This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa File: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (raw, json) Hash identifier: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE= Subject key identifier: D6:F8:CA:80:BC:8C:6E:66:E7:0F:D0:4D:F8:43:6A:EA:60:AF:A5:D4 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019B7FF215D04C95C0CF98012AC6708D2E05 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa Signing time: Fri 02 Jan 2026 18:22:10 +0000 ROA not before: Fri 02 Jan 2026 18:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197501 IP address blocks: 94.247.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:15:d0:4c:95:c0:cf:98:01:2a:c6:70:8d:2e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6f8ca80bc8c6e66e70fd04df8436aea60afa5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:f9:f3:5e:c6:37:c6:ea:f4:75:ca:da:88: 0a:ee:5c:4e:4c:d6:c6:e2:71:df:2a:98:c8:48:74: 25:36:4a:76:09:d3:54:47:d0:9c:a5:9b:10:4f:ac: 95:73:b8:16:6e:71:f2:53:c0:ed:b1:1a:68:da:cf: fe:ce:08:e9:9c:92:15:25:41:21:f5:e1:ae:11:aa: 80:15:4c:c7:16:1d:c0:93:9b:88:a6:72:6f:62:c3: c7:1d:fb:1e:56:fd:11:bc:6b:ca:1f:8d:94:4d:4b: ad:f2:d7:80:15:3a:8a:87:53:62:cd:fd:6b:8c:50: 53:21:35:05:dd:f2:eb:6a:3a:73:98:d1:45:7d:e5: f6:7e:7b:8c:c5:0a:6b:fb:c8:48:ec:65:a1:cc:08: 7f:c3:f6:fb:8a:76:30:3e:a2:a5:0d:63:1a:ea:6f: 3d:42:43:de:dd:8b:4c:bc:47:7c:f5:42:35:7b:5a: bc:83:ee:e2:5b:ed:69:4c:f0:a2:62:89:b8:55:32: 30:11:c3:7c:0d:2d:14:ee:43:31:ff:5d:53:a3:f7: 9c:9a:79:c3:80:24:77:9a:41:8d:6e:82:37:67:e9: ae:de:01:fe:a9:7b:c0:5c:84:2c:ad:7a:b0:2f:98: b2:6d:60:b8:c2:42:fc:5f:31:d7:a0:b4:59:ef:5c: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F8:CA:80:BC:8C:6E:66:E7:0F:D0:4D:F8:43:6A:EA:60:AF:A5:D4 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.226.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:44:b4:2c:3a:13:eb:8c:75:76:12:f2:23:6a:48:97:c4:43: ff:c9:b6:4d:8d:de:1f:22:2c:a7:00:f7:fd:c5:67:d6:0b:68: 49:31:a7:c1:fc:54:48:8a:95:4f:5e:5a:9e:be:6a:df:02:cb: f0:91:25:0d:37:c3:2a:6e:eb:0d:bb:d9:5a:e7:23:bf:ae:45: dc:74:59:38:ee:21:e0:ac:ca:eb:63:73:42:32:ab:67:41:cc: a0:5d:37:6d:bf:96:26:55:a4:ce:20:f3:50:de:95:fc:de:a2: 5e:a9:75:e8:9f:12:5f:7a:e2:cf:44:ca:73:48:7f:6b:12:67: 0d:63:6a:26:a6:88:f8:98:4d:92:a8:06:4f:e7:29:3a:98:2d: d4:46:81:a6:20:58:b8:64:99:2a:27:0e:5f:a6:9b:77:d9:1a: 08:7e:bb:e6:f7:3a:86:d4:64:5f:02:51:fe:d0:3b:57:c7:dd: ab:35:94:df:7f:ab:b8:a4:34:b1:07:45:ca:d6:4a:e9:93:3a: c8:03:43:c3:b4:4e:73:1b:81:9c:57:d8:ac:84:7a:8b:f8:f0: c8:7e:82:9d:eb:72:61:d6:0f:a6:b5:2e:54:26:42:c2:4f:3a: 5b:f3:bf:ea:49:5f:5a:5a:4e:69:69:f1:e1:5b:8f:32:b0:be: 36:22:6e:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hXQTJXAz5gBKsZwjS4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmY4Y2E4MGJjOGM2ZTY2ZTcwZmQwNGRmODQzNmFlYTYwYWZhNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0j5817GN8bq9HXK2ogK7lxOTNbG 4nHfKpjISHQlNkp2CdNUR9CcpZsQT6yVc7gWbnHyU8DtsRpo2s/+zgjpnJIVJUEh 9eGuEaqAFUzHFh3Ak5uIpnJvYsPHHfseVv0RvGvKH42UTUut8teAFTqKh1Nizf1r jFBTITUF3fLrajpzmNFFfeX2fnuMxQpr+8hI7GWhzAh/w/b7inYwPqKlDWMa6m89 QkPe3YtMvEd89UI1e1q8g+7iW+1pTPCiYom4VTIwEcN8DS0U7kMx/11To/ecmnnD gCR3mkGNboI3Z+mu3gH+qXvAXIQsrXqwL5iybWC4wkL8XzHXoLRZ71wTxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNb4yoC8jG5m5w/QTfhDaupgr6XUMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvMXZqS2dMeU1ibWJuRDlCTi1FTnE2bUN2cGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvfiMA0G CSqGSIb3DQEBCwUAA4IBAQANRLQsOhPrjHV2EvIjakiXxEP/ybZNjd4fIiynAPf9 xWfWC2hJMafB/FRIipVPXlqevmrfAsvwkSUNN8MqbusNu9la5yO/rkXcdFk47iHg rMrrY3NCMqtnQcygXTdtv5YmVaTOIPNQ3pX83qJeqXXonxJfeuLPRMpzSH9rEmcN Y2ompoj4mE2SqAZP5yk6mC3URoGmIFi4ZJkqJw5fppt32RoIfrvm9zqG1GRfAlH+ 0DtXx92rNZTff6u4pDSxB0XK1krpkzrIA0PDtE5zG4GcV9ishHqL+PDIfoKd63Jh 1g+mtS5UJkLCTzpb87/qSV9aWk5pafHhW48ysL42Im5O -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:32 2026 by rpki-client