This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/1I6xXRp2MIVm80sw3U3Tfku76Z4.roa File: 1I6xXRp2MIVm80sw3U3Tfku76Z4.roa (raw, json) Hash identifier: f523msZqQLAjCeDR2b4rSYrcaIntt3g/koqAV5ProOw= Subject key identifier: D4:8E:B1:5D:1A:76:30:85:66:F3:4B:30:DD:4D:D3:7E:4B:BB:E9:9E Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b Certificate serial: 019B7A5A9FF7C4E3DC4A104671C17929FEED Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/1I6xXRp2MIVm80sw3U3Tfku76Z4.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56786 IP address blocks: 185.229.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9f:f7:c4:e3:dc:4a:10:46:71:c1:79:29:fe:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121a37282dd992d88658160559e048392798c84b Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d48eb15d1a76308566f34b30dd4dd37e4bbbe99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:3e:2e:d3:a7:fe:52:b1:ac:1b:ad:de:7a: 9b:e4:67:73:89:86:76:90:e5:c2:68:84:fa:9e:e2: 69:99:4c:60:18:99:d5:81:d1:4c:0a:f9:9a:5e:1b: df:37:cb:ff:e4:13:7f:7b:80:c2:d2:46:0f:25:4f: f1:a6:25:a7:6e:62:5b:4b:36:06:5c:99:4b:7d:f6: 51:1b:39:37:16:1c:e8:3a:56:e9:8d:ca:c0:ad:d9: 1e:86:f8:79:18:6d:bb:5e:11:b1:c3:62:76:89:3a: 44:d1:fb:3b:aa:b3:0b:5e:4d:7b:9b:b4:b9:3c:c1: f7:6c:38:34:50:5d:3e:95:46:bd:4d:6a:0f:67:13: 9a:7c:4b:e0:52:5d:49:d5:a7:02:5a:bd:6d:09:e2: 16:b3:01:17:55:57:66:86:1d:30:ae:bf:1b:fa:a3: a0:61:b4:15:5c:b9:1d:bf:a4:b6:c8:7c:19:b9:e6: 53:f9:57:19:63:59:fc:a2:97:67:e7:8b:75:76:9e: 16:a6:a3:ce:be:85:92:ef:34:d2:12:68:c4:5c:e7: a0:90:1d:84:4c:67:3e:89:be:ab:82:c8:bf:b8:a1: 48:6f:62:72:a0:09:5a:0c:56:22:cb:e7:ec:bb:50: a1:d6:ea:ac:74:07:ec:65:a8:f9:46:2a:ae:8f:2c: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8E:B1:5D:1A:76:30:85:66:F3:4B:30:DD:4D:D3:7E:4B:BB:E9:9E X509v3 Authority Key Identifier: keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/1I6xXRp2MIVm80sw3U3Tfku76Z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.16.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:74:ed:d6:f4:e3:e2:56:d0:d7:eb:74:c3:ca:43:fa:c0:55: bb:4e:4a:ec:d8:7a:45:07:0e:9d:1e:6e:f7:fa:f9:da:fc:1e: bb:52:2a:d4:42:fd:94:03:c6:88:41:c4:10:5e:99:55:26:7d: 08:4b:ae:01:d7:2e:ad:d8:6f:11:43:67:95:3b:7f:50:90:e9: fa:22:b7:23:c6:1e:b4:cc:18:b4:07:d3:65:7b:e6:88:8d:c9: b0:69:2d:f9:ea:8f:5b:bf:27:93:9b:20:62:97:b6:b2:5c:62: b8:88:80:f7:65:9e:2b:01:24:97:07:ac:8d:88:78:33:96:06: e2:36:e3:75:c9:58:d3:10:30:4b:e5:1b:dc:19:4e:08:21:0e: b6:26:f8:d1:41:90:61:cd:2f:73:23:23:65:e5:bd:0c:a9:f3: 62:6d:de:b0:6d:2d:99:0a:4f:ef:c4:66:e9:4c:ae:fb:aa:a4: 40:84:96:ad:a3:a4:ab:5e:72:b5:7a:19:b5:f0:12:36:3f:d2: 76:28:3c:1c:38:05:d2:b1:f5:10:91:ab:ef:f5:b3:6a:ef:06: 5e:e3:3f:c1:21:ed:30:3f:c9:bb:f0:55:07:3c:ef:5d:13:d7: 21:6a:d9:87:2c:aa:96:98:68:13:20:33:3e:21:42:9c:7a:c3: 22:8d:5d:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wp/3xOPcShBGccF5Kf7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5 OGM4NGIwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDhlYjE1ZDFhNzYzMDg1NjZmMzRiMzBkZDRkZDM3ZTRiYmJlOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNg+LtOn/lKxrBut3nqb5GdziYZ2 kOXCaIT6nuJpmUxgGJnVgdFMCvmaXhvfN8v/5BN/e4DC0kYPJU/xpiWnbmJbSzYG XJlLffZRGzk3FhzoOlbpjcrArdkehvh5GG27XhGxw2J2iTpE0fs7qrMLXk17m7S5 PMH3bDg0UF0+lUa9TWoPZxOafEvgUl1J1acCWr1tCeIWswEXVVdmhh0wrr8b+qOg YbQVXLkdv6S2yHwZueZT+VcZY1n8opdn54t1dp4WpqPOvoWS7zTSEmjEXOegkB2E TGc+ib6rgsi/uKFIb2JyoAlaDFYiy+fsu1Ch1uqsdAfsZaj5Riqujyw2gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSOsV0adjCFZvNLMN1N035Lu+meMB8GA1UdIwQY MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt MDgyYjFmN2YwZGIyLzEvMUk2eFhScDJNSVZtODBzdzNVM1Rma3U3Nlo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueUQMA0G CSqGSIb3DQEBCwUAA4IBAQB6dO3W9OPiVtDX63TDykP6wFW7Tkrs2HpFBw6dHm73 +vna/B67UirUQv2UA8aIQcQQXplVJn0IS64B1y6t2G8RQ2eVO39QkOn6Ircjxh60 zBi0B9Nle+aIjcmwaS356o9bvyeTmyBil7ayXGK4iID3ZZ4rASSXB6yNiHgzlgbi NuN1yVjTEDBL5RvcGU4IIQ62JvjRQZBhzS9zIyNl5b0MqfNibd6wbS2ZCk/vxGbp TK77qqRAhJato6SrXnK1ehm18BI2P9J2KDwcOAXSsfUQkavv9bNq7wZe4z/BIe0w P8m78FUHPO9dE9chatmHLKqWmGgTIDM+IUKcesMijV2l -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:42 2026 by rpki-client