This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/1_CArV4y8iJiwF-qVbyr6lB9z1M.roa File: 1_CArV4y8iJiwF-qVbyr6lB9z1M.roa (raw, json) Hash identifier: sgMm20YcGzVkjGjRqisERD3t8QppN0pvoO75EGB83sY= Subject key identifier: D7:F0:80:AD:5E:32:F2:22:62:C0:5F:AA:55:BC:AB:EA:50:7D:CF:53 Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8 Certificate serial: 019B7E390E91A6A7192F5506BD3C11B47857 Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/1_CArV4y8iJiwF-qVbyr6lB9z1M.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201959 IP address blocks: 185.58.64.0/22 maxlen: 22 2a04:df40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0e:91:a6:a7:19:2f:55:06:bd:3c:11:b4:78:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7f080ad5e32f22262c05faa55bcabea507dcf53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:f0:60:a0:74:fb:40:6b:74:20:d2:dd:49: 90:43:dc:5b:5e:ec:84:50:e6:98:3f:c1:b7:0f:00: ad:c1:15:67:73:94:0f:25:28:e5:2e:7a:54:53:41: d5:37:57:49:c1:e1:8c:f6:cb:d4:5a:d3:fa:db:6b: 2a:1a:8d:8b:61:6c:3a:e9:ec:94:27:04:7e:fc:b1: be:03:df:0a:54:5a:20:be:dd:22:0e:dd:19:68:86: 9f:21:5c:d8:14:83:ae:8f:f8:fd:66:ac:03:a6:5e: 44:22:d4:06:63:44:fc:8a:8c:40:63:b1:65:88:21: f6:2d:03:0e:19:aa:88:9b:1c:4e:e4:ec:7b:f6:25: 00:14:c5:be:df:15:5a:29:a0:6d:f2:5a:b4:13:ea: 15:a7:a8:b0:d0:ef:7e:71:07:29:f4:92:ad:34:bd: 14:9d:eb:6f:20:eb:bb:37:f1:1d:5a:a2:ab:20:b8: 97:52:eb:20:d5:3b:6b:42:24:e0:f5:19:f3:fe:73: 23:4f:78:34:16:c5:3c:db:e0:bc:ca:51:83:29:87: 3c:8a:88:d3:aa:ba:c1:83:0d:e9:06:15:2f:27:fb: 0d:d7:e0:83:62:b3:23:fc:91:96:d8:f1:bd:aa:9a: b4:77:bc:8b:95:29:8d:49:f4:ef:c9:b2:81:1a:91: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F0:80:AD:5E:32:F2:22:62:C0:5F:AA:55:BC:AB:EA:50:7D:CF:53 X509v3 Authority Key Identifier: keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/1_CArV4y8iJiwF-qVbyr6lB9z1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.58.64.0/22 IPv6: 2a04:df40::/29 Signature Algorithm: sha256WithRSAEncryption 1a:47:5f:a8:34:ea:7e:a4:72:54:af:16:37:c8:49:b1:94:76: 4a:78:2d:bb:b7:2a:9b:99:4b:68:3c:13:34:1d:cb:d2:5f:5f: f1:4f:26:0f:bc:19:69:d5:0a:ab:59:1e:65:f7:62:c6:60:fd: 79:6c:ea:81:97:38:8a:78:70:0b:73:66:0e:73:29:b1:b7:62: 3f:d5:85:dc:fc:71:63:78:41:7b:b5:55:1f:57:30:9c:48:ef: a9:6a:9e:f0:de:4f:f7:47:2b:34:2b:26:06:71:84:4a:d0:0b: 56:46:13:f4:0c:44:49:71:21:71:ed:c2:00:89:72:31:2b:95: 40:ed:59:8c:28:47:6f:b5:96:1a:78:fd:09:30:2d:cb:a8:8a: ec:b1:73:96:d6:e4:7b:ae:9c:19:d5:c7:4b:84:40:2d:51:db: 05:ec:ef:e9:63:d1:f7:8c:ee:92:ce:60:f8:f1:a7:a1:d1:31: a0:ec:ba:ad:ba:a2:fc:6c:37:69:79:4b:59:bc:ab:6a:cb:1f: 6e:12:8e:86:54:c9:f3:36:7e:73:b9:88:35:87:4e:29:92:e4: 57:76:bf:12:85:ed:6a:da:ee:4c:f7:30:5d:36:71:ba:2d:71: a7:1c:48:13:7a:1b:3b:b5:04:61:79:6e:48:db:95:78:53:da: d8:a1:3f:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OQ6RpqcZL1UGvTwRtHhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3 YTY1ZTgwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2YwODBhZDVlMzJmMjIyNjJjMDVmYWE1NWJjYWJlYTUwN2RjZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8rwYKB0+0BrdCDS3UmQQ9xbXuyE UOaYP8G3DwCtwRVnc5QPJSjlLnpUU0HVN1dJweGM9svUWtP622sqGo2LYWw66eyU JwR+/LG+A98KVFogvt0iDt0ZaIafIVzYFIOuj/j9ZqwDpl5EItQGY0T8ioxAY7Fl iCH2LQMOGaqImxxO5Ox79iUAFMW+3xVaKaBt8lq0E+oVp6iw0O9+cQcp9JKtNL0U netvIOu7N/EdWqKrILiXUusg1TtrQiTg9Rnz/nMjT3g0FsU82+C8ylGDKYc8iojT qrrBgw3pBhUvJ/sN1+CDYrMj/JGW2PG9qpq0d7yLlSmNSfTvybKBGpF6KwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNfwgK1eMvIiYsBfqlW8q+pQfc9TMB8GA1UdIwQY MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt MjhlNzczZGI5MWMyLzEvMV9DQXJWNHk4aUppd0YtcVZieXI2bEI5ejFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTpAMA0E AgACMAcDBQMqBN9AMA0GCSqGSIb3DQEBCwUAA4IBAQAaR1+oNOp+pHJUrxY3yEmx lHZKeC27tyqbmUtoPBM0HcvSX1/xTyYPvBlp1QqrWR5l92LGYP15bOqBlziKeHAL c2YOcymxt2I/1YXc/HFjeEF7tVUfVzCcSO+pap7w3k/3Rys0KyYGcYRK0AtWRhP0 DERJcSFx7cIAiXIxK5VA7VmMKEdvtZYaeP0JMC3LqIrssXOW1uR7rpwZ1cdLhEAt UdsF7O/pY9H3jO6SzmD48aeh0TGg7LqtuqL8bDdpeUtZvKtqyx9uEo6GVMnzNn5z uYg1h04pkuRXdr8She1q2u5M9zBdNnG6LXGnHEgTehs7tQRheW5I25V4U9rYoT/K -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:27 2026 by rpki-client