This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1ms-U7GStIQWyhBvk39Pmz4mWvA.roa File: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (raw, json) Hash identifier: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM= Subject key identifier: D6:6B:3E:53:B1:92:B4:84:16:CA:10:6F:93:7F:4F:9B:3E:26:5A:F0 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D19FA751FE37CAA902780D4B6C856 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1ms-U7GStIQWyhBvk39Pmz4mWvA.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21026 IP address blocks: 193.188.250.0/24 maxlen: 25 194.8.96.0/19 maxlen: 25 194.145.64.0/19 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:19:fa:75:1f:e3:7c:aa:90:27:80:d4:b6:c8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d66b3e53b192b48416ca106f937f4f9b3e265af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:28:b5:90:4e:8c:8f:59:3d:5a:c8:18:5d: 5b:dc:38:2a:ca:bd:6b:1a:1e:f6:c9:75:cb:68:2e: 7b:3a:6b:49:2e:56:10:f7:ee:d1:68:46:17:87:b3: 57:28:57:8a:21:b7:01:2f:5b:38:dd:cd:1d:07:a7: b3:55:87:9b:8f:85:1b:d1:8d:fb:65:6e:99:2a:67: b0:fd:dd:4b:94:7a:fb:74:67:38:93:6e:0e:37:2b: ec:d5:97:69:f5:f0:05:50:eb:77:eb:63:45:9b:1f: 70:78:1e:55:cd:5a:4f:bc:26:b5:af:1c:2a:f7:8d: d0:2a:6b:c5:c4:8b:5d:35:70:ee:88:88:ad:38:7c: 96:d6:c8:1e:f9:df:76:94:10:c4:82:cf:60:02:2a: 5c:fa:2e:f6:37:af:38:39:47:85:08:85:c7:a1:bf: ae:ae:eb:32:67:ff:a4:c0:92:39:38:3b:f2:74:1d: a3:d2:e8:e4:50:99:0f:83:5a:fe:a1:28:cd:0c:ab: 73:c4:fa:20:6d:88:fa:be:16:a8:ac:00:3f:7e:62: 36:6c:f9:45:04:f8:e2:de:1d:1e:0e:5e:91:b7:8f: 18:13:f3:cb:ef:b6:11:21:ca:28:3f:bc:69:de:08: ed:54:fe:4f:95:50:62:70:63:fe:e3:e6:80:59:48: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6B:3E:53:B1:92:B4:84:16:CA:10:6F:93:7F:4F:9B:3E:26:5A:F0 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/1ms-U7GStIQWyhBvk39Pmz4mWvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.250.0/24 194.8.96.0/19 194.145.64.0/19 Signature Algorithm: sha256WithRSAEncryption 86:a6:34:1e:ca:3c:17:ef:70:0e:5d:1d:39:c1:55:fd:c1:08: be:8b:5e:f5:ab:6d:7f:c8:9c:01:59:c0:d3:11:84:ed:0f:25: 96:db:21:6c:92:6c:17:4f:d9:ad:86:83:6b:cc:02:46:ae:b6: 95:b5:0e:84:52:ec:8f:1c:ad:54:f1:e3:0b:99:04:cb:87:07: 30:18:95:aa:b0:bf:75:30:1b:2b:e1:3e:30:80:ab:fc:c7:0a: 50:67:40:7d:e6:df:70:25:85:cb:b2:6b:b5:73:92:4c:ec:3b: a8:d5:48:b3:17:c8:d1:36:ad:40:65:16:f7:d6:95:80:ab:c7: b8:2c:37:be:47:4a:4c:bf:1b:9b:c2:4c:ce:54:bc:6f:1d:c6: bb:63:11:13:06:1b:b8:32:cb:ba:c7:99:d3:34:86:16:20:2c: 5f:ac:9c:a8:59:8a:69:80:01:d7:01:05:1a:a8:6c:92:df:fc: 36:57:e4:e1:e3:e9:e7:cd:5a:27:aa:1a:43:96:90:6d:a9:86: 93:de:28:5e:b1:29:4f:fa:db:bd:05:25:86:da:99:f5:89:37: 41:fd:dc:7e:ba:56:6c:73:05:1c:22:dc:f6:83:93:ff:c1:91: 9f:09:01:d4:4a:dc:1c:53:4f:78:58:c6:99:48:33:37:55:f1: 7d:26:d0:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XRn6dR/jfKqQJ4DUtshWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjZiM2U1M2IxOTJiNDg0MTZjYTEwNmY5MzdmNGY5YjNlMjY1YWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVootZBOjI9ZPVrIGF1b3Dgqyr1r Gh72yXXLaC57OmtJLlYQ9+7RaEYXh7NXKFeKIbcBL1s43c0dB6ezVYebj4Ub0Y37 ZW6ZKmew/d1LlHr7dGc4k24ONyvs1Zdp9fAFUOt362NFmx9weB5VzVpPvCa1rxwq 943QKmvFxItdNXDuiIitOHyW1sge+d92lBDEgs9gAipc+i72N684OUeFCIXHob+u rusyZ/+kwJI5ODvydB2j0ujkUJkPg1r+oSjNDKtzxPogbYj6vhaorAA/fmI2bPlF BPji3h0eDl6Rt48YE/PL77YRIcooP7xp3gjtVP5PlVBicGP+4+aAWUhO0QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNZrPlOxkrSEFsoQb5N/T5s+JlrwMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvMW1zLVU3R1N0SVFXeWhCdmszOVBtejRtV3ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwbz6AwQF wghgAwQFwpFAMA0GCSqGSIb3DQEBCwUAA4IBAQCGpjQeyjwX73AOXR05wVX9wQi+ i171q21/yJwBWcDTEYTtDyWW2yFskmwXT9mthoNrzAJGrraVtQ6EUuyPHK1U8eML mQTLhwcwGJWqsL91MBsr4T4wgKv8xwpQZ0B95t9wJYXLsmu1c5JM7Duo1UizF8jR Nq1AZRb31pWAq8e4LDe+R0pMvxubwkzOVLxvHca7YxETBhu4Msu6x5nTNIYWICxf rJyoWYppgAHXAQUaqGyS3/w2V+Th4+nnzVonqhpDlpBtqYaT3ihesSlP+tu9BSWG 2pn1iTdB/dx+ulZscwUcItz2g5P/wZGfCQHUStwcU094WMaZSDM3VfF9JtDh -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:36 2026 by rpki-client