This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa File: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (raw, json) Hash identifier: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4= Subject key identifier: FB:44:B9:CA:A2:DA:37:7B:3E:AD:F0:E8:AE:BC:44:E3:19:89:91:26 Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 019B7CECFF4CF89249EB347C0729ED688ABF Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204653 IP address blocks: 185.123.120.0/23 maxlen: 23 185.123.121.0/24 maxlen: 24 212.80.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ff:4c:f8:92:49:eb:34:7c:07:29:ed:68:8a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb44b9caa2da377b3eadf0e8aebc44e319899126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:df:fc:47:5f:64:45:2a:8a:6c:bc:12:5f: b4:c6:f2:a4:ad:cd:c8:6d:14:ef:7b:06:4c:7c:72: c7:c7:42:5b:d7:a2:5d:16:38:45:41:f8:cb:2f:13: 89:1a:99:71:a9:a2:ad:93:c9:53:f8:ec:97:86:c9: ac:78:99:df:17:86:be:2b:d3:c1:e4:58:04:56:88: 64:4e:01:f4:e9:6f:c0:71:33:dd:2c:b5:55:74:e2: b7:e4:60:f6:dd:9b:c3:80:a8:b5:2d:fd:88:00:b9: 26:99:69:ef:20:b9:88:57:2a:94:db:b3:35:3c:79: 02:80:dc:dc:d3:6c:8d:34:35:8b:64:30:36:ca:98: 72:ad:1d:7c:c5:ee:6b:8c:17:a2:85:e5:69:a2:22: 9b:8a:23:a5:8d:21:9a:57:53:a2:87:74:aa:12:75: d3:48:23:c1:49:6c:d5:4b:fa:99:4d:f5:62:7f:ed: 01:a0:5f:21:76:40:43:cf:fd:da:09:21:28:38:02: 9f:fb:2e:cb:8e:0d:47:a9:c8:97:c3:56:6f:45:7e: 1f:d7:f1:ce:0f:76:1f:d0:62:d5:b8:02:d0:08:96: c4:0c:00:31:d8:c0:58:70:02:80:95:6e:9d:51:69: 67:49:b4:a7:3e:c2:c6:0a:d9:05:11:62:1f:72:a2: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:44:B9:CA:A2:DA:37:7B:3E:AD:F0:E8:AE:BC:44:E3:19:89:91:26 X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.120.0/23 212.80.177.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:73:6b:9f:0a:50:af:dc:e4:72:d0:79:2c:5d:ec:35:23:eb: a8:fc:af:37:9f:e6:66:ec:31:06:71:66:87:e3:b2:19:84:cf: a3:e6:02:6b:44:4d:59:88:c3:23:6a:91:82:dc:14:37:4c:45: f1:0c:29:5a:3b:81:83:6b:da:eb:5c:fc:8d:f4:9e:08:50:29: a8:39:85:83:24:a1:70:db:ca:ff:33:2d:c1:1c:0b:3c:18:f5: 00:4e:11:24:79:ee:3c:09:50:84:21:62:72:08:c2:9d:f4:47: 8b:7b:d1:68:33:dc:dc:89:f8:49:3f:64:39:ed:9b:da:b6:eb: 5d:8f:5b:0e:b7:37:98:a5:07:e2:f7:0c:e3:07:d7:50:18:16: 14:56:43:97:a6:c6:92:8a:52:04:72:3c:f5:0e:81:1a:45:ad: 40:c0:69:5a:50:98:ad:f5:5a:2f:0d:58:50:57:25:f4:27:40: 67:8d:c2:af:db:aa:52:15:ac:ac:8e:57:4c:1d:c9:da:f9:c9: bf:63:32:5f:df:33:81:ea:e7:ee:42:1b:c6:33:79:84:fa:e3: d5:25:21:ff:70:a8:97:60:3d:97:ef:2c:52:02:59:56:78:d2: ca:67:f4:06:bc:cc:92:6b:16:ae:e5:d2:61:b4:5c:e3:85:53: b7:a7:68:d1 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt87P9M+JJJ6zR8ByntaIq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjQ0YjljYWEyZGEzNzdiM2VhZGYwZThhZWJjNDRlMzE5ODk5MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Hf/EdfZEUqimy8El+0xvKkrc3I bRTvewZMfHLHx0Jb16JdFjhFQfjLLxOJGplxqaKtk8lT+OyXhsmseJnfF4a+K9PB 5FgEVohkTgH06W/AcTPdLLVVdOK35GD23ZvDgKi1Lf2IALkmmWnvILmIVyqU27M1 PHkCgNzc02yNNDWLZDA2yphyrR18xe5rjBeiheVpoiKbiiOljSGaV1Oih3SqEnXT SCPBSWzVS/qZTfVif+0BoF8hdkBDz/3aCSEoOAKf+y7Ljg1HqciXw1ZvRX4f1/HO D3Yf0GLVuALQCJbEDAAx2MBYcAKAlW6dUWlnSbSnPsLGCtkFEWIfcqK+JwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPtEucqi2jd7Pq3w6K68ROMZiZEmMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvMS0wUzV5cUxhTjNzLXJmRG9ycnhFNHhtSmtTWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTcvODk3NmVkLWRhMGEtNDlhNS1hNzUxLWE4NzFlY2MyMTJh Ni8xLzZFQTdYa1hOV0w1ZmJGMHotbFphdEpJajQ5cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbl7eAME ANRQsTANBgkqhkiG9w0BAQsFAAOCAQEAD3NrnwpQr9zkctB5LF3sNSPrqPyvN5/m ZuwxBnFmh+OyGYTPo+YCa0RNWYjDI2qRgtwUN0xF8QwpWjuBg2va61z8jfSeCFAp qDmFgyShcNvK/zMtwRwLPBj1AE4RJHnuPAlQhCFicgjCnfRHi3vRaDPc3In4ST9k Oe2b2rbrXY9bDrc3mKUH4vcM4wfXUBgWFFZDl6bGkopSBHI89Q6BGkWtQMBpWlCY rfVaLw1YUFcl9CdAZ43Cr9uqUhWsrI5XTB3J2vnJv2MyX98zgern7kIbxjN5hPrj 1SUh/3Col2A9l+8sUgJZVnjSymf0BrzMkmsWruXSYbRc44VTt6do0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:54 2026 by rpki-client