This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/1k6LBboYndm8KPxxnHHSfyA330M.roa File: 1k6LBboYndm8KPxxnHHSfyA330M.roa (raw, json) Hash identifier: X46ysx2IUyKm6jXZ7VDJJwqGgs4SwZUKvqkP6KVxSfQ= Subject key identifier: D6:4E:8B:05:BA:18:9D:D9:BC:28:FC:71:9C:71:D2:7F:20:37:DF:43 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B8213BC71560587490F06522F3D3A Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/1k6LBboYndm8KPxxnHHSfyA330M.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400992 IP address blocks: 185.219.7.0/24 maxlen: 24 193.46.217.0/24 maxlen: 24 193.46.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:13:bc:71:56:05:87:49:0f:06:52:2f:3d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d64e8b05ba189dd9bc28fc719c71d27f2037df43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:00:54:fb:9b:25:c9:4d:8f:0d:05:24:2f: 4c:9e:6b:5b:d8:4c:a5:c1:97:1b:db:2f:40:22:6d: 4a:24:d5:b1:84:78:44:9b:85:62:6e:32:fa:a0:6b: 72:20:e2:5a:26:75:6e:b9:94:57:a4:2b:a2:02:eb: 95:f4:fb:12:fd:34:f7:73:46:c1:8f:a1:91:31:ee: 43:68:95:33:5f:1d:8c:af:4d:f2:cb:21:77:19:58: a1:6d:f3:32:90:56:12:4c:1e:3c:45:e5:06:6c:8e: 34:d8:b2:7f:13:7b:23:bb:3a:dd:a8:00:2e:29:5d: 64:65:3d:b7:9d:2d:db:f5:2b:d4:b3:70:6d:42:4d: 84:a0:0f:af:06:40:b7:78:25:65:b5:f6:96:8a:fb: 39:d6:59:a3:83:92:f2:ac:aa:31:87:4e:73:86:78: b7:b4:85:a9:01:cc:bb:e1:ff:14:8e:8a:57:71:f9: 90:96:f8:76:21:7f:07:34:74:2a:2c:67:96:7f:3b: 4b:f5:5d:83:e7:5d:6c:cf:aa:10:97:03:76:e5:f2: 65:0c:98:c5:de:01:8d:67:38:68:5e:f3:3c:39:d9: 71:c0:5a:97:7a:ba:55:0d:d8:70:51:c5:18:e6:32: da:b8:9a:06:46:f6:47:56:df:7f:df:07:47:6d:be: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4E:8B:05:BA:18:9D:D9:BC:28:FC:71:9C:71:D2:7F:20:37:DF:43 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/1k6LBboYndm8KPxxnHHSfyA330M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.7.0/24 193.46.217.0-193.46.218.255 Signature Algorithm: sha256WithRSAEncryption 33:3a:48:7e:e8:f2:1c:23:f9:8f:df:7e:82:af:ae:cb:b3:6d: 76:89:21:67:4f:ee:bf:80:75:5e:f8:b5:55:7c:bb:d3:9c:7c: 2e:ea:6b:02:de:2d:96:b6:62:7c:b3:5b:b9:89:57:bf:89:bf: 9d:5e:7e:e6:cc:91:c9:85:cc:df:a4:a9:3a:8f:3c:b0:d8:e9: 4c:9c:47:64:42:9f:e1:84:73:c4:9b:c9:a4:0d:51:c3:79:9f: 75:b6:91:75:1e:52:b8:88:38:0b:1a:86:90:11:91:b7:4a:66: 69:bd:d8:d2:7e:bb:99:ec:c1:2f:bc:91:cc:0d:15:96:e0:06: 54:b5:cc:a0:6c:05:33:c0:a9:56:91:78:ee:a3:7d:28:24:7f: b5:e4:8a:e5:55:f5:24:b9:84:c6:88:a7:a3:58:55:06:65:5e: e9:37:eb:24:d8:36:fd:3d:58:bd:d1:de:2a:99:25:55:3d:9e: c1:7f:dc:bf:b1:67:87:1f:08:fb:ca:67:47:e6:20:4d:b8:ad: b5:02:3e:6f:f8:07:bc:b4:19:23:74:2c:d5:62:dc:a0:14:c5: 32:38:20:51:77:4c:a1:94:63:fa:78:45:53:3c:86:1f:3c:75: 6c:f2:0d:0a:54:37:56:a1:1e:f4:a6:5e:f0:27:37:c9:10:79: 40:05:29:80 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6W4ITvHFWBYdJDwZSLz06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjRlOGIwNWJhMTg5ZGQ5YmMyOGZjNzE5YzcxZDI3ZjIwMzdkZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydUAVPubJclNjw0FJC9Mnmtb2Eyl wZcb2y9AIm1KJNWxhHhEm4VibjL6oGtyIOJaJnVuuZRXpCuiAuuV9PsS/TT3c0bB j6GRMe5DaJUzXx2Mr03yyyF3GVihbfMykFYSTB48ReUGbI402LJ/E3sjuzrdqAAu KV1kZT23nS3b9SvUs3BtQk2EoA+vBkC3eCVltfaWivs51lmjg5LyrKoxh05zhni3 tIWpAcy74f8UjopXcfmQlvh2IX8HNHQqLGeWfztL9V2D511sz6oQlwN25fJlDJjF 3gGNZzhoXvM8OdlxwFqXerpVDdhwUcUY5jLauJoGRvZHVt9/3wdHbb6QhQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNZOiwW6GJ3ZvCj8cZxx0n8gN99DMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvMWs2TEJib1luZG04S1B4eG5ISFNmeUEzMzBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAudsHMAwD BADBLtkDBADBLtowDQYJKoZIhvcNAQELBQADggEBADM6SH7o8hwj+Y/ffoKvrsuz bXaJIWdP7r+AdV74tVV8u9OcfC7qawLeLZa2YnyzW7mJV7+Jv51efubMkcmFzN+k qTqPPLDY6UycR2RCn+GEc8SbyaQNUcN5n3W2kXUeUriIOAsahpARkbdKZmm92NJ+ u5nswS+8kcwNFZbgBlS1zKBsBTPAqVaReO6jfSgkf7XkiuVV9SS5hMaIp6NYVQZl Xuk36yTYNv09WL3R3iqZJVU9nsF/3L+xZ4cfCPvKZ0fmIE24rbUCPm/4B7y0GSN0 LNVi3KAUxTI4IFF3TKGUY/p4RVM8hh88dWzyDQpUN1ahHvSmXvAnN8kQeUAFKYA= -----END CERTIFICATE-----Generated at Sun Jan 25 11:47:46 2026 by rpki-client