This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa File: 1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa (raw, json) Hash identifier: 1ej6pOHLYXm5iCXxRsGDztb7+LKciVWjFXVVepkKqLs= Subject key identifier: FA:8A:AA:27:C6:5F:C1:26:28:AC:AC:9E:D4:AE:43:83:91:97:3F:34 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019B7AC7A49D8BE6102E04271AB97A925C74 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43160 IP address blocks: 185.240.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a4:9d:8b:e6:10:2e:04:27:1a:b9:7a:92:5c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8aaa27c65fc12628acac9ed4ae438391973f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:21:f6:f8:05:f4:c6:0e:4c:de:2e:34:48:4e: 28:0a:cb:89:fe:71:c9:04:08:cb:e7:ca:59:b0:ee: 1f:23:19:c4:2c:88:a2:90:92:d5:ef:88:c1:11:e2: ef:e5:f6:2a:0e:1f:2b:77:fe:36:23:07:d9:38:76: e1:8d:11:88:d2:d6:13:c9:6e:38:8c:b6:77:d2:c4: d5:ea:9a:e5:67:de:82:a5:e8:aa:77:13:40:ae:fa: 6f:28:a0:dd:d2:de:c2:ab:d4:0d:cc:a3:9b:c8:b7: f4:8e:76:da:96:af:f2:d7:8c:af:53:ab:50:7d:70: 65:a3:03:6b:46:91:12:16:6e:17:e1:fd:f2:9f:0c: db:a2:97:ab:69:a5:bf:12:93:2c:7c:41:c0:12:12: 70:21:32:c9:7d:11:0b:af:7c:aa:db:93:d0:97:e1: 24:eb:59:dd:c8:af:be:ce:ac:31:d2:1c:81:4a:0a: fc:7c:b9:bb:8f:a6:3e:cd:4e:83:58:34:83:10:87: f2:bd:c5:51:07:c3:99:4c:83:e1:25:0e:5c:52:7c: 30:4d:e9:5f:c9:e9:34:0a:62:77:57:f8:b3:a3:bc: ec:e4:04:d6:ed:87:69:ab:33:fe:9a:7c:d0:f7:6e: a0:64:61:c1:7c:12:d6:ed:50:b2:4c:68:6e:9c:93: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8A:AA:27:C6:5F:C1:26:28:AC:AC:9E:D4:AE:43:83:91:97:3F:34 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/1-oqqJ8ZfwSYorKye1K5Dg5GXPzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.164.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:78:54:8f:57:cf:6e:a1:5a:0e:7a:9e:c0:6d:ef:37:05:39: bc:96:74:a7:3d:e0:9e:91:89:b5:3e:d0:97:fe:ce:31:af:03: 32:33:17:84:3f:58:28:21:0e:39:c4:ff:a6:c2:6e:d7:b6:49: e7:42:6b:b4:26:af:b3:2e:28:11:14:90:38:68:1d:57:e2:cd: 5b:33:c3:af:73:f0:ba:dd:cb:c1:67:1c:b8:2f:0d:e0:55:0a: 4d:ef:0d:4c:8b:7a:8e:0d:4f:a8:1e:0e:38:d9:31:03:36:1a: df:78:61:42:0b:54:2c:bb:ab:30:98:48:1e:62:6d:7a:82:bb: 81:21:d7:d4:2f:be:69:54:41:c3:d8:e1:1d:9b:9b:e4:2f:85: cf:8f:e9:84:4f:bc:35:fb:91:de:b7:d0:39:33:80:7e:a7:ab: 8e:c6:83:df:f2:39:44:44:14:b1:3d:09:a2:83:bc:7d:4e:98: 1f:53:7b:f9:9f:00:6b:20:06:01:19:e3:58:0c:01:5d:e6:65: b9:82:7a:23:32:b8:26:70:11:e5:d7:ed:7e:f7:ee:75:38:18: c0:91:59:93:28:38:ad:c5:61:32:2f:ba:96:7e:ae:a8:1e:b7: 67:fa:a9:38:01:17:da:57:2c:70:3d:78:cf:89:d6:66:62:63: d9:51:ef:31 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x6Sdi+YQLgQnGrl6klx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYThhYWEyN2M2NWZjMTI2MjhhY2FjOWVkNGFlNDM4MzkxOTczZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyH2+AX0xg5M3i40SE4oCsuJ/nHJ BAjL58pZsO4fIxnELIiikJLV74jBEeLv5fYqDh8rd/42IwfZOHbhjRGI0tYTyW44 jLZ30sTV6prlZ96CpeiqdxNArvpvKKDd0t7Cq9QNzKObyLf0jnbalq/y14yvU6tQ fXBlowNrRpESFm4X4f3ynwzboperaaW/EpMsfEHAEhJwITLJfRELr3yq25PQl+Ek 61ndyK++zqwx0hyBSgr8fLm7j6Y+zU6DWDSDEIfyvcVRB8OZTIPhJQ5cUnwwTelf yek0CmJ3V/izo7zs5ATW7YdpqzP+mnzQ926gZGHBfBLW7VCyTGhunJPQZwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqKqifGX8EmKKysntSuQ4ORlz80MB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvMS1vcXFKOFpmd1NZb3JLeWUxSzVEZzVHWFB6US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjUvMTYwZjhmLWRiYWItNDgyZC1iMzljLWFkMmZkYTQ3OTg4 ZS8xL3dPVkpfYzdyQXBFc2lvZEJ5QmFBYTc0WnhFZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnwpDAN BgkqhkiG9w0BAQsFAAOCAQEALXhUj1fPbqFaDnqewG3vNwU5vJZ0pz3gnpGJtT7Q l/7OMa8DMjMXhD9YKCEOOcT/psJu17ZJ50JrtCavsy4oERSQOGgdV+LNWzPDr3Pw ut3LwWccuC8N4FUKTe8NTIt6jg1PqB4OONkxAzYa33hhQgtULLurMJhIHmJteoK7 gSHX1C++aVRBw9jhHZub5C+Fz4/phE+8NfuR3rfQOTOAfqerjsaD3/I5REQUsT0J ooO8fU6YH1N7+Z8AayAGARnjWAwBXeZluYJ6IzK4JnAR5dftfvfudTgYwJFZkyg4 rcVhMi+6ln6uqB63Z/qpOAEX2lcscD14z4nWZmJj2VHvMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:15 2026 by rpki-client