This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/D1EmtE1k7u4f07ze8ohcNIZrJqY.roa File: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (raw, json) Hash identifier: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18= Subject key identifier: 0F:51:26:B4:4D:64:EE:EE:1F:D3:BC:DE:F2:88:5C:34:86:6B:26:A6 Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Certificate serial: 019B7F15229D5C711EF7A4E3EBE2702BFAC9 Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/D1EmtE1k7u4f07ze8ohcNIZrJqY.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200665 IP address blocks: 141.195.8.0/21 maxlen: 23 176.124.60.0/22 maxlen: 22 176.125.244.0/22 maxlen: 22 185.97.196.0/22 maxlen: 22 185.180.232.0/22 maxlen: 22 185.181.80.0/22 maxlen: 22 2a06:700::/29 maxlen: 32 2a0a:9b80::/32 maxlen: 32 2a0a:9c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:22:9d:5c:71:1e:f7:a4:e3:eb:e2:70:2b:fa:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f5126b44d64eeee1fd3bcdef2885c34866b26a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:ce:d0:65:57:5e:21:03:f6:46:68:01:a0: 01:97:da:35:7f:24:54:ac:33:5a:a9:18:0d:6c:22: 22:8c:5e:14:30:bb:75:0e:c9:17:52:c1:0c:ba:53: 84:a4:6c:fd:7e:57:c7:e3:b9:7c:16:ec:4c:12:d0: d5:e8:28:4a:25:82:6b:99:56:e7:23:e7:65:56:b7: a2:4e:a8:f6:cb:e2:62:d0:a3:ee:d1:bd:3e:ed:d5: 26:65:4d:d9:60:db:49:31:7f:a8:09:4e:6f:8d:bf: 8a:1e:45:d6:08:7f:36:81:02:c0:9c:d9:42:aa:8b: 63:28:89:61:37:4e:9d:e0:89:c7:f9:a8:8c:4e:4c: 81:e2:bb:40:9d:18:3c:0b:e8:92:1d:8d:e1:9f:99: 20:1d:22:24:c8:ae:3f:f9:27:89:c3:0d:32:ff:6d: c3:3c:4b:9f:e1:02:d2:b0:46:b9:a4:65:5e:b8:39: 5a:6e:c5:ed:a9:21:0f:7a:df:7d:a6:ff:9f:26:94: a3:9c:f5:73:1a:7b:b6:f5:c7:cb:10:58:74:69:18: d0:bb:77:40:55:a2:ea:21:c0:b5:98:c4:2f:bc:c5: 4e:a9:99:a6:aa:a2:0a:fb:2c:6e:8b:a6:26:c3:16: 71:f3:2b:70:c2:2a:95:72:0a:41:76:e0:32:e7:2f: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:26:B4:4D:64:EE:EE:1F:D3:BC:DE:F2:88:5C:34:86:6B:26:A6 X509v3 Authority Key Identifier: keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/D1EmtE1k7u4f07ze8ohcNIZrJqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.195.8.0/21 176.124.60.0/22 176.125.244.0/22 185.97.196.0/22 185.180.232.0/22 185.181.80.0/22 IPv6: 2a06:700::/29 2a0a:9b80::/32 2a0a:9c80::/32 Signature Algorithm: sha256WithRSAEncryption c3:b9:58:68:36:6e:c1:9e:c4:5f:ee:18:8e:e5:cf:8e:d9:d9: 27:f5:e1:ad:ce:37:d2:90:39:36:8b:83:3b:e5:5e:65:a5:f5: af:8b:64:ce:1c:60:dc:ea:d3:72:a9:84:0f:91:db:28:ec:30: a1:aa:32:18:4c:71:5a:61:19:44:cf:ab:d4:1d:3c:94:7d:c9: 33:ad:65:32:fb:27:45:c6:67:03:b9:db:21:7c:3c:09:ea:5d: 57:ac:61:b0:03:f4:c5:47:23:eb:d2:2e:64:1a:d8:2e:04:f8: f6:27:d1:0b:8c:e6:f2:19:9a:b0:42:dd:af:6d:bb:8d:71:c2: 70:25:38:1b:f1:fc:34:0d:86:73:f4:70:35:4d:8d:29:68:51: 93:19:51:c0:62:49:1d:3c:2b:72:2b:d3:00:ae:4b:14:e2:20: 29:e8:a4:46:fc:4c:e4:4b:1d:e4:99:13:d6:78:d7:43:af:e0: ba:46:04:ae:f3:56:8a:73:35:0e:a6:5b:25:24:65:5c:c5:a2: 00:09:5d:d4:d7:a7:cb:77:d3:9e:68:bb:33:03:aa:92:80:cb: 71:b2:11:6a:d5:86:7c:ad:c2:37:33:b1:1c:f6:89:28:1f:6c: 27:7f:ac:df:ac:ee:65:9c:e5:a5:cc:ea:35:36:10:8d:1f:48: 26:ae:c6:40 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt/FSKdXHEe96Tj6+JwK/rJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5 N2M1YzMwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjUxMjZiNDRkNjRlZWVlMWZkM2JjZGVmMjg4NWMzNDg2NmIyNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yDO0GVXXiED9kZoAaABl9o1fyRU rDNaqRgNbCIijF4UMLt1DskXUsEMulOEpGz9flfH47l8FuxMEtDV6ChKJYJrmVbn I+dlVreiTqj2y+Ji0KPu0b0+7dUmZU3ZYNtJMX+oCU5vjb+KHkXWCH82gQLAnNlC qotjKIlhN06d4InH+aiMTkyB4rtAnRg8C+iSHY3hn5kgHSIkyK4/+SeJww0y/23D PEuf4QLSsEa5pGVeuDlabsXtqSEPet99pv+fJpSjnPVzGnu29cfLEFh0aRjQu3dA VaLqIcC1mMQvvMVOqZmmqqIK+yxui6YmwxZx8ytwwiqVcgpBduAy5y/nLwIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFA9RJrRNZO7uH9O83vKIXDSGayamMB8GA1UdIwQY MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt YjZkYzJiN2JmMzBhLzEvRDFFbXRFMWs3dTRmMDd6ZThvaGNOSVpySnFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAqBAIAATAkAwQDjcMIAwQC sHw8AwQCsH30AwQCuWHEAwQCubToAwQCubVQMBsEAgACMBUDBQMqBgcAAwUAKgqb gAMFACoKnIAwDQYJKoZIhvcNAQELBQADggEBAMO5WGg2bsGexF/uGI7lz47Z2Sf1 4a3ON9KQOTaLgzvlXmWl9a+LZM4cYNzq03KphA+R2yjsMKGqMhhMcVphGUTPq9Qd PJR9yTOtZTL7J0XGZwO52yF8PAnqXVesYbAD9MVHI+vSLmQa2C4E+PYn0QuM5vIZ mrBC3a9tu41xwnAlOBvx/DQNhnP0cDVNjSloUZMZUcBiSR08K3Ir0wCuSxTiICno pEb8TORLHeSZE9Z410Ov4LpGBK7zVopzNQ6mWyUkZVzFogAJXdTXp8t3055ouzMD qpKAy3GyEWrVhnytwjczsRz2iSgfbCd/rN+s7mWc5aXM6jU2EI0fSCauxkA= -----END CERTIFICATE-----Generated at Tue Jan 27 10:18:47 2026 by rpki-client