This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa File: b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa (raw, json) Hash identifier: i2y4+MSKBcNxu87+qDE+/nX7xefI7C4Gq8swc9+9PNU= Subject key identifier: 6F:54:79:17:5A:D7:05:9F:BD:8D:06:2E:7A:C3:A2:4D:F9:E7:5E:3C Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7EBFDBA2C07ABFA1C9DD576A2F5E9 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 80.174.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:eb:fd:ba:2c:07:ab:fa:1c:9d:d5:76:a2:f5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5479175ad7059fbd8d062e7ac3a24df9e75e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:3b:5d:60:b0:4b:58:c5:ef:0d:8c:4b:92: 1b:d3:16:2c:99:8c:bf:aa:63:2e:fb:06:c9:ec:86: 2f:76:91:2c:75:c6:7d:a5:03:22:dc:58:ba:82:e5: 8b:cc:b8:5e:77:01:8a:55:e4:df:b0:28:02:8c:a8: d1:a2:49:31:e0:a4:3e:66:57:40:c4:59:0d:18:89: ff:a8:a9:94:cc:0a:c9:4f:e5:ec:d0:65:11:d3:18: 9a:40:c7:af:5a:48:d9:b9:89:00:30:b8:97:5e:f7: 93:0b:0d:8d:4d:1c:c1:4e:19:9e:d6:81:70:0c:89: 8b:ce:ac:f2:ca:9a:a7:01:c7:1f:88:7c:c1:ba:5f: c0:4a:4d:52:58:fd:da:99:78:58:0b:dc:3a:d6:50: 87:99:a7:93:28:3a:bd:d7:09:9e:c0:98:fb:bb:bc: a6:c5:1a:94:4d:8f:fb:9e:fe:7b:46:97:be:51:27: 6c:35:02:40:e7:ec:a2:64:f6:b3:5f:c3:3a:dc:da: 2d:9e:65:3c:b1:9e:25:67:4e:15:72:1d:23:72:32: fd:13:69:1c:d1:38:e5:78:5c:3c:0e:d5:a7:b1:49: 32:c4:97:2a:c1:47:74:7c:85:11:18:db:f2:0a:9f: ef:49:60:25:94:af:23:ee:2e:e9:ee:8f:d0:ec:da: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:54:79:17:5A:D7:05:9F:BD:8D:06:2E:7A:C3:A2:4D:F9:E7:5E:3C X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.250.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:31:9b:a6:a6:4e:ba:ec:1f:c6:22:8f:79:2b:64:d9:9f:ad: 90:9c:28:13:94:38:99:95:bd:19:99:2c:57:b8:56:f3:24:41: f8:26:76:e0:a7:ea:cc:d2:78:46:69:0a:27:fd:69:c9:d3:4f: aa:9e:50:37:ae:a8:11:66:d6:d5:9f:28:d9:d3:d2:f7:9b:e9: 8b:25:70:8a:13:dc:82:14:ed:7f:7b:58:02:a8:2e:1b:38:58: 82:b5:fa:35:7a:01:18:a0:a6:d6:cf:72:5f:73:9d:4f:91:e2: 86:d8:54:42:45:69:3a:1b:9e:e5:fe:63:64:7e:d0:37:8d:bb: 51:22:51:73:86:4b:c3:88:f1:c2:5b:c5:ab:e3:32:11:35:ee: 1a:d5:d6:da:68:f0:3a:72:e4:e7:27:6f:d4:27:35:08:ce:bb: a2:9a:1f:50:0d:0a:d1:7d:18:d5:de:59:a4:e1:6f:85:ae:e4: ed:34:cc:bc:d9:4f:e3:43:f7:fc:8b:bf:aa:8c:44:a9:f5:33: a0:a2:37:d5:06:70:27:69:e9:9c:38:01:3d:91:56:6e:80:8f: c2:9f:23:d6:f9:29:ab:41:dc:fe:7a:c1:07:72:bf:9e:40:95: 79:5a:15:f1:ea:15:cb:10:12:2c:c0:5b:b6:0c:e6:d3:96:a4: d0:31:1c:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+v9uiwHq/ocndV2ovXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjU0NzkxNzVhZDcwNTlmYmQ4ZDA2MmU3YWMzYTI0ZGY5ZTc1ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFg7XWCwS1jF7w2MS5Ib0xYsmYy/ qmMu+wbJ7IYvdpEsdcZ9pQMi3Fi6guWLzLhedwGKVeTfsCgCjKjRokkx4KQ+ZldA xFkNGIn/qKmUzArJT+Xs0GUR0xiaQMevWkjZuYkAMLiXXveTCw2NTRzBThme1oFw DImLzqzyypqnAccfiHzBul/ASk1SWP3amXhYC9w61lCHmaeTKDq91wmewJj7u7ym xRqUTY/7nv57Rpe+USdsNQJA5+yiZPazX8M63NotnmU8sZ4lZ04Vch0jcjL9E2kc 0TjleFw8DtWnsUkyxJcqwUd0fIURGNvyCp/vSWAllK8j7i7p7o/Q7NoeIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9UeRda1wWfvY0GLnrDok355148MB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvYjFSNUYxclhCWi05alFZdWVzT2lUZm5uWGp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK76MA0G CSqGSIb3DQEBCwUAA4IBAQBeMZumpk667B/GIo95K2TZn62QnCgTlDiZlb0ZmSxX uFbzJEH4Jnbgp+rM0nhGaQon/WnJ00+qnlA3rqgRZtbVnyjZ09L3m+mLJXCKE9yC FO1/e1gCqC4bOFiCtfo1egEYoKbWz3Jfc51PkeKG2FRCRWk6G57l/mNkftA3jbtR IlFzhkvDiPHCW8Wr4zIRNe4a1dbaaPA6cuTnJ2/UJzUIzruimh9QDQrRfRjV3lmk 4W+FruTtNMy82U/jQ/f8i7+qjESp9TOgojfVBnAnaemcOAE9kVZugI/CnyPW+Smr Qdz+esEHcr+eQJV5WhXx6hXLEBIswFu2DObTlqTQMRwb -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:24 2026 by rpki-client