This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/I1PzUcXNjBxYeo630GuIpE7IjlA.roa File: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (raw, json) Hash identifier: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E= Subject key identifier: 23:53:F3:51:C5:CD:8C:1C:58:7A:8E:B7:D0:6B:88:A4:4E:C8:8E:50 Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019B7AC88A3555C640A02A9B89ABA21AB8D4 Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/I1PzUcXNjBxYeo630GuIpE7IjlA.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198380 IP address blocks: 185.242.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8a:35:55:c6:40:a0:2a:9b:89:ab:a2:1a:b8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2353f351c5cd8c1c587a8eb7d06b88a44ec88e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:2b:d4:a4:57:f2:66:61:12:6c:90:8d:b4: 6c:05:b9:ac:d2:a6:cd:16:98:91:e0:16:25:8b:2c: f2:5a:3f:93:a3:2f:d3:42:1a:56:26:2b:04:8f:a6: 64:9c:64:d5:73:3c:29:62:f9:5f:1e:31:e7:2e:1a: c2:a7:f6:e7:5c:d4:74:a4:0e:88:d6:90:52:3b:c3: 3b:52:e9:e5:63:c9:05:74:50:a5:2c:b0:9a:72:64: cc:17:3b:28:b1:6e:67:be:43:da:67:d2:b1:03:af: 5f:51:eb:09:fc:c3:47:31:e6:72:4b:19:84:09:14: 30:5b:90:a4:f5:93:a3:d1:86:5d:b8:20:c9:3c:99: 77:9a:b2:a1:74:5b:de:ca:29:32:c2:ef:7b:bb:7a: d7:fe:f6:09:79:96:d6:72:c2:57:2e:62:58:b3:49: 13:84:41:3d:62:e9:0f:84:54:d7:76:b2:2b:fd:0d: 3b:9c:6f:df:e7:c5:90:ba:0d:5d:86:5b:76:6f:86: 11:f8:46:c0:a1:11:35:b6:44:7a:61:4b:9b:99:97: aa:fb:c8:ea:97:26:d7:c6:3d:ff:eb:0c:76:b6:98: 6b:ed:19:32:63:d1:89:9d:9c:ed:29:f4:13:2a:5c: 26:4f:fa:bb:f6:e4:a7:1f:a0:97:26:2a:1c:88:4b: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:53:F3:51:C5:CD:8C:1C:58:7A:8E:B7:D0:6B:88:A4:4E:C8:8E:50 X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/I1PzUcXNjBxYeo630GuIpE7IjlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.15.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ea:ca:ab:ba:4d:2b:d1:4d:f0:a4:cd:ca:8c:59:86:2c:05: 5e:1b:ea:96:a3:00:16:3d:ba:57:62:8e:43:90:db:6a:79:5d: a0:a8:8b:35:ed:bf:f3:98:b9:42:c2:0a:d7:39:98:ba:9c:3c: 07:3e:11:74:1e:15:15:59:88:9d:2d:53:13:f3:21:be:3f:2c: af:c1:83:2f:50:c6:db:f8:ac:1a:c7:8b:e4:73:2e:6e:14:86: f1:ee:6b:4c:36:71:0c:5b:cd:65:b0:44:df:ce:2d:4e:c4:27: 3f:da:c6:5d:3c:57:bf:3b:a9:46:b6:0e:7d:f1:d6:6c:33:00: 81:40:22:f6:35:7a:9a:e4:e3:84:bf:fa:41:90:fc:21:e2:13: 9e:56:f3:52:17:fc:93:07:8b:54:0e:bf:ae:20:b9:8d:f7:cc: 44:38:18:be:91:50:13:81:f0:3f:27:f8:90:ad:57:15:ad:05: 61:8a:c1:48:c4:8d:8a:72:61:d0:32:65:44:96:8a:1b:ec:70: 2f:d4:7f:88:f8:27:92:e0:35:7e:a3:fe:99:ec:ba:71:d6:05: 79:3f:69:63:b3:de:78:88:8a:f2:22:c9:ee:9b:36:31:7a:a7: bd:0a:cf:cf:bc:09:89:12:f4:5a:11:fb:9e:de:16:7b:27:3b: 41:ac:d0:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yIo1VcZAoCqbiauiGrjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzUzZjM1MWM1Y2Q4YzFjNTg3YThlYjdkMDZiODhhNDRlYzg4ZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b4r1KRX8mZhEmyQjbRsBbms0qbN FpiR4BYliyzyWj+Toy/TQhpWJisEj6ZknGTVczwpYvlfHjHnLhrCp/bnXNR0pA6I 1pBSO8M7UunlY8kFdFClLLCacmTMFzsosW5nvkPaZ9KxA69fUesJ/MNHMeZySxmE CRQwW5Ck9ZOj0YZduCDJPJl3mrKhdFveyikywu97u3rX/vYJeZbWcsJXLmJYs0kT hEE9YukPhFTXdrIr/Q07nG/f58WQug1dhlt2b4YR+EbAoRE1tkR6YUubmZeq+8jq lybXxj3/6wx2tphr7RkyY9GJnZztKfQTKlwmT/q79uSnH6CXJiociEun9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNT81HFzYwcWHqOt9BriKROyI5QMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvSTFQelVjWE5qQnhZZW82MzBHdUlwRTdJamxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufIPMA0G CSqGSIb3DQEBCwUAA4IBAQAR6sqruk0r0U3wpM3KjFmGLAVeG+qWowAWPbpXYo5D kNtqeV2gqIs17b/zmLlCwgrXOZi6nDwHPhF0HhUVWYidLVMT8yG+PyyvwYMvUMbb +Kwax4vkcy5uFIbx7mtMNnEMW81lsETfzi1OxCc/2sZdPFe/O6lGtg598dZsMwCB QCL2NXqa5OOEv/pBkPwh4hOeVvNSF/yTB4tUDr+uILmN98xEOBi+kVATgfA/J/iQ rVcVrQVhisFIxI2KcmHQMmVEloob7HAv1H+I+CeS4DV+o/6Z7Lpx1gV5P2ljs954 iIryIsnumzYxeqe9Cs/PvAmJEvRaEfue3hZ7JztBrNCJ -----END CERTIFICATE-----Generated at Sun Jan 25 16:41:54 2026 by rpki-client