This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/1-JpO8q1qatRpRIjMok1nlLPPJtY.roa File: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (raw, json) Hash identifier: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ= Subject key identifier: F8:9A:4E:F2:AD:6A:6A:D4:69:44:88:CC:A2:4D:67:94:B3:CF:26:D6 Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Certificate serial: 019B79113BF209D47BEE370D52D78B94B568 Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/1-JpO8q1qatRpRIjMok1nlLPPJtY.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25354 IP address blocks: 194.0.33.0/24 maxlen: 24 194.0.34.0/24 maxlen: 24 194.69.254.0/24 maxlen: 24 2001:678:40::/48 maxlen: 48 2001:678:44::/48 maxlen: 48 2001:67c:21cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3b:f2:09:d4:7b:ee:37:0d:52:d7:8b:94:b5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f89a4ef2ad6a6ad4694488cca24d6794b3cf26d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:d6:bd:2f:71:a7:09:f1:ad:a3:12:5d:74: 66:b0:d2:17:a7:fb:95:71:e7:2d:8c:d8:30:2b:e3: c3:b7:71:ef:fd:1f:6e:1e:b2:3a:b6:00:7f:00:a7: 94:f4:c2:d7:be:28:61:b0:45:20:11:c3:75:95:c4: f0:fc:ed:47:3d:c3:e0:78:5e:cf:22:8a:42:5a:70: 82:a1:c7:c8:2e:e5:0d:84:28:10:ca:f7:d3:a4:e5: 73:e4:99:66:ee:4e:aa:3e:36:46:93:3c:6a:e4:8a: 79:1e:61:2c:ee:09:0a:04:19:88:be:36:09:5e:43: 3c:88:aa:e6:c5:d3:b3:54:a4:90:24:15:fb:a7:1f: 22:21:71:b6:97:87:16:08:20:30:10:3c:0c:3a:5f: e7:a5:8c:74:63:d9:14:f8:82:2e:f8:7e:02:13:af: 26:11:6c:d6:af:20:cc:a9:7c:1c:63:90:64:2b:7f: 3f:b4:21:48:72:8e:80:b3:ce:03:26:a1:3e:ad:1b: 77:f8:47:91:2e:2b:b1:2e:0c:e8:38:e6:81:6b:82: d6:16:3d:d8:13:5e:0d:a0:f4:13:92:96:f5:c7:d3: 6f:c8:d5:dd:0a:a2:32:5c:5f:a7:a5:48:3d:63:ce: b9:37:ef:2f:01:aa:28:ba:fa:37:58:8f:12:c1:80: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9A:4E:F2:AD:6A:6A:D4:69:44:88:CC:A2:4D:67:94:B3:CF:26:D6 X509v3 Authority Key Identifier: keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/1-JpO8q1qatRpRIjMok1nlLPPJtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.33.0-194.0.34.255 194.69.254.0/24 IPv6: 2001:678:40::/48 2001:678:44::/48 2001:67c:21cc::/48 Signature Algorithm: sha256WithRSAEncryption 38:fd:38:da:e4:f2:73:55:22:e1:9c:27:8b:59:fc:ee:52:0c: 42:79:4c:d3:63:90:c7:84:c1:8b:9d:f7:2b:f4:e8:8d:bf:8c: fa:98:f1:fa:1e:e7:02:dc:5c:d4:1b:b6:27:e3:43:33:95:bf: bf:79:d3:21:7a:f5:a3:8e:49:51:85:34:d9:06:a0:76:5e:6a: ed:77:09:ea:c5:2f:7d:21:0e:bd:b7:dc:06:25:6f:f3:be:d9: ec:4d:5c:3b:d3:f5:0e:5e:af:08:4b:11:07:89:0a:55:77:af: 77:48:91:70:46:db:47:5b:04:b0:10:9a:81:8b:3e:3b:77:0e: bc:c3:5c:50:4a:c7:d2:85:d0:3f:1f:46:46:5b:c5:bf:90:01: 28:9b:fc:43:19:c0:cd:5f:d3:9d:5c:fd:3a:4f:aa:96:0d:03: 29:64:b7:2b:1d:86:b2:fc:5d:a1:e7:b7:eb:8a:92:5b:3d:d3: 3d:e8:55:2b:95:2e:be:17:1d:45:73:9b:f0:f8:56:68:b2:79: 34:b2:e0:39:44:a9:ac:7a:dd:91:56:41:87:1f:f2:34:4e:9f: c6:61:68:54:a2:f4:43:d9:a3:ac:0a:8a:2b:22:02:15:75:1f: 9f:8c:5b:38:49:98:5e:ff:96:54:d5:76:86:58:fc:27:11:84: e3:04:e4:73 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt5ETvyCdR77jcNUteLlLVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy OGE1YmIwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODlhNGVmMmFkNmE2YWQ0Njk0NDg4Y2NhMjRkNjc5NGIzY2YyNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKXWvS9xpwnxraMSXXRmsNIXp/uV cectjNgwK+PDt3Hv/R9uHrI6tgB/AKeU9MLXvihhsEUgEcN1lcTw/O1HPcPgeF7P IopCWnCCocfILuUNhCgQyvfTpOVz5Jlm7k6qPjZGkzxq5Ip5HmEs7gkKBBmIvjYJ XkM8iKrmxdOzVKSQJBX7px8iIXG2l4cWCCAwEDwMOl/npYx0Y9kU+IIu+H4CE68m EWzWryDMqXwcY5BkK38/tCFIco6As84DJqE+rRt3+EeRLiuxLgzoOOaBa4LWFj3Y E14NoPQTkpb1x9NvyNXdCqIyXF+npUg9Y865N+8vAaoouvo3WI8SwYDC/wIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFPiaTvKtamrUaUSIzKJNZ5SzzybWMB8GA1UdIwQY MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt M2U3Y2FkZDg4YzcwLzEvMS1KcE84cTFxYXRScFJJak1vazFubExQUEp0WS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWMvYzFjMWNlLWVhNTktNGRjZi1iY2NjLTNlN2NhZGQ4OGM3 MC8xL2YxQUhmUzNZcG5vYTZMYXIxcnV6U0pBb3Bicy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBQBggrBgEFBQcBBwEB/wRBMD8wGgQCAAEwFDAMAwQAwgAh AwQAwgAiAwQAwkX+MCEEAgACMBsDBwAgAQZ4AEADBwAgAQZ4AEQDBwAgAQZ8Icww DQYJKoZIhvcNAQELBQADggEBADj9ONrk8nNVIuGcJ4tZ/O5SDEJ5TNNjkMeEwYud 9yv06I2/jPqY8foe5wLcXNQbtifjQzOVv7950yF69aOOSVGFNNkGoHZeau13CerF L30hDr233AYlb/O+2exNXDvT9Q5erwhLEQeJClV3r3dIkXBG20dbBLAQmoGLPjt3 DrzDXFBKx9KF0D8fRkZbxb+QASib/EMZwM1f051c/TpPqpYNAylktysdhrL8XaHn t+uKkls90z3oVSuVLr4XHUVzm/D4VmiyeTSy4DlEqax63ZFWQYcf8jROn8ZhaFSi 9EPZo6wKiisiAhV1H5+MWzhJmF7/llTVdoZY/CcRhOME5HM= -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:52 2026 by rpki-client