This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa File: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (raw, json) Hash identifier: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw= Subject key identifier: F9:D5:B0:F7:82:CE:C1:85:5B:E9:9F:32:BE:50:B8:C7:B8:64:84:C7 Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Certificate serial: 019BDB80107756F6A114AEAB926B43658C6E Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa Signing time: Tue 20 Jan 2026 13:02:41 +0000 ROA not before: Tue 20 Jan 2026 13:02:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29196 IP address blocks: 192.162.40.0/22 maxlen: 24 195.191.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:80:10:77:56:f6:a1:14:ae:ab:92:6b:43:65:8c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Validity Not Before: Jan 20 13:02:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9d5b0f782cec1855be99f32be50b8c7b86484c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:79:fb:83:a1:82:49:81:60:00:4f:f1:04: c9:49:9f:62:70:00:24:ff:74:dc:d5:40:fb:27:8e: 92:3e:4d:c8:bf:57:12:80:40:d5:83:ef:f4:33:05: 05:10:36:84:ff:fb:e5:22:f9:07:a3:54:c2:13:9d: de:15:a9:a6:3c:71:11:90:7e:73:0e:4c:d1:d3:38: 34:69:8d:ad:5c:34:52:a5:16:97:94:15:db:5e:49: 25:b1:e8:ae:6f:92:41:37:ee:28:de:ce:8b:11:d4: ac:1d:9b:e5:c2:f2:e8:31:ac:09:49:2e:6a:ed:dc: 28:9f:5d:97:1c:d1:2a:38:77:fe:77:da:bd:7a:25: e1:d3:66:ed:bc:a5:27:2e:6f:52:b8:b0:78:10:f0: 33:d5:d4:d8:e5:e5:d7:51:97:a4:32:27:9e:cb:f8: 69:b8:5a:15:02:3c:e4:fa:3d:53:87:6e:b1:a1:97: 80:40:41:22:12:84:1f:21:52:e2:e6:05:b3:77:e4: 45:d1:de:34:4c:b0:bd:33:45:18:ee:93:f0:3f:d7: 26:37:b6:c6:9e:d9:b7:ec:3a:2a:9e:8b:c4:99:6a: 48:81:ad:93:77:37:d9:cf:4c:10:04:17:65:1c:fe: 84:db:1e:0a:39:38:70:e2:e2:0a:71:18:f7:ef:35: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D5:B0:F7:82:CE:C1:85:5B:E9:9F:32:BE:50:B8:C7:B8:64:84:C7 X509v3 Authority Key Identifier: keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.40.0/22 195.191.82.0/23 Signature Algorithm: sha256WithRSAEncryption 65:9d:d1:aa:76:42:be:b6:3c:30:21:6b:66:59:72:87:cd:d0: ca:b3:25:7e:b0:37:ec:ce:c4:ff:a7:ff:c3:82:ca:3d:d3:9c: 1d:cc:6e:2f:d8:4e:ee:dc:31:68:c9:70:bf:22:11:92:df:cf: bd:53:2c:14:42:39:ca:2f:bd:8e:6d:ab:ea:f6:47:33:d5:2e: 50:c5:6d:7b:31:b8:11:12:71:ac:41:4c:06:8a:63:72:5b:e5: a1:63:88:26:c0:52:40:62:dc:0f:fa:2d:4c:bc:07:c9:75:37: 5f:de:12:fe:c1:db:de:95:44:8a:69:82:3a:66:4c:56:7e:fb: 4f:a5:f6:57:a6:fd:00:00:8c:8e:2d:8f:34:4b:91:fc:34:fc: 35:92:ac:77:8e:ed:d8:c3:23:55:32:aa:6a:da:46:6e:18:42: c8:92:2c:06:c4:7f:6d:5b:de:1e:c7:47:aa:7e:9f:35:b2:f0: 5f:9a:31:43:55:44:6b:47:27:66:87:22:a1:74:39:e4:46:5b: 8d:17:ba:28:23:bd:08:73:84:51:83:c6:0d:c4:ce:63:fb:2d: d3:b2:2d:bf:36:58:11:8a:01:89:ff:1f:12:9b:89:9a:63:83: 8b:ab:e4:4d:47:dc:5e:aa:d9:90:73:0b:b6:1b:1f:11:0c:ad: db:98:6b:f6 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZvbgBB3VvahFK6rkmtDZYxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmQyMGYyZGU0ZDU3ZTFiYzY0NWNiNjI4N2ZmODEwZDBm NWE0YmYwHhcNMjYwMTIwMTMwMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWQ1YjBmNzgyY2VjMTg1NWJlOTlmMzJiZTUwYjhjN2I4NjQ4NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QZ5+4OhgkmBYABP8QTJSZ9icAAk /3Tc1UD7J46SPk3Iv1cSgEDVg+/0MwUFEDaE//vlIvkHo1TCE53eFammPHERkH5z DkzR0zg0aY2tXDRSpRaXlBXbXkklseiub5JBN+4o3s6LEdSsHZvlwvLoMawJSS5q 7dwon12XHNEqOHf+d9q9eiXh02btvKUnLm9SuLB4EPAz1dTY5eXXUZekMieey/hp uFoVAjzk+j1Th26xoZeAQEEiEoQfIVLi5gWzd+RF0d40TLC9M0UY7pPwP9cmN7bG ntm37DoqnovEmWpIga2TdzfZz0wQBBdlHP6E2x4KOThw4uIKcRj37zXSdwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPnVsPeCzsGFW+mfMr5QuMe4ZITHMB8GA1UdIwQY MBaAFE4tIPLeTVfhvGRctih/+BDQ9aS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUt NzhkNGE2NGQyMmQ5LzEvMS1kV3c5NExPd1lWYjZaOHl2bEM0eDdoa2hNYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWYvY2U4NzZjLTJjMDItNDc3NS04MDk1LTc4ZDRhNjRkMjJk OS8xL1RpMGc4dDVOVi1HOFpGeTJLSF80RU5EMXBMOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAsCiKAME AcO/UjANBgkqhkiG9w0BAQsFAAOCAQEAZZ3RqnZCvrY8MCFrZllyh83QyrMlfrA3 7M7E/6f/w4LKPdOcHcxuL9hO7twxaMlwvyIRkt/PvVMsFEI5yi+9jm2r6vZHM9Uu UMVtezG4ERJxrEFMBopjclvloWOIJsBSQGLcD/otTLwHyXU3X94S/sHb3pVEimmC OmZMVn77T6X2V6b9AACMji2PNEuR/DT8NZKsd47t2MMjVTKqatpGbhhCyJIsBsR/ bVveHsdHqn6fNbLwX5oxQ1VEa0cnZocioXQ55EZbjRe6KCO9CHOEUYPGDcTOY/st 07ItvzZYEYoBif8fEpuJmmODi6vkTUfcXqrZkHMLthsfEQyt25hr9g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:35 2026 by rpki-client