This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/X1Ibpt7T4PrIzZZLBK_vRDfnO38.roa File: X1Ibpt7T4PrIzZZLBK_vRDfnO38.roa (raw, json) Hash identifier: 3khXdYQ181uWA/VGOmOVgQwTl+Xx/QhGXUWVp/Jxm/4= Subject key identifier: 5F:52:1B:A6:DE:D3:E0:FA:C8:CD:96:4B:04:AF:EF:44:37:E7:3B:7F Certificate issuer: /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f Certificate serial: 019B7F841C2E7AFFBA839B0EE30F774810A3 Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/X1Ibpt7T4PrIzZZLBK_vRDfnO38.roa Signing time: Fri 02 Jan 2026 16:22:02 +0000 ROA not before: Fri 02 Jan 2026 16:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199873 IP address blocks: 185.43.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:1c:2e:7a:ff:ba:83:9b:0e:e3:0f:77:48:10:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f521ba6ded3e0fac8cd964b04afef4437e73b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:34:7f:33:b6:7b:cf:a2:a1:b1:a9:de:3f: 0c:fc:51:99:e5:4e:79:07:69:6d:7d:82:f7:a6:86: bc:a7:6a:ef:95:c5:74:51:6f:cf:6a:e1:83:df:ca: 6f:eb:b0:a3:71:11:01:08:f6:d0:af:3c:84:be:36: 73:c1:c1:e8:46:18:0d:d7:c9:18:ec:22:43:61:2a: 7d:35:a7:0c:d7:f9:cd:e7:64:75:25:58:20:52:8f: 4a:a9:d3:03:a8:a4:60:d7:62:68:12:18:99:2a:ae: 2d:6a:9f:cf:f2:bb:62:94:70:99:bb:0f:c5:f9:cc: ad:e9:88:6f:db:c2:c9:22:31:e6:a1:25:8b:ae:82: 26:c6:9e:a6:af:52:c5:34:6d:3e:e6:2d:28:e9:20: ba:c4:bb:5e:c5:27:8c:d7:8a:7b:1d:13:35:36:dd: 3a:25:a2:16:3f:c5:db:64:d6:a9:23:b9:0c:27:71: 01:15:db:13:08:35:40:00:e9:42:01:bc:9a:b6:1b: 9d:c1:20:9c:31:21:bc:f8:1d:18:b5:b9:21:31:d3: fa:62:1f:ab:04:8e:71:6e:93:fe:ef:85:76:78:cd: 97:9d:bc:ba:1a:ea:b6:18:6e:52:ac:37:3f:52:27: ed:2b:8d:1a:fc:55:ba:f2:00:d8:aa:9c:d2:3c:37: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:52:1B:A6:DE:D3:E0:FA:C8:CD:96:4B:04:AF:EF:44:37:E7:3B:7F X509v3 Authority Key Identifier: keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/X1Ibpt7T4PrIzZZLBK_vRDfnO38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.195.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:33:e9:b4:1d:50:12:b6:e1:b3:31:d6:7d:51:bb:08:04:ec: 3f:fa:b3:10:b2:d5:0b:ac:2f:b2:b8:cd:6c:ff:4b:b2:43:b8: fb:85:a2:3c:32:66:50:b3:16:df:7d:9d:d9:f2:05:5b:ac:20: dd:6a:5d:fa:a9:4f:fd:ef:44:bf:3b:6a:a3:8a:ae:65:a4:ef: 24:14:ab:8c:1a:ed:de:b1:c4:e2:ca:e3:e8:ee:78:f8:1f:13: aa:76:fc:90:a7:8a:47:4c:2a:c6:af:d7:e5:81:3d:4d:ad:ba: 69:b0:94:56:74:66:71:6b:23:79:be:cf:4e:34:43:68:a3:e9: 4d:e4:07:48:e0:6d:81:a5:7a:7f:c8:d4:73:21:71:66:0d:da: 92:4d:02:c3:f7:ae:a8:be:8c:c5:fd:f1:5c:66:95:dc:3d:58: 21:c8:5c:4e:ec:f6:e5:8f:20:b2:f9:34:1b:50:1b:93:3c:89: f2:22:f1:81:3a:3b:94:9d:1a:82:7d:c3:33:e3:3e:63:1a:8c: b4:6f:87:d6:d4:a6:92:2e:bb:5a:0e:9c:4c:eb:62:ac:56:de: 7b:2a:01:e6:64:42:5e:8c:1d:31:10:03:ba:28:94:71:2d:04: b2:31:d6:55:c0:0b:d8:b8:27:71:31:bd:7e:18:f0:d1:1c:13: c2:03:60:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hBwuev+6g5sO4w93SBCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZDI3MjFmMmUyYmQwMTFiOGE2ODYwYWQyNTcyYzQwNWMw YjU0MGYwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjUyMWJhNmRlZDNlMGZhYzhjZDk2NGIwNGFmZWY0NDM3ZTczYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLM0fzO2e8+iobGp3j8M/FGZ5U55 B2ltfYL3poa8p2rvlcV0UW/PauGD38pv67CjcREBCPbQrzyEvjZzwcHoRhgN18kY 7CJDYSp9NacM1/nN52R1JVggUo9KqdMDqKRg12JoEhiZKq4tap/P8rtilHCZuw/F +cyt6Yhv28LJIjHmoSWLroImxp6mr1LFNG0+5i0o6SC6xLtexSeM14p7HRM1Nt06 JaIWP8XbZNapI7kMJ3EBFdsTCDVAAOlCAbyathudwSCcMSG8+B0YtbkhMdP6Yh+r BI5xbpP+74V2eM2Xnby6Guq2GG5SrDc/UiftK40a/FW68gDYqpzSPDe1CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9SG6be0+D6yM2WSwSv70Q35zt/MB8GA1UdIwQY MBaAFOnSch8uK9ARuKaGCtJXLEBcC1QPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmRKeUh5NHIwQkc0cG9ZSzBsY3NRRndMVkE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zNjhkZjAtNWM0MS00OWQzLWE5YTkt YzQ1OTAzYzNiMzI5LzEvWDFJYnB0N1Q0UHJJelpaTEJLX3ZSRGZuTzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zNjhkZjAtNWM0MS00OWQzLWE5YTktYzQ1OTAzYzNiMzI5 LzEvNmRKeUh5NHIwQkc0cG9ZSzBsY3NRRndMVkE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSvDMA0G CSqGSIb3DQEBCwUAA4IBAQAKM+m0HVAStuGzMdZ9UbsIBOw/+rMQstULrC+yuM1s /0uyQ7j7haI8MmZQsxbffZ3Z8gVbrCDdal36qU/970S/O2qjiq5lpO8kFKuMGu3e scTiyuPo7nj4HxOqdvyQp4pHTCrGr9flgT1NrbppsJRWdGZxayN5vs9ONENoo+lN 5AdI4G2BpXp/yNRzIXFmDdqSTQLD966ovozF/fFcZpXcPVghyFxO7PbljyCy+TQb UBuTPInyIvGBOjuUnRqCfcMz4z5jGoy0b4fW1KaSLrtaDpxM62KsVt57KgHmZEJe jB0xEAO6KJRxLQSyMdZVwAvYuCdxMb1+GPDRHBPCA2BI -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:20 2026 by rpki-client