This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/1fdoYbF1BlY10AtHX0oyATlegZU.roa File: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (raw, json) Hash identifier: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4= Subject key identifier: D5:F7:68:61:B1:75:06:56:35:D0:0B:47:5F:4A:32:01:39:5E:81:95 Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955 Certificate serial: 019B797EB9801A40B0C597F9D4E371168BA4 Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/1fdoYbF1BlY10AtHX0oyATlegZU.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210569 IP address blocks: 185.217.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b9:80:1a:40:b0:c5:97:f9:d4:e3:71:16:8b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955 Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f76861b175065635d00b475f4a3201395e8195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:c7:d3:bc:da:99:a7:06:65:e6:07:c3:be: 01:1a:d5:9b:a2:60:4d:2c:9c:78:7e:76:11:36:03: d4:20:49:2e:33:bf:cb:f9:98:0e:a5:b9:b5:bb:8b: bb:74:f6:87:cc:87:84:b3:2b:de:bc:f0:50:0f:7d: 04:4e:ba:ba:9e:8d:70:2c:5b:80:5e:a3:ad:83:6c: 27:18:97:0e:32:d8:ba:3a:ea:05:56:a6:d1:66:6c: 57:68:94:01:21:60:31:fc:39:1d:68:a4:4e:41:89: c5:6c:10:90:e1:96:f1:5d:bc:ee:a2:90:92:f4:14: 9b:94:e9:f2:e9:0f:e2:49:85:b2:94:4a:25:ab:91: 94:b6:ad:15:16:6a:0e:1d:67:58:2f:39:f2:4a:d7: 7f:5b:db:9d:48:c0:5a:2c:96:93:53:cc:24:f6:ec: 03:4e:da:eb:ec:4a:68:54:38:b5:17:be:d0:f1:67: b0:b4:e0:17:67:29:ff:8e:bb:8e:26:dc:01:a5:e4: b6:16:e5:d4:8f:05:ad:59:63:a2:1c:7a:76:7a:63: e0:cb:87:38:42:ac:6f:e9:c8:5c:79:c1:ca:16:ad: 52:1b:41:88:f7:91:4a:54:07:c4:f1:fd:76:04:e1: 9b:ab:de:35:de:78:30:ce:d1:fe:14:13:0d:4e:41: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F7:68:61:B1:75:06:56:35:D0:0B:47:5F:4A:32:01:39:5E:81:95 X509v3 Authority Key Identifier: keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/1fdoYbF1BlY10AtHX0oyATlegZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.30.0/24 Signature Algorithm: sha256WithRSAEncryption 63:18:04:db:02:cb:86:45:eb:cb:58:6c:6c:9f:34:a8:c9:5c: b6:fd:dc:1a:3a:f1:63:99:96:57:0d:28:50:82:b2:43:97:68: 05:7e:e6:7c:4b:43:27:c0:e6:ac:df:40:14:93:ef:e7:87:be: 30:33:f6:ee:d7:2e:0b:47:05:ea:ad:42:46:b0:af:97:db:ab: 0a:28:c8:8c:f9:4d:ea:59:eb:3e:26:20:b8:65:e1:d1:e9:3d: f0:9a:87:39:13:09:63:e8:3e:c3:93:84:08:84:44:2b:d1:0e: 58:05:89:fd:b3:a5:c5:3f:d3:de:51:98:72:77:3d:99:e8:52: 6e:3d:cc:6f:c6:ab:37:c1:91:f5:00:d4:2a:19:96:0f:56:85: 9d:44:87:90:2b:81:67:5e:79:9a:4d:96:39:9b:f8:2c:63:85: aa:69:7c:f7:e6:f0:9b:da:25:65:d9:64:a3:64:67:d8:92:23: 09:0c:61:7d:2b:f1:73:ff:d2:dd:9b:41:5f:01:46:b4:91:a3: 5d:ae:20:eb:32:13:d2:d7:18:fa:3f:7f:0d:49:e4:b7:38:a9: d0:30:87:59:d3:a2:a6:1d:1e:5d:24:3b:19:a6:54:46:30:e6: cd:f7:2b:0a:48:22:ae:2b:85:08:97:11:8e:d2:67:6f:c4:0f: 8a:66:da:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5frmAGkCwxZf51ONxFoukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNGNmOTAzMjljNDdiYTM0M2E2NmNkNjVkMzg4MzNhMzU3 YjU5NTUwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWY3Njg2MWIxNzUwNjU2MzVkMDBiNDc1ZjRhMzIwMTM5NWU4MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra/H07zamacGZeYHw74BGtWbomBN LJx4fnYRNgPUIEkuM7/L+ZgOpbm1u4u7dPaHzIeEsyvevPBQD30ETrq6no1wLFuA XqOtg2wnGJcOMti6OuoFVqbRZmxXaJQBIWAx/DkdaKROQYnFbBCQ4ZbxXbzuopCS 9BSblOny6Q/iSYWylEolq5GUtq0VFmoOHWdYLznyStd/W9udSMBaLJaTU8wk9uwD Ttrr7EpoVDi1F77Q8WewtOAXZyn/jruOJtwBpeS2FuXUjwWtWWOiHHp2emPgy4c4 Qqxv6chcecHKFq1SG0GI95FKVAfE8f12BOGbq9413ngwztH+FBMNTkGPEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNX3aGGxdQZWNdALR19KMgE5XoGVMB8GA1UdIwQY MBaAFKJM+QMpxHujQ6Zs1l04gzo1e1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmIt MzM5ODVkYjgwNDdhLzEvMWZkb1liRjFCbFkxMEF0SFgwb3lBVGxlZ1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmItMzM5ODVkYjgwNDdh LzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudkeMA0G CSqGSIb3DQEBCwUAA4IBAQBjGATbAsuGRevLWGxsnzSoyVy2/dwaOvFjmZZXDShQ grJDl2gFfuZ8S0MnwOas30AUk+/nh74wM/bu1y4LRwXqrUJGsK+X26sKKMiM+U3q Wes+JiC4ZeHR6T3wmoc5Ewlj6D7Dk4QIhEQr0Q5YBYn9s6XFP9PeUZhydz2Z6FJu Pcxvxqs3wZH1ANQqGZYPVoWdRIeQK4FnXnmaTZY5m/gsY4WqaXz35vCb2iVl2WSj ZGfYkiMJDGF9K/Fz/9Ldm0FfAUa0kaNdriDrMhPS1xj6P38NSeS3OKnQMIdZ06Km HR5dJDsZplRGMObN9ysKSCKuK4UIlxGO0mdvxA+KZtqG -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:45 2026 by rpki-client