This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa File: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (raw, json) Hash identifier: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc= Subject key identifier: FA:A6:D1:6D:7E:F5:66:DA:B3:01:38:80:22:BF:F6:70:72:E9:4F:61 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019B7834AD857E3A2DC4F3308CFE443ECE50 Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa Signing time: Thu 01 Jan 2026 06:17:56 +0000 ROA not before: Thu 01 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58010 IP address blocks: 185.139.158.0/24 maxlen: 24 2a0b:20c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ad:85:7e:3a:2d:c4:f3:30:8c:fe:44:3e:ce:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faa6d16d7ef566dab301388022bff67072e94f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:4d:f5:92:25:33:0f:25:2b:93:05:0c:15: 58:71:81:12:ab:ca:a3:11:ac:9b:bd:18:02:82:48: 6b:a1:9a:86:ff:d0:1e:5b:c7:d4:b2:a7:2d:f8:22: 26:e3:ed:17:a7:15:c2:9b:37:7a:3c:66:a6:5a:87: 5a:71:43:a8:84:61:2b:bd:78:3b:be:c4:f0:7f:90: 00:97:11:40:fe:e7:d2:cd:60:0f:52:9e:d7:ae:78: 5a:86:83:37:35:2e:bc:91:25:c0:8a:59:90:be:29: 5a:ef:4c:e8:46:34:c7:c6:d5:71:ff:c1:f3:81:52: da:f6:7f:b4:c3:bf:57:fe:0e:f7:93:04:1b:ed:f8: 3e:32:cb:4b:b6:5a:27:6e:36:97:f8:ca:3b:bc:c8: a7:77:6d:f3:59:b8:de:72:c7:2f:ec:99:5b:01:31: b9:ef:e7:37:59:eb:e8:fc:12:2f:9c:2b:a3:f3:83: 53:0c:9b:d1:69:2c:ac:1d:1f:ce:ba:47:b0:d2:cf: f5:bb:8e:d2:a1:02:f4:cc:2f:83:b3:bc:cf:bb:b0: fa:03:c3:26:7d:bf:43:67:58:c1:1d:4d:30:e7:f0: 61:a5:29:50:85:7c:c5:24:aa:3f:97:d3:10:f1:70: f1:aa:71:52:4d:fe:a6:d4:f8:c6:4f:7d:12:a8:c5: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A6:D1:6D:7E:F5:66:DA:B3:01:38:80:22:BF:F6:70:72:E9:4F:61 X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.158.0/24 IPv6: 2a0b:20c0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 70:74:e1:b3:18:fa:16:8e:93:76:9a:b8:f8:1e:38:70:69:4f: d2:9d:66:58:be:ae:58:4c:4a:07:9f:ec:47:b6:f8:10:dd:c1: fc:29:36:68:5b:21:a5:66:1e:44:cd:0c:fd:ac:74:bb:6b:1d: cf:fa:c2:d1:56:96:8b:c3:55:ce:e1:39:9e:bf:e2:62:78:ee: 23:e6:d0:d5:b8:8f:37:f0:39:68:d5:60:bf:e6:53:64:0c:fd: dd:3e:26:af:14:33:a2:03:87:6e:ae:e5:46:73:67:c8:8f:c5: 06:48:3e:03:46:56:ac:6d:9d:9f:a5:ca:60:64:64:89:37:08: c7:7d:86:77:7d:00:26:6c:6a:91:a9:99:45:b6:95:31:bf:1f: ec:a9:cb:84:f1:70:36:94:ae:73:8f:ae:e3:59:f4:7b:e3:0e: ce:ce:97:dd:4e:91:15:18:8f:e5:48:21:1c:8d:f4:ed:d4:6c: 1a:17:3b:c7:45:66:22:72:40:ff:52:b5:86:8e:86:5a:80:94: 5b:7a:1e:0c:c9:0b:51:50:56:d2:e6:e1:a6:49:70:80:a8:6a: a5:d9:99:9e:9a:84:28:25:77:e3:69:12:01:9c:61:98:7d:86: 5c:9b:0c:da:03:6c:66:fb:03:ab:1d:5d:44:6c:3c:e8:b7:73: 4b:bf:9b:b8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NK2FfjotxPMwjP5EPs5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWE2ZDE2ZDdlZjU2NmRhYjMwMTM4ODAyMmJmZjY3MDcyZTk0ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM1N9ZIlMw8lK5MFDBVYcYESq8qj EaybvRgCgkhroZqG/9AeW8fUsqct+CIm4+0XpxXCmzd6PGamWodacUOohGErvXg7 vsTwf5AAlxFA/ufSzWAPUp7XrnhahoM3NS68kSXAilmQvila70zoRjTHxtVx/8Hz gVLa9n+0w79X/g73kwQb7fg+MstLtlonbjaX+Mo7vMind23zWbjecscv7JlbATG5 7+c3Wevo/BIvnCuj84NTDJvRaSysHR/Oukew0s/1u47SoQL0zC+Ds7zPu7D6A8Mm fb9DZ1jBHU0w5/BhpSlQhXzFJKo/l9MQ8XDxqnFSTf6m1PjGT30SqMUqEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPqm0W1+9WbaswE4gCK/9nBy6U9hMB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvMS1xYlJiWDcxWnRxekFUaUFJcl8yY0hMcFQyRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2MvN2UzOGIyLWJlYzEtNDQ2NC1hMGNhLTdkMjU4YjYyMDE2 OS8xL3BfbEt1VFVGUzRiY3RkYXR1dExmMjFaTFVrZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEALmLnjAO BAIAAjAIAwYEKgsgwCAwDQYJKoZIhvcNAQELBQADggEBAHB04bMY+haOk3aauPge OHBpT9KdZli+rlhMSgef7Ee2+BDdwfwpNmhbIaVmHkTNDP2sdLtrHc/6wtFWlovD Vc7hOZ6/4mJ47iPm0NW4jzfwOWjVYL/mU2QM/d0+Jq8UM6IDh26u5UZzZ8iPxQZI PgNGVqxtnZ+lymBkZIk3CMd9hnd9ACZsapGpmUW2lTG/H+ypy4TxcDaUrnOPruNZ 9HvjDs7Ol91OkRUYj+VIIRyN9O3UbBoXO8dFZiJyQP9StYaOhlqAlFt6HgzJC1FQ VtLm4aZJcICoaqXZmZ6ahCgld+NpEgGcYZh9hlybDNoDbGb7A6sdXURsPOi3c0u/ m7g= -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:12 2026 by rpki-client