This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/1-M17FsedROaF_Kne-5Hqf60_ZF0.roa File: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (raw, json) Hash identifier: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs= Subject key identifier: F8:CD:7B:16:C7:9D:44:E6:85:FC:A9:DE:FB:91:EA:7F:AD:3F:64:5D Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Certificate serial: 019B77593469187BE0323026CCE4F6A1E6C8 Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/1-M17FsedROaF_Kne-5Hqf60_ZF0.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20676 IP address blocks: 188.239.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:34:69:18:7b:e0:32:30:26:cc:e4:f6:a1:e6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8cd7b16c79d44e685fca9defb91ea7fad3f645d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:af:57:f0:03:82:75:f5:6a:07:b6:41:7c: 85:cd:38:fd:c0:02:52:80:4e:4f:70:07:74:ac:67: ad:ae:bf:37:48:49:13:cf:71:10:0c:90:61:58:f7: be:06:74:06:87:9b:2f:fc:19:f6:c0:e4:a6:5e:91: fe:17:dd:c5:ea:3d:1f:5a:1a:af:95:3a:df:7f:50: 26:48:3d:58:d2:27:57:ed:e8:98:1e:47:26:dd:e2: e0:91:e1:60:2b:82:ec:16:cf:e7:25:9a:cc:bc:f0: 5d:e7:b2:5a:02:4b:1f:bb:13:b9:d4:d7:f8:df:a1: cb:bc:7e:fe:85:d2:67:0e:a3:e9:a2:13:f5:28:5e: c7:64:57:25:fc:b5:28:84:07:03:38:55:e8:b2:d5: c4:17:94:d2:e2:b2:aa:d9:77:d1:08:90:97:93:1c: 54:36:03:07:77:fe:25:c5:dc:19:b6:40:ca:47:1a: 82:a8:ac:3a:2f:8d:35:f3:8b:7d:9d:d6:61:38:1b: 9d:eb:c4:5e:48:7c:3b:f0:84:d6:c7:a2:96:02:af: 73:64:7a:30:71:46:75:94:fa:83:f3:2e:ce:0f:dd: 84:ac:99:30:41:b1:b7:e4:a1:98:d8:9e:f4:2b:bc: 22:03:8c:3c:23:3d:44:3d:5e:c9:19:f9:b9:5a:b2: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CD:7B:16:C7:9D:44:E6:85:FC:A9:DE:FB:91:EA:7F:AD:3F:64:5D X509v3 Authority Key Identifier: keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/1-M17FsedROaF_Kne-5Hqf60_ZF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.239.190.0/24 Signature Algorithm: sha256WithRSAEncryption 05:cc:b9:d3:c4:2a:47:97:4b:e9:64:51:49:9b:03:88:d3:c3: 56:79:db:c5:8e:17:2f:02:81:4f:35:b8:03:93:3a:da:40:c9: 38:a4:7e:96:52:e4:1a:b9:cd:4f:1b:55:a5:e5:88:00:1a:96: d9:53:67:c1:40:52:d0:5f:03:29:f8:84:ec:0b:47:44:12:0d: 06:76:b4:e3:7b:0a:38:c9:6d:45:20:e5:ad:4f:84:b0:77:c8: 21:bc:67:d0:b6:cb:91:20:ff:ac:7b:8c:9c:9d:bb:e1:d1:95: 1c:95:42:88:72:ee:f3:40:a2:8f:d1:21:e3:40:0a:3c:66:80: c2:41:38:b9:d0:ea:79:98:46:84:f4:b3:33:73:f5:bc:d1:1a: 11:9d:87:a8:0a:43:d4:b0:61:06:b7:31:91:0a:58:97:6c:e0: 91:5f:26:21:35:bb:59:90:02:1c:02:39:ea:71:65:ea:3c:e4: c6:db:b5:15:5a:83:fd:c0:9d:28:d2:9c:fd:d9:9d:12:3f:dc: fd:7e:de:0f:64:15:9b:b2:8e:7b:f8:3c:5a:8b:b0:75:4d:8e: ee:b7:08:94:06:4a:fe:74:44:48:c8:7a:ff:d3:91:ea:0c:dc: dc:72:2f:c6:77:9d:32:8e:84:5e:eb:5a:64:03:ea:7a:60:90: fe:04:cd:84 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WTRpGHvgMjAmzOT2oebIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy OTFlZTgwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGNkN2IxNmM3OWQ0NGU2ODVmY2E5ZGVmYjkxZWE3ZmFkM2Y2NDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEKvV/ADgnX1age2QXyFzTj9wAJS gE5PcAd0rGetrr83SEkTz3EQDJBhWPe+BnQGh5sv/Bn2wOSmXpH+F93F6j0fWhqv lTrff1AmSD1Y0idX7eiYHkcm3eLgkeFgK4LsFs/nJZrMvPBd57JaAksfuxO51Nf4 36HLvH7+hdJnDqPpohP1KF7HZFcl/LUohAcDOFXostXEF5TS4rKq2XfRCJCXkxxU NgMHd/4lxdwZtkDKRxqCqKw6L40184t9ndZhOBud68ReSHw78ITWx6KWAq9zZHow cUZ1lPqD8y7OD92ErJkwQbG35KGY2J70K7wiA4w8Iz1EPV7JGfm5WrIoSQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPjNexbHnUTmhfyp3vuR6n+tP2RdMB8GA1UdIwQY MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct ZDVhYmY1MDMxZDIxLzEvMS1NMTdGc2VkUk9hRl9LbmUtNUhxZjYwX1pGMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWQvYjljMWQ3LTJhZWQtNDY5Ni04MGE3LWQ1YWJmNTAzMWQy MS8xL21ZUzU2eElpTnhFY0g0eWxkd2ZzY3djcEh1Zy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALzvvjAN BgkqhkiG9w0BAQsFAAOCAQEABcy508QqR5dL6WRRSZsDiNPDVnnbxY4XLwKBTzW4 A5M62kDJOKR+llLkGrnNTxtVpeWIABqW2VNnwUBS0F8DKfiE7AtHRBINBna043sK OMltRSDlrU+EsHfIIbxn0LbLkSD/rHuMnJ274dGVHJVCiHLu80Cij9Eh40AKPGaA wkE4udDqeZhGhPSzM3P1vNEaEZ2HqApD1LBhBrcxkQpYl2zgkV8mITW7WZACHAI5 6nFl6jzkxtu1FVqD/cCdKNKc/dmdEj/c/X7eD2QVm7KOe/g8WouwdU2O7rcIlAZK /nRESMh6/9OR6gzc3HIvxnedMo6EXutaZAPqemCQ/gTNhA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:04 2026 by rpki-client