This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/1-y_IdByEhn8iG3365qsDy0gWV1Y.roa File: 1-y_IdByEhn8iG3365qsDy0gWV1Y.roa (raw, json) Hash identifier: VS0T4i9Pv0/1fxgKv6PoNA1S1TKYjVElMHVoIv5HPww= Subject key identifier: FB:2F:C8:74:1C:84:86:7F:22:1B:7D:FA:E6:AB:03:CB:48:16:57:56 Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Certificate serial: 019B7F83D35D8D70EDAEEDFE8E0984CC3B37 Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/1-y_IdByEhn8iG3365qsDy0gWV1Y.roa Signing time: Fri 02 Jan 2026 16:21:44 +0000 ROA not before: Fri 02 Jan 2026 16:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205513 IP address blocks: 31.129.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d3:5d:8d:70:ed:ae:ed:fe:8e:09:84:cc:3b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb2fc8741c84867f221b7dfae6ab03cb48165756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:35:2f:f4:83:08:9b:e4:5c:6b:8e:3e:ed: 10:b8:2a:da:82:88:20:83:4a:46:b0:62:8b:b6:04: 0a:ec:c0:6e:9b:af:2c:06:e1:97:d9:7a:fe:96:f4: 1a:35:8f:59:36:dd:e7:5d:d1:02:8e:66:72:a8:0c: 2a:7d:c1:8d:54:e0:22:cf:c1:90:0d:99:4c:0c:8b: c7:18:a3:cf:f9:4b:dd:42:ec:d8:66:e2:4a:3d:b4: ea:b6:d6:c0:59:d7:9e:ab:a0:73:d2:2b:45:08:4e: 9d:26:f6:16:80:e8:5b:44:2c:23:81:a6:cb:39:30: da:a2:64:ef:92:8a:94:d1:5b:ce:14:fb:d8:43:9d: ee:c6:93:f7:9c:79:ad:6d:1c:56:88:f2:9d:8f:0a: 79:25:c8:8b:b3:4a:73:35:aa:42:66:5b:28:14:99: 02:a6:36:04:c0:d6:6c:42:af:b3:3a:28:9a:00:95: 86:bf:20:b9:f3:22:44:de:6c:31:06:70:ff:32:8a: b6:0c:11:6b:5c:f9:80:56:6a:3c:ab:d0:ea:09:3a: 8e:9e:c9:26:92:67:52:0e:a0:ef:c1:cc:74:7e:10: aa:d1:f4:2e:c2:b8:a3:55:68:16:a7:5f:c6:08:ca: d5:f0:bb:a3:75:53:fe:7c:d7:e9:b5:ec:ac:25:56: 7b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2F:C8:74:1C:84:86:7F:22:1B:7D:FA:E6:AB:03:CB:48:16:57:56 X509v3 Authority Key Identifier: keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/1-y_IdByEhn8iG3365qsDy0gWV1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.250.0/24 Signature Algorithm: sha256WithRSAEncryption 49:3f:ba:ae:a4:c7:54:d9:4d:ab:eb:1b:06:66:02:e4:ec:d0: 87:b0:c9:11:24:e4:b9:aa:03:c2:06:ec:14:5a:7b:48:2a:a0: 6f:c3:2c:e3:97:05:45:9c:57:40:c0:1e:34:ac:80:22:b7:2d: 49:6d:2b:01:c0:e3:d5:b2:1a:61:1d:a4:2e:7b:f0:b3:04:f9: 5e:04:7f:3d:ce:36:94:9b:e5:8c:7f:3a:d5:76:ec:9d:69:8e: 10:88:86:3e:91:ca:42:ca:52:aa:fa:19:3b:ec:ab:df:10:8f: 48:f4:ef:27:39:3b:0f:02:aa:96:d1:36:e2:5c:a0:1e:9d:50: c8:3b:cc:0a:2b:d6:5b:75:39:5b:4c:68:bb:7e:d6:a1:4a:78: e7:16:02:23:1c:c1:df:8b:ba:27:b0:45:4d:28:59:c9:b2:7c: d1:22:c1:29:1f:95:23:59:fe:fa:9d:f5:2e:bf:57:c1:59:71: 4e:6e:0b:40:18:42:a5:12:31:77:0b:98:c8:17:be:27:86:cb: f8:0a:90:cf:54:1e:d7:b5:18:32:c2:1e:39:05:27:6c:a4:99: 22:0c:e6:ef:b6:3d:0f:98:57:f1:85:2f:17:d2:36:8e:28:ba: 28:d7:ec:0d:ee:2d:65:c3:77:46:33:32:5a:eb:02:86:4d:62: e6:6b:9d:35 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/g9NdjXDtru3+jgmEzDs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl ZTA4ZTAwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjJmYzg3NDFjODQ4NjdmMjIxYjdkZmFlNmFiMDNjYjQ4MTY1NzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgE1L/SDCJvkXGuOPu0QuCragogg g0pGsGKLtgQK7MBum68sBuGX2Xr+lvQaNY9ZNt3nXdECjmZyqAwqfcGNVOAiz8GQ DZlMDIvHGKPP+UvdQuzYZuJKPbTqttbAWdeeq6Bz0itFCE6dJvYWgOhbRCwjgabL OTDaomTvkoqU0VvOFPvYQ53uxpP3nHmtbRxWiPKdjwp5JciLs0pzNapCZlsoFJkC pjYEwNZsQq+zOiiaAJWGvyC58yJE3mwxBnD/Moq2DBFrXPmAVmo8q9DqCTqOnskm kmdSDqDvwcx0fhCq0fQuwrijVWgWp1/GCMrV8LujdVP+fNfpteysJVZ7CQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsvyHQchIZ/Iht9+uarA8tIFldWMB8GA1UdIwQY MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt ODYzYzliM2QzMmIwLzEvMS15X0lkQnlFaG44aUczMzY1cXNEeTBnV1YxWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDkvYzljOWZjLTU4NjQtNDE0ZS1hZTJhLTg2M2M5YjNkMzJi MC8xL1JFVEh3NjAwdHBkX29Zb2lOOG93YTV2dUNPQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB+B+jAN BgkqhkiG9w0BAQsFAAOCAQEAST+6rqTHVNlNq+sbBmYC5OzQh7DJESTkuaoDwgbs FFp7SCqgb8Ms45cFRZxXQMAeNKyAIrctSW0rAcDj1bIaYR2kLnvwswT5XgR/Pc42 lJvljH861XbsnWmOEIiGPpHKQspSqvoZO+yr3xCPSPTvJzk7DwKqltE24lygHp1Q yDvMCivWW3U5W0xou37WoUp45xYCIxzB34u6J7BFTShZybJ80SLBKR+VI1n++p31 Lr9XwVlxTm4LQBhCpRIxdwuYyBe+J4bL+AqQz1Qe17UYMsIeOQUnbKSZIgzm77Y9 D5hX8YUvF9I2jii6KNfsDe4tZcN3RjMyWusChk1i5mudNQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:05 2026 by rpki-client