This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1lUz7Shr8fMa_pb6NtzznyZ41To.roa File: 1lUz7Shr8fMa_pb6NtzznyZ41To.roa (raw, json) Hash identifier: C1rnmJ3xKxL7Gseh79+XfFJXuiu5gmvcrxIosMgQNT4= Subject key identifier: D6:55:33:ED:28:6B:F1:F3:1A:FE:96:FA:36:DC:F3:9F:26:78:D5:3A Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Certificate serial: 019B78A2514D4DF903725B28A9759CE3EE39 Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1lUz7Shr8fMa_pb6NtzznyZ41To.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211970 IP address blocks: 131.117.230.0/24 maxlen: 24 131.117.231.0/24 maxlen: 24 131.117.233.0/24 maxlen: 24 185.21.136.0/24 maxlen: 24 185.21.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:51:4d:4d:f9:03:72:5b:28:a9:75:9c:e3:ee:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d65533ed286bf1f31afe96fa36dcf39f2678d53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:3a:65:23:49:30:04:6d:f9:2a:f9:7e:6c: 26:4b:c8:22:d5:fb:d0:ee:8c:5c:29:f8:40:4e:d4: 2b:db:a2:4b:b6:23:e4:93:c3:a0:cd:47:c7:8a:32: e8:ba:97:97:31:be:0f:d4:a2:71:da:89:a6:20:43: f6:36:7e:6f:4f:67:a3:8d:6e:25:88:e6:48:76:21: dc:89:bf:bd:ca:62:b6:cf:6d:9e:a8:f7:22:5f:2f: c3:ff:04:04:78:ce:17:38:0a:10:45:17:ec:c6:f7: e4:df:92:36:1f:80:fc:f7:de:4c:67:49:94:7c:41: 89:b2:71:ec:81:43:0f:cd:41:9c:f9:6c:8c:0d:bd: fb:15:ac:3f:c9:6c:b8:e0:42:c3:db:f7:8e:6e:04: 73:e1:3e:b4:3f:bd:ab:fc:7e:6a:2c:32:be:75:9a: 9e:c7:e5:73:74:21:a3:47:1d:1d:3e:7f:1e:f9:4a: 2f:13:f7:9d:d5:88:04:df:79:61:7d:fc:f7:b3:77: da:a4:13:c7:0c:5c:78:75:52:7b:cf:f2:f9:f1:9c: d7:7d:fa:1a:1d:f2:02:dc:14:d4:b7:ee:04:cd:bc: a0:e0:dc:eb:31:98:29:d9:67:bc:7b:c9:51:e6:80: eb:ee:27:ce:9e:27:5b:62:46:c6:17:e5:65:2a:67: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:55:33:ED:28:6B:F1:F3:1A:FE:96:FA:36:DC:F3:9F:26:78:D5:3A X509v3 Authority Key Identifier: keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1lUz7Shr8fMa_pb6NtzznyZ41To.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.117.230.0/23 131.117.233.0/24 185.21.136.0/24 185.21.139.0/24 Signature Algorithm: sha256WithRSAEncryption 93:dc:ef:5a:13:f8:ae:39:bc:4f:ca:8d:59:32:31:d9:1c:7f: fd:ea:41:ca:f2:5c:10:f8:ff:5d:39:96:bc:1c:8e:b9:11:4a: d1:17:3c:68:98:35:19:26:23:29:27:47:65:b9:22:5a:ea:84: f0:38:c1:cd:61:55:ca:4f:d3:25:9b:07:85:00:52:36:8f:09: ca:46:81:47:25:25:57:97:28:2c:bc:74:bd:90:c5:98:c7:ee: 4b:1f:8e:fc:66:7c:63:31:a5:dd:f9:0a:1e:c9:0d:ac:a7:8e: 43:3c:a7:e2:07:57:df:d8:42:0a:4e:8d:28:0a:c8:0d:6d:27: e0:6a:ec:16:34:9b:2b:f6:f0:a6:d2:4c:52:13:5b:96:36:94: 4b:d9:40:9f:ee:ae:5d:30:ce:f6:d3:03:09:87:f3:c3:7d:ac: 1f:36:51:3e:b1:ec:8d:34:64:99:b1:6b:98:f0:3b:8c:76:46: 1a:37:a6:60:73:b6:9b:53:4f:8c:66:75:5a:ce:1e:88:03:37: c8:71:10:4e:c6:bb:fb:5e:87:47:86:8a:89:ed:53:e9:4d:8e: 1a:25:41:a9:d5:a7:ae:9f:a5:60:0e:31:d9:7e:61:67:f9:d2: 40:88:24:15:7b:e5:92:85:ba:aa:4e:2f:66:79:a5:4e:b4:43: bd:ae:eb:9d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4olFNTfkDclsoqXWc4+45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx Zjg3YjMwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjU1MzNlZDI4NmJmMWYzMWFmZTk2ZmEzNmRjZjM5ZjI2NzhkNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWE6ZSNJMARt+Sr5fmwmS8gi1fvQ 7oxcKfhATtQr26JLtiPkk8OgzUfHijLoupeXMb4P1KJx2ommIEP2Nn5vT2ejjW4l iOZIdiHcib+9ymK2z22eqPciXy/D/wQEeM4XOAoQRRfsxvfk35I2H4D8995MZ0mU fEGJsnHsgUMPzUGc+WyMDb37Faw/yWy44ELD2/eObgRz4T60P72r/H5qLDK+dZqe x+VzdCGjRx0dPn8e+UovE/ed1YgE33lhffz3s3fapBPHDFx4dVJ7z/L58ZzXffoa HfIC3BTUt+4Ezbyg4NzrMZgp2We8e8lR5oDr7ifOnidbYkbGF+VlKmcmlwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNZVM+0oa/HzGv6W+jbc858meNU6MB8GA1UdIwQY MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz LWFjZTNkNjc1ZDNjZC8xLzFsVXo3U2hyOGZNYV9wYjZOdHp6bnlaNDFUby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMzLWFjZTNkNjc1ZDNj ZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAGDdeYD BACDdekDBAC5FYgDBAC5FYswDQYJKoZIhvcNAQELBQADggEBAJPc71oT+K45vE/K jVkyMdkcf/3qQcryXBD4/105lrwcjrkRStEXPGiYNRkmIyknR2W5IlrqhPA4wc1h VcpP0yWbB4UAUjaPCcpGgUclJVeXKCy8dL2QxZjH7ksfjvxmfGMxpd35Ch7JDayn jkM8p+IHV9/YQgpOjSgKyA1tJ+Bq7BY0myv28KbSTFITW5Y2lEvZQJ/url0wzvbT AwmH88N9rB82UT6x7I00ZJmxa5jwO4x2Rho3pmBztptTT4xmdVrOHogDN8hxEE7G u/teh0eGiontU+lNjholQanVp66fpWAOMdl+YWf50kCIJBV75ZKFuqpOL2Z5pU60 Q72u650= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:27 2026 by rpki-client