This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa File: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (raw, json) Hash identifier: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw= Subject key identifier: D7:1A:42:D7:BF:F5:E6:4F:5C:B8:36:3B:22:1E:D6:82:3D:12:F5:1A Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B7C803FC09D1BF7475FCC7B97E5A99EE3 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57643 IP address blocks: 185.174.120.0/22 maxlen: 22 185.188.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3f:c0:9d:1b:f7:47:5f:cc:7b:97:e5:a9:9e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d71a42d7bff5e64f5cb8363b221ed6823d12f51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:8c:42:e7:30:c4:d0:eb:07:d7:a1:0d:11: f9:66:b1:3d:cf:6d:71:d8:ed:26:d8:95:67:c4:b6: 40:33:39:f3:08:50:46:83:6a:3c:1c:b7:13:8d:9e: d3:ed:9a:05:36:93:82:96:8b:0e:63:88:7a:17:8d: ab:0f:5e:4f:e3:a4:8e:be:5f:e0:1f:86:c9:03:ad: 35:2d:58:43:45:5f:68:91:da:97:ba:f4:6d:d4:0f: 60:1a:f0:9e:80:af:9b:c1:59:6a:1c:f0:b4:8c:a5: 88:65:91:5b:61:63:11:e6:a3:eb:e5:b2:ce:2c:22: 3b:f7:4a:a8:04:f6:27:c0:4b:9e:06:45:b9:a2:c2: c7:78:8b:3e:ba:03:a0:2d:7f:e5:38:65:a1:44:27: ab:9b:7f:f9:20:0d:9c:ff:4d:1c:12:ef:51:1c:eb: 66:87:2d:f5:8d:60:67:e9:c0:ee:9f:0d:fe:08:c7: 1e:32:2b:40:50:d9:f6:dd:f0:76:91:6c:bc:56:76: 8e:17:0f:1b:83:6b:85:50:ac:3c:57:a5:2c:e2:b9: f2:09:fb:be:f6:05:31:68:12:69:49:93:54:7a:2d: 21:6e:4f:b1:66:4a:c8:93:2d:ed:89:28:34:62:c3: 9a:75:8b:68:c7:f3:30:6a:76:78:d2:4a:eb:4f:ae: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:42:D7:BF:F5:E6:4F:5C:B8:36:3B:22:1E:D6:82:3D:12:F5:1A X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.120.0/22 185.188.164.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:0c:a8:11:3b:1d:65:54:df:24:fe:2c:72:e1:83:0a:5a:9e: 39:b8:46:d1:e1:58:7f:00:97:c5:00:8a:b0:16:e1:0c:db:f0: 1d:3d:89:e9:d5:bd:b8:80:7b:c1:4d:df:b0:f4:50:d2:52:31: 8b:93:e2:f5:d7:7a:12:93:10:49:d9:ce:37:9c:51:d5:b3:be: 4a:54:80:ba:11:17:fe:9c:08:d1:f2:1b:d8:d8:05:22:a2:8d: 56:1c:8b:80:70:1a:87:38:67:c6:9f:dc:22:7d:57:5a:ed:c1: 44:d6:17:63:da:dd:c0:2d:00:a6:fd:3b:5b:22:02:2e:72:62: 14:c9:9c:34:76:e9:20:57:fc:d4:4f:61:8e:9a:e2:f0:0a:36: 90:09:68:a4:39:80:66:93:d1:e4:e4:70:59:85:5d:82:e1:33: f9:32:26:ee:3f:59:5e:5d:86:cf:6f:55:09:57:06:e1:ac:36: 8e:28:af:3c:c4:14:89:97:e4:09:15:6f:55:c2:58:8b:10:46: 57:eb:fa:22:0c:3f:e7:bd:cb:0f:19:81:1c:74:5a:4a:1e:5e: 8b:20:60:65:a5:1b:a4:c0:c8:69:a2:7d:42:44:32:b7:60:df: 1c:e4:10:93:06:4c:a3:9f:db:44:96:3b:60:28:02:20:d6:20: 6f:c2:6a:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gD/AnRv3R1/Me5flqZ7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzFhNDJkN2JmZjVlNjRmNWNiODM2M2IyMjFlZDY4MjNkMTJmNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOiMQucwxNDrB9ehDRH5ZrE9z21x 2O0m2JVnxLZAMznzCFBGg2o8HLcTjZ7T7ZoFNpOClosOY4h6F42rD15P46SOvl/g H4bJA601LVhDRV9okdqXuvRt1A9gGvCegK+bwVlqHPC0jKWIZZFbYWMR5qPr5bLO LCI790qoBPYnwEueBkW5osLHeIs+ugOgLX/lOGWhRCerm3/5IA2c/00cEu9RHOtm hy31jWBn6cDunw3+CMceMitAUNn23fB2kWy8VnaOFw8bg2uFUKw8V6Us4rnyCfu+ 9gUxaBJpSZNUei0hbk+xZkrIky3tiSg0YsOadYtox/MwanZ40krrT66/4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNcaQte/9eZPXLg2OyIe1oI9EvUaMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvMXhwQzE3XzE1azljdURZN0loN1dnajBTOVJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCua54AwQC ubykMA0GCSqGSIb3DQEBCwUAA4IBAQB6DKgROx1lVN8k/ixy4YMKWp45uEbR4Vh/ AJfFAIqwFuEM2/AdPYnp1b24gHvBTd+w9FDSUjGLk+L113oSkxBJ2c43nFHVs75K VIC6ERf+nAjR8hvY2AUioo1WHIuAcBqHOGfGn9wifVda7cFE1hdj2t3ALQCm/Ttb IgIucmIUyZw0dukgV/zUT2GOmuLwCjaQCWikOYBmk9Hk5HBZhV2C4TP5MibuP1le XYbPb1UJVwbhrDaOKK88xBSJl+QJFW9VwliLEEZX6/oiDD/nvcsPGYEcdFpKHl6L IGBlpRukwMhpon1CRDK3YN8c5BCTBkyjn9tEljtgKAIg1iBvwmox -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:36 2026 by rpki-client