This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1-p3GaZwRO9jfKawDJzz47GPuQSc.roa File: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (raw, json) Hash identifier: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ= Subject key identifier: FA:9D:C6:69:9C:11:3B:D8:DF:29:AC:03:27:3C:F8:EC:63:EE:41:27 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019B7BA3C9436B698E1D4C2ECE2557F4767C Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1-p3GaZwRO9jfKawDJzz47GPuQSc.roa Signing time: Thu 01 Jan 2026 22:18:10 +0000 ROA not before: Thu 01 Jan 2026 22:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204234 IP address blocks: 185.110.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c9:43:6b:69:8e:1d:4c:2e:ce:25:57:f4:76:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa9dc6699c113bd8df29ac03273cf8ec63ee4127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:a8:01:f0:4c:10:e8:a5:77:5d:ec:a6:0b: 74:2c:93:83:62:7d:fb:60:82:ad:7b:34:68:4b:59: 48:16:1d:16:a5:17:f1:68:4a:eb:a1:1e:36:8b:b3: a1:cd:e6:d4:69:37:f9:29:1d:70:3d:83:e9:1d:3b: 02:75:88:cc:0c:7d:eb:6e:bb:36:ea:05:66:ca:97: 87:bb:ee:26:26:cb:9a:4d:87:c2:f1:d2:c7:e2:5d: 39:fc:0f:cf:5b:41:f5:ba:3f:d1:c5:09:6f:51:4a: 4a:b1:ac:ef:cd:4a:e6:4c:e8:a2:7e:65:a8:34:74: 26:df:8e:7c:a6:f0:4d:aa:9c:ec:c6:54:00:eb:9f: 04:3c:b6:a4:50:17:e0:0d:a5:80:57:09:09:60:18: 18:ac:b1:dc:4a:f7:d4:40:36:b6:ce:be:a7:bc:43: e2:1d:d3:2c:41:3e:da:f6:f0:f5:76:4f:4a:60:96: 1c:cf:69:42:42:36:c4:72:e3:c6:40:3a:42:bc:ca: 1f:2a:60:95:f8:24:a2:c4:9b:27:ac:2a:ef:18:3e: fc:19:2e:6e:3d:e3:9a:9d:d5:b7:df:bb:9a:65:47: 56:7c:88:8c:e7:22:54:cf:53:fe:08:1f:bd:74:a1: 68:02:95:9b:82:92:7f:33:31:f9:df:87:64:71:bb: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:C6:69:9C:11:3B:D8:DF:29:AC:03:27:3C:F8:EC:63:EE:41:27 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1-p3GaZwRO9jfKawDJzz47GPuQSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.16.0/22 Signature Algorithm: sha256WithRSAEncryption 19:29:f1:29:33:5f:b6:8c:4e:72:56:f4:27:29:31:14:9d:cf: 8e:30:6d:ac:27:85:bd:54:d9:70:5f:84:0e:28:5d:3c:e0:9b: de:dd:76:00:22:37:c4:4a:6d:af:8b:4e:de:3b:58:64:12:31: a2:7f:24:bb:9a:e7:ee:64:c3:66:84:9e:90:f4:86:76:74:80: 25:c3:46:49:96:f5:ca:77:45:b3:19:43:56:9c:a9:9d:ce:66: e9:d6:db:10:a4:52:8e:9a:56:90:ea:da:11:f0:f4:bb:41:9e: b3:ef:26:d9:cc:95:12:9a:dc:0b:95:55:40:85:d2:c9:02:49: 8f:9d:0a:77:d0:44:b5:04:6b:99:f4:e9:b9:f4:47:3d:bb:14: d6:de:fc:77:b4:0f:84:ad:dc:b6:84:a0:fa:87:e5:fe:40:20: 1f:d8:77:17:94:41:74:3d:6c:08:01:54:c8:37:49:12:ce:06: 77:00:8e:f0:4f:74:ac:93:9e:0e:29:96:a1:fb:a9:2a:d8:d7: 31:c1:75:75:d6:62:5b:5e:f3:6b:50:d0:59:6c:5a:de:9c:98: 60:e1:bb:be:45:1f:39:1d:de:9b:7a:3c:b9:17:c4:78:17:07: a0:dd:c1:f3:9d:89:9f:ea:83:ec:74:59:29:6b:4f:d7:40:ad: c8:44:1f:96 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7o8lDa2mOHUwuziVX9HZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTlkYzY2OTljMTEzYmQ4ZGYyOWFjMDMyNzNjZjhlYzYzZWU0MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJyoAfBMEOild13spgt0LJODYn37 YIKtezRoS1lIFh0WpRfxaErroR42i7OhzebUaTf5KR1wPYPpHTsCdYjMDH3rbrs2 6gVmypeHu+4mJsuaTYfC8dLH4l05/A/PW0H1uj/RxQlvUUpKsazvzUrmTOiifmWo NHQm3458pvBNqpzsxlQA658EPLakUBfgDaWAVwkJYBgYrLHcSvfUQDa2zr6nvEPi HdMsQT7a9vD1dk9KYJYcz2lCQjbEcuPGQDpCvMofKmCV+CSixJsnrCrvGD78GS5u PeOandW337uaZUdWfIiM5yJUz1P+CB+9dKFoApWbgpJ/MzH534dkcbtPbwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqdxmmcETvY3ymsAyc8+Oxj7kEnMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvMS1wM0dhWndSTzlqZkthd0RKeno0N0dQdVFTYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzQvYmVhMTRhLTBkMzItNGFhNy1iODk4LWQ2MGIzYjZjY2E2 ZS8xL1dwT2JETzA0MTF6R1B0VU5ibHpuSzd0YlN4QS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArluEDAN BgkqhkiG9w0BAQsFAAOCAQEAGSnxKTNftoxOclb0JykxFJ3PjjBtrCeFvVTZcF+E DihdPOCb3t12ACI3xEptr4tO3jtYZBIxon8ku5rn7mTDZoSekPSGdnSAJcNGSZb1 yndFsxlDVpypnc5m6dbbEKRSjppWkOraEfD0u0Ges+8m2cyVEprcC5VVQIXSyQJJ j50Kd9BEtQRrmfTpufRHPbsU1t78d7QPhK3ctoSg+ofl/kAgH9h3F5RBdD1sCAFU yDdJEs4GdwCO8E90rJOeDimWofupKtjXMcF1ddZiW17za1DQWWxa3pyYYOG7vkUf OR3em3o8uRfEeBcHoN3B852Jn+qD7HRZKWtP10CtyEQflg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:07 2026 by rpki-client