This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa File: 1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa (raw, json) Hash identifier: j8Mlx4J1MdSRge54lSRG985DTWF3u6cnasrSWFkZ6ac= Subject key identifier: F8:2B:CD:E2:F2:FE:80:EB:A6:9D:48:B0:F2:4A:98:9E:5C:A1:B0:68 Certificate issuer: /CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff Certificate serial: 019B938C86A2F77F112B5163A6411B48B17E Authority key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa Signing time: Tue 06 Jan 2026 13:43:38 +0000 ROA not before: Tue 06 Jan 2026 13:43:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50621 IP address blocks: 109.239.192.0/24 maxlen: 24 109.239.193.0/24 maxlen: 24 109.239.194.0/24 maxlen: 24 109.239.195.0/24 maxlen: 24 109.239.196.0/24 maxlen: 24 109.239.197.0/24 maxlen: 24 109.239.198.0/24 maxlen: 24 109.239.200.0/24 maxlen: 24 109.239.201.0/24 maxlen: 24 109.239.202.0/24 maxlen: 24 109.239.203.0/24 maxlen: 24 109.239.204.0/24 maxlen: 24 109.239.205.0/24 maxlen: 24 109.239.206.0/24 maxlen: 24 109.239.207.0/24 maxlen: 24 2a00:1b58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:8c:86:a2:f7:7f:11:2b:51:63:a6:41:1b:48:b1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff Validity Not Before: Jan 6 13:43:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f82bcde2f2fe80eba69d48b0f24a989e5ca1b068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:5f:6e:59:a1:c1:08:80:66:8e:06:2f:39: 48:e9:5b:d5:9e:9b:8e:a7:af:2b:dc:96:55:8b:d4: 19:5b:34:c9:04:58:f8:79:e4:cf:45:a1:90:a1:df: 04:2c:d3:29:91:4c:74:a1:39:ba:c0:57:74:bd:6a: 6a:28:ce:5a:39:bb:25:2d:44:b7:30:4c:07:05:69: 23:40:05:5a:56:c7:e9:e7:cb:db:31:5c:7e:35:bb: 72:70:5c:c2:e9:90:77:35:2b:a7:80:fe:ed:21:6d: 09:01:8d:42:0f:88:a1:a4:ff:d7:10:f3:75:54:56: cd:85:63:79:44:73:e0:0a:2c:58:84:a4:c5:d2:1d: 25:ab:9e:22:df:ab:9f:10:ee:05:f1:5d:3e:ac:16: ee:d7:aa:21:8f:c8:5d:be:53:86:98:2a:ca:7a:12: 05:f2:4a:05:50:81:81:3e:2d:2b:e2:27:4f:28:bd: c1:8a:a8:44:96:48:d9:6f:57:78:22:a3:7b:04:9e: ff:d0:c5:ee:ca:b2:5b:91:f6:2b:46:d9:78:25:95: e6:4a:32:68:51:34:dc:2c:3f:49:cf:e4:f1:f3:3e: 94:1a:9e:55:10:c0:06:79:34:53:7d:f9:fe:65:80: c0:09:68:d4:9b:e0:8a:81:cd:6a:26:67:d5:4d:2d: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:CD:E2:F2:FE:80:EB:A6:9D:48:B0:F2:4A:98:9E:5C:A1:B0:68 X509v3 Authority Key Identifier: keyid:38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/1-CvN4vL-gOumnUiw8kqYnlyhsGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.239.192.0-109.239.198.255 109.239.200.0/21 IPv6: 2a00:1b58::/32 Signature Algorithm: sha256WithRSAEncryption 3c:12:10:cb:c8:08:73:4e:d4:3c:4f:e1:1f:f6:e2:ca:3f:21: 61:84:d0:ff:08:6e:a6:45:7c:f5:20:8f:f3:27:f6:8c:1d:18: ac:ee:6b:70:b1:6d:7e:bf:d6:3e:0b:76:24:55:0d:d4:2a:cd: e7:d1:4e:62:e9:76:be:0c:f6:49:92:86:d7:23:1e:69:a2:16: 81:eb:2b:6f:bd:ea:80:57:00:a7:f7:d5:c7:fd:d6:74:5d:a0: f5:9e:5a:b6:97:11:a0:5e:f6:fa:63:51:8c:1a:d1:d9:d7:bc: 7c:fd:0a:7c:64:e6:22:5a:89:15:8d:b1:70:5a:42:84:98:c1: 0b:07:92:6c:e3:33:f1:aa:02:f2:d7:dc:32:79:bb:08:a1:3f: 0d:4e:30:a9:58:08:f5:a3:3f:11:86:05:34:c3:b4:25:86:af: e7:df:2b:04:e9:f4:35:74:31:b0:a0:2c:be:f9:39:48:ed:e7: ea:0f:65:f8:74:42:5c:a3:08:34:8b:ee:11:4a:02:28:79:88: 88:38:58:be:c9:d6:94:84:38:95:4c:2e:15:78:91:19:5a:99: 83:3d:8a:cc:ce:15:b6:11:93:d2:0c:49:15:3d:d3:50:73:02: 3e:ab:a9:d7:32:a6:8d:fc:56:6e:99:aa:7f:a7:79:6b:5d:eb: a3:61:a6:c1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZuTjIai938RK1FjpkEbSLF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmY4NmYyZGJkMDc3NmM0ZTUxOWM5YzlhZTRmYWQwNDI2 ZjM5ZmYwHhcNMjYwMTA2MTM0MzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODJiY2RlMmYyZmU4MGViYTY5ZDQ4YjBmMjRhOTg5ZTVjYTFiMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AtfblmhwQiAZo4GLzlI6VvVnpuO p68r3JZVi9QZWzTJBFj4eeTPRaGQod8ELNMpkUx0oTm6wFd0vWpqKM5aObslLUS3 MEwHBWkjQAVaVsfp58vbMVx+NbtycFzC6ZB3NSungP7tIW0JAY1CD4ihpP/XEPN1 VFbNhWN5RHPgCixYhKTF0h0lq54i36ufEO4F8V0+rBbu16ohj8hdvlOGmCrKehIF 8koFUIGBPi0r4idPKL3BiqhElkjZb1d4IqN7BJ7/0MXuyrJbkfYrRtl4JZXmSjJo UTTcLD9Jz+Tx8z6UGp5VEMAGeTRTffn+ZYDACWjUm+CKgc1qJmfVTS2LxwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPgrzeLy/oDrpp1IsPJKmJ5cobBoMB8GA1UdIwQY MBaAFDgvhvLb0HdsTlGcnJrk+tBCbzn/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0MtRzh0dlFkMnhPVVp5Y211VDYwRUp2T2Y4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wNDc0OGQtOTIzYi00Mjg0LTk2Mjgt MjAzNTYzZjg0NWJiLzEvMS1Ddk40dkwtZ091bW5VaXc4a3FZbmx5aHNHZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjUvMDQ3NDhkLTkyM2ItNDI4NC05NjI4LTIwMzU2M2Y4NDVi Yi8xL09DLUc4dHZRZDJ4T1VaeWNtdVQ2MEVKdk9mOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFDAMAwQGbe/A AwQAbe/GAwQDbe/IMA0EAgACMAcDBQAqABtYMA0GCSqGSIb3DQEBCwUAA4IBAQA8 EhDLyAhzTtQ8T+Ef9uLKPyFhhND/CG6mRXz1II/zJ/aMHRis7mtwsW1+v9Y+C3Yk VQ3UKs3n0U5i6Xa+DPZJkobXIx5pohaB6ytvveqAVwCn99XH/dZ0XaD1nlq2lxGg Xvb6Y1GMGtHZ17x8/Qp8ZOYiWokVjbFwWkKEmMELB5Js4zPxqgLy19wyebsIoT8N TjCpWAj1oz8RhgU0w7Qlhq/n3ysE6fQ1dDGwoCy++TlI7efqD2X4dEJcowg0i+4R SgIoeYiIOFi+ydaUhDiVTC4VeJEZWpmDPYrMzhW2EZPSDEkVPdNQcwI+q6nXMqaN /FZumap/p3lrXeujYabB -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:43 2026 by rpki-client