This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa File: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (raw, json) Hash identifier: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU= Subject key identifier: FA:96:7E:2C:2C:4A:C0:6D:47:AF:82:A7:6E:61:C2:AC:AF:EF:C4:A0 Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Certificate serial: 019B7A5B9C66AD47E3E093CF9F868DBD4532 Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 185.65.124.0/23 maxlen: 24 185.65.125.0/24 maxlen: 24 2a04:f840::/32 maxlen: 40 2a04:f840::/40 maxlen: 40 2a04:f840:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9c:66:ad:47:e3:e0:93:cf:9f:86:8d:bd:45:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa967e2c2c4ac06d47af82a76e61c2acafefc4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:f1:f8:65:b7:45:35:bc:c7:68:50:e4:68: 39:2c:77:e3:5e:26:20:8b:8b:63:fc:c0:5a:2d:8d: ba:6d:8b:c9:92:d6:1f:eb:1a:51:2a:6e:2d:91:74: 8d:6c:56:b2:a9:ad:61:4a:6a:7e:1e:fb:a6:61:90: 06:32:9a:6e:46:8f:73:0c:ed:d0:b4:51:b7:84:a9: ff:51:5e:ea:4a:31:63:f4:36:48:86:88:94:dd:ec: ce:4d:fd:94:60:09:af:3e:ef:a0:e8:b9:3e:86:a8: 04:0a:27:6f:01:6f:a2:d7:58:2e:ec:7a:00:17:4c: 4f:7d:58:24:29:76:9a:67:85:8e:a2:b2:94:ae:72: 02:0e:87:66:3a:9d:a1:63:37:98:36:c7:02:81:96: e6:d7:5b:05:92:8a:f5:00:dc:53:bf:a5:20:b4:00: ba:8f:ce:7a:ec:59:1b:03:ac:4b:84:f5:2a:db:c0: c3:57:89:14:16:4f:50:89:7e:11:1e:13:8b:70:97: 92:c6:3b:70:ce:0b:82:f4:c0:6c:1d:e0:ee:8b:1d: 68:f2:cc:20:80:69:15:de:75:2c:4d:dc:b7:7c:19: 63:fb:bf:76:0e:ed:78:5c:54:85:70:a4:22:70:75: 62:6c:46:c4:16:aa:b6:9e:e8:24:4e:51:f3:1a:c1: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:96:7E:2C:2C:4A:C0:6D:47:AF:82:A7:6E:61:C2:AC:AF:EF:C4:A0 X509v3 Authority Key Identifier: keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.124.0/23 IPv6: 2a04:f840::/32 Signature Algorithm: sha256WithRSAEncryption 17:81:3c:f9:35:3d:51:0d:35:c1:78:6e:cc:7a:d3:6d:0a:3a: aa:07:b5:aa:87:a2:e2:13:42:a7:87:11:93:64:cc:97:39:be: 4a:8a:16:c4:11:c3:27:44:e4:39:47:d8:de:28:b0:85:1c:31: 59:3d:bc:af:30:b4:8d:0c:12:45:a1:33:2f:57:d9:1b:00:62: b9:24:96:0d:66:0f:c2:bd:f0:d5:0e:22:78:6a:d0:3d:ae:3d: ad:35:f4:a3:80:8a:ad:3c:2c:9c:02:0f:09:b0:70:81:fb:d9: e6:e7:da:33:f3:cb:0f:23:40:1b:76:6d:ca:be:c9:ea:57:ac: 0f:9a:2b:c3:34:6d:6a:b2:da:0e:8a:79:e8:e6:a6:cb:0c:24: 8a:42:f7:3e:96:ae:45:7a:77:fc:77:7e:b7:22:a5:8e:4b:26: d6:96:9a:ff:eb:3e:74:19:e1:4a:2a:67:1f:2c:1c:37:bf:b0: e7:54:a8:fb:ec:48:a9:3a:f5:c0:f4:1c:46:ac:bd:1e:54:14: 18:a9:b8:e2:6a:90:57:36:66:22:fe:62:c7:14:4b:1d:bc:26: 32:b1:49:ec:0f:3d:bf:69:ed:d6:36:52:91:06:4f:42:c0:e9: e3:4c:bb:1e:d1:29:cd:a9:8f:c2:76:2d:2e:e3:c3:92:55:cb: 1b:64:d6:6f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6W5xmrUfj4JPPn4aNvUUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjViOWE5MzY4Nzk3YTg2YmFlYmM4MWY2MjNiM2Y0ZTc4 NmY1MWEwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTk2N2UyYzJjNGFjMDZkNDdhZjgyYTc2ZTYxYzJhY2FmZWZjNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTHx+GW3RTW8x2hQ5Gg5LHfjXiYg i4tj/MBaLY26bYvJktYf6xpRKm4tkXSNbFayqa1hSmp+HvumYZAGMppuRo9zDO3Q tFG3hKn/UV7qSjFj9DZIhoiU3ezOTf2UYAmvPu+g6Lk+hqgECidvAW+i11gu7HoA F0xPfVgkKXaaZ4WOorKUrnICDodmOp2hYzeYNscCgZbm11sFkor1ANxTv6UgtAC6 j8567FkbA6xLhPUq28DDV4kUFk9QiX4RHhOLcJeSxjtwzguC9MBsHeDuix1o8swg gGkV3nUsTdy3fBlj+792Du14XFSFcKQicHVibEbEFqq2nugkTlHzGsHR8wIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPqWfiwsSsBtR6+Cp25hwqyv78SgMB8GA1UdIwQY MBaAFIq1uak2h5eoa668gfYjs/TnhvUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDct MjhmZWNjNjMzOThjLzEvMS1wWi1MQ3hLd0cxSHI0S25ibUhDcktfdnhLQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYWMvNjRjNDMxLTUzMzAtNDM3Yi1iMjA3LTI4ZmVjYzYzMzk4 Yy8xL2lyVzVxVGFIbDZocnJyeUI5aU96OU9lRzlSby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAblBfDAN BAIAAjAHAwUAKgT4QDANBgkqhkiG9w0BAQsFAAOCAQEAF4E8+TU9UQ01wXhuzHrT bQo6qge1qoei4hNCp4cRk2TMlzm+SooWxBHDJ0TkOUfY3iiwhRwxWT28rzC0jQwS RaEzL1fZGwBiuSSWDWYPwr3w1Q4ieGrQPa49rTX0o4CKrTwsnAIPCbBwgfvZ5ufa M/PLDyNAG3Ztyr7J6lesD5orwzRtarLaDop56OamywwkikL3PpauRXp3/Hd+tyKl jksm1paa/+s+dBnhSipnHywcN7+w51So++xIqTr1wPQcRqy9HlQUGKm44mqQVzZm Iv5ixxRLHbwmMrFJ7A89v2nt1jZSkQZPQsDp40y7HtEpzamPwnYtLuPDklXLG2TW bw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:10 2026 by rpki-client