This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa File: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (raw, json) Hash identifier: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE= Subject key identifier: FB:BF:86:46:5D:43:A4:92:FD:31:7F:C4:87:BB:D5:96:04:00:B5:DB Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019B7F15878BDC4DC73AF768E0EE48CB7867 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 185.67.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:87:8b:dc:4d:c7:3a:f7:68:e0:ee:48:cb:78:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbbf86465d43a492fd317fc487bbd5960400b5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:9b:ee:eb:7a:0c:23:5d:0c:ec:09:ae:c2: 7d:5a:91:b8:58:66:d4:b4:60:bc:32:3b:f9:cd:37: a6:57:5d:d7:24:32:63:a3:e6:26:3a:bb:e1:14:16: ca:f5:76:27:8a:ff:80:a9:7f:02:87:de:e9:8b:ea: f6:52:e3:6c:09:81:95:fa:0e:a4:5c:26:0b:90:45: 89:fc:28:e6:f9:58:6c:f4:af:88:95:16:b8:9d:94: ad:8b:09:6e:f3:d5:78:62:bc:b8:69:ac:8c:bb:bb: 8f:c0:db:02:3c:12:c5:60:f2:10:5c:b8:c0:d8:6e: 9a:39:74:86:09:44:6f:5f:fd:15:25:fd:a5:dd:6b: b2:02:6c:36:97:df:7c:98:f9:ec:c2:f3:2e:0b:d7: bc:a2:fc:4e:a5:82:a6:a4:6c:bc:a5:c4:43:d3:7c: 69:35:8e:4b:ac:2a:c5:e4:af:e9:01:7e:d4:8b:62: 07:68:f0:60:13:0b:c2:c0:78:5a:bb:30:95:62:6d: c4:11:c5:77:fd:5f:fa:d0:67:f8:eb:2e:9a:e7:0e: b1:c2:02:7f:76:1a:8b:96:94:31:0b:66:e3:d4:a5: 14:b2:a8:ce:76:46:23:c5:39:09:e1:08:0c:9c:7b: a5:7f:ec:79:f4:36:08:ca:69:11:ea:5d:ce:99:81: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:86:46:5D:43:A4:92:FD:31:7F:C4:87:BB:D5:96:04:00:B5:DB X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.124.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f7:d8:e6:bc:31:77:35:d5:a7:28:6e:c3:bc:6f:1c:03:17: 47:2c:a0:05:6c:f0:be:f0:87:b6:6e:77:d5:92:0c:2e:de:7c: bc:4b:04:1c:bc:8b:f3:f5:e1:fb:bf:9d:ec:5d:d8:9b:50:e9: 38:d5:8d:96:4c:75:ba:d2:48:12:f4:d3:11:27:f9:41:0f:e1: 22:9c:e8:76:b8:10:33:91:e8:cc:51:c3:50:9d:0f:44:ad:10: 24:40:d6:2e:5a:ec:c2:0e:a7:71:19:45:e0:0b:b8:46:6f:5c: 5a:b2:ad:b9:09:10:32:db:9b:1f:eb:91:1b:85:be:4d:16:7b: 04:41:81:b3:78:2b:45:0b:36:03:b9:86:9d:ac:6a:de:77:3e: f7:18:11:00:6f:95:a5:70:a9:b6:92:b5:16:ef:bb:ea:ef:65: 48:ec:d4:bb:cf:30:ec:80:97:ef:0d:59:4e:b1:40:b5:b8:a5: d3:69:45:c6:64:98:75:a6:1a:58:09:ec:89:82:9a:c3:ae:19: 8d:61:dd:df:51:e4:3b:58:74:fb:65:71:ae:ee:77:37:59:1a: f6:a5:bc:d2:3c:04:29:b2:10:d7:f3:36:1d:7f:b7:4d:d9:f1: fb:01:20:35:ee:05:44:31:f4:f9:02:4e:29:b0:5e:55:d2:c9: 28:68:94:fe -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FYeL3E3HOvdo4O5Iy3hnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmJmODY0NjVkNDNhNDkyZmQzMTdmYzQ4N2JiZDU5NjA0MDBiNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ib7ut6DCNdDOwJrsJ9WpG4WGbU tGC8Mjv5zTemV13XJDJjo+YmOrvhFBbK9XYniv+AqX8Ch97pi+r2UuNsCYGV+g6k XCYLkEWJ/Cjm+Vhs9K+IlRa4nZStiwlu89V4Yry4aayMu7uPwNsCPBLFYPIQXLjA 2G6aOXSGCURvX/0VJf2l3WuyAmw2l998mPnswvMuC9e8ovxOpYKmpGy8pcRD03xp NY5LrCrF5K/pAX7Ui2IHaPBgEwvCwHhauzCVYm3EEcV3/V/60Gf46y6a5w6xwgJ/ dhqLlpQxC2bj1KUUsqjOdkYjxTkJ4QgMnHulf+x59DYIymkR6l3OmYFqLwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPu/hkZdQ6SS/TF/xIe71ZYEALXbMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvMS03LUdSbDFEcEpMOU1YX0VoN3ZWbGdRQXRkcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzEvNjUyZGE5LWFmYzQtNGUyMC04MmZjLWIwN2Q4NDE2YWU0 YS8xL0FPVDJwM05vdDg3UDVuSWd0RFpYYXg0QWl1dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlDfDAN BgkqhkiG9w0BAQsFAAOCAQEAbPfY5rwxdzXVpyhuw7xvHAMXRyygBWzwvvCHtm53 1ZIMLt58vEsEHLyL8/Xh+7+d7F3Ym1DpONWNlkx1utJIEvTTESf5QQ/hIpzodrgQ M5HozFHDUJ0PRK0QJEDWLlrswg6ncRlF4Au4Rm9cWrKtuQkQMtubH+uRG4W+TRZ7 BEGBs3grRQs2A7mGnaxq3nc+9xgRAG+VpXCptpK1Fu+76u9lSOzUu88w7ICX7w1Z TrFAtbil02lFxmSYdaYaWAnsiYKaw64ZjWHd31HkO1h0+2Vxru53N1ka9qW80jwE KbIQ1/M2HX+3Tdnx+wEgNe4FRDH0+QJOKbBeVdLJKGiU/g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:57 2026 by rpki-client