This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/1-XBWrk39wjm3jro7FSlqvzI5eVI.roa File: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (raw, json) Hash identifier: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E= Subject key identifier: F9:70:56:AE:4D:FD:C2:39:B7:8E:BA:3B:15:29:6A:BF:32:39:79:52 Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Certificate serial: 019B7EA56A54183378E9B5DDFD6F173D5B9A Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/1-XBWrk39wjm3jro7FSlqvzI5eVI.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 185.168.158.0/24 maxlen: 24 185.168.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6a:54:18:33:78:e9:b5:dd:fd:6f:17:3d:5b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f97056ae4dfdc239b78eba3b15296abf32397952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:85:c3:27:6a:50:40:28:56:71:4a:13:fc: 48:1b:44:c8:e3:05:2a:3f:56:fa:b0:2c:8f:f7:e8: 3a:e8:d1:07:3a:62:36:71:47:0f:f7:79:df:85:f4: 0d:1a:ea:1e:c7:6a:10:d8:c5:44:f5:52:62:53:12: c2:75:99:f1:19:59:d6:d8:10:64:fa:9a:87:02:f9: 8e:77:93:e0:4a:21:4a:dd:5a:00:45:e0:5c:2e:5f: 9d:63:af:f5:9b:5c:f1:27:90:a4:39:0a:04:1c:ad: 85:92:a9:49:e4:a6:c7:34:9b:aa:83:31:e7:b1:93: 33:2d:2a:6f:87:dd:ab:41:b2:9e:64:d1:4e:cb:f9: 4f:61:f7:d7:70:68:bc:f9:d3:4c:80:7f:68:d2:9b: 9c:51:c6:c5:48:cf:e3:11:ca:26:a0:fe:9c:bf:be: 1f:09:77:95:35:68:b2:6c:04:66:08:e4:96:d9:fb: 61:fb:0a:6a:53:51:87:e7:04:10:26:39:22:6a:ce: 55:71:32:11:d6:2b:d4:b0:0f:b7:9b:59:6a:f0:55: e0:a2:69:b5:a4:a2:47:9b:5f:62:92:ef:c5:10:9c: 8f:9a:34:e1:3d:f5:21:65:40:f4:d5:82:0f:5e:71: d1:dd:e1:82:fa:af:b0:75:12:70:f7:d1:b4:2b:60: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:70:56:AE:4D:FD:C2:39:B7:8E:BA:3B:15:29:6A:BF:32:39:79:52 X509v3 Authority Key Identifier: keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/1-XBWrk39wjm3jro7FSlqvzI5eVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.158.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:cc:c6:36:b6:9b:a0:58:f9:fb:d9:5a:29:38:9f:3a:df:4c: 02:f2:89:0d:b3:a2:16:2e:d4:59:48:14:7a:d0:15:ab:3b:7f: 27:97:1f:14:73:7e:de:f0:86:d2:89:62:a7:0a:5d:82:8f:ff: 5e:d1:28:ca:da:f5:9a:2c:10:80:39:00:cf:aa:bd:60:88:b2: 99:58:a3:2f:b1:ea:98:2e:45:54:cb:68:96:01:5a:46:89:5a: a2:e0:a6:84:5a:01:81:cd:ce:ac:3e:08:e5:91:1f:c4:78:cc: a9:00:94:07:71:61:c4:c7:0b:82:88:d9:ca:5d:06:e0:65:c5: 7d:37:15:02:c7:7c:87:10:0e:a7:cc:51:6d:ed:ee:fc:46:bf: 77:93:4a:96:a5:c9:33:a0:f7:a4:7b:bd:3a:83:ec:39:03:0c: 63:02:5c:55:16:9c:54:de:3e:1d:3e:47:6f:8d:a9:83:ae:60: f4:5e:95:d7:56:b6:96:27:b9:b3:52:f2:9f:94:96:59:f5:09: d0:45:0b:83:a1:bf:8d:75:62:26:3c:7a:0e:80:51:e8:1e:b9: 1e:44:7c:fc:47:37:c6:cf:7a:e9:29:53:94:d5:ad:36:40:bb: 35:38:b6:12:ad:66:d9:4d:fe:fb:7b:ed:62:66:5e:cc:ab:01: a2:bf:36:3d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pWpUGDN46bXd/W8XPVuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx MThiODUwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTcwNTZhZTRkZmRjMjM5Yjc4ZWJhM2IxNTI5NmFiZjMyMzk3OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO+FwydqUEAoVnFKE/xIG0TI4wUq P1b6sCyP9+g66NEHOmI2cUcP93nfhfQNGuoex2oQ2MVE9VJiUxLCdZnxGVnW2BBk +pqHAvmOd5PgSiFK3VoAReBcLl+dY6/1m1zxJ5CkOQoEHK2FkqlJ5KbHNJuqgzHn sZMzLSpvh92rQbKeZNFOy/lPYffXcGi8+dNMgH9o0pucUcbFSM/jEcomoP6cv74f CXeVNWiybARmCOSW2fth+wpqU1GH5wQQJjkias5VcTIR1ivUsA+3m1lq8FXgomm1 pKJHm19iku/FEJyPmjThPfUhZUD01YIPXnHR3eGC+q+wdRJw99G0K2DmiQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlwVq5N/cI5t466OxUpar8yOXlSMB8GA1UdIwQY MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt MGRiYjNiOGRiMTVmLzEvMS1YQldyazM5d2ptM2pybzdGU2xxdnpJNWVWSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmEvM2Q5YmZhLWNmZDAtNDRhOC04NDJlLTBkYmIzYjhkYjE1 Zi8xL3pwV1BHQi0xQjZDaXFDR0ZhNHZnMVVzUmk0VS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmonjAN BgkqhkiG9w0BAQsFAAOCAQEAS8zGNraboFj5+9laKTifOt9MAvKJDbOiFi7UWUgU etAVqzt/J5cfFHN+3vCG0olipwpdgo//XtEoytr1miwQgDkAz6q9YIiymVijL7Hq mC5FVMtolgFaRolaouCmhFoBgc3OrD4I5ZEfxHjMqQCUB3FhxMcLgojZyl0G4GXF fTcVAsd8hxAOp8xRbe3u/Ea/d5NKlqXJM6D3pHu9OoPsOQMMYwJcVRacVN4+HT5H b42pg65g9F6V11a2lie5s1Lyn5SWWfUJ0EULg6G/jXViJjx6DoBR6B65HkR8/Ec3 xs966SlTlNWtNkC7NTi2Eq1m2U3++3vtYmZezKsBor82PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:38 2026 by rpki-client