This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/1-W964s-KtZyiNamSbJ6IP1jbFT4.roa File: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (raw, json) Hash identifier: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y= Subject key identifier: F9:6F:7A:E2:CF:8A:B5:9C:A2:35:A9:92:6C:9E:88:3F:58:DB:15:3E Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B797EA5B2AA521AF20A8961E48A788280 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/1-W964s-KtZyiNamSbJ6IP1jbFT4.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200473 IP address blocks: 185.82.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:b2:aa:52:1a:f2:0a:89:61:e4:8a:78:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f96f7ae2cf8ab59ca235a9926c9e883f58db153e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5f:20:c2:5f:13:a0:ef:18:c3:91:da:b8:94: 03:30:a6:c5:92:70:34:6b:44:55:02:b0:52:72:d9: ff:35:f6:62:17:b3:1f:6b:4f:b9:53:41:a6:59:64: e8:09:ff:36:4e:77:b7:5d:55:da:50:16:3a:4e:64: 3c:46:2d:a8:31:25:16:0d:68:bd:08:4d:8a:cb:5d: 8a:30:95:a2:74:20:10:c4:7b:6a:b3:1f:3a:c7:e0: 9c:30:6e:75:68:66:c0:b8:fe:e9:7d:13:0c:5d:f8: a0:97:0e:4f:0d:e5:68:f6:f7:1c:51:a7:82:45:28: 75:54:85:be:20:85:f9:96:f5:2f:87:ea:85:60:34: 8f:a2:3c:82:bf:8b:1f:e3:e7:b1:b4:67:c8:a5:93: fb:c5:02:9f:66:46:09:ab:f6:b6:31:1c:83:52:49: 60:07:5c:34:90:61:a8:cc:22:df:4d:a6:12:73:8b: e1:44:81:05:83:24:76:3e:94:60:e7:19:71:7d:a7: 30:16:96:b5:13:ba:5c:89:23:74:c8:48:c3:48:ba: 8e:b4:92:5d:c2:9f:4f:85:1d:91:b5:a8:34:a3:59: 72:b4:fc:75:cd:0e:e1:33:be:04:9d:7f:58:8b:53: bb:cf:9b:1a:71:7c:a5:8b:5d:47:17:c6:c4:ca:31: 04:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6F:7A:E2:CF:8A:B5:9C:A2:35:A9:92:6C:9E:88:3F:58:DB:15:3E X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/1-W964s-KtZyiNamSbJ6IP1jbFT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.11.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:db:a8:a8:01:34:6a:12:c1:aa:c4:fd:78:6d:a2:cc:5b:15: 6a:f3:0e:75:96:0f:e2:6f:90:c4:1b:02:ea:87:da:a9:2d:2e: 7a:46:ef:b1:80:c1:08:22:51:e2:a8:41:fd:29:0a:79:f3:c2: e3:02:63:45:e0:73:e2:eb:2e:52:f2:e8:f1:e0:90:4d:46:fb: 1a:b0:b5:09:ce:0d:63:d9:16:f9:4a:00:23:26:23:18:6e:c0: 8c:b7:83:d0:57:fb:dc:2b:66:17:87:a3:18:76:43:d4:f1:af: 77:c3:05:3d:43:50:42:4f:f8:57:a8:6b:17:7a:6f:41:58:8d: b6:e1:4f:01:1e:bd:25:4e:42:76:8f:88:03:0b:62:27:08:ac: 49:90:4e:3d:21:37:e5:9b:f0:a6:08:25:79:77:9d:5a:35:3d: 5e:bb:5c:3d:cc:70:dc:56:3a:a5:ae:43:e8:25:67:2d:af:5d: d1:b0:c7:51:4f:47:ce:e7:07:74:50:0b:36:76:5d:2d:8c:74: 95:8c:fa:66:29:01:b1:3c:b9:65:47:d0:19:af:20:46:46:7e: 7d:0a:a4:a3:45:2f:73:79:2d:51:b1:39:6e:09:fb:08:fd:c2: 30:e5:24:2a:c0:3e:f8:a2:61:92:db:9e:90:5e:b0:9e:46:69: b5:7a:98:45 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fqWyqlIa8gqJYeSKeIKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTZmN2FlMmNmOGFiNTljYTIzNWE5OTI2YzllODgzZjU4ZGIxNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA318gwl8ToO8Yw5HauJQDMKbFknA0 a0RVArBSctn/NfZiF7Mfa0+5U0GmWWToCf82Tne3XVXaUBY6TmQ8Ri2oMSUWDWi9 CE2Ky12KMJWidCAQxHtqsx86x+CcMG51aGbAuP7pfRMMXfiglw5PDeVo9vccUaeC RSh1VIW+IIX5lvUvh+qFYDSPojyCv4sf4+extGfIpZP7xQKfZkYJq/a2MRyDUklg B1w0kGGozCLfTaYSc4vhRIEFgyR2PpRg5xlxfacwFpa1E7pciSN0yEjDSLqOtJJd wp9PhR2Rtag0o1lytPx1zQ7hM74EnX9Yi1O7z5sacXyli11HF8bEyjEESwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlveuLPirWcojWpkmyeiD9Y2xU+MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvMS1XOTY0cy1LdFp5aU5hbVNiSjZJUDFqYkZUNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGEvZWExY2ZmLWFlOGYtNDcxOS04OWIzLTAwM2ExNTY4YmYz Zi8xL0tiNEMzcUNnaHVtSUQxWk1ob2NydkZsOHhuSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlSCzAN BgkqhkiG9w0BAQsFAAOCAQEATduoqAE0ahLBqsT9eG2izFsVavMOdZYP4m+QxBsC 6ofaqS0uekbvsYDBCCJR4qhB/SkKefPC4wJjReBz4usuUvLo8eCQTUb7GrC1Cc4N Y9kW+UoAIyYjGG7AjLeD0Ff73CtmF4ejGHZD1PGvd8MFPUNQQk/4V6hrF3pvQViN tuFPAR69JU5Cdo+IAwtiJwisSZBOPSE35ZvwpggleXedWjU9XrtcPcxw3FY6pa5D 6CVnLa9d0bDHUU9HzucHdFALNnZdLYx0lYz6ZikBsTy5ZUfQGa8gRkZ+fQqko0Uv c3ktUbE5bgn7CP3CMOUkKsA++KJhktuekF6wnkZptXqYRQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:10 2026 by rpki-client