This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa File: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (raw, json) Hash identifier: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s= Subject key identifier: FB:09:0E:C2:85:5C:9B:6F:B3:C1:56:21:38:8F:53:7E:1F:C4:58:F6 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36B9F5D882C725B39A87DA3526283B Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9087 IP address blocks: 185.250.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b9:f5:d8:82:c7:25:b3:9a:87:da:35:26:28:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb090ec2855c9b6fb3c15621388f537e1fc458f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bc:19:79:17:64:f4:e6:4e:26:93:f9:b4:c9: 39:18:9a:65:ab:d6:bb:0e:1f:b4:8e:3d:fa:76:21: 2c:c6:35:8f:a6:e5:6e:3e:69:c6:27:ab:92:e9:4c: fc:a7:72:52:ae:82:9b:a4:c1:3e:40:6f:72:9a:ae: 40:c6:61:4b:05:c7:a1:25:d3:51:41:2d:a5:e6:ff: d1:ba:b7:4b:9b:ec:35:99:c5:b9:cc:d4:a7:fa:e4: d4:d1:84:10:1d:9d:c5:67:a7:90:42:47:d1:d9:b0: 09:ac:a7:5e:e7:04:73:04:9c:5c:f2:a8:5e:72:c0: 7a:0e:45:75:33:d0:b1:44:51:52:15:46:91:f2:8c: af:7d:84:1e:08:7f:8c:3c:93:3b:33:48:bc:a4:5c: 95:bb:8b:1f:76:13:82:35:42:68:01:39:ff:02:ed: d0:16:56:9c:46:c0:d7:f9:9a:f6:d4:11:1b:90:6e: 26:f9:03:99:22:d2:29:33:6d:fc:fc:b0:dd:7c:d2: 96:82:27:86:ff:30:d5:dc:f6:c3:1b:c6:f4:a2:09: 15:ea:ed:86:0f:f8:cc:79:74:e3:e9:d4:e0:6b:57: 9f:c3:a9:ba:11:b5:16:aa:c1:03:92:67:41:0d:c3: 5a:5b:e3:9a:af:92:49:ab:4b:be:37:3a:f2:5c:9c: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:09:0E:C2:85:5C:9B:6F:B3:C1:56:21:38:8F:53:7E:1F:C4:58:F6 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.24.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:10:70:03:e6:b8:81:20:22:42:38:85:97:f2:ea:2f:a3:07: ef:e5:3e:d5:36:be:7f:8e:e5:1a:ec:1e:e1:01:e0:82:2f:ab: 55:3f:c8:02:cb:d1:f3:22:a4:8b:a0:a1:54:99:d4:d0:57:df: 55:0c:20:0c:96:44:2f:2c:f9:93:86:c6:e3:f4:54:19:ce:d2: 26:b5:78:84:56:76:5b:e5:ad:47:68:f4:5f:48:00:6a:10:66: 2b:9c:46:78:c1:2e:bf:3e:1f:82:a5:75:b4:c2:08:64:80:c0: ed:04:21:71:db:2d:2d:66:23:88:49:37:d5:75:a9:79:ca:e2: 16:fb:6e:4b:b5:a0:ea:d9:5c:a8:c5:cc:48:50:d8:2a:83:e8: cb:56:0d:dc:15:76:c7:c3:9a:1c:43:3c:16:ef:78:75:b6:15: d4:4a:59:a5:35:c2:ee:d0:1f:18:18:71:83:0f:81:d6:e1:b5: ef:35:c0:a8:dc:31:8b:cd:89:12:3f:8c:d8:b3:d6:cd:a4:00: 5f:66:e2:10:5e:f7:d5:bc:54:fc:e1:7d:c4:c2:ea:a8:5d:20: 30:7d:ac:13:8e:26:6e:75:20:3c:be:37:67:f5:4d:2c:57:8c: ce:d6:f1:bc:2c:56:06:5e:7a:54:3f:f4:53:06:c7:8d:c9:aa: e0:36:0e:96 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nrn12ILHJbOah9o1Jig7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjA5MGVjMjg1NWM5YjZmYjNjMTU2MjEzODhmNTM3ZTFmYzQ1OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67wZeRdk9OZOJpP5tMk5GJplq9a7 Dh+0jj36diEsxjWPpuVuPmnGJ6uS6Uz8p3JSroKbpME+QG9ymq5AxmFLBcehJdNR QS2l5v/RurdLm+w1mcW5zNSn+uTU0YQQHZ3FZ6eQQkfR2bAJrKde5wRzBJxc8qhe csB6DkV1M9CxRFFSFUaR8oyvfYQeCH+MPJM7M0i8pFyVu4sfdhOCNUJoATn/Au3Q FlacRsDX+Zr21BEbkG4m+QOZItIpM238/LDdfNKWgieG/zDV3PbDG8b0ogkV6u2G D/jMeXTj6dTga1efw6m6EbUWqsEDkmdBDcNaW+Oar5JJq0u+NzryXJzaRwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsJDsKFXJtvs8FWITiPU34fxFj2MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvMS13a093b1ZjbTItendWWWhPSTlUZmhfRVdQWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzUvYWE1OGMzLWU3MDYtNGE0OS1hN2M1LTBhZTJlOTIyYTI5 Mi8xL05vdjdpbDd1U1FndXBpamZKYVNsMVE4NnFiTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbn6GDAN BgkqhkiG9w0BAQsFAAOCAQEAPRBwA+a4gSAiQjiFl/LqL6MH7+U+1Ta+f47lGuwe 4QHggi+rVT/IAsvR8yKki6ChVJnU0FffVQwgDJZELyz5k4bG4/RUGc7SJrV4hFZ2 W+WtR2j0X0gAahBmK5xGeMEuvz4fgqV1tMIIZIDA7QQhcdstLWYjiEk31XWpecri FvtuS7Wg6tlcqMXMSFDYKoPoy1YN3BV2x8OaHEM8Fu94dbYV1EpZpTXC7tAfGBhx gw+B1uG17zXAqNwxi82JEj+M2LPWzaQAX2biEF731bxU/OF9xMLqqF0gMH2sE44m bnUgPL43Z/VNLFeMztbxvCxWBl56VD/0UwbHjcmq4DYOlg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:09 2026 by rpki-client