This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-WcSkrUWmzqtMHc8oXVN98UqtsM.roa File: 1-WcSkrUWmzqtMHc8oXVN98UqtsM.roa (raw, json) Hash identifier: LP4qv0eDfrIv9CYrsfqunKgpR808ZW7FHRyc7UiBnTk= Subject key identifier: F9:67:12:92:B5:16:9B:3A:AD:30:77:3C:A1:75:4D:F7:C5:2A:B6:C3 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B790FFF226CF9438418AED6FAAEA95566 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-WcSkrUWmzqtMHc8oXVN98UqtsM.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198690 IP address blocks: 45.14.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:ff:22:6c:f9:43:84:18:ae:d6:fa:ae:a9:55:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9671292b5169b3aad30773ca1754df7c52ab6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:37:58:c2:51:ad:22:4d:9f:8d:b1:df:3c: 46:7a:4f:fa:9d:ee:0f:b1:cd:66:8e:42:8a:86:cd: f0:78:04:db:9a:71:50:60:66:1d:45:f4:72:e0:16: 98:83:35:cc:5c:d7:d1:8a:3c:ca:5c:d7:9f:ce:db: 73:76:2c:05:2d:03:4c:0f:dd:92:b2:a5:f1:85:53: bb:e0:21:21:aa:af:b1:05:99:83:92:ef:74:83:3f: 35:8b:3f:ba:a2:83:48:63:d1:28:7d:94:a4:d8:d8: 26:9e:75:5e:5a:f0:f6:6d:9d:98:10:24:4a:2a:97: 56:43:1f:7d:ea:97:7c:3f:c8:f2:ae:22:52:72:40: b7:34:6d:c5:dc:4c:7b:9e:2a:fe:1b:8f:c2:a8:7f: 2d:0f:de:26:ac:04:5a:84:76:c8:9b:e7:e9:30:18: 2c:11:67:0b:a3:bd:43:7f:8d:7e:25:22:16:d2:b9: a2:a5:23:f7:46:fe:9d:66:dc:66:99:db:db:3a:68: be:61:c1:02:bd:53:aa:84:2a:71:71:76:38:8c:bc: 49:f7:04:2a:ea:6c:84:4b:ca:1e:cb:07:60:9b:dc: b9:a6:c6:63:87:e3:06:2f:f8:b2:11:24:34:de:c2: 0f:b8:63:56:0b:3c:d6:e8:47:6e:27:73:95:56:39: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:67:12:92:B5:16:9B:3A:AD:30:77:3C:A1:75:4D:F7:C5:2A:B6:C3 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1-WcSkrUWmzqtMHc8oXVN98UqtsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.16.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:aa:86:c0:0d:7a:e8:ae:64:99:b6:1e:67:c8:cb:67:69:29: ff:84:fd:53:04:c0:f5:65:e7:c9:af:f0:3f:a6:8e:2a:62:9e: 7a:8d:c7:43:46:a5:74:d6:f7:93:2e:76:ce:1d:cf:ba:75:06: f8:a8:0c:b0:e4:9d:30:81:7f:87:3f:0f:c3:83:7f:17:4a:ac: 0b:c5:53:4d:81:81:49:84:ef:a3:89:70:c0:9f:a0:4c:ed:c5: 97:b4:35:a7:07:cd:07:5c:a6:47:9a:e2:48:cc:18:7d:16:db: 37:78:dc:95:68:31:0d:0f:6c:a2:2e:6f:36:4f:8e:e0:96:c8: ac:0e:73:55:3f:14:e7:30:4d:02:6d:90:2c:d2:fb:81:16:58: d1:ca:63:8d:58:f6:74:66:f9:10:74:86:b1:71:50:57:93:ce: 87:5b:64:91:e6:3a:b4:9b:f1:9e:94:95:8b:43:b0:3f:81:9a: f5:7a:d7:66:32:10:5e:6f:fb:3e:28:fe:bc:34:44:f1:e4:67: 99:21:32:ed:53:00:ae:f0:97:14:7a:32:8b:45:81:5c:a8:43: b9:b0:a2:f6:cc:4c:50:06:5b:69:69:a9:a3:cb:6e:0f:38:d7: 68:11:a3:a3:02:57:a8:8c:fc:94:8a:1a:fa:72:3a:39:3e:26: 23:7e:f9:a9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5D/8ibPlDhBiu1vquqVVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTY3MTI5MmI1MTY5YjNhYWQzMDc3M2NhMTc1NGRmN2M1MmFiNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDM3WMJRrSJNn42x3zxGek/6ne4P sc1mjkKKhs3weATbmnFQYGYdRfRy4BaYgzXMXNfRijzKXNefzttzdiwFLQNMD92S sqXxhVO74CEhqq+xBZmDku90gz81iz+6ooNIY9EofZSk2NgmnnVeWvD2bZ2YECRK KpdWQx996pd8P8jyriJSckC3NG3F3Ex7nir+G4/CqH8tD94mrARahHbIm+fpMBgs EWcLo71Df41+JSIW0rmipSP3Rv6dZtxmmdvbOmi+YcECvVOqhCpxcXY4jLxJ9wQq 6myES8oeywdgm9y5psZjh+MGL/iyESQ03sIPuGNWCzzW6EduJ3OVVjnduQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlnEpK1Fps6rTB3PKF1TffFKrbDMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvMS1XY1NrclVXbXpxdE1IYzhvWFZOOThVcXRzTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjQvN2E4N2EwLTgwMTQtNDYwNS05ZmI1LTllNzFkYzI0YTY4 My8xL0w1UFR1aGxfWE9NSmlfcDNBTFE0Vk9xb0RwNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0OEDAN BgkqhkiG9w0BAQsFAAOCAQEAiqqGwA166K5kmbYeZ8jLZ2kp/4T9UwTA9WXnya/w P6aOKmKeeo3HQ0aldNb3ky52zh3PunUG+KgMsOSdMIF/hz8Pw4N/F0qsC8VTTYGB SYTvo4lwwJ+gTO3Fl7Q1pwfNB1ymR5riSMwYfRbbN3jclWgxDQ9soi5vNk+O4JbI rA5zVT8U5zBNAm2QLNL7gRZY0cpjjVj2dGb5EHSGsXFQV5POh1tkkeY6tJvxnpSV i0OwP4Ga9XrXZjIQXm/7Pij+vDRE8eRnmSEy7VMArvCXFHoyi0WBXKhDubCi9sxM UAZbaWmpo8tuDzjXaBGjowJXqIz8lIoa+nI6OT4mI375qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:37 2026 by rpki-client