This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa File: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (raw, json) Hash identifier: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw= Subject key identifier: F9:6E:C8:CC:4D:1D:FD:E4:25:D3:F2:EE:55:00:FD:5F:5F:12:90:9E Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC1C022130618EDBBEBAB2438410F Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202228 IP address blocks: 94.240.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c1:c0:22:13:06:18:ed:bb:eb:ab:24:38:41:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f96ec8cc4d1dfde425d3f2ee5500fd5f5f12909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:e1:87:75:9b:95:9e:5a:59:d1:f4:f0:55: 7d:33:84:70:50:93:94:c8:09:60:e0:9b:fc:d7:8e: 82:4d:f9:68:e6:8f:20:83:86:17:03:2e:46:3a:cc: 19:7c:2f:81:f5:b3:70:e7:74:76:95:36:c4:89:6e: 3f:b6:b4:19:3d:97:da:c8:97:61:a4:40:e5:ab:67: a5:f4:dd:d2:86:19:a2:a6:f5:93:34:8a:31:d1:28: 3b:70:b8:a1:b6:78:66:c1:58:33:32:5e:e9:f3:39: 71:40:60:cb:71:6c:5e:9a:fc:55:ad:a4:14:d0:3c: 62:59:ce:7a:53:6e:c8:bc:16:ea:ba:4a:8d:19:29: 2f:ad:01:d3:8a:3a:d6:30:0c:00:82:54:a0:82:6b: b8:89:2d:52:59:d5:6f:ba:c0:38:fb:ff:67:c4:a2: 55:7f:e0:59:af:b7:96:d1:e7:84:38:5a:06:66:7b: dc:de:d7:f3:9f:32:25:1e:a5:b7:98:1f:d3:04:0c: fb:f3:30:a8:56:85:af:71:65:fe:de:8c:6b:25:5a: 33:f3:c0:ce:6b:dc:05:5c:d1:9c:95:e3:fb:23:c2: 25:3c:cd:81:40:69:4d:04:21:ef:59:ed:0d:67:30: 3d:8f:40:cd:cf:a4:69:65:a2:81:ec:5d:c9:21:1d: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:C8:CC:4D:1D:FD:E4:25:D3:F2:EE:55:00:FD:5F:5F:12:90:9E X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.16.0/22 Signature Algorithm: sha256WithRSAEncryption 30:49:23:f3:d8:f9:69:cb:0f:bd:82:92:2e:fb:9f:31:f6:9b: 3b:41:65:11:37:24:58:2f:29:28:44:6c:38:09:05:b6:6e:58: 17:66:8e:cb:77:0c:05:94:cb:2f:8c:4c:84:91:c4:47:ae:74: 54:89:7e:a7:f9:6d:cf:0c:79:ec:cc:5c:2e:56:e8:08:ff:b1: 5e:71:1f:7d:e4:d1:3b:ec:e1:6a:a9:f5:1c:14:51:3e:81:c7: 76:6b:f2:29:c9:eb:2f:32:c7:4f:41:64:91:75:77:a3:8f:e1: ee:f7:e8:a5:4d:89:cb:cd:77:e4:ab:60:6b:94:95:22:ef:45: 1e:dd:f5:04:8f:72:0b:c9:9c:23:8d:aa:a5:4a:43:cc:a5:2b: ee:47:7f:56:a5:12:b4:69:bb:26:e1:e3:e6:ea:76:9e:8e:fe: 48:9e:c6:d4:62:c2:94:2f:2e:e6:d5:22:3a:c9:88:7c:b4:77: 5a:7c:6c:9d:bb:a9:17:d7:d3:52:26:27:c9:95:8a:10:d4:93: 94:3d:5b:95:9a:3f:70:d0:bb:27:7f:44:0c:8d:76:06:44:01: 0a:92:e9:1f:92:42:9b:74:e6:77:da:92:3b:dc:f0:b8:6e:33: ea:44:e5:84:cf:62:ec:9d:d5:c8:96:be:f4:9a:3f:e8:97:95: 8a:f6:0c:4d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57MHAIhMGGO2766skOEEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTZlYzhjYzRkMWRmZGU0MjVkM2YyZWU1NTAwZmQ1ZjVmMTI5MDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8fhh3WblZ5aWdH08FV9M4RwUJOU yAlg4Jv8146CTflo5o8gg4YXAy5GOswZfC+B9bNw53R2lTbEiW4/trQZPZfayJdh pEDlq2el9N3ShhmipvWTNIox0Sg7cLihtnhmwVgzMl7p8zlxQGDLcWxemvxVraQU 0DxiWc56U27IvBbqukqNGSkvrQHTijrWMAwAglSggmu4iS1SWdVvusA4+/9nxKJV f+BZr7eW0eeEOFoGZnvc3tfznzIlHqW3mB/TBAz78zCoVoWvcWX+3oxrJVoz88DO a9wFXNGcleP7I8IlPM2BQGlNBCHvWe0NZzA9j0DNz6RpZaKB7F3JIR25JQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPluyMxNHf3kJdPy7lUA/V9fEpCeMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvMS1XN0l6RTBkX2VRbDBfTHVWUUQ5WDE4U2tKNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjEvY2RkZGQ1LTgxN2EtNDExMy04YjgyLTIzMDQ5ZTRkMmYx Mi8xL05Sb3YxdlhscjRmVnpxQ1ZCbS04dzlQbFJxUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl7wEDAN BgkqhkiG9w0BAQsFAAOCAQEAMEkj89j5acsPvYKSLvufMfabO0FlETckWC8pKERs OAkFtm5YF2aOy3cMBZTLL4xMhJHER650VIl+p/ltzwx57MxcLlboCP+xXnEffeTR O+zhaqn1HBRRPoHHdmvyKcnrLzLHT0FkkXV3o4/h7vfopU2Jy8135Ktga5SVIu9F Ht31BI9yC8mcI42qpUpDzKUr7kd/VqUStGm7JuHj5up2no7+SJ7G1GLClC8u5tUi OsmIfLR3WnxsnbupF9fTUiYnyZWKENSTlD1blZo/cNC7J39EDI12BkQBCpLpH5JC m3Tmd9qSO9zwuG4z6kTlhM9i7J3VyJa+9Jo/6JeVivYMTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:34 2026 by rpki-client