This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa File: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (raw, json) Hash identifier: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo= Subject key identifier: D5:0A:09:E3:F4:0B:0D:2F:1E:A1:4B:BE:8E:C5:3A:08:A4:DE:27:41 Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260 Certificate serial: 019B797EEB326470B88F825DBA74485B05E9 Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35625 IP address blocks: 185.118.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:eb:32:64:70:b8:8f:82:5d:ba:74:48:5b:05:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d50a09e3f40b0d2f1ea14bbe8ec53a08a4de2741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:03:3e:e9:cb:30:51:9a:b2:91:44:1e:26:bb: 79:66:5f:fd:21:de:99:db:2d:8c:e4:0c:ec:1e:68: bd:71:97:be:dc:ee:cf:68:fb:30:9d:66:1b:b1:da: 21:bb:fd:38:5e:ad:e5:09:11:1d:f9:7c:91:cf:97: 12:62:94:02:35:fd:30:80:1f:c7:ec:47:1e:2a:d0: c2:c5:d7:fe:5a:b7:18:43:48:d7:00:d5:5c:e6:c0: b8:04:ca:68:f8:ee:23:16:2d:4c:3f:ed:de:8d:40: eb:78:31:19:af:5b:37:b2:7d:a9:06:1b:69:55:16: 0b:bf:5c:31:34:c9:57:d6:b2:06:18:bc:bf:b7:8a: b4:5f:bf:ed:fa:7d:4b:55:50:0a:87:a6:bb:ff:33: 14:c3:7c:7f:39:89:23:10:76:7f:64:f3:89:d5:52: d6:ed:4e:9e:02:92:43:1b:61:65:b9:da:3c:4c:9e: 14:ea:45:a2:a7:3f:a6:9e:b8:73:03:78:29:98:3f: bd:e9:b9:bc:b2:78:56:93:d7:2c:bb:d6:fe:19:36: a7:fc:1d:1b:a7:bd:d8:a6:3c:25:da:b4:53:a6:7f: f6:a6:fd:9e:ec:20:80:23:bf:7a:d2:be:2d:e0:0d: 62:20:cd:98:77:a0:ce:eb:be:f0:af:fa:5b:a0:85: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0A:09:E3:F4:0B:0D:2F:1E:A1:4B:BE:8E:C5:3A:08:A4:DE:27:41 X509v3 Authority Key Identifier: keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.119.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:e5:f1:12:60:31:c7:22:0c:85:0d:b0:0e:9e:fd:32:74:fd: 4c:5c:4e:25:db:33:4c:da:63:06:80:54:d5:f2:d4:bc:4c:53: bd:2e:d3:c7:9e:2b:75:6d:b8:65:1c:8b:10:ef:c0:44:28:c4: cf:8e:51:67:76:a7:aa:5a:f7:e1:8c:d5:7b:2f:02:4e:31:ed: 21:2c:54:c4:cb:2f:4d:53:a5:e5:56:a0:2a:4c:4c:64:13:fe: 3d:c9:83:94:6e:29:ce:72:c5:81:77:5a:d4:b4:67:07:76:17: ed:ea:71:ee:00:4f:b2:2f:37:c9:24:6c:21:12:19:17:e1:85: ca:02:0f:b7:fe:cf:a0:f5:d5:1f:54:0a:f0:7f:fa:e3:1e:d4: c8:10:15:cd:db:d3:16:0f:af:c8:d4:80:19:dc:f9:92:e3:e7: 77:ed:aa:d0:99:4c:82:fc:3a:c4:70:6e:ff:14:96:c4:01:f7: ad:8b:2f:7b:56:d2:24:d9:71:af:38:5a:0c:84:fd:e9:66:3b: 92:49:f4:d8:be:86:e1:da:93:3e:22:91:8c:5b:1b:86:c9:b5: b5:e8:ae:c5:c3:2d:b0:f2:f4:97:2d:9b:3e:52:36:a3:1c:6b: 0f:78:2d:59:8e:85:2f:f0:be:eb:27:76:cd:57:76:34:7d:1c: 5c:35:cf:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fusyZHC4j4JdunRIWwXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTYzZjBlNjdmNGQ4OTNjZjNkNzAxYTIzNjEwZTZmMzg5 NTkyNjAwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTBhMDllM2Y0MGIwZDJmMWVhMTRiYmU4ZWM1M2EwOGE0ZGUyNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QM+6cswUZqykUQeJrt5Zl/9Id6Z 2y2M5AzsHmi9cZe+3O7PaPswnWYbsdohu/04Xq3lCREd+XyRz5cSYpQCNf0wgB/H 7EceKtDCxdf+WrcYQ0jXANVc5sC4BMpo+O4jFi1MP+3ejUDreDEZr1s3sn2pBhtp VRYLv1wxNMlX1rIGGLy/t4q0X7/t+n1LVVAKh6a7/zMUw3x/OYkjEHZ/ZPOJ1VLW 7U6eApJDG2Fludo8TJ4U6kWipz+mnrhzA3gpmD+96bm8snhWk9csu9b+GTan/B0b p73Ypjwl2rRTpn/2pv2e7CCAI7960r4t4A1iIM2Yd6DO677wr/pboIU2HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUKCeP0Cw0vHqFLvo7FOgik3idBMB8GA1UdIwQY MBaAFFCWPw5n9NiTzz1wGiNhDm84lZJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgt MGYzYzE2NThkMGI3LzEvMVFvSjRfUUxEUzhlb1V1LWpzVTZDS1RlSjBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZTU4ZDUtMTI2YS00NGFhLWFhMDgtMGYzYzE2NThkMGI3 LzEvVUpZX0RtZjAySlBQUFhBYUkyRU9iemlWa21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXZ3MA0G CSqGSIb3DQEBCwUAA4IBAQAr5fESYDHHIgyFDbAOnv0ydP1MXE4l2zNM2mMGgFTV 8tS8TFO9LtPHnit1bbhlHIsQ78BEKMTPjlFndqeqWvfhjNV7LwJOMe0hLFTEyy9N U6XlVqAqTExkE/49yYOUbinOcsWBd1rUtGcHdhft6nHuAE+yLzfJJGwhEhkX4YXK Ag+3/s+g9dUfVArwf/rjHtTIEBXN29MWD6/I1IAZ3PmS4+d37arQmUyC/DrEcG7/ FJbEAfetiy97VtIk2XGvOFoMhP3pZjuSSfTYvobh2pM+IpGMWxuGybW16K7Fwy2w 8vSXLZs+UjajHGsPeC1ZjoUv8L7rJ3bNV3Y0fRxcNc/R -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:12 2026 by rpki-client