This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1-4comhwHdavycedG5af_NJHeVMI.roa File: 1-4comhwHdavycedG5af_NJHeVMI.roa (raw, json) Hash identifier: 5qWlsLXDCrFmr9a26dr0gVGLlb4iZ7b+LmGljRk0f8M= Subject key identifier: FB:87:28:9A:1C:07:75:AB:F2:71:E7:46:E5:A7:FF:34:91:DE:54:C2 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B36162A4A79D494924CCF62CD403F06 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1-4comhwHdavycedG5af_NJHeVMI.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213240 IP address blocks: 188.215.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:16:2a:4a:79:d4:94:92:4c:cf:62:cd:40:3f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb87289a1c0775abf271e746e5a7ff3491de54c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:71:09:66:18:8d:3f:74:ac:d3:26:21:81: 32:48:cb:f5:ac:a9:6d:96:87:23:c9:43:f3:cb:cc: 36:74:de:cf:78:d1:3d:f0:65:12:6a:30:e0:47:5f: 3d:07:27:a5:4c:dc:b2:7f:58:da:ad:1e:6c:cf:4d: a7:0b:d0:da:91:49:70:0c:40:32:69:c2:a5:c6:87: fd:64:00:36:0a:fa:e3:12:5f:7b:56:be:f5:34:4b: d9:07:05:fc:67:c3:02:ac:4f:bb:f0:4d:8e:0c:59: f8:e3:ba:71:23:2f:dc:a3:38:44:da:bc:50:8b:a5: 9a:27:34:f9:a8:ef:56:16:76:21:8a:1f:01:54:71: f2:bf:8c:60:74:88:89:af:06:ff:f9:8c:e7:59:8c: 33:96:b7:84:51:da:4d:ea:ba:c8:f2:23:9e:2a:0d: c6:04:7b:c6:cb:7a:da:fe:ff:08:53:5a:0d:f1:48: 2d:65:11:a1:0f:cb:fd:0b:3f:4c:b4:fd:80:5c:61: ba:13:bd:ec:7a:0e:f3:3b:d5:a2:15:b0:d4:56:1d: f8:04:8d:9b:49:6d:17:a4:b8:f9:9c:09:7f:b4:9e: 0e:57:f5:4f:59:dd:0f:4a:10:95:30:3b:0c:ee:00: 0f:5c:ba:d3:70:80:2d:b1:bb:27:55:3c:81:3f:f2: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:87:28:9A:1C:07:75:AB:F2:71:E7:46:E5:A7:FF:34:91:DE:54:C2 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1-4comhwHdavycedG5af_NJHeVMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.215.246.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a3:c5:8a:af:f4:12:84:72:a1:cc:23:ef:13:7c:5f:9a:af: a0:9a:f2:26:cf:a8:78:f0:01:35:69:82:a5:8f:da:38:05:9b: 17:63:84:5d:e7:9b:77:2a:a6:05:06:2a:d7:7f:e0:9a:6d:3c: 98:91:79:d4:c2:ca:ed:e7:68:15:2a:e0:25:8b:80:71:d1:e9: d7:fa:54:0c:9c:8c:ac:f1:44:68:48:41:57:96:ed:2f:f1:eb: 2e:93:52:cc:2d:c1:6e:da:61:3c:d1:dd:0c:31:82:1c:9c:84: 08:65:c6:81:fa:a1:63:04:62:6b:6a:72:78:6b:59:57:4e:99: 62:3f:b7:6f:f7:49:4c:5b:40:b8:f5:cb:aa:d7:ff:61:9a:c7: f1:4a:47:32:75:e3:55:a0:dc:0e:6a:e4:25:11:9e:05:52:bd: e6:ae:bd:75:a6:c0:d3:44:15:a3:98:b4:21:ff:1e:e2:e8:f9: 9a:9f:b9:cd:0d:49:b0:2f:ed:0e:85:0a:ea:92:cf:5e:a4:30: 71:b8:f0:5a:fe:73:2d:d4:ec:14:a9:aa:0f:fe:8f:87:9f:e1: 56:8b:b9:ac:ca:aa:25:1a:4f:4c:0a:0e:25:9e:16:03:90:11: f9:e6:d0:6f:e4:1a:a3:3c:b4:65:a1:df:b6:58:ec:ab:38:03: 3c:6f:bb:7f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NhYqSnnUlJJMz2LNQD8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjg3Mjg5YTFjMDc3NWFiZjI3MWU3NDZlNWE3ZmYzNDkxZGU1NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXpxCWYYjT90rNMmIYEySMv1rKlt locjyUPzy8w2dN7PeNE98GUSajDgR189ByelTNyyf1jarR5sz02nC9DakUlwDEAy acKlxof9ZAA2CvrjEl97Vr71NEvZBwX8Z8MCrE+78E2ODFn447pxIy/cozhE2rxQ i6WaJzT5qO9WFnYhih8BVHHyv4xgdIiJrwb/+YznWYwzlreEUdpN6rrI8iOeKg3G BHvGy3ra/v8IU1oN8UgtZRGhD8v9Cz9MtP2AXGG6E73seg7zO9WiFbDUVh34BI2b SW0XpLj5nAl/tJ4OV/VPWd0PShCVMDsM7gAPXLrTcIAtsbsnVTyBP/JeywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuHKJocB3Wr8nHnRuWn/zSR3lTCMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvMS00Y29taHdIZGF2eWNlZEc1YWZfTkpIZVZNSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5 Ny8xL2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALzX9jAN BgkqhkiG9w0BAQsFAAOCAQEAjqPFiq/0EoRyocwj7xN8X5qvoJryJs+oePABNWmC pY/aOAWbF2OEXeebdyqmBQYq13/gmm08mJF51MLK7edoFSrgJYuAcdHp1/pUDJyM rPFEaEhBV5btL/HrLpNSzC3BbtphPNHdDDGCHJyECGXGgfqhYwRia2pyeGtZV06Z Yj+3b/dJTFtAuPXLqtf/YZrH8UpHMnXjVaDcDmrkJRGeBVK95q69dabA00QVo5i0 If8e4uj5mp+5zQ1JsC/tDoUK6pLPXqQwcbjwWv5zLdTsFKmqD/6Ph5/hVou5rMqq JRpPTAoOJZ4WA5AR+ebQb+Qaozy0ZaHftljsqzgDPG+7fw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:43 2026 by rpki-client