This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa File: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (raw, json) Hash identifier: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M= Subject key identifier: F9:D2:AC:E8:98:86:73:E8:16:34:CF:EE:DE:14:FA:F1:9F:8C:F7:E1 Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Certificate serial: 019B7C80646F9C97757D53BC6460B3B99D47 Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3205 IP address blocks: 81.161.120.0/21 maxlen: 22 109.197.162.0/23 maxlen: 23 193.0.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:6f:9c:97:75:7d:53:bc:64:60:b3:b9:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9d2ace8988673e81634cfeede14faf19f8cf7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:b9:4e:e6:d1:e7:61:20:97:a9:54:cf:1d: 81:ff:9c:01:ee:df:00:e0:24:24:42:ce:2a:9b:f6: 68:67:e8:49:3e:94:2e:34:6a:c8:53:80:52:ff:5c: 92:b3:df:dd:f5:d9:40:b2:d2:ac:6e:3f:c9:e7:00: ce:85:25:4b:fb:f2:6f:ed:c0:3a:51:a4:13:53:15: c7:19:80:6a:c7:42:77:b4:9c:9d:64:48:61:d5:cc: f2:3d:42:a0:90:89:99:1c:f7:6b:cc:1a:b9:3c:4d: 3e:3e:0e:d1:06:42:a8:6a:b5:59:6b:20:4a:5d:b5: 1e:e7:c8:b5:d3:e9:57:0f:39:0e:e7:47:d1:6d:f7: a1:ab:f4:a6:d2:18:c1:e9:d7:a0:63:08:71:86:a8: ec:63:dc:cd:02:5d:a2:b8:dc:ad:10:2e:29:8c:d6: 1d:8a:cc:e4:2c:03:75:65:37:10:f9:4f:b4:c7:c5: c4:0b:f5:55:37:07:f8:97:2c:dc:fc:51:ce:cf:47: 13:32:ff:bb:9e:37:4a:b7:98:e4:95:98:fd:b6:c4: 82:b3:d4:b4:ff:97:18:d9:7f:1f:3f:68:83:4e:6b: 6d:82:d0:b7:5b:e2:79:5b:63:c2:e4:64:6a:8a:32: 6e:26:1a:35:73:21:21:31:81:e0:2e:f4:c8:e8:71: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D2:AC:E8:98:86:73:E8:16:34:CF:EE:DE:14:FA:F1:9F:8C:F7:E1 X509v3 Authority Key Identifier: keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.120.0/21 109.197.162.0/23 193.0.168.0/23 Signature Algorithm: sha256WithRSAEncryption 54:2a:68:69:67:20:94:fa:2a:49:0c:ad:52:b3:c1:df:14:ce: 13:d2:20:22:4b:0b:dd:84:91:bb:fc:ca:fb:c3:8e:a7:48:f0: c6:28:4f:da:02:c5:84:d6:6c:5a:75:b9:45:06:86:9e:7c:49: 69:1d:ed:50:5c:4b:67:9f:8b:ac:15:ad:46:15:9a:b2:ea:a0: bd:80:66:4c:ca:ef:dc:e0:9e:63:05:c7:34:91:8a:ea:4f:1d: bd:74:a2:44:18:5c:39:c8:58:93:8f:1f:8f:24:da:fa:61:52: e2:7d:cc:57:97:88:b6:9e:3b:b7:c7:d0:78:b3:78:bc:89:4a: f3:76:ba:82:1a:0c:ef:ce:61:75:d1:c8:77:ce:55:54:ba:6b: 2b:87:37:3b:6a:31:23:ec:a6:48:39:ce:7c:d6:86:57:80:51: 73:a0:5b:3f:48:f0:9d:3b:b5:27:d2:79:91:d4:5d:d8:bb:4e: 0a:94:46:bd:0f:a1:cf:1a:7b:17:9a:08:78:cf:a1:f2:80:13: 7f:c7:8a:a5:e2:d9:88:85:2c:99:e3:6c:53:d2:cf:f2:f3:79: 51:9d:cd:aa:d8:d8:40:73:3c:61:c7:17:52:5f:c9:a1:ec:60: 12:17:cf:f7:b1:d8:37:e2:f9:54:97:83:e0:a5:fa:dd:e8:13: 34:02:23:c6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt8gGRvnJd1fVO8ZGCzuZ1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl OGMyZDMwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWQyYWNlODk4ODY3M2U4MTYzNGNmZWVkZTE0ZmFmMTlmOGNmN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oe5TubR52Egl6lUzx2B/5wB7t8A 4CQkQs4qm/ZoZ+hJPpQuNGrIU4BS/1ySs9/d9dlAstKsbj/J5wDOhSVL+/Jv7cA6 UaQTUxXHGYBqx0J3tJydZEhh1czyPUKgkImZHPdrzBq5PE0+Pg7RBkKoarVZayBK XbUe58i10+lXDzkO50fRbfehq/Sm0hjB6degYwhxhqjsY9zNAl2iuNytEC4pjNYd iszkLAN1ZTcQ+U+0x8XEC/VVNwf4lyzc/FHOz0cTMv+7njdKt5jklZj9tsSCs9S0 /5cY2X8fP2iDTmttgtC3W+J5W2PC5GRqijJuJho1cyEhMYHgLvTI6HHICQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPnSrOiYhnPoFjTP7t4U+vGfjPfhMB8GA1UdIwQY MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt NmIwMTc5ZWUxZGQ5LzEvMS1kS3M2SmlHYy1nV05NX3UzaFQ2OFotTTktRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWMvODU4ZWQ4LTczMWEtNDc2MS04MmMwLTZiMDE3OWVlMWRk OS8xL29NN3h5cU5GbTRzRG5DRjRFMlNOeXJ6b3d0TS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA1GheAME AW3FogMEAcEAqDANBgkqhkiG9w0BAQsFAAOCAQEAVCpoaWcglPoqSQytUrPB3xTO E9IgIksL3YSRu/zK+8OOp0jwxihP2gLFhNZsWnW5RQaGnnxJaR3tUFxLZ5+LrBWt RhWasuqgvYBmTMrv3OCeYwXHNJGK6k8dvXSiRBhcOchYk48fjyTa+mFS4n3MV5eI tp47t8fQeLN4vIlK83a6ghoM785hddHId85VVLprK4c3O2oxI+ymSDnOfNaGV4BR c6BbP0jwnTu1J9J5kdRd2LtOCpRGvQ+hzxp7F5oIeM+h8oATf8eKpeLZiIUsmeNs U9LP8vN5UZ3NqtjYQHM8YccXUl/JoexgEhfP97HYN+L5VJeD4KX63egTNAIjxg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:14 2026 by rpki-client