This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1FxN1qt_zpX2JOJ-Hi8RlObuBDQ.roa File: 1FxN1qt_zpX2JOJ-Hi8RlObuBDQ.roa (raw, json) Hash identifier: Bd49v18Mwzd74vHgFcpnKlK+N/tWHxCBqu6kIXhMXzQ= Subject key identifier: D4:5C:4D:D6:AB:7F:CE:95:F6:24:E2:7E:1E:2F:11:94:E6:EE:04:34 Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Certificate serial: 019B78A2F0240A289F29C393078865B53A58 Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1FxN1qt_zpX2JOJ-Hi8RlObuBDQ.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215438 IP address blocks: 178.237.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:24:0a:28:9f:29:c3:93:07:88:65:b5:3a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d45c4dd6ab7fce95f624e27e1e2f1194e6ee0434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:97:2b:02:f4:d8:80:01:1b:c6:2e:cf:d9: 66:57:2e:38:d2:c8:38:68:bf:4e:72:4f:a4:d6:66: 82:09:a6:2f:39:e2:53:d6:fa:ac:3a:80:ca:e3:9b: 44:94:99:aa:7d:3d:51:66:2e:fa:fd:f1:d8:80:ac: af:a0:00:c4:fb:a0:23:38:ae:f4:40:05:c3:93:0b: 59:61:9b:d1:8d:f2:0a:79:64:81:cf:3b:88:c9:58: dd:44:99:5e:89:f9:07:62:ac:e3:7e:e6:fd:ff:37: 07:b4:6a:ee:f3:2e:2c:72:5e:15:63:dc:f5:fb:c1: 85:40:be:20:3e:16:c9:9b:6c:04:ef:92:c4:10:e1: a4:b7:08:5a:8c:8c:2f:ad:ff:8b:82:1c:61:cf:df: dc:96:68:e7:8a:52:c4:c8:47:d4:c6:1c:cd:c1:ff: ee:93:8b:b1:72:ad:7b:de:c7:9b:ca:fb:ff:6c:1b: ac:59:d7:62:1c:29:41:77:99:9b:f0:7b:ee:e7:4e: b4:6d:74:fd:a2:90:6e:cc:47:29:9a:37:3e:c5:24: 5d:93:eb:bd:d6:fa:d3:97:4e:55:a3:fc:3e:80:dd: 9b:ff:9e:27:7e:a1:1e:cf:2e:2e:94:5b:60:9f:f4: d8:2c:19:06:e7:d1:8c:07:bb:7b:bb:e6:06:78:86: 0d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5C:4D:D6:AB:7F:CE:95:F6:24:E2:7E:1E:2F:11:94:E6:EE:04:34 X509v3 Authority Key Identifier: keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1FxN1qt_zpX2JOJ-Hi8RlObuBDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.199.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ac:e9:47:f8:a9:d2:6d:1f:c2:88:0b:30:a1:8d:c9:33:1f: 41:4f:ca:a6:c1:dd:40:cc:f5:f4:10:69:08:52:a1:6a:7e:35: 48:c9:b1:8b:b2:c1:26:c3:b8:fd:2d:3e:9d:df:a9:b1:b1:a2: 44:7d:f6:30:d4:c0:c3:a4:31:5e:59:d4:18:f5:f8:f7:d9:51: 95:85:c6:57:dc:e0:86:38:ad:5e:d1:35:90:6b:a1:cb:9b:ef: c3:3d:72:4d:f8:d8:41:bf:20:92:98:4b:c6:58:20:fb:3f:ba: 44:d5:56:82:2a:ff:04:e7:62:25:42:fa:69:8a:fa:06:86:a6: 62:bb:f3:47:57:14:34:3b:c5:63:95:57:fc:6f:6c:0e:ed:63: 7c:bd:95:66:6a:da:a4:16:12:12:78:c7:03:b0:7e:6f:cb:77: 9a:11:44:9d:62:4c:49:3f:78:63:23:9c:29:85:ae:ef:8d:a7: 03:00:0e:1b:21:b6:9c:98:d4:a6:20:29:0c:9a:93:6d:14:e8: 9e:f8:a0:2d:38:9c:ae:de:b9:7e:fa:20:98:c2:5e:1f:16:7a: f3:19:7b:19:fd:9b:c7:7e:a7:7a:d8:30:a2:e5:0b:22:e4:f7: ef:f9:d5:0f:62:63:7c:7d:74:f0:70:c4:8a:1f:03:3f:d2:7d: f9:31:bf:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovAkCiifKcOTB4hltTpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OTkyMmNhOGQxMzlhNGQwM2Q2ZDU3Y2JjODE3N2RjMDVm ZWI5ZWMwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDVjNGRkNmFiN2ZjZTk1ZjYyNGUyN2UxZTJmMTE5NGU2ZWUwNDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWmXKwL02IABG8Yuz9lmVy440sg4 aL9Ock+k1maCCaYvOeJT1vqsOoDK45tElJmqfT1RZi76/fHYgKyvoADE+6AjOK70 QAXDkwtZYZvRjfIKeWSBzzuIyVjdRJleifkHYqzjfub9/zcHtGru8y4scl4VY9z1 +8GFQL4gPhbJm2wE75LEEOGktwhajIwvrf+Lghxhz9/clmjnilLEyEfUxhzNwf/u k4uxcq173sebyvv/bBusWddiHClBd5mb8Hvu5060bXT9opBuzEcpmjc+xSRdk+u9 1vrTl05Vo/w+gN2b/54nfqEezy4ulFtgn/TYLBkG59GMB7t7u+YGeIYNPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRcTdarf86V9iTifh4vEZTm7gQ0MB8GA1UdIwQY MBaAFNSZIsqNE5pNA9bVfLyBd9wF/rnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUt ZThiNjBhMmRkNmI0LzEvMUZ4TjFxdF96cFgySk9KLUhpOFJsT2J1QkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUtZThiNjBhMmRkNmI0 LzEvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu3HMA0G CSqGSIb3DQEBCwUAA4IBAQB3rOlH+KnSbR/CiAswoY3JMx9BT8qmwd1AzPX0EGkI UqFqfjVIybGLssEmw7j9LT6d36mxsaJEffYw1MDDpDFeWdQY9fj32VGVhcZX3OCG OK1e0TWQa6HLm+/DPXJN+NhBvyCSmEvGWCD7P7pE1VaCKv8E52IlQvppivoGhqZi u/NHVxQ0O8VjlVf8b2wO7WN8vZVmatqkFhISeMcDsH5vy3eaEUSdYkxJP3hjI5wp ha7vjacDAA4bIbacmNSmICkMmpNtFOie+KAtOJyu3rl++iCYwl4fFnrzGXsZ/ZvH fqd62DCi5Qsi5Pfv+dUPYmN8fXTwcMSKHwM/0n35Mb/L -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:38 2026 by rpki-client