This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-bCc20nJ6fYVq84JSSMV-VJCuWE.roa File: 1-bCc20nJ6fYVq84JSSMV-VJCuWE.roa (raw, json) Hash identifier: AT31EaQ6KlYUL0mY7sw23X8aKJPdpvtFCrfIE9o0cp0= Subject key identifier: F9:B0:9C:DB:49:C9:E9:F6:15:AB:CE:09:49:23:15:F9:52:42:B9:61 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B740F25F18B7EBC47DA211FF939F Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-bCc20nJ6fYVq84JSSMV-VJCuWE.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25508 IP address blocks: 194.179.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b7:40:f2:5f:18:b7:eb:c4:7d:a2:11:ff:93:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9b09cdb49c9e9f615abce09492315f95242b961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:47:57:f0:72:29:87:15:7b:53:25:ba:18: 94:d7:5a:86:da:da:6d:f4:3d:7e:d4:69:54:46:fd: 60:48:8e:5c:7a:78:29:b3:31:9d:f2:7f:b0:ca:6b: 86:a5:99:0d:26:ab:52:f4:23:2f:b6:27:5a:65:b1: 1e:60:73:0b:c6:a7:3b:e2:3a:f4:35:02:51:49:e4: eb:e8:a5:f0:47:91:ef:5e:61:53:50:b1:6c:5a:c1: b4:94:d3:d0:92:5b:f1:0c:7a:6b:5d:29:57:f7:74: e3:db:31:35:2d:b8:84:68:71:c9:72:d5:3b:c9:61: 10:f8:57:3d:97:23:8b:28:f8:dc:bf:e6:bb:91:5f: b5:0f:a9:30:ce:ae:37:9c:c9:aa:f1:a1:66:3a:61: 79:9c:b8:87:4a:fa:6e:ee:42:5b:50:0e:51:0a:a9: 4f:86:1a:c2:6f:b6:ed:93:d5:73:fd:e6:f8:95:56: fb:28:72:2c:d1:d9:bd:5d:63:72:3a:89:16:93:b3: 8b:73:25:a0:b1:f2:47:d2:e8:63:aa:0f:26:cf:00: 8a:2b:4f:35:0f:d8:b2:6e:00:39:f0:f4:36:e1:5c: 6c:75:30:7e:12:8f:e7:a4:c6:96:ba:b7:90:41:24: c7:c6:7c:fe:28:9a:a2:20:59:46:fe:31:8d:d4:ec: 64:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B0:9C:DB:49:C9:E9:F6:15:AB:CE:09:49:23:15:F9:52:42:B9:61 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-bCc20nJ6fYVq84JSSMV-VJCuWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.179.41.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:d0:8b:a5:48:45:6d:7a:ed:c6:0f:d5:d6:69:9f:5c:ee:33: d4:07:d8:a2:9d:f3:2c:01:d4:b8:a9:d8:6b:ad:b2:35:fc:b7: c6:a0:bc:4e:aa:5f:ea:e7:a8:b0:de:91:bd:a1:f0:48:32:92: d9:01:6c:36:92:e8:09:db:dc:90:78:93:cf:ce:1a:e0:9c:7d: 4e:57:6a:cb:1e:d2:dd:80:ef:c5:50:e9:27:3f:f6:57:4b:b6: b5:c0:49:f9:ff:d2:64:28:8f:66:59:5e:26:63:17:1f:c5:11: 97:9a:09:34:a4:5d:c0:89:7a:ba:92:88:5e:4a:f2:18:f3:c2: e2:3b:2b:cd:68:5c:1e:40:1f:f1:00:71:77:da:8a:1c:1f:eb: 5e:2e:a1:32:e8:aa:e5:ff:aa:a2:e4:32:62:e2:e6:ee:46:5d: f8:76:9e:4f:18:54:ad:89:88:76:14:e8:97:a5:a1:f6:59:c2: cf:f0:3b:c9:48:86:0d:11:81:3d:0f:5a:6a:51:8b:ee:5d:c9: 4e:3e:65:11:d9:03:49:d7:fd:3c:90:b7:9b:eb:72:1a:0e:6d: e8:bc:a0:e4:55:1e:41:82:f2:5d:a1:fa:0c:d6:11:26:d1:91: 9c:9c:7f:ad:24:33:fa:22:0d:ff:6f:ff:c5:41:92:83:99:7f: 89:30:ae:38 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FbdA8l8Yt+vEfaIR/5OfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWIwOWNkYjQ5YzllOWY2MTVhYmNlMDk0OTIzMTVmOTUyNDJiOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ9HV/ByKYcVe1MluhiU11qG2tpt 9D1+1GlURv1gSI5cengpszGd8n+wymuGpZkNJqtS9CMvtidaZbEeYHMLxqc74jr0 NQJRSeTr6KXwR5HvXmFTULFsWsG0lNPQklvxDHprXSlX93Tj2zE1LbiEaHHJctU7 yWEQ+Fc9lyOLKPjcv+a7kV+1D6kwzq43nMmq8aFmOmF5nLiHSvpu7kJbUA5RCqlP hhrCb7btk9Vz/eb4lVb7KHIs0dm9XWNyOokWk7OLcyWgsfJH0uhjqg8mzwCKK081 D9iybgA58PQ24VxsdTB+Eo/npMaWureQQSTHxnz+KJqiIFlG/jGN1OxkbwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmwnNtJyen2FavOCUkjFflSQrlhMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvMS1iQ2MyMG5KNmZZVnE4NEpTU01WLVZKQ3VXRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjcvZGNmZDQ4LWM1NGEtNGM3OC1hNGVkLTRiYTJmOGYxZjgz Yi8xL01IOWY0blFLSzIza3czQ2RLV1FSV3p5V2ZhRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKzKTAN BgkqhkiG9w0BAQsFAAOCAQEAD9CLpUhFbXrtxg/V1mmfXO4z1AfYop3zLAHUuKnY a62yNfy3xqC8Tqpf6ueosN6RvaHwSDKS2QFsNpLoCdvckHiTz84a4Jx9Tldqyx7S 3YDvxVDpJz/2V0u2tcBJ+f/SZCiPZlleJmMXH8URl5oJNKRdwIl6upKIXkryGPPC 4jsrzWhcHkAf8QBxd9qKHB/rXi6hMuiq5f+qouQyYuLm7kZd+HaeTxhUrYmIdhTo l6Wh9lnCz/A7yUiGDRGBPQ9aalGL7l3JTj5lEdkDSdf9PJC3m+tyGg5t6Lyg5FUe QYLyXaH6DNYRJtGRnJx/rSQz+iIN/2//xUGSg5l/iTCuOA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:27 2026 by rpki-client