This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/1k7VTB7SeldaLWRNqkcJf8z7HHw.roa File: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (raw, json) Hash identifier: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M= Subject key identifier: D6:4E:D5:4C:1E:D2:7A:57:5A:2D:64:4D:AA:47:09:7F:CC:FB:1C:7C Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Certificate serial: 019B7F1571410074860748344C946EE084BE Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/1k7VTB7SeldaLWRNqkcJf8z7HHw.roa Signing time: Fri 02 Jan 2026 14:21:10 +0000 ROA not before: Fri 02 Jan 2026 14:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197889 IP address blocks: 85.119.8.0/21 maxlen: 21 185.223.16.0/23 maxlen: 23 185.223.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:71:41:00:74:86:07:48:34:4c:94:6e:e0:84:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Validity Not Before: Jan 2 14:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d64ed54c1ed27a575a2d644daa47097fccfb1c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:4f:5d:4b:17:f2:7b:a7:32:b4:1c:1c:f7: 73:85:ff:36:81:73:0d:af:fa:66:f8:23:27:d1:4a: 96:aa:e1:53:07:67:88:84:c0:49:a8:aa:95:a3:5d: 6a:0e:1c:9e:3f:da:4a:d5:bb:b5:93:af:f0:8c:1b: 3f:5a:90:5f:7a:55:3b:9d:2c:3d:af:fc:56:aa:13: 7f:be:13:2f:98:af:a0:72:0c:bd:8d:92:be:41:a1: 55:d6:7d:88:5b:ec:50:76:0c:1d:4d:83:8a:64:d2: 6e:95:40:a1:1e:59:5a:ca:78:a3:7b:db:ab:bf:9a: 4a:f3:4e:1a:4e:a3:58:67:ff:15:29:2a:20:29:f0: 06:b6:a5:3a:3f:7c:3c:28:ba:57:80:d1:27:c4:49: 71:d6:4f:c9:c2:e4:91:b1:36:cf:c9:38:a6:97:53: 44:e2:88:9c:f3:b7:4e:05:95:0a:ba:21:61:6e:96: b9:72:47:ee:8e:d6:0f:d2:25:f7:f2:b4:1d:94:bd: e8:e9:b1:29:0a:75:8c:38:2a:2a:33:98:a1:26:6f: e4:37:89:da:74:22:3f:7c:a7:cf:cf:58:82:8a:50: a5:b8:25:3c:c4:16:b1:6d:a2:a7:7c:76:a7:22:eb: f6:83:f5:83:3e:3c:94:d2:86:50:c5:81:f0:50:ea: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4E:D5:4C:1E:D2:7A:57:5A:2D:64:4D:AA:47:09:7F:CC:FB:1C:7C X509v3 Authority Key Identifier: keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/1k7VTB7SeldaLWRNqkcJf8z7HHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.8.0/21 185.223.16.0/22 Signature Algorithm: sha256WithRSAEncryption 93:ce:ae:ce:90:8e:69:ed:b3:cb:e8:8e:76:bb:e5:eb:ab:87: b3:31:63:7e:51:ed:3a:41:5f:0d:cf:b2:ab:e9:9a:83:33:73: 18:d9:43:45:03:9e:42:e1:22:41:d1:7c:1c:57:bf:3a:60:0a: cd:12:ca:3b:64:41:a2:f2:9f:e0:5e:3e:d1:f1:90:d4:d7:e3: d1:51:9a:c8:b9:aa:30:06:df:61:90:66:73:5c:62:86:d6:49: fd:9b:b2:88:98:2f:e4:3a:45:c2:2f:91:3b:9b:82:a1:af:59: 9c:e9:2d:b7:47:fc:06:1d:5a:be:b6:6c:a2:53:03:36:fe:65: 83:ac:97:8c:e7:0f:fa:fe:c1:ae:94:3e:34:76:34:c6:42:53: 33:95:09:43:c6:fd:ca:98:d7:c4:0e:13:d7:3a:11:68:7d:15: b3:35:c5:89:5a:47:d8:95:b4:95:e9:10:94:52:a5:18:2a:46: c9:b0:06:b7:8c:3e:ec:91:9a:6e:2d:fd:8e:9c:85:79:d4:a1: 43:d7:8b:44:71:45:35:1f:e5:70:6f:70:40:a0:2d:7d:ab:f6: a3:97:ae:14:61:c6:55:0d:d8:62:f0:87:07:b8:3b:9e:bd:b0: 1b:d1:cc:72:fe:44:c4:c3:a3:2e:10:fc:70:d2:53:bb:66:81: d9:34:c0:00 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FXFBAHSGB0g0TJRu4IS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj OWRiNWYwHhcNMjYwMTAyMTQyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjRlZDU0YzFlZDI3YTU3NWEyZDY0NGRhYTQ3MDk3ZmNjZmIxYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlVPXUsX8nunMrQcHPdzhf82gXMN r/pm+CMn0UqWquFTB2eIhMBJqKqVo11qDhyeP9pK1bu1k6/wjBs/WpBfelU7nSw9 r/xWqhN/vhMvmK+gcgy9jZK+QaFV1n2IW+xQdgwdTYOKZNJulUChHllaynije9ur v5pK804aTqNYZ/8VKSogKfAGtqU6P3w8KLpXgNEnxElx1k/JwuSRsTbPyTiml1NE 4oic87dOBZUKuiFhbpa5ckfujtYP0iX38rQdlL3o6bEpCnWMOCoqM5ihJm/kN4na dCI/fKfPz1iCilCluCU8xBaxbaKnfHanIuv2g/WDPjyU0oZQxYHwUOoF0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNZO1Uwe0npXWi1kTapHCX/M+xx8MB8GA1UdIwQY MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt MmQ3MmYyMzE5M2RiLzEvMWs3VlRCN1NlbGRhTFdSTnFrY0pmOHo3SEh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVXcIAwQC ud8QMA0GCSqGSIb3DQEBCwUAA4IBAQCTzq7OkI5p7bPL6I52u+Xrq4ezMWN+Ue06 QV8Nz7Kr6ZqDM3MY2UNFA55C4SJB0XwcV786YArNEso7ZEGi8p/gXj7R8ZDU1+PR UZrIuaowBt9hkGZzXGKG1kn9m7KImC/kOkXCL5E7m4Khr1mc6S23R/wGHVq+tmyi UwM2/mWDrJeM5w/6/sGulD40djTGQlMzlQlDxv3KmNfEDhPXOhFofRWzNcWJWkfY lbSV6RCUUqUYKkbJsAa3jD7skZpuLf2OnIV51KFD14tEcUU1H+Vwb3BAoC19q/aj l64UYcZVDdhi8IcHuDuevbAb0cxy/kTEw6MuEPxw0lO7ZoHZNMAA -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:31 2026 by rpki-client