This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/1S4LeIMSwHfMLlFmV2zzKhzo8Qg.roa File: 1S4LeIMSwHfMLlFmV2zzKhzo8Qg.roa (raw, json) Hash identifier: ++6jJPjlxf7T8TJoKGxBRTPlXVkIY88TYpmDxW+JQbM= Subject key identifier: D5:2E:0B:78:83:12:C0:77:CC:2E:51:66:57:6C:F3:2A:1C:E8:F1:08 Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6 Certificate serial: 019B7B36BF83EA212679F898732EE0F38EEB Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/1S4LeIMSwHfMLlFmV2zzKhzo8Qg.roa Signing time: Thu 01 Jan 2026 20:19:03 +0000 ROA not before: Thu 01 Jan 2026 20:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207767 IP address blocks: 176.119.209.0/24 maxlen: 24 185.90.44.0/22 maxlen: 24 2a0f:ffc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bf:83:ea:21:26:79:f8:98:73:2e:e0:f3:8e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d52e0b788312c077cc2e5166576cf32a1ce8f108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:f8:20:62:f3:23:0f:ff:12:38:b6:a8:d6: 1f:8a:6a:44:de:a8:9b:df:72:a4:71:04:f7:61:19: 0d:75:52:4b:57:4e:01:f1:67:5a:7c:b8:cf:26:d7: 73:a2:b8:ed:b2:5e:80:16:1a:03:7c:69:7b:cc:b6: 4c:18:2b:9a:de:79:b2:9e:9a:49:f0:95:79:16:22: db:03:22:82:51:7d:43:02:2e:fe:6e:9c:a2:bb:c0: b4:3b:5d:54:4a:d4:7d:16:12:e5:28:c0:b9:0f:c7: 97:9f:98:00:44:2a:67:b4:87:a3:08:fe:fa:ab:f4: bf:7b:ec:36:26:77:3e:f7:09:55:c3:3f:b2:69:f2: e2:b9:bd:3b:f1:75:80:83:59:a5:e6:79:1b:4b:26: b0:f3:18:90:5e:57:58:de:d9:0b:c4:fd:99:cd:ae: ef:d7:30:bc:c8:da:b6:45:ad:53:b4:5b:52:00:8e: 48:e1:c2:a6:92:f6:5e:56:f5:b4:de:3b:9d:fe:35: be:a8:75:86:5b:2c:d2:a5:c2:34:41:46:38:94:c9: 00:50:3c:86:50:43:43:89:c4:5d:bc:f6:b1:9e:e5: 7c:88:72:64:a3:9a:1d:8a:44:c3:c0:41:eb:16:e8: 00:71:67:c3:34:cc:de:a9:9f:29:2f:eb:d3:07:f5: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2E:0B:78:83:12:C0:77:CC:2E:51:66:57:6C:F3:2A:1C:E8:F1:08 X509v3 Authority Key Identifier: keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/1S4LeIMSwHfMLlFmV2zzKhzo8Qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.209.0/24 185.90.44.0/22 IPv6: 2a0f:ffc0::/29 Signature Algorithm: sha256WithRSAEncryption 45:5d:c5:c9:e9:24:91:f0:4b:66:88:fa:ed:ba:77:4f:1d:4b: 6e:01:5c:ec:63:26:64:af:8b:5b:31:9a:de:59:0d:64:dc:ad: ea:d1:03:b9:01:85:b5:09:23:2f:cb:c7:59:0e:4c:05:6d:75: 68:14:7c:7e:fe:d3:61:aa:b0:9f:66:57:c9:27:cf:d6:a6:ef: bf:5a:ad:06:8b:7f:05:1b:9d:a9:eb:b9:3b:de:cb:fe:f7:31: a3:75:97:62:2a:5d:ec:2f:96:d3:9a:bb:b0:d2:04:0d:5d:19: 83:63:82:ac:bc:92:73:ba:d6:99:23:a2:c4:ea:98:a9:23:cc: 61:a0:2c:7b:af:f8:a0:96:8f:f2:1d:8e:1f:29:95:80:2c:a2: ab:44:f9:bc:4d:da:22:1b:67:ac:1e:a3:d9:96:94:74:e0:b0: 37:c7:3d:ca:1f:fe:38:8c:6f:b7:bb:13:4d:31:ab:ba:77:4a: de:24:94:4c:d8:73:24:a0:79:4d:aa:02:15:20:ce:19:a0:c4: 29:66:e3:ad:05:42:96:6c:52:9a:ca:3d:8f:62:11:e4:0b:5e: cb:ab:31:e8:46:51:67:f4:c0:15:ea:b8:ce:b5:60:e3:53:c1: 65:f7:d9:49:8f:b2:f8:7a:8b:77:3e:a6:6a:dc:8e:96:e5:30: 22:e4:55:50 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nr+D6iEmefiYcy7g847rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3 Nzc5ZDYwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTJlMGI3ODgzMTJjMDc3Y2MyZTUxNjY1NzZjZjMyYTFjZThmMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tb4IGLzIw//Eji2qNYfimpE3qib 33KkcQT3YRkNdVJLV04B8WdafLjPJtdzorjtsl6AFhoDfGl7zLZMGCua3nmynppJ 8JV5FiLbAyKCUX1DAi7+bpyiu8C0O11UStR9FhLlKMC5D8eXn5gARCpntIejCP76 q/S/e+w2Jnc+9wlVwz+yafLiub078XWAg1ml5nkbSyaw8xiQXldY3tkLxP2Zza7v 1zC8yNq2Ra1TtFtSAI5I4cKmkvZeVvW03jud/jW+qHWGWyzSpcI0QUY4lMkAUDyG UENDicRdvPaxnuV8iHJko5odikTDwEHrFugAcWfDNMzeqZ8pL+vTB/VTlQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNUuC3iDEsB3zC5RZlds8yoc6PEIMB8GA1UdIwQY MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt NTI0YzIxMDljYjA1LzEvMVM0TGVJTVN3SGZNTGxGbVYyenpLaHpvOFFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1 LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAsHfRAwQC uVosMA0EAgACMAcDBQMqD//AMA0GCSqGSIb3DQEBCwUAA4IBAQBFXcXJ6SSR8Etm iPrtundPHUtuAVzsYyZkr4tbMZreWQ1k3K3q0QO5AYW1CSMvy8dZDkwFbXVoFHx+ /tNhqrCfZlfJJ8/Wpu+/Wq0Gi38FG52p67k73sv+9zGjdZdiKl3sL5bTmruw0gQN XRmDY4KsvJJzutaZI6LE6pipI8xhoCx7r/iglo/yHY4fKZWALKKrRPm8TdoiG2es HqPZlpR04LA3xz3KH/44jG+3uxNNMau6d0reJJRM2HMkoHlNqgIVIM4ZoMQpZuOt BUKWbFKayj2PYhHkC17LqzHoRlFn9MAV6rjOtWDjU8Fl99lJj7L4eot3PqZq3I6W 5TAi5FVQ -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:44 2026 by rpki-client