This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/1TI05eho0ULeAD5-mChu4OLasSY.roa File: 1TI05eho0ULeAD5-mChu4OLasSY.roa (raw, json) Hash identifier: dnqOUYMdm6jTT4ig/7qC5Cu0cKdt4coknRVuLnEzoMU= Subject key identifier: D5:32:34:E5:E8:68:D1:42:DE:00:3E:7E:98:28:6E:E0:E2:DA:B1:26 Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673 Certificate serial: 019AC488E05B186CC2928747E21766A54F96 Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/1TI05eho0ULeAD5-mChu4OLasSY.roa Signing time: Thu 27 Nov 2025 08:58:15 +0000 ROA not before: Thu 27 Nov 2025 08:58:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206190 IP address blocks: 185.194.8.0/22 maxlen: 24 2a0c:3440::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:88:e0:5b:18:6c:c2:92:87:47:e2:17:66:a5:4f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673 Validity Not Before: Nov 27 08:58:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d53234e5e868d142de003e7e98286ee0e2dab126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:d4:57:5d:9d:f0:ce:dd:97:a2:d0:87:1c: 02:24:db:e5:20:8e:f9:67:2d:41:fb:70:3e:0b:b7: c9:d2:dc:6a:6e:da:7e:2b:8c:3b:50:e8:87:31:62: 54:46:f3:b0:76:97:96:6f:0f:90:d7:1e:ab:73:a5: 70:d1:64:7f:a3:bc:9a:25:82:88:87:b4:64:12:7a: a8:eb:e7:f4:8e:a3:79:ae:2e:b9:40:e0:7e:ae:ad: a7:3e:c7:c1:65:59:33:e3:6c:98:94:9d:1b:b9:86: 41:1f:ba:b1:32:0d:cc:b7:e3:b5:44:0f:68:af:75: 18:2c:a4:54:87:47:b2:a9:ae:65:a3:d1:8c:ff:82: 19:5f:82:ed:97:10:5e:3e:63:94:f0:48:83:ef:81: d6:a4:48:1b:83:c8:81:94:b8:f0:de:62:5d:67:c1: 22:66:85:95:41:64:59:52:55:c6:0c:4a:89:18:bb: fa:26:f2:63:18:d2:1d:35:97:b5:3b:ac:d1:6b:81: 8a:70:46:2b:14:d4:05:5b:6c:67:61:38:1d:bc:6d: e8:f4:87:6b:34:a8:c2:4b:85:a7:44:c9:4e:65:09: ea:e5:87:c8:3e:91:0c:36:72:cb:c3:8e:d1:4f:82: d0:0f:9a:fd:ae:99:69:86:ef:6c:a0:c0:52:7e:86: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:32:34:E5:E8:68:D1:42:DE:00:3E:7E:98:28:6E:E0:E2:DA:B1:26 X509v3 Authority Key Identifier: keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/1TI05eho0ULeAD5-mChu4OLasSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.8.0/22 IPv6: 2a0c:3440::/29 Signature Algorithm: sha256WithRSAEncryption b2:76:78:a1:9f:be:dc:5d:10:c2:12:74:83:2d:7b:d3:d1:6a: 0a:20:6d:32:e0:97:b5:1a:fe:53:28:c5:c4:a0:38:90:3f:0e: c5:ac:5a:00:d5:8a:be:3d:be:25:f5:c7:3a:fd:e3:b7:1e:78: f0:9b:a3:e6:eb:c6:4c:ff:b9:4d:10:ee:2f:6d:7e:1c:66:99: 44:45:69:64:ea:ab:04:c4:57:e5:bc:c1:99:2e:6f:3e:77:20: 72:42:86:4e:57:b9:bd:1e:34:ca:28:71:24:b9:f8:d9:35:b0: 69:e0:7c:e1:b5:cb:8f:78:b8:63:f8:b1:69:39:58:e7:cd:cf: f5:7f:54:ad:31:e9:b0:b4:0b:07:87:2a:f9:f7:84:bb:63:ff: c9:02:d2:cc:36:fb:68:99:5d:7c:d1:b3:fe:f1:5e:9f:0e:49: e2:2e:2d:40:ef:85:92:3b:27:8a:e5:cb:5a:98:ee:54:32:9f: 3e:ed:86:16:3a:7e:70:7f:1c:d5:12:72:4d:2b:2c:33:98:1c: 26:e6:a9:b5:3a:f8:84:be:24:b3:f6:0b:21:63:02:55:15:0d: 07:af:a3:b4:4d:0c:f1:26:57:3d:f8:82:d1:2f:b7:a5:ca:bd: 3f:ed:70:21:84:86:5f:5c:4f:9e:38:f3:52:b6:dd:aa:ee:be: ba:44:06:d2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrEiOBbGGzCkodH4hdmpU+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzI3N2ZjNDdkODQ4ZmE1NjM0Y2U4MDMxYTE3NGZjMjQ5 ZmE2NzMwHhcNMjUxMTI3MDg1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTMyMzRlNWU4NjhkMTQyZGUwMDNlN2U5ODI4NmVlMGUyZGFiMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0LUV12d8M7dl6LQhxwCJNvlII75 Zy1B+3A+C7fJ0txqbtp+K4w7UOiHMWJURvOwdpeWbw+Q1x6rc6Vw0WR/o7yaJYKI h7RkEnqo6+f0jqN5ri65QOB+rq2nPsfBZVkz42yYlJ0buYZBH7qxMg3Mt+O1RA9o r3UYLKRUh0eyqa5lo9GM/4IZX4LtlxBePmOU8EiD74HWpEgbg8iBlLjw3mJdZ8Ei ZoWVQWRZUlXGDEqJGLv6JvJjGNIdNZe1O6zRa4GKcEYrFNQFW2xnYTgdvG3o9Idr NKjCS4WnRMlOZQnq5YfIPpEMNnLLw47RT4LQD5r9rplphu9soMBSfobB9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNUyNOXoaNFC3gA+fpgobuDi2rEmMB8GA1UdIwQY MBaAFJhyd/xH2Ej6VjTOgDGhdPwkn6ZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhKM19FZllTUHBXTk02QU1hRjBfQ1NmcG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUt MTJlODI3NmZkYWM0LzEvMVRJMDVlaG8wVUxlQUQ1LW1DaHU0T0xhc1NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUtMTJlODI3NmZkYWM0 LzEvbUhKM19FZllTUHBXTk02QU1hRjBfQ1NmcG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucIIMA0E AgACMAcDBQMqDDRAMA0GCSqGSIb3DQEBCwUAA4IBAQCydnihn77cXRDCEnSDLXvT 0WoKIG0y4Je1Gv5TKMXEoDiQPw7FrFoA1Yq+Pb4l9cc6/eO3Hnjwm6Pm68ZM/7lN EO4vbX4cZplERWlk6qsExFflvMGZLm8+dyByQoZOV7m9HjTKKHEkufjZNbBp4Hzh tcuPeLhj+LFpOVjnzc/1f1StMemwtAsHhyr594S7Y//JAtLMNvtomV180bP+8V6f DkniLi1A74WSOyeK5ctamO5UMp8+7YYWOn5wfxzVEnJNKywzmBwm5qm1OviEviSz 9gshYwJVFQ0Hr6O0TQzxJlc9+ILRL7elyr0/7XAhhIZfXE+eOPNStt2q7r66RAbS -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:15 2025 by rpki-client