This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/X1Ccfwu0f8o1S3I__oAjVih9pOs.roa File: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (raw, json) Hash identifier: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU= Subject key identifier: 5F:50:9C:7F:0B:B4:7F:CA:35:4B:72:3F:FE:80:23:56:28:7D:A4:EB Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca Certificate serial: 019B7F8511FCF7C7371F389BC48EB696650E Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/X1Ccfwu0f8o1S3I__oAjVih9pOs.roa Signing time: Fri 02 Jan 2026 16:23:05 +0000 ROA not before: Fri 02 Jan 2026 16:23:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207951 IP address blocks: 185.7.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:11:fc:f7:c7:37:1f:38:9b:c4:8e:b6:96:65:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f509c7f0bb47fca354b723ffe802356287da4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:a4:b0:12:0f:d7:c6:d8:77:dc:71:a1:f7: 87:0d:4b:94:24:a3:5b:af:ca:15:a9:9f:72:5e:0f: e1:fb:6b:63:78:83:c5:fc:53:c1:90:0a:f9:7c:62: 1f:29:2f:c4:50:e7:ce:d5:c2:9d:f0:5e:67:04:65: 90:7f:df:89:5b:50:e7:79:51:fc:e3:ba:2a:e4:dd: eb:50:a5:c0:8a:36:b7:1a:37:16:c2:6b:24:19:5a: bd:7f:0b:db:0f:65:30:be:55:d9:c7:bd:bb:3e:00: 05:82:9e:e1:83:73:01:08:4b:86:81:2b:a4:92:9b: 13:f5:5c:2c:6c:19:8e:a9:d0:d7:5f:87:a5:aa:2a: dc:ba:4b:7f:bb:d7:0a:6d:84:20:6f:97:e9:eb:d4: 59:fe:16:b0:ff:f4:c5:24:10:9e:19:77:ae:f7:79: c3:1a:cd:f8:69:b4:23:d0:ce:0e:94:18:9d:31:07: 25:7d:7c:52:e4:e8:0c:ea:db:1c:19:28:6e:f4:b4: 9b:b0:05:ec:f2:36:1d:0f:ad:28:85:02:10:57:33: 19:89:51:de:ba:a5:6a:25:03:0d:87:8a:8f:ce:4e: ec:9e:39:9a:58:4d:a0:39:92:e1:5b:b0:4a:a0:42: 11:6c:f5:d3:65:28:b4:db:68:fb:b8:06:bf:b2:39: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:9C:7F:0B:B4:7F:CA:35:4B:72:3F:FE:80:23:56:28:7D:A4:EB X509v3 Authority Key Identifier: keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/X1Ccfwu0f8o1S3I__oAjVih9pOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.121.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:9f:8b:22:dd:32:f8:17:35:b5:81:a4:d6:aa:bc:b7:a0:b7: d8:50:10:e0:38:e9:9d:ba:6a:17:eb:51:37:ba:c3:39:8d:f2: 94:3a:eb:1a:01:8b:c4:cf:80:e8:73:9d:e1:1c:9b:b4:29:ce: 46:5f:c4:c2:ad:55:2a:c0:e7:91:63:48:e5:ec:4e:65:e3:b9: 62:36:20:56:6b:8e:68:d2:cd:42:36:e7:eb:a3:35:60:a4:27: 4e:aa:05:ee:3f:47:ae:0a:90:b2:c0:91:e4:06:67:4c:66:68: 47:6e:dc:0e:a6:df:3d:30:17:69:8d:03:44:f7:16:0a:d8:49: 0e:83:f4:26:91:32:10:2d:23:18:61:9c:ca:8b:ef:4f:36:83: 9e:c6:5e:ef:79:45:38:fd:5e:a2:e7:23:1e:cc:7c:ce:19:48: 14:12:0f:7b:59:76:97:fc:7c:75:44:1e:2d:43:a4:f1:13:21: bd:5a:1e:21:c2:18:a2:f4:dd:0f:c8:91:d1:92:d5:09:09:d6: bd:d3:6f:96:76:13:7c:29:4f:e8:e0:eb:39:d3:05:33:66:13: 04:75:f9:d7:8f:11:33:90:93:b8:b7:e4:31:06:16:76:e3:24: 06:2f:ea:bf:32:b9:0d:68:cc:50:cc:fb:38:cd:1e:8f:3d:b4: 88:2f:36:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRH898c3HzibxI62lmUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3 YWRhY2EwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjUwOWM3ZjBiYjQ3ZmNhMzU0YjcyM2ZmZTgwMjM1NjI4N2RhNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w6ksBIP18bYd9xxofeHDUuUJKNb r8oVqZ9yXg/h+2tjeIPF/FPBkAr5fGIfKS/EUOfO1cKd8F5nBGWQf9+JW1DneVH8 47oq5N3rUKXAija3GjcWwmskGVq9fwvbD2UwvlXZx727PgAFgp7hg3MBCEuGgSuk kpsT9VwsbBmOqdDXX4elqircukt/u9cKbYQgb5fp69RZ/haw//TFJBCeGXeu93nD Gs34abQj0M4OlBidMQclfXxS5OgM6tscGShu9LSbsAXs8jYdD60ohQIQVzMZiVHe uqVqJQMNh4qPzk7snjmaWE2gOZLhW7BKoEIRbPXTZSi022j7uAa/sjmbgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9QnH8LtH/KNUtyP/6AI1YofaTrMB8GA1UdIwQY MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt MDY0NDE0ZDAzNDBmLzEvWDFDY2Z3dTBmOG8xUzNJX19vQWpWaWg5cE9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQd5MA0G CSqGSIb3DQEBCwUAA4IBAQCan4si3TL4FzW1gaTWqry3oLfYUBDgOOmdumoX61E3 usM5jfKUOusaAYvEz4Doc53hHJu0Kc5GX8TCrVUqwOeRY0jl7E5l47liNiBWa45o 0s1CNufrozVgpCdOqgXuP0euCpCywJHkBmdMZmhHbtwOpt89MBdpjQNE9xYK2EkO g/QmkTIQLSMYYZzKi+9PNoOexl7veUU4/V6i5yMezHzOGUgUEg97WXaX/Hx1RB4t Q6TxEyG9Wh4hwhii9N0PyJHRktUJCda902+WdhN8KU/o4Os50wUzZhMEdfnXjxEz kJO4t+QxBhZ24yQGL+q/MrkNaMxQzPs4zR6PPbSILzaY -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:27 2026 by rpki-client