This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa File: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (raw, json) Hash identifier: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc= Subject key identifier: F9:9A:D0:6C:57:3B:35:13:06:97:6F:63:B6:35:8C:2A:C2:29:D9:94 Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb Certificate serial: 019B7E38C319BC6567C0C4830E3413741F35 Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205570 IP address blocks: 188.125.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c3:19:bc:65:67:c0:c4:83:0e:34:13:74:1f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f99ad06c573b351306976f63b6358c2ac229d994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:20:51:9c:eb:e4:11:96:bd:5c:6a:af:9f: 49:4e:5d:f5:d0:b0:f6:c8:c8:57:52:58:ee:92:aa: 04:1d:e5:49:fe:92:94:9e:7e:ac:7c:9f:0d:5a:53: 9f:f3:37:2b:92:de:04:89:58:66:bd:28:3d:09:bc: 12:fc:e1:33:e0:4e:ff:89:3a:e5:27:d0:54:a2:88: c2:2a:de:b2:c3:22:c0:39:57:2f:52:07:80:a9:da: d5:8c:0b:a9:65:9a:4b:31:b2:54:11:64:71:20:28: 8e:e1:2e:0d:02:11:cf:5a:53:92:69:6a:09:8f:f8: c5:c2:b0:4e:af:14:fa:9c:0b:1d:0f:76:2e:66:e5: f4:cd:62:63:6e:9a:15:15:44:c6:c5:6d:fa:6b:77: 25:5b:c2:b3:98:53:72:f8:4c:d5:db:a4:69:2d:fa: 3f:55:88:00:be:bd:33:dd:75:b0:cd:f5:c3:05:6d: 7e:0e:6f:86:06:30:d2:79:6e:8b:62:50:fe:c7:b2: 4b:56:2b:bf:ca:14:3c:cd:82:70:e8:d4:0a:7c:7f: 8c:81:9e:25:d2:36:c3:d0:44:c8:1d:31:d3:34:00: dc:c4:b3:0d:7d:0c:d1:6f:81:f0:37:9d:83:c6:1c: 8d:df:1b:86:10:7f:84:a3:f1:7f:d9:50:ef:bc:70: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9A:D0:6C:57:3B:35:13:06:97:6F:63:B6:35:8C:2A:C2:29:D9:94 X509v3 Authority Key Identifier: keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.169.0/24 Signature Algorithm: sha256WithRSAEncryption 94:09:43:a5:7e:b7:c0:fe:35:a3:d7:7d:72:75:67:50:91:2b: e8:b1:e4:38:a6:7c:4b:96:1f:47:40:79:d6:e8:45:ea:06:f8: e9:2e:34:74:c7:1e:ca:45:43:ae:51:a8:57:34:35:15:0a:1f: d0:70:c0:67:70:65:ba:84:bd:bf:b8:eb:32:cc:6c:15:55:ef: 87:57:ee:0a:41:bc:d1:cd:16:9f:8e:d0:8f:76:9b:7f:b0:c9: 33:dd:e0:6b:62:8b:f5:c1:29:21:35:e9:f7:37:23:aa:e2:21: a3:2b:4b:7e:80:dc:99:08:6b:34:9f:e6:53:66:3f:43:7c:6c: 7a:50:08:36:1b:7b:2f:e5:c3:df:12:60:b7:34:2e:d3:95:1a: bd:ca:d9:e7:34:16:4f:f7:37:96:e5:22:c2:1a:4f:a6:80:d6: 93:3e:e0:94:a9:16:5c:e5:ca:62:a1:e4:21:e2:ca:ad:21:23: d8:60:ab:99:a9:fb:80:dd:21:f1:8f:34:c5:aa:8b:32:d4:29: e5:3a:03:5c:57:92:63:27:09:6a:e0:e5:99:9f:fe:b7:ad:ed: 74:11:d1:31:f1:5f:2d:6a:a4:fd:83:70:2c:e6:4e:ec:24:4c: 55:84:7a:ab:2b:04:54:24:b0:30:44:83:5f:ed:a3:fc:9d:5f: 2e:8c:76:15 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OMMZvGVnwMSDDjQTdB81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw YTdkZGIwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTlhZDA2YzU3M2IzNTEzMDY5NzZmNjNiNjM1OGMyYWMyMjlkOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtikgUZzr5BGWvVxqr59JTl310LD2 yMhXUljukqoEHeVJ/pKUnn6sfJ8NWlOf8zcrkt4EiVhmvSg9CbwS/OEz4E7/iTrl J9BUoojCKt6ywyLAOVcvUgeAqdrVjAupZZpLMbJUEWRxICiO4S4NAhHPWlOSaWoJ j/jFwrBOrxT6nAsdD3YuZuX0zWJjbpoVFUTGxW36a3clW8KzmFNy+EzV26RpLfo/ VYgAvr0z3XWwzfXDBW1+Dm+GBjDSeW6LYlD+x7JLViu/yhQ8zYJw6NQKfH+MgZ4l 0jbD0ETIHTHTNADcxLMNfQzRb4HwN52DxhyN3xuGEH+Eo/F/2VDvvHAEnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPma0GxXOzUTBpdvY7Y1jCrCKdmUMB8GA1UdIwQY MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt MDRhYzE3ODgxYWE5LzEvMS1aclFiRmM3TlJNR2wyOWp0aldNS3NJcDJaUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvZTYyZjk1LWFiYmQtNDMwZC04MTYwLTA0YWMxNzg4MWFh OS8xL2hFbHBlQUZCZ2t6UXJMLWxwNFJoSHVzS2Zkcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALx9qTAN BgkqhkiG9w0BAQsFAAOCAQEAlAlDpX63wP41o9d9cnVnUJEr6LHkOKZ8S5YfR0B5 1uhF6gb46S40dMceykVDrlGoVzQ1FQof0HDAZ3BluoS9v7jrMsxsFVXvh1fuCkG8 0c0Wn47Qj3abf7DJM93ga2KL9cEpITXp9zcjquIhoytLfoDcmQhrNJ/mU2Y/Q3xs elAINht7L+XD3xJgtzQu05UavcrZ5zQWT/c3luUiwhpPpoDWkz7glKkWXOXKYqHk IeLKrSEj2GCrman7gN0h8Y80xaqLMtQp5ToDXFeSYycJauDlmZ/+t63tdBHRMfFf LWqk/YNwLOZO7CRMVYR6qysEVCSwMESDX+2j/J1fLox2FQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:26 2026 by rpki-client