This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/1-871CmDX8fagFE4cCLtEOvFlaJk.roa File: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (raw, json) Hash identifier: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0= Subject key identifier: FB:CE:F5:0A:60:D7:F1:F6:A0:14:4E:1C:08:BB:44:3A:F1:65:68:99 Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4 Certificate serial: 019B7E3850EFEC0208AFDA01628E305578C5 Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/1-871CmDX8fagFE4cCLtEOvFlaJk.roa Signing time: Fri 02 Jan 2026 10:19:38 +0000 ROA not before: Fri 02 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136907 IP address blocks: 193.84.248.0/23 maxlen: 23 193.105.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:50:ef:ec:02:08:af:da:01:62:8e:30:55:78:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbcef50a60d7f1f6a0144e1c08bb443af1656899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:8d:d1:0b:19:e0:1a:7c:cd:78:db:65:ea: 3b:e9:9d:54:a8:bc:d9:19:4b:be:7e:cc:df:6e:b8: 33:3c:46:45:ba:2d:0c:66:dc:4e:50:84:6d:fc:7e: f3:73:04:33:97:20:b1:c0:f4:4c:56:d2:67:d3:74: 0e:71:7f:8c:bf:42:03:63:dd:7e:6e:a4:36:0d:60: aa:93:0f:9e:10:69:ee:db:a3:c5:7f:17:f8:07:b7: 94:1a:ee:1f:42:de:3a:54:5d:e3:a3:31:1e:aa:50: cf:07:42:e3:30:bf:f6:fb:cc:ba:82:31:f3:ee:c1: 36:e6:88:df:ab:74:f8:c6:86:53:31:f8:66:d5:a2: b0:b3:29:51:9b:88:27:8e:c9:2e:86:86:91:16:1c: 6c:cc:cf:09:69:c5:8b:29:4a:84:2b:13:f1:68:4e: 23:08:e8:3f:dd:23:fd:73:ff:40:ae:e3:d9:71:8c: 74:a0:a4:3b:a8:af:f9:dc:75:f0:f7:4e:fc:06:89: 58:8a:71:26:09:56:8a:07:c7:93:fc:ef:83:30:64: 23:a7:f9:d7:2d:d8:3d:c0:92:06:65:b9:ea:be:60: d0:72:23:17:ad:73:b1:5f:b8:10:26:7f:ca:35:97: e3:f8:ca:27:5b:a3:38:a3:79:4a:b0:da:84:bf:7b: 22:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CE:F5:0A:60:D7:F1:F6:A0:14:4E:1C:08:BB:44:3A:F1:65:68:99 X509v3 Authority Key Identifier: keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/1-871CmDX8fagFE4cCLtEOvFlaJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.248.0/23 193.105.244.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:3f:17:1c:4c:f8:62:26:fa:1e:cd:d4:09:b5:28:19:ec:d7: 7e:39:a1:b9:61:27:d9:c0:a4:7d:82:f1:1d:7e:8e:51:0b:9e: 33:9a:b5:1f:f7:b4:b3:d6:af:13:a7:62:e0:bb:6a:3d:4c:c1: 38:af:2b:21:66:47:64:e1:20:92:ec:7b:a6:cf:b1:e0:e4:76: e3:e2:dc:20:27:ad:a4:18:5a:e8:80:15:a5:bf:4d:a9:91:f7: 3b:11:12:04:07:fa:c6:97:76:cd:31:04:11:4c:af:36:7d:fc: 16:24:42:5d:e0:6c:8c:95:59:e5:a6:d3:8e:f0:31:db:35:d4: b4:54:7d:19:26:6b:2c:d5:d1:4f:5c:b6:63:39:4a:11:1e:4f: e6:5c:6b:6b:ce:04:40:a1:b2:7e:72:c8:c2:3a:71:b8:52:b2: 7a:3f:b4:7c:d6:28:c7:ee:e6:c3:3d:af:81:b1:7a:6e:1c:f4: 65:ca:de:37:dd:db:34:52:4f:d9:9e:6b:e2:9f:4a:79:4b:b1: 06:54:d4:17:80:d7:e9:0d:e5:9a:9e:be:86:cf:96:d9:7f:9a: f1:60:59:78:de:59:15:03:fd:89:4f:71:45:70:39:aa:ce:12: 91:ff:f5:e5:7e:73:bd:3d:c6:4e:37:87:04:5a:a4:09:03:7f: b2:20:c2:62 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+OFDv7AIIr9oBYo4wVXjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0 YjQ5ZjQwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmNlZjUwYTYwZDdmMWY2YTAxNDRlMWMwOGJiNDQzYWYxNjU2ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdSN0QsZ4Bp8zXjbZeo76Z1UqLzZ GUu+fszfbrgzPEZFui0MZtxOUIRt/H7zcwQzlyCxwPRMVtJn03QOcX+Mv0IDY91+ bqQ2DWCqkw+eEGnu26PFfxf4B7eUGu4fQt46VF3jozEeqlDPB0LjML/2+8y6gjHz 7sE25ojfq3T4xoZTMfhm1aKwsylRm4gnjskuhoaRFhxszM8JacWLKUqEKxPxaE4j COg/3SP9c/9AruPZcYx0oKQ7qK/53HXw9078BolYinEmCVaKB8eT/O+DMGQjp/nX Ldg9wJIGZbnqvmDQciMXrXOxX7gQJn/KNZfj+MonW6M4o3lKsNqEv3siowIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPvO9Qpg1/H2oBROHAi7RDrxZWiZMB8GA1UdIwQY MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut N2MyNGVmMDI1OWRiLzEvMS04NzFDbURYOGZhZ0ZFNGNDTHRFT3ZGbGFKay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvYTlmODFlLTc5YjItNGMyZS05ZjNlLTdjMjRlZjAyNTlk Yi8xL0VvX2VLX3hqNy1QUk10MnNlRGZoWEg5TFNmUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcFU+AME AcFp9DANBgkqhkiG9w0BAQsFAAOCAQEADz8XHEz4Yib6Hs3UCbUoGezXfjmhuWEn 2cCkfYLxHX6OUQueM5q1H/e0s9avE6di4LtqPUzBOK8rIWZHZOEgkux7ps+x4OR2 4+LcICetpBha6IAVpb9NqZH3OxESBAf6xpd2zTEEEUyvNn38FiRCXeBsjJVZ5abT jvAx2zXUtFR9GSZrLNXRT1y2YzlKER5P5lxra84EQKGyfnLIwjpxuFKyej+0fNYo x+7mwz2vgbF6bhz0ZcreN93bNFJP2Z5r4p9KeUuxBlTUF4DX6Q3lmp6+hs+W2X+a 8WBZeN5ZFQP9iU9xRXA5qs4Skf/15X5zvT3GTjeHBFqkCQN/siDCYg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:06 2026 by rpki-client