This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa File: 1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa (raw, json) Hash identifier: 3frOGkt9ftuVgtTCe7VyDncQkJsfKLeQbnXtJjtvP38= Subject key identifier: FB:FC:8E:05:EC:DA:A5:6E:20:99:A4:21:C1:B4:3F:2F:84:AA:71:FC Certificate issuer: /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998 Certificate serial: 019B7EA64D175B6429C4CA2D5A321DD44B97 Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa Signing time: Fri 02 Jan 2026 12:19:46 +0000 ROA not before: Fri 02 Jan 2026 12:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212374 IP address blocks: 185.209.82.0/24 maxlen: 24 185.231.240.0/24 maxlen: 24 185.231.241.0/24 maxlen: 24 185.231.242.0/24 maxlen: 24 185.231.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4d:17:5b:64:29:c4:ca:2d:5a:32:1d:d4:4b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998 Validity Not Before: Jan 2 12:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbfc8e05ecdaa56e2099a421c1b43f2f84aa71fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c0:5d:9b:0f:88:ab:27:b3:ff:34:23:32:85: 14:ac:f6:d0:8b:55:9e:54:fb:d5:6b:fd:3c:ac:e9: e2:2c:2a:ec:38:f9:ed:c6:4f:d1:2b:63:fe:22:e1: 31:f2:87:0e:81:d5:07:13:d6:f4:47:58:5a:2b:b1: 96:c1:27:91:25:b8:94:9d:7b:15:42:5a:53:33:fc: 03:b9:69:1d:52:b4:24:69:35:93:33:f0:2e:de:98: f8:09:d7:f4:b0:a7:31:0f:92:99:58:67:ad:92:42: 0c:fa:f7:73:02:5f:ed:4f:b4:93:dc:96:e9:07:3a: 7c:58:9a:d1:5a:f4:bd:52:27:71:3c:0c:ca:4e:63: 54:e2:7b:21:fe:54:26:5d:b9:3e:53:2a:da:ca:2b: 8a:cd:58:e9:13:a2:6d:63:d9:f0:53:bd:0c:40:43: ac:4d:0c:f3:6d:80:63:e2:65:f9:43:98:77:45:ca: 44:d0:85:9a:c4:4c:3f:7e:10:f7:79:d5:e9:ed:c8: 44:8d:01:13:21:4c:4a:26:d6:c0:70:d4:c5:d2:29: 13:ea:d1:55:c3:3b:44:d0:0d:bd:1a:fa:bb:b2:a9: bf:33:48:23:fb:db:aa:c5:c8:f4:c2:0c:ba:4d:d4: ad:f5:54:e8:be:68:bc:ba:b2:ee:ea:67:61:cc:14: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:8E:05:EC:DA:A5:6E:20:99:A4:21:C1:B4:3F:2F:84:AA:71:FC X509v3 Authority Key Identifier: keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/1-_yOBezapW4gmaQhwbQ_L4Sqcfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.82.0/24 185.231.240.0/22 Signature Algorithm: sha256WithRSAEncryption bc:cd:56:bb:99:c3:e4:31:72:d7:ec:3a:b0:29:7a:12:da:93: 37:86:32:ae:7a:a2:93:a2:ef:bc:96:0e:f7:bd:89:cc:e9:6f: e0:d7:7d:c9:86:61:38:78:5c:31:02:74:8c:46:5a:40:f3:6d: bb:6e:8e:6c:8f:a7:e0:86:f3:50:e7:a1:12:41:51:a9:ca:9d: 02:68:02:97:c0:c4:4a:c9:5f:c8:90:6e:13:fb:22:7f:1a:eb: 1f:0b:fe:18:70:88:3d:b0:be:c0:d9:b7:b6:2a:db:95:3e:1a: ea:fd:52:9d:b2:44:f0:07:23:6d:68:56:ce:1f:2f:ec:72:86: 69:87:61:b6:e9:96:2c:98:aa:5d:9f:77:54:51:52:88:9c:90: 53:b9:fa:c4:7a:96:20:e8:36:80:63:08:d1:ea:19:87:e3:23: 65:b8:2b:08:2b:d6:e3:7b:89:9d:1d:41:72:59:2e:29:b4:67: 2d:de:08:f9:c2:0f:55:88:18:0a:ca:ea:bd:12:df:12:82:79: ad:aa:ce:4b:8c:1e:be:2a:07:f7:1c:ec:5b:f4:ae:3b:f2:9b: 31:f2:56:42:d8:2e:3e:17:43:b7:9a:11:43:70:5d:9b:a9:14: f1:94:89:d9:e4:55:e6:82:71:68:2c:1f:53:92:25:09:5f:0c: 38:db:95:1e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+pk0XW2QpxMotWjId1EuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTMzZjJjZTU3Yzc0Y2JmOWZmYTUwOTY4NWQ2YWNiZDhj NTM5OTgwHhcNMjYwMTAyMTIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmZjOGUwNWVjZGFhNTZlMjA5OWE0MjFjMWI0M2YyZjg0YWE3MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMBdmw+Iqyez/zQjMoUUrPbQi1We VPvVa/08rOniLCrsOPntxk/RK2P+IuEx8ocOgdUHE9b0R1haK7GWwSeRJbiUnXsV QlpTM/wDuWkdUrQkaTWTM/Au3pj4Cdf0sKcxD5KZWGetkkIM+vdzAl/tT7ST3Jbp Bzp8WJrRWvS9UidxPAzKTmNU4nsh/lQmXbk+UyrayiuKzVjpE6JtY9nwU70MQEOs TQzzbYBj4mX5Q5h3RcpE0IWaxEw/fhD3edXp7chEjQETIUxKJtbAcNTF0ikT6tFV wztE0A29Gvq7sqm/M0gj+9uqxcj0wgy6TdSt9VTovmi8urLu6mdhzBQyjwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPv8jgXs2qVuIJmkIcG0Py+EqnH8MB8GA1UdIwQY MBaAFJ6TPyzlfHTL+f+lCWhdasvYxTmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDkt ODI1OTgwNWM2NDRjLzEvMS1feU9CZXphcFc0Z21hUWh3YlFfTDRTcWNmdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjAvNWYyZTQ4LWZlYmEtNDI3My04ZTQ5LTgyNTk4MDVjNjQ0 Yy8xL25wTV9MT1Y4ZE12NV82VUphRjFxeTlqRk9aZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALnRUgME Arnn8DANBgkqhkiG9w0BAQsFAAOCAQEAvM1Wu5nD5DFy1+w6sCl6EtqTN4Yyrnqi k6LvvJYO972JzOlv4Nd9yYZhOHhcMQJ0jEZaQPNtu26ObI+n4IbzUOehEkFRqcqd AmgCl8DESslfyJBuE/sifxrrHwv+GHCIPbC+wNm3tirblT4a6v1SnbJE8AcjbWhW zh8v7HKGaYdhtumWLJiqXZ93VFFSiJyQU7n6xHqWIOg2gGMI0eoZh+MjZbgrCCvW 43uJnR1BclkuKbRnLd4I+cIPVYgYCsrqvRLfEoJ5rarOS4wevioH9xzsW/SuO/Kb MfJWQtguPhdDt5oRQ3Bdm6kU8ZSJ2eRV5oJxaCwfU5IlCV8MONuVHg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:25 2026 by rpki-client