This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa File: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (raw, json) Hash identifier: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM= Subject key identifier: D4:56:1F:21:D2:FC:CD:B9:12:39:46:A2:53:80:EA:C2:A6:A5:D3:31 Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Certificate serial: 019B7D5CE2D917F16D98135394B930186C91 Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29644 IP address blocks: 185.69.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e2:d9:17:f1:6d:98:13:53:94:b9:30:18:6c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4561f21d2fccdb9123946a25380eac2a6a5d331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:30:88:3c:9c:29:5d:2d:53:8e:7d:22:8d: 34:3f:4c:06:ac:32:79:2f:26:30:bb:51:bc:25:11: d2:f2:45:67:13:b2:70:24:2c:d3:ab:3d:de:85:6e: 7d:f2:7a:e7:88:b5:a1:f4:98:77:2a:a5:78:c7:be: b6:e8:8e:27:d6:d6:2b:83:ad:31:ec:e9:56:be:09: 80:46:e3:17:54:eb:b9:aa:68:ed:98:ed:04:8e:47: 66:55:d2:cb:cb:d7:dd:50:69:cb:ef:7c:94:ad:ab: 68:b1:ee:e1:52:61:02:cd:31:52:6c:1c:91:8f:37: 3a:5a:37:18:6d:86:24:96:0f:44:c4:f9:38:29:73: eb:c1:68:5d:a0:19:59:3e:83:cd:d2:0d:9b:21:1d: bf:f5:06:06:ce:80:21:05:84:63:48:7b:44:cc:47: fe:0a:dd:22:1a:d9:5c:8b:03:74:39:06:fb:f1:27: bf:1a:5c:e0:e7:8e:25:90:5b:11:db:53:f9:f9:88: 28:b4:95:4d:55:b6:04:ec:99:a3:a4:6b:cd:f4:de: 52:cf:13:de:5e:38:10:83:60:f8:e7:8c:c6:c6:71: 17:38:ca:10:91:d1:a0:77:3b:5f:01:fc:b9:d8:60: f5:08:0a:0c:ff:74:44:39:aa:00:56:e2:a4:1c:72: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:56:1F:21:D2:FC:CD:B9:12:39:46:A2:53:80:EA:C2:A6:A5:D3:31 X509v3 Authority Key Identifier: keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.212.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:58:6c:dc:24:a4:0c:bc:4b:1e:dc:80:e5:53:24:c9:7d:bf: 92:6d:1b:06:81:a9:a6:a1:ee:ae:23:f2:8f:e1:a4:c8:b7:cd: 23:25:ff:c0:a6:04:5f:2b:0a:c6:80:7b:24:0b:88:95:0b:cc: f0:1a:46:52:b6:85:d0:94:55:1e:6f:6d:d6:eb:d8:8e:af:9f: 29:1b:b2:f2:c9:a3:80:74:3b:a1:a2:ff:44:a8:82:57:bb:e1: f1:71:3a:05:98:08:dc:dc:45:b1:aa:2e:41:0f:d6:1a:82:a3: ab:0a:ba:4f:09:75:a5:48:8f:b2:b2:80:34:b8:76:27:3f:93: ed:ec:96:3d:10:fa:48:e6:3c:4c:13:d7:e5:b1:ec:a2:36:19: 9a:ba:15:cb:7e:0b:18:cc:c9:d7:63:31:95:f6:82:7a:f5:12: 14:28:79:68:e3:4c:58:51:b1:5e:f0:8c:ed:48:02:f3:95:fe: 56:29:83:57:67:e9:8b:39:6b:b6:19:28:fa:5d:56:68:fc:40: d8:78:61:b6:22:e5:0e:a2:ea:ef:a6:2a:39:e4:dc:f3:43:e2: 0c:43:16:03:6c:b1:f2:f8:3c:1f:e4:e6:95:b4:5a:6f:a0:1c: 9c:77:dd:40:6e:5f:ab:33:80:8a:27:fa:40:2b:c3:17:06:72: aa:e2:43:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOLZF/FtmBNTlLkwGGyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4 MjBhZDkwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU2MWYyMWQyZmNjZGI5MTIzOTQ2YTI1MzgwZWFjMmE2YTVkMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTwwiDycKV0tU459Io00P0wGrDJ5 LyYwu1G8JRHS8kVnE7JwJCzTqz3ehW598nrniLWh9Jh3KqV4x7626I4n1tYrg60x 7OlWvgmARuMXVOu5qmjtmO0EjkdmVdLLy9fdUGnL73yUratose7hUmECzTFSbByR jzc6WjcYbYYklg9ExPk4KXPrwWhdoBlZPoPN0g2bIR2/9QYGzoAhBYRjSHtEzEf+ Ct0iGtlciwN0OQb78Se/Glzg544lkFsR21P5+YgotJVNVbYE7JmjpGvN9N5SzxPe XjgQg2D454zGxnEXOMoQkdGgdztfAfy52GD1CAoM/3REOaoAVuKkHHJb+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRWHyHS/M25EjlGolOA6sKmpdMxMB8GA1UdIwQY MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt Yzk5N2I4N2I0YjVmLzEvMUZZZklkTDh6YmtTT1VhaVU0RHF3cWFsMHpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUXUMA0G CSqGSIb3DQEBCwUAA4IBAQAbWGzcJKQMvEse3IDlUyTJfb+SbRsGgammoe6uI/KP 4aTIt80jJf/ApgRfKwrGgHskC4iVC8zwGkZStoXQlFUeb23W69iOr58pG7LyyaOA dDuhov9EqIJXu+HxcToFmAjc3EWxqi5BD9YagqOrCrpPCXWlSI+ysoA0uHYnP5Pt 7JY9EPpI5jxME9flseyiNhmauhXLfgsYzMnXYzGV9oJ69RIUKHlo40xYUbFe8Izt SALzlf5WKYNXZ+mLOWu2GSj6XVZo/EDYeGG2IuUOourvpio55NzzQ+IMQxYDbLHy +Dwf5OaVtFpvoBycd91Abl+rM4CKJ/pAK8MXBnKq4kMU -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:41 2026 by rpki-client