This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-gwT16EEMsu_uMjVXM4nBxgiNg4.roa File: 1-gwT16EEMsu_uMjVXM4nBxgiNg4.roa (raw, json) Hash identifier: jP4dtt8bvddiaRKxXag7Ygi+Tv1TcafpgZ5sQv3Ixj8= Subject key identifier: FA:0C:13:D7:A1:04:32:CB:BF:B8:C8:D5:5C:CE:27:07:18:22:36:0E Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAE63DD77843F70052A6709BCAA3C8 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-gwT16EEMsu_uMjVXM4nBxgiNg4.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 983 IP address blocks: 188.253.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e6:3d:d7:78:43:f7:00:52:a6:70:9b:ca:a3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa0c13d7a10432cbbfb8c8d55cce27071822360e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:63:f7:18:91:98:97:24:08:09:9c:7f:d5: dc:e4:e5:4e:78:9e:f2:df:55:8b:63:0f:4d:83:61: 9d:24:d4:be:bb:00:e1:32:53:4c:90:8f:7b:ac:6c: 44:b0:72:2b:4a:79:fb:83:0f:72:75:1f:9b:cc:69: f3:f5:f5:4c:31:aa:d7:62:33:ee:ff:be:5a:52:9b: f6:01:12:84:a7:da:26:32:14:41:c4:9e:ec:d4:29: ab:af:bb:36:bd:7c:0c:4d:a3:98:2b:86:b8:5c:32: 68:16:24:f8:8e:8a:09:1f:f2:70:05:91:0f:90:26: e3:1f:b3:66:11:e4:69:16:96:30:b0:7c:ad:f3:9a: a2:8a:95:03:98:1e:c3:c5:50:ba:70:db:8a:96:b7: b3:e0:a4:8f:9d:6f:25:e1:a5:9c:e4:ba:25:bc:12: 15:f1:31:57:17:34:7c:27:9a:10:56:8b:ea:c1:5a: ca:89:4e:ec:a8:df:f6:4b:17:de:b7:31:41:a1:3e: ed:01:3d:f3:cf:7a:b0:3b:67:01:06:a4:36:c2:3b: 55:38:3e:5b:0c:08:28:cb:7e:ae:1c:e3:75:0f:37: 66:06:a6:58:c2:1e:8d:92:c5:42:04:c0:a2:ee:cb: 7c:94:88:40:90:9c:a2:12:d4:c8:d2:be:cf:c5:07: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0C:13:D7:A1:04:32:CB:BF:B8:C8:D5:5C:CE:27:07:18:22:36:0E X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-gwT16EEMsu_uMjVXM4nBxgiNg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.253.12.0/23 Signature Algorithm: sha256WithRSAEncryption c9:df:62:25:3b:32:8a:28:9a:2e:be:ee:28:de:1d:4a:14:f2: 70:d6:fc:62:d4:e4:5d:9f:79:69:af:43:12:ec:e8:15:4f:ba: 16:5a:5d:ac:8a:c5:63:4e:e5:48:9a:62:27:ee:98:ac:92:21: bf:03:3e:9b:98:45:f2:eb:d3:e8:f2:39:fb:12:e4:e9:da:d4: ce:a8:22:7b:51:92:ed:ca:5c:e7:f7:90:81:d1:fd:29:47:0a: 4a:cf:71:c3:04:27:8e:a1:b2:58:1e:86:16:bb:41:18:14:67: db:7e:9f:1a:11:fd:1a:d0:96:af:23:05:b1:a7:a6:fa:33:b5: e2:ca:ad:e3:ac:c0:6c:6e:0e:5e:51:5e:29:76:97:5f:17:4d: 87:5b:e8:fd:dc:fe:9a:37:e7:66:8e:f0:a7:01:0d:45:f2:52: cf:68:cb:ba:28:50:f8:0d:c3:4f:95:ab:69:85:73:0c:4f:af: 19:5a:be:f3:49:fc:02:5f:f1:9c:35:f1:9e:4c:9e:8c:22:69: ee:91:37:96:54:88:b2:90:3d:3e:a0:fd:fe:00:70:e4:64:36: 1c:78:7b:a4:4d:5f:ef:8a:98:3a:54:e2:3e:85:84:3b:84:ab: ea:ef:02:40:5b:cd:b8:ff:ac:1c:80:5d:96:cf:3e:f0:7c:b2: 49:21:9f:e7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26uY913hD9wBSpnCbyqPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTBjMTNkN2ExMDQzMmNiYmZiOGM4ZDU1Y2NlMjcwNzE4MjIzNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lBj9xiRmJckCAmcf9Xc5OVOeJ7y 31WLYw9Ng2GdJNS+uwDhMlNMkI97rGxEsHIrSnn7gw9ydR+bzGnz9fVMMarXYjPu /75aUpv2ARKEp9omMhRBxJ7s1Cmrr7s2vXwMTaOYK4a4XDJoFiT4jooJH/JwBZEP kCbjH7NmEeRpFpYwsHyt85qiipUDmB7DxVC6cNuKlrez4KSPnW8l4aWc5LolvBIV 8TFXFzR8J5oQVovqwVrKiU7sqN/2SxfetzFBoT7tAT3zz3qwO2cBBqQ2wjtVOD5b DAgoy36uHON1DzdmBqZYwh6NksVCBMCi7st8lIhAkJyiEtTI0r7PxQeNFQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoME9ehBDLLv7jI1VzOJwcYIjYOMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvMS1nd1QxNkVFTXN1X3VNalZYTTRuQnhnaU5nNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1 Ni8xL0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbz9DDAN BgkqhkiG9w0BAQsFAAOCAQEAyd9iJTsyiiiaLr7uKN4dShTycNb8YtTkXZ95aa9D EuzoFU+6FlpdrIrFY07lSJpiJ+6YrJIhvwM+m5hF8uvT6PI5+xLk6drUzqgie1GS 7cpc5/eQgdH9KUcKSs9xwwQnjqGyWB6GFrtBGBRn236fGhH9GtCWryMFsaem+jO1 4sqt46zAbG4OXlFeKXaXXxdNh1vo/dz+mjfnZo7wpwENRfJSz2jLuihQ+A3DT5Wr aYVzDE+vGVq+80n8Al/xnDXxnkyejCJp7pE3llSIspA9PqD9/gBw5GQ2HHh7pE1f 74qYOlTiPoWEO4Sr6u8CQFvNuP+sHIBdls8+8HyySSGf5w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:50 2026 by rpki-client