This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/1-PcZA739O5jfsTyXtX2e6TIscS4.roa File: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (raw, json) Hash identifier: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I= Subject key identifier: F8:F7:19:03:BD:FD:3B:98:DF:B1:3C:97:B5:7D:9E:E9:32:2C:71:2E Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Certificate serial: 019B79114448E59EEA8384899A21BCD5D4D7 Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/1-PcZA739O5jfsTyXtX2e6TIscS4.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34022 IP address blocks: 193.17.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:44:48:e5:9e:ea:83:84:89:9a:21:bc:d5:d4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8f71903bdfd3b98dfb13c97b57d9ee9322c712e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:ca:a4:d8:62:4d:28:c3:12:fd:d3:15:78: eb:10:c1:dc:fe:70:cd:d7:46:19:b1:68:af:77:8f: 6d:ba:17:4d:66:f6:da:6e:df:55:39:90:ab:c6:f4: b5:1e:43:57:3a:a1:cf:ec:20:9d:60:7a:21:a5:f2: f3:96:4b:ff:f9:57:5b:f1:ce:c8:6e:c7:51:80:e4: f0:85:90:11:51:c9:a1:29:ba:5f:03:b4:92:04:de: 04:ce:1a:b0:98:e8:23:9d:7a:61:d4:4e:1b:8a:c4: cc:51:31:5b:2a:e6:80:a6:ce:24:66:bc:17:03:86: c2:f8:5d:df:2b:4d:80:2b:07:30:8e:fc:9c:91:25: 1f:59:6f:4a:9f:05:5d:58:a3:93:24:38:58:45:f2: bd:e6:f1:b4:6a:8a:6d:9a:2f:e1:a7:2f:55:74:86: e0:74:12:e6:0f:99:e7:f0:89:55:f6:2e:73:f4:f3: c2:c2:7b:b6:f5:86:10:d2:f3:5c:06:70:ff:16:5a: 2e:ae:55:af:81:7c:9a:3e:df:df:06:55:4e:17:6b: 6d:8e:74:01:a8:00:dd:f3:ee:ae:69:15:08:db:d6: f2:f4:f4:e0:43:d6:69:0e:e0:05:41:d1:a9:04:a1: 02:0c:e9:4d:ba:d2:2c:84:87:80:54:5b:8f:ec:af: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:19:03:BD:FD:3B:98:DF:B1:3C:97:B5:7D:9E:E9:32:2C:71:2E X509v3 Authority Key Identifier: keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/1-PcZA739O5jfsTyXtX2e6TIscS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.195.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:4d:4c:e8:74:ae:bb:24:e8:be:e5:76:b5:15:a9:72:0e:f8: 8a:d4:51:29:ce:4c:5e:3a:87:03:53:dd:bc:92:a4:71:6f:66: 37:4b:ae:34:6e:56:d6:16:4a:e4:d5:1c:b3:57:2b:7a:e7:97: 35:a2:c0:76:45:24:be:2b:91:11:bd:f3:f2:34:41:7c:17:62: 69:e3:a2:61:4b:47:2e:96:6c:75:39:93:92:96:c4:ca:90:83: 1a:02:79:f7:f5:e1:1a:21:55:b1:8f:dc:cc:78:89:e7:8e:2a: 69:75:78:8e:1e:66:fb:1d:6d:de:ea:92:7e:ab:e6:5b:50:c0: fa:51:75:48:00:55:f5:26:62:53:07:3f:cb:4e:81:b6:7d:52: b9:3a:60:85:dd:19:cb:b6:8d:13:d1:d5:30:0e:2b:d1:63:96: aa:f5:4d:0d:e8:cb:43:7f:d6:02:f8:eb:da:e3:c1:3a:e8:5e: 01:40:7b:6c:cc:80:d0:98:a6:f4:a1:a4:14:39:92:58:3d:c4: 8f:a0:0c:c7:08:fe:ea:db:69:39:ed:63:2d:c3:f9:28:14:dc: c1:18:7a:9a:3b:32:a1:7b:e6:bf:07:dc:c0:1f:29:9c:ef:cf: d8:d3:0b:8b:b4:af:de:f7:5d:84:15:de:ab:16:71:49:9c:df: c2:87:fd:8c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EURI5Z7qg4SJmiG81dTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm ZmI0YzIwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGY3MTkwM2JkZmQzYjk4ZGZiMTNjOTdiNTdkOWVlOTMyMmM3MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFPKpNhiTSjDEv3TFXjrEMHc/nDN 10YZsWivd49tuhdNZvbabt9VOZCrxvS1HkNXOqHP7CCdYHohpfLzlkv/+Vdb8c7I bsdRgOTwhZARUcmhKbpfA7SSBN4EzhqwmOgjnXph1E4bisTMUTFbKuaAps4kZrwX A4bC+F3fK02AKwcwjvyckSUfWW9KnwVdWKOTJDhYRfK95vG0aoptmi/hpy9VdIbg dBLmD5nn8IlV9i5z9PPCwnu29YYQ0vNcBnD/FlourlWvgXyaPt/fBlVOF2ttjnQB qADd8+6uaRUI29by9PTgQ9ZpDuAFQdGpBKECDOlNutIshIeAVFuP7K+SWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPj3GQO9/TuY37E8l7V9nukyLHEuMB8GA1UdIwQY MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt YzIxMzNkZDgxYjU2LzEvMS1QY1pBNzM5TzVqZnNUeVh0WDJlNlRJc2NTNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjEvZGE0ZTQ2LTJhOTMtNDRhNC1iOGUzLWMyMTMzZGQ4MWI1 Ni8xL1RTLWYxY2loVE55Zk1jUllYTllOdFh6X3RNSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMERwzAN BgkqhkiG9w0BAQsFAAOCAQEADk1M6HSuuyTovuV2tRWpcg74itRRKc5MXjqHA1Pd vJKkcW9mN0uuNG5W1hZK5NUcs1creueXNaLAdkUkviuREb3z8jRBfBdiaeOiYUtH LpZsdTmTkpbEypCDGgJ59/XhGiFVsY/czHiJ544qaXV4jh5m+x1t3uqSfqvmW1DA +lF1SABV9SZiUwc/y06Btn1SuTpghd0Zy7aNE9HVMA4r0WOWqvVNDejLQ3/WAvjr 2uPBOuheAUB7bMyA0Jim9KGkFDmSWD3Ej6AMxwj+6ttpOe1jLcP5KBTcwRh6mjsy oXvmvwfcwB8pnO/P2NMLi7Sv3vddhBXeqxZxSZzfwof9jA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:07 2026 by rpki-client