This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa File: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (raw, json) Hash identifier: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU= Subject key identifier: A7:5A:40:C9:45:FE:7D:2C:78:5F:9C:65:37:23:BF:56:AD:AB:CB:BC Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 019B7EA746B98525485A918AF80C2F89D6A6 Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51025 IP address blocks: 185.115.0.0/22 maxlen: 22 185.115.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:46:b9:85:25:48:5a:91:8a:f8:0c:2f:89:d6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a75a40c945fe7d2c785f9c653723bf56adabcbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:7a:95:88:de:0f:31:df:8f:89:ae:83:91: 68:45:00:be:89:9f:52:81:7a:8b:5e:1c:76:cd:91: 38:91:54:c7:8a:60:7a:7e:bc:89:36:ec:fe:75:2a: bc:4e:4f:47:f0:d7:07:db:76:03:a6:9e:1e:4a:ed: aa:26:16:60:3a:7a:2e:3e:14:14:d1:64:6f:c6:32: ed:4a:16:59:95:c3:d9:c3:45:9a:fb:6d:2a:07:6b: 4d:bf:48:c3:84:13:86:19:9a:ab:0e:b5:f8:15:8e: df:ea:cc:11:04:e2:6e:0a:ce:03:68:1f:47:32:5e: c2:b9:de:96:d4:65:25:c3:4d:d5:9e:45:15:96:10: 5f:03:1f:a6:16:6b:1a:9d:36:ea:06:28:84:08:7a: 99:0e:71:2f:dc:fd:d6:81:12:f4:17:0d:c9:58:fe: e9:a1:9b:2a:d3:2b:9b:b1:c8:b2:88:93:ca:fe:c1: d0:8c:1c:d9:99:b3:ae:d8:90:47:59:da:f7:c1:14: ca:88:b4:00:de:a0:29:72:bd:22:05:2e:b7:7f:ff: 97:09:3e:41:85:f3:49:d3:e5:79:f6:57:ad:cb:40: bf:d7:60:d2:97:51:67:30:23:6f:d4:61:fe:af:aa: 19:1e:32:24:a5:fc:2b:e2:27:d1:fc:6b:72:d0:f4: 00:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5A:40:C9:45:FE:7D:2C:78:5F:9C:65:37:23:BF:56:AD:AB:CB:BC X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.0.0/22 Signature Algorithm: sha256WithRSAEncryption 30:ca:fa:54:bf:86:a3:5e:1f:15:b8:7d:6c:04:ce:f9:19:c4: 34:8b:4b:eb:d5:56:0f:3b:2a:72:77:42:47:92:a7:8e:25:37: 4c:60:90:2f:d0:3e:9b:e3:f4:6c:5d:42:0d:28:2a:33:e1:24: cd:66:76:a2:d4:12:a2:eb:d9:a4:72:5a:8a:e2:19:d0:64:a6: 29:cf:a0:2e:ef:fe:4a:6e:d7:56:6e:81:68:00:6a:d6:af:1f: 8b:fb:57:d1:e6:49:28:a2:34:3e:85:0e:c1:43:9b:37:db:61: f6:fd:b3:c3:b1:3b:65:df:5a:59:b9:e2:66:e9:02:95:33:c7: b6:a4:bb:8c:54:b2:7f:fa:5a:9a:a5:45:9a:0b:bc:3f:c2:42: f3:45:33:4f:95:85:ae:02:b6:ac:bd:70:c2:bc:84:ea:96:02: a1:8a:4c:88:2c:2c:2e:b5:68:39:88:f6:94:3b:67:56:07:ac: 11:2a:7e:69:15:0d:b2:fd:4c:ed:25:4f:18:44:85:9a:bc:71: 72:1c:37:85:11:9c:42:b0:c3:03:97:29:bc:6b:f9:29:80:5f: 1a:45:53:98:34:75:1d:65:51:65:ed:1f:1b:f7:0d:ef:99:d9: f2:59:56:7f:7c:d7:41:d4:1a:77:8a:9c:43:d6:49:19:b0:b6: 1a:bf:83:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0a5hSVIWpGK+AwvidamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzVhNDBjOTQ1ZmU3ZDJjNzg1ZjljNjUzNzIzYmY1NmFkYWJjYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLV6lYjeDzHfj4mug5FoRQC+iZ9S gXqLXhx2zZE4kVTHimB6fryJNuz+dSq8Tk9H8NcH23YDpp4eSu2qJhZgOnouPhQU 0WRvxjLtShZZlcPZw0Wa+20qB2tNv0jDhBOGGZqrDrX4FY7f6swRBOJuCs4DaB9H Ml7Cud6W1GUlw03VnkUVlhBfAx+mFmsanTbqBiiECHqZDnEv3P3WgRL0Fw3JWP7p oZsq0yubsciyiJPK/sHQjBzZmbOu2JBHWdr3wRTKiLQA3qApcr0iBS63f/+XCT5B hfNJ0+V59lety0C/12DSl1FnMCNv1GH+r6oZHjIkpfwr4ifR/Gty0PQAewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdaQMlF/n0seF+cZTcjv1atq8u8MB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvcDFwQXlVWC1mU3g0WDV4bE55T19WcTJyeTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXMAMA0G CSqGSIb3DQEBCwUAA4IBAQAwyvpUv4ajXh8VuH1sBM75GcQ0i0vr1VYPOypyd0JH kqeOJTdMYJAv0D6b4/RsXUINKCoz4STNZnai1BKi69mkclqK4hnQZKYpz6Au7/5K btdWboFoAGrWrx+L+1fR5kkoojQ+hQ7BQ5s322H2/bPDsTtl31pZueJm6QKVM8e2 pLuMVLJ/+lqapUWaC7w/wkLzRTNPlYWuArasvXDCvITqlgKhikyILCwutWg5iPaU O2dWB6wRKn5pFQ2y/UztJU8YRIWavHFyHDeFEZxCsMMDlym8a/kpgF8aRVOYNHUd ZVFl7R8b9w3vmdnyWVZ/fNdB1Bp3ipxD1kkZsLYav4Nb -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:01 2026 by rpki-client