This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/1-j_sZvUMxQK-7aXKAXDNmug5uts.roa File: 1-j_sZvUMxQK-7aXKAXDNmug5uts.roa (raw, json) Hash identifier: arUcHXes9dnbTroTzOHotKDbAzYJeRs8ngPtFCM/gDo= Subject key identifier: FA:3F:EC:66:F5:0C:C5:02:BE:ED:A5:CA:01:70:CD:9A:E8:39:BA:DB Certificate issuer: /CN=b2fbfe5f059f9dc13454344c90749574ece629f5 Certificate serial: 019B77C753DB3CC52AFE85F0E66F67364421 Authority key identifier: B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/1-j_sZvUMxQK-7aXKAXDNmug5uts.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202780 IP address blocks: 185.154.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.mft rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:53:db:3c:c5:2a:fe:85:f0:e6:6f:67:36:44:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fbfe5f059f9dc13454344c90749574ece629f5 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa3fec66f50cc502beeda5ca0170cd9ae839badb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:08:d0:89:68:70:23:8f:b2:75:0b:83:3b: 06:60:62:2a:29:9e:08:40:78:4d:89:51:bb:65:8d: 2b:b4:7a:b1:c4:62:5d:f1:de:b6:ba:c2:e6:86:2e: a2:51:f9:1a:dd:66:d2:de:c8:f8:66:8f:b8:58:f9: 95:85:d0:0d:f4:f4:72:1b:71:48:70:ae:16:90:c9: 36:3b:9d:36:74:a2:b5:ff:39:51:5b:b6:b6:6d:e1: 87:a4:92:b0:49:3c:71:a1:78:2a:1f:c8:d5:7c:08: f6:10:93:b6:5f:9f:fa:ee:10:14:48:61:e9:4c:d0: 71:1c:36:37:ea:8d:02:98:c1:ec:69:67:34:f8:36: e6:8e:4d:42:f4:9f:26:97:8f:d5:9d:62:e3:0d:45: af:c1:76:67:d7:40:3e:4c:4f:6d:f9:15:2d:e4:43: 18:dd:db:c2:bc:a5:38:23:d7:84:76:72:02:d1:7e: 49:c6:93:8a:ea:f2:23:6f:d2:01:3d:3c:63:22:0d: eb:bb:c6:bf:50:7e:16:b0:65:33:47:db:78:d1:ef: 1b:fd:ab:ab:6b:47:f2:7e:a7:ae:59:5e:78:43:60: bd:2a:13:0d:7a:ad:ac:b4:99:34:0a:94:5d:44:a0: 11:94:05:55:32:96:d6:8a:7e:8d:08:0c:97:19:7c: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3F:EC:66:F5:0C:C5:02:BE:ED:A5:CA:01:70:CD:9A:E8:39:BA:DB X509v3 Authority Key Identifier: keyid:B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/1-j_sZvUMxQK-7aXKAXDNmug5uts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.228.0/22 Signature Algorithm: sha256WithRSAEncryption 57:ac:ea:9e:2c:5a:97:48:86:d3:28:13:ec:de:2e:54:03:3c: da:9c:cb:d7:13:f3:11:c4:2e:3a:fe:7a:c5:81:fb:f1:1a:38: e8:76:7c:b9:b6:74:93:b0:10:9e:13:96:4f:ed:86:8d:e6:97: 26:33:d9:8d:2f:a5:73:a6:ae:d7:c7:23:8a:bf:e2:16:c1:fa: 31:76:1a:55:bc:af:1a:b9:73:56:0b:12:3f:f7:52:2a:83:9d: 40:7d:72:de:57:36:46:bf:a8:1f:61:e3:85:2f:9a:b5:7d:e4: 6c:b6:5d:85:d8:6b:a2:bc:5d:7a:49:f5:68:3e:5a:15:03:4c: 0e:44:8b:84:60:1a:b6:72:49:b4:f1:1a:d2:83:bd:92:00:d1: f4:5d:8d:ab:8d:d3:3a:90:5b:45:ff:16:3e:e5:72:1f:66:aa: a4:85:30:ab:78:e9:e8:d7:4c:4b:c9:fb:0b:2d:5a:ab:88:df: 3f:9c:96:e0:d4:13:40:03:58:43:e4:0b:d7:53:13:f2:8d:f4: 7d:68:1a:db:22:fc:95:5d:64:0d:13:60:0e:73:ed:90:2a:dd: 1d:09:b9:1e:0d:0b:ba:7b:65:22:d3:d7:e0:bb:f2:81:4f:fc: cd:bb:d8:49:b8:7e:fd:7d:cb:a5:44:1f:6a:d1:db:9d:bf:9d: d9:fb:8f:b5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x1PbPMUq/oXw5m9nNkQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZmJmZTVmMDU5ZjlkYzEzNDU0MzQ0YzkwNzQ5NTc0ZWNl NjI5ZjUwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTNmZWM2NmY1MGNjNTAyYmVlZGE1Y2EwMTcwY2Q5YWU4MzliYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWkI0IlocCOPsnULgzsGYGIqKZ4I QHhNiVG7ZY0rtHqxxGJd8d62usLmhi6iUfka3WbS3sj4Zo+4WPmVhdAN9PRyG3FI cK4WkMk2O502dKK1/zlRW7a2beGHpJKwSTxxoXgqH8jVfAj2EJO2X5/67hAUSGHp TNBxHDY36o0CmMHsaWc0+Dbmjk1C9J8ml4/VnWLjDUWvwXZn10A+TE9t+RUt5EMY 3dvCvKU4I9eEdnIC0X5JxpOK6vIjb9IBPTxjIg3ru8a/UH4WsGUzR9t40e8b/aur a0fyfqeuWV54Q2C9KhMNeq2stJk0CpRdRKARlAVVMpbWin6NCAyXGXzMSQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPo/7Gb1DMUCvu2lygFwzZroObrbMB8GA1UdIwQY MBaAFLL7/l8Fn53BNFQ0TJB0lXTs5in1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Z2LVh3V2ZuY0UwVkRSTWtIU1ZkT3ptS2ZVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wNWM2NjktMDRmOC00MjgzLTljZGIt NjBlM2UyMTRhNjNlLzEvMS1qX3NadlVNeFFLLTdhWEtBWERObXVnNXV0cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGMvMDVjNjY5LTA0ZjgtNDI4My05Y2RiLTYwZTNlMjE0YTYz ZS8xL3N2di1Yd1dmbmNFMFZEUk1rSFNWZE96bUtmVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArma5DAN BgkqhkiG9w0BAQsFAAOCAQEAV6zqnixal0iG0ygT7N4uVAM82pzL1xPzEcQuOv56 xYH78Ro46HZ8ubZ0k7AQnhOWT+2GjeaXJjPZjS+lc6au18cjir/iFsH6MXYaVbyv GrlzVgsSP/dSKoOdQH1y3lc2Rr+oH2HjhS+atX3kbLZdhdhrorxdekn1aD5aFQNM DkSLhGAatnJJtPEa0oO9kgDR9F2Nq43TOpBbRf8WPuVyH2aqpIUwq3jp6NdMS8n7 Cy1aq4jfP5yW4NQTQANYQ+QL11MT8o30fWga2yL8lV1kDRNgDnPtkCrdHQm5Hg0L untlItPX4LvygU/8zbvYSbh+/X3LpUQfatHbnb+d2fuPtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:33 2026 by rpki-client