This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa File: 1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa (raw, json) Hash identifier: FXLWu7cTao5t5N2dNabz3TuA4IoXpfS81L/ChF9Q08w= Subject key identifier: D4:CF:CA:7C:AE:D6:37:66:BD:4B:6B:0C:E0:73:F1:45:D8:0D:93:74 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597A07D04174DD28D05EDD2D1D2C28 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa Signing time: Thu 01 Jan 2026 02:18:31 +0000 ROA not before: Thu 01 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205715 IP address blocks: 188.95.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:7a:07:d0:41:74:dd:28:d0:5e:dd:2d:1d:2c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4cfca7caed63766bd4b6b0ce073f145d80d9374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:e0:14:8f:19:92:f4:ad:87:fc:51:a5:d0: 28:81:cc:4f:38:3a:96:e7:5b:c5:94:ea:6d:5a:db: 1a:e7:e1:e4:26:85:21:f3:2d:8e:43:01:82:a6:5f: c6:5f:3a:46:40:33:32:03:91:30:c5:6d:04:da:fc: a9:77:42:63:be:b4:cf:ed:bf:0e:dd:fe:56:dc:ec: 0c:c7:3c:92:3c:61:d0:ae:8d:63:56:48:13:8c:23: 94:7c:01:bc:bf:c9:7b:67:8e:a9:a6:56:c1:77:bb: 14:0a:1b:ac:3c:53:97:29:86:a7:6f:06:1a:3b:1b: 32:fc:80:d5:e8:6e:02:4c:0d:4b:0d:41:61:7c:32: 3e:b3:bf:30:69:7a:56:76:2b:bd:33:3c:ef:31:84: d6:e7:2a:96:bb:06:94:9b:1e:ed:8e:cc:6e:e4:01: 49:2f:1e:4c:6a:a7:42:47:d9:e2:0b:ea:6a:35:ea: c5:14:c0:b8:7a:b8:0d:46:a0:56:f4:de:a2:72:56: 5c:b6:d2:90:16:69:1a:8b:57:94:7d:12:21:df:ef: bc:cb:5c:36:c5:fc:4d:c7:f4:7b:52:e6:46:3b:8b: 96:26:09:87:76:39:4f:c9:be:11:3d:2d:37:28:7b: 84:73:5b:49:0e:82:2b:71:09:83:a1:a8:d7:54:c6: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:CA:7C:AE:D6:37:66:BD:4B:6B:0C:E0:73:F1:45:D8:0D:93:74 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.148.0/23 Signature Algorithm: sha256WithRSAEncryption 38:a8:ea:db:ef:df:0f:0d:35:68:ef:ae:5c:30:6b:27:47:f2: c7:93:f3:00:39:cc:f9:31:bf:86:96:bb:23:f7:17:4e:a0:1e: b0:8a:5d:2b:a6:a4:9e:c3:15:d5:21:03:19:18:98:d3:7e:ec: c0:c1:ee:cd:6f:a7:a0:62:dc:18:89:17:d5:11:22:83:c6:4f: 22:e0:9a:3f:a4:7a:de:7d:31:f7:56:df:15:13:b2:d8:f2:29: 93:2f:41:f7:7f:c6:ad:67:07:23:86:e9:fd:90:4c:86:84:11: 0e:4d:ab:10:a2:77:ea:73:1c:db:52:31:5b:67:b5:7e:15:6f: 8c:b8:48:4e:19:a4:c9:cb:22:af:ab:ae:e7:55:5c:d9:75:a6: 88:f4:c3:a4:58:b9:ca:9b:7d:82:73:98:9f:37:ee:63:f7:aa: 39:cf:80:b4:96:8c:b5:a3:1f:41:1c:ce:af:50:23:b2:c1:f5: 7c:ae:de:fa:e0:02:1f:4b:05:ec:0c:38:81:59:08:44:0e:4e: 0e:3a:5a:7a:e5:bb:7a:f8:28:fb:72:9c:94:f5:74:70:27:a7: 95:b0:bf:33:b9:ef:bd:b7:6a:d4:3d:ab:11:ea:f9:cd:46:6c: 5b:93:a5:4a:27:74:86:7f:03:94:20:9b:9e:27:55:e7:a7:96: c7:90:16:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXoH0EF03SjQXt0tHSwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGNmY2E3Y2FlZDYzNzY2YmQ0YjZiMGNlMDczZjE0NWQ4MGQ5Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ngFI8ZkvSth/xRpdAogcxPODqW 51vFlOptWtsa5+HkJoUh8y2OQwGCpl/GXzpGQDMyA5EwxW0E2vypd0JjvrTP7b8O 3f5W3OwMxzySPGHQro1jVkgTjCOUfAG8v8l7Z46pplbBd7sUChusPFOXKYanbwYa Oxsy/IDV6G4CTA1LDUFhfDI+s78waXpWdiu9MzzvMYTW5yqWuwaUmx7tjsxu5AFJ Lx5MaqdCR9niC+pqNerFFMC4ergNRqBW9N6iclZcttKQFmkai1eUfRIh3++8y1w2 xfxNx/R7UuZGO4uWJgmHdjlPyb4RPS03KHuEc1tJDoIrcQmDoajXVMZ3YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTPynyu1jdmvUtrDOBz8UXYDZN0MB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvMU1fS2ZLN1dOMmE5UzJzTTRIUHhSZGdOazNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvF+UMA0G CSqGSIb3DQEBCwUAA4IBAQA4qOrb798PDTVo765cMGsnR/LHk/MAOcz5Mb+Glrsj 9xdOoB6wil0rpqSewxXVIQMZGJjTfuzAwe7Nb6egYtwYiRfVESKDxk8i4Jo/pHre fTH3Vt8VE7LY8imTL0H3f8atZwcjhun9kEyGhBEOTasQonfqcxzbUjFbZ7V+FW+M uEhOGaTJyyKvq67nVVzZdaaI9MOkWLnKm32Cc5ifN+5j96o5z4C0loy1ox9BHM6v UCOywfV8rt764AIfSwXsDDiBWQhEDk4OOlp65bt6+Cj7cpyU9XRwJ6eVsL8zue+9 t2rUPasR6vnNRmxbk6VKJ3SGfwOUIJueJ1Xnp5bHkBbR -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:34 2026 by rpki-client