This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/A1vffGiVRzHhktAh8WauFDp_PGs.roa File: A1vffGiVRzHhktAh8WauFDp_PGs.roa (raw, json) Hash identifier: FvQNZ1PqCG0U2r5llLhZQlQ9+6yvMXP+Ib7zL2wgnX4= Subject key identifier: 03:5B:DF:7C:68:95:47:31:E1:92:D0:21:F1:66:AE:14:3A:7F:3C:6B Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc Certificate serial: 019B7A5AF093E5AC520FDF749DA70E4CA3F9 Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/A1vffGiVRzHhktAh8WauFDp_PGs.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33970 IP address blocks: 185.45.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f0:93:e5:ac:52:0f:df:74:9d:a7:0e:4c:a3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=035bdf7c68954731e192d021f166ae143a7f3c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:bc:a9:dc:22:d1:b6:b4:3d:cb:17:31:02: 1d:ca:d4:97:59:eb:bb:2b:50:49:42:bd:7d:b7:28: 7f:e4:ca:f4:3c:f4:a3:f9:01:f7:12:35:8d:f9:3d: b3:fc:e6:29:48:5f:42:f9:1e:84:97:45:54:bb:1f: d7:74:e1:4a:04:2a:ce:39:33:80:b7:b3:fd:3b:f7: bc:32:d2:fa:17:b7:5b:d0:fd:f9:81:42:49:bf:cf: 70:ce:19:e6:80:69:c4:5a:ac:3d:0d:14:e9:de:28: d3:40:c5:64:7a:53:df:92:38:bf:fb:ad:92:82:9b: ed:60:d7:e8:34:99:a3:d5:37:73:f9:31:1e:87:c9: d6:9a:21:f9:99:7e:09:11:bb:11:11:80:7b:18:f5: 5e:6a:4d:2a:48:4d:2a:b9:6d:8e:c1:dd:60:c7:59: 58:06:f3:90:26:3b:5e:7b:8c:73:ee:73:fd:7b:3e: ff:fd:7f:df:73:0c:e7:f6:fc:15:46:c3:b8:91:0c: 35:ed:e8:67:24:8c:a2:70:fa:80:e8:fc:64:50:9b: 8d:81:e8:4b:40:cd:a0:32:71:01:af:33:f1:e4:1b: 20:df:dc:68:fc:72:bd:a6:87:d4:a2:c0:74:19:52: 2d:8c:24:55:f0:00:8d:81:e8:01:c2:7c:0e:7b:2f: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5B:DF:7C:68:95:47:31:E1:92:D0:21:F1:66:AE:14:3A:7F:3C:6B X509v3 Authority Key Identifier: keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/A1vffGiVRzHhktAh8WauFDp_PGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.15.0/24 Signature Algorithm: sha256WithRSAEncryption 46:d9:16:52:b5:6a:7a:bb:7f:dd:93:19:31:63:8a:22:9b:4b: 68:72:ac:fd:25:8d:86:13:a4:d0:2f:93:5d:68:53:e2:f0:20: 2c:2d:d5:b4:2d:86:c4:c1:0f:f7:30:ec:34:10:60:57:d2:90: a2:96:08:1f:e5:c7:bb:e0:b5:cb:15:13:55:08:05:65:a7:93: fe:30:15:99:0d:71:03:4e:bb:e9:af:9b:1d:e8:ed:6c:17:6a: ca:b0:a6:19:d8:b6:12:b9:27:1f:4d:ab:8e:47:d6:bc:97:c4: 89:e9:0e:d7:6d:ea:82:98:5c:4e:a9:9b:7b:d3:fb:ba:11:2c: db:fd:1d:57:98:d3:b6:9e:b5:c1:e8:8b:82:09:5a:87:c4:7d: 30:c7:7c:f0:8f:63:d6:13:d0:de:4d:55:af:8f:1c:f1:3e:bd: e1:d2:dd:13:e1:67:bc:3f:e5:83:32:e4:e4:78:ab:17:e9:bb: 52:fb:aa:e1:39:e7:d0:c7:96:ef:72:93:89:2b:8f:74:c8:74: 34:a8:c6:5b:a1:4e:ea:bf:3e:d9:8d:a5:fb:48:b1:d1:7b:20: 55:f8:bd:80:c1:b3:cd:94:c6:a0:18:54:85:ce:b7:50:29:cd: d3:2c:bc:2b:42:f9:2d:2a:8f:8c:5d:51:2d:56:b5:f1:de:09: 73:69:15:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvCT5axSD990nacOTKP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDhlY2I5ZjM0YzFmYmMzZjM1ODk3MTBhYjNlMzQ5ZmM2 Mjk1Y2MwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzViZGY3YzY4OTU0NzMxZTE5MmQwMjFmMTY2YWUxNDNhN2YzYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcG8qdwi0ba0PcsXMQIdytSXWeu7 K1BJQr19tyh/5Mr0PPSj+QH3EjWN+T2z/OYpSF9C+R6El0VUux/XdOFKBCrOOTOA t7P9O/e8MtL6F7db0P35gUJJv89wzhnmgGnEWqw9DRTp3ijTQMVkelPfkji/+62S gpvtYNfoNJmj1Tdz+TEeh8nWmiH5mX4JEbsREYB7GPVeak0qSE0quW2Owd1gx1lY BvOQJjtee4xz7nP9ez7//X/fcwzn9vwVRsO4kQw17ehnJIyicPqA6PxkUJuNgehL QM2gMnEBrzPx5Bsg39xo/HK9pofUosB0GVItjCRV8ACNgegBwnwOey9rCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANb33xolUcx4ZLQIfFmrhQ6fzxrMB8GA1UdIwQY MBaAFOII7LnzTB+8PzWJcQqz40n8YpXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTIt MWNhNzM5YmIwMGNjLzEvQTF2ZmZHaVZSekhoa3RBaDhXYXVGRHBfUEdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTItMWNhNzM5YmIwMGNj LzEvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS0PMA0G CSqGSIb3DQEBCwUAA4IBAQBG2RZStWp6u3/dkxkxY4oim0tocqz9JY2GE6TQL5Nd aFPi8CAsLdW0LYbEwQ/3MOw0EGBX0pCilggf5ce74LXLFRNVCAVlp5P+MBWZDXED Trvpr5sd6O1sF2rKsKYZ2LYSuScfTauOR9a8l8SJ6Q7XbeqCmFxOqZt70/u6ESzb /R1XmNO2nrXB6IuCCVqHxH0wx3zwj2PWE9DeTVWvjxzxPr3h0t0T4We8P+WDMuTk eKsX6btS+6rhOefQx5bvcpOJK490yHQ0qMZboU7qvz7ZjaX7SLHReyBV+L2AwbPN lMagGFSFzrdQKc3TLLwrQvktKo+MXVEtVrXx3glzaRVq -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:04 2026 by rpki-client