:62:3d:12:47:45:26:77:f2:bf:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:62:52:0A:A4:54:D7:2E:89:9D:95:84:77:86:18:A8:B7:14:E7
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.223.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e2:8c:d4:9d:23:f9:70:25:c7:92:a9:7f:ec:0c:7f:6e:e4:
19:12:7f:6e:b6:a5:d7:01:e9:9a:65:af:25:1d:aa:89:5f:35:
79:d0:9f:f5:e2:c9:da:76:2e:fd:02:b2:2f:50:8e:ce:02:17:
9a:40:c7:6f:21:e9:8b:b9:00:6d:48:8b:1a:d9:cc:b1:92:56:
28:6b:fe:4f:e3:c0:e7:f7:4b:bf:9f:b9:55:3b:22:7d:78:2e:
52:97:01:55:c6:58:36:b1:dc:9f:a3:94:5f:2f:0d:fe:73:85:
fa:43:01:b5:55:93:08:df:05:cb:fa:f5:6d:82:35:0b:42:36:
37:da:74:f2:ec:d4:00:a0:97:12:c3:72:ae:46:97:49:27:a6:
c7:44:01:06:c3:cc:0e:33:da:fb:98:3c:17:46:6a:e1:c0:28:
68:ef:06:e4:44:ce:09:9b:aa:5a:25:dc:ba:6d:c3:09:a9:01:
cd:1f:77:c7:16:06:76:1a:8a:16:2f:d4:17:9c:03:77:ec:43:
53:eb:ae:6e:bc:e7:11:8e:e6:43:54:56:cd:2c:08:e2:4c:2e:
69:94:cd:ae:cd:41:9b:d3:66:e0:c2:27:5e:de:9e:48:87:ea:
65:ca:e9:40:c6:db:e3:dc:9c:dd:63:af:ba:b5:73:07:2b:9f:
8e:fd:b7:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OTHHH7OCrySmFI6idvF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjA3NjI1MjBhYTQ1NGQ3MmU4OTlkOTU4NDc3ODYxOGE4YjcxNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ+3IYptId+59LUnprKuVBN2eRjJ
6l0csPjhoBipx+N/NAWr9nt1AgK7Sq1olG52liRm5WF9USRT7O84+PwpHlGBs2/K
2fQ5prxlmzmKBp5RrCoABvyF1WOOm9yZe33rGW6tsNe8GlFyyAMtHl3fW2rrXz3a
yuWNGbEjgfgtKiURQ1edPzIX8XOM1iBtIQBdYz0jJNDB+lu80dhvIE+SrZxXNAiP
ZnpMjQGT6q7QdrWYSdvhZYKYXILEign8MY925hziUz0A/CVaFmzuTpHv6/VgM4ME
7gHYCOFU+ESpkorrFWwAF+hoqpkzTJDpCvcSFxqDLA9iPRJHRSZ38r/Q/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYHYlIKpFTXLomdlYR3hhiotxTnMB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvMWdkaVVncWtWTmN1aVoyVmhIZUdHS2kzRk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXHfMA0G
CSqGSIb3DQEBCwUAA4IBAQBB4ozUnSP5cCXHkql/7Ax/buQZEn9utqXXAemaZa8l
HaqJXzV50J/14snadi79ArIvUI7OAheaQMdvIemLuQBtSIsa2cyxklYoa/5P48Dn
90u/n7lVOyJ9eC5SlwFVxlg2sdyfo5RfLw3+c4X6QwG1VZMI3wXL+vVtgjULQjY3
2nTy7NQAoJcSw3KuRpdJJ6bHRAEGw8wOM9r7mDwXRmrhwCho7wbkRM4Jm6paJdy6
bcMJqQHNH3fHFgZ2GooWL9QXnAN37ENT665uvOcRjuZDVFbNLAjiTC5plM2uzUGb
02bgwide3p5Ih+plyulAxtvj3JzdY6+6tXMHK5+O/bex
-----END CERTIFICATE-----
Generated at Wed Jan 21 16:15:37 2026 by rpki-client