This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa File: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (raw, json) Hash identifier: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c= Subject key identifier: FB:3A:82:E0:78:50:4A:8C:F2:74:47:D2:B1:63:1E:55:1B:D7:E0:08 Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Certificate serial: 019B7C7F8B054510FA24F8FC4D59D7D50AC7 Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa Signing time: Fri 02 Jan 2026 02:18:12 +0000 ROA not before: Fri 02 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207614 IP address blocks: 45.128.236.0/22 maxlen: 24 185.133.4.0/22 maxlen: 24 185.238.84.0/22 maxlen: 24 2a0f:4200::/29 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8b:05:45:10:fa:24:f8:fc:4d:59:d7:d5:0a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Validity Not Before: Jan 2 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3a82e078504a8cf27447d2b1631e551bd7e008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:17:c3:89:fd:7d:e0:8e:3d:34:dc:3f:da: c1:6b:43:97:cd:65:f6:ea:99:a0:97:c4:41:dc:f6: a4:b9:84:ba:65:f1:aa:53:43:2f:cf:36:69:d1:4e: 99:b2:f3:4a:85:40:19:17:a0:60:6f:3c:60:f7:53: a6:0f:72:08:0a:28:db:41:e8:5d:56:db:18:64:8f: c8:18:e7:c2:9f:c8:11:1e:c3:c6:fd:a8:90:15:0d: 2d:10:92:fc:0a:b9:a4:05:34:0e:fc:94:4e:0c:9b: a6:72:f3:7c:9e:8e:32:76:e3:17:ea:20:d3:8f:05: 86:c4:1a:bd:e0:e2:cd:d5:b0:c1:31:61:c7:08:52: f7:7d:f1:ff:b5:30:a0:93:c3:cb:fd:72:d1:b8:bd: 8f:0e:97:36:11:f7:b5:da:33:00:a0:71:8c:97:1c: fc:b1:38:e0:b4:a1:0e:19:b1:29:55:61:ed:1a:5d: b2:96:fa:7a:d2:26:2b:b1:19:3b:22:33:39:26:fa: be:91:26:81:c0:9b:96:4a:60:59:ba:c3:09:77:0b: b4:c6:74:05:d9:f4:59:81:70:8a:c4:aa:ef:09:5a: b0:aa:f8:d3:a3:0c:e7:4e:8c:4c:54:c8:3d:9b:39: b8:9a:69:53:a8:36:5a:86:7a:d2:12:f7:78:b8:93: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3A:82:E0:78:50:4A:8C:F2:74:47:D2:B1:63:1E:55:1B:D7:E0:08 X509v3 Authority Key Identifier: keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.236.0/22 185.133.4.0/22 185.238.84.0/22 IPv6: 2a0f:4200::/29 Signature Algorithm: sha256WithRSAEncryption 12:a3:f9:09:68:a6:d8:b6:87:83:81:b7:b7:61:47:54:28:0c: 3a:69:d4:91:0c:f0:d5:81:5e:99:c5:26:11:a7:a8:ee:a9:b7: f2:ab:c5:28:25:f0:88:77:3a:04:49:48:68:8c:c1:00:23:38: 01:b2:28:5f:6a:e2:15:1c:09:75:a9:9a:43:7c:72:d8:dc:70: 8c:89:8f:d1:d0:af:d8:2c:c8:91:ef:7b:ab:74:88:a4:33:45: 59:6a:be:a6:da:89:19:52:05:17:39:97:56:5a:0f:6d:db:e7: 4c:58:2b:62:6c:8b:78:71:3c:9d:cc:f3:aa:51:f5:a2:b4:e5: 59:d4:d4:23:0a:64:25:73:0f:5c:66:a0:bf:22:5f:4a:99:fa: 60:2b:02:9b:35:7b:28:9c:7b:8e:e9:55:6f:33:98:54:0d:44: 78:e9:61:67:5f:8f:40:25:3c:a1:7d:36:61:03:d6:5d:90:df: a5:a0:35:29:36:28:80:3a:ed:0e:5d:2f:9a:20:7d:9f:42:06: 22:d5:e6:09:50:7d:bf:e3:dc:61:7a:51:c2:be:0b:f7:be:b6: e4:5c:04:f9:c8:b9:78:f6:c0:af:6a:38:89:78:43:c8:9a:e1: cd:e9:be:3e:e5:be:d1:44:c1:45:36:4b:c8:f1:c2:aa:01:aa: de:69:84:a4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt8f4sFRRD6JPj8TVnX1QrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk Mjg0ZjAwHhcNMjYwMTAyMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNhODJlMDc4NTA0YThjZjI3NDQ3ZDJiMTYzMWU1NTFiZDdlMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuoXw4n9feCOPTTcP9rBa0OXzWX2 6pmgl8RB3PakuYS6ZfGqU0MvzzZp0U6ZsvNKhUAZF6Bgbzxg91OmD3IICijbQehd VtsYZI/IGOfCn8gRHsPG/aiQFQ0tEJL8CrmkBTQO/JRODJumcvN8no4yduMX6iDT jwWGxBq94OLN1bDBMWHHCFL3ffH/tTCgk8PL/XLRuL2PDpc2Efe12jMAoHGMlxz8 sTjgtKEOGbEpVWHtGl2ylvp60iYrsRk7IjM5Jvq+kSaBwJuWSmBZusMJdwu0xnQF 2fRZgXCKxKrvCVqwqvjTowznToxMVMg9mzm4mmlTqDZahnrSEvd4uJPMLwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPs6guB4UEqM8nRH0rFjHlUb1+AIMB8GA1UdIwQY MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt YjI4ZjA3YjJmNDViLzEvMS16cUM0SGhRU296eWRFZlNzV01lVlJ2WDRBZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzAvZGRkMzQ5LWFjNTAtNDNlNS1hODhhLWIyOGYwN2IyZjQ1 Yi8xL0hReC1lN0o4VXpxWmZTZDhyZFFYN0h2U2hQQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAi2A7AME ArmFBAMEArnuVDANBAIAAjAHAwUDKg9CADANBgkqhkiG9w0BAQsFAAOCAQEAEqP5 CWim2LaHg4G3t2FHVCgMOmnUkQzw1YFemcUmEaeo7qm38qvFKCXwiHc6BElIaIzB ACM4AbIoX2riFRwJdamaQ3xy2NxwjImP0dCv2CzIke97q3SIpDNFWWq+ptqJGVIF FzmXVloPbdvnTFgrYmyLeHE8nczzqlH1orTlWdTUIwpkJXMPXGagvyJfSpn6YCsC mzV7KJx7julVbzOYVA1EeOlhZ1+PQCU8oX02YQPWXZDfpaA1KTYogDrtDl0vmiB9 n0IGItXmCVB9v+PcYXpRwr4L97625FwE+ci5ePbAr2o4iXhDyJrhzem+PuW+0UTB RTZLyPHCqgGq3mmEpA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:58 2026 by rpki-client