This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-mrRs7mseD18Fvu4hrnd41uAzdA.roa File: 1-mrRs7mseD18Fvu4hrnd41uAzdA.roa (raw, json) Hash identifier: 6rJLalCNO6x/qtXfVbMZZuXwBB53gIxgtmdpl0NGkh4= Subject key identifier: FA:6A:D1:B3:B9:AC:78:3D:7C:16:FB:B8:86:B9:DD:E3:5B:80:CD:D0 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B312FB8FA6ECBDD895E696669304AA41F Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-mrRs7mseD18Fvu4hrnd41uAzdA.roa Signing time: Thu 18 Dec 2025 11:19:29 +0000 ROA not before: Thu 18 Dec 2025 11:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213831 IP address blocks: 194.39.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:2f:b8:fa:6e:cb:dd:89:5e:69:66:69:30:4a:a4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 18 11:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa6ad1b3b9ac783d7c16fbb886b9dde35b80cdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:56:cc:8e:b6:b3:f0:ca:f9:37:7d:4f:f0: 43:02:3b:b3:50:ed:79:3f:d0:8d:99:41:4d:ad:5c: 53:5c:40:41:48:c6:9b:14:6d:30:50:bf:88:6b:a0: b0:d9:7f:ae:ff:2f:e1:26:3a:7b:45:c1:0d:b1:53: 0f:db:8f:58:dd:28:0e:8b:5c:25:c2:99:98:38:18: 86:16:74:a1:17:31:d2:1f:0f:c7:e2:b0:12:71:87: 69:db:2d:73:72:41:e2:2e:96:52:01:6e:7d:a8:5e: ed:9c:34:6a:c7:47:96:30:69:6f:b9:63:26:75:98: ea:40:ef:33:fa:5a:fb:fa:a4:a0:9d:75:64:52:26: 0b:b7:55:af:79:3e:ba:71:ef:18:62:b8:b0:8d:93: 2a:1d:2d:08:0b:06:58:87:3b:16:b9:6b:dc:f1:c3: ab:b2:eb:c3:33:00:d5:3d:e5:53:f8:08:50:3d:89: 46:2b:da:c2:9a:c8:64:d0:3e:ae:bc:74:d0:33:da: 74:7b:3c:9a:28:12:82:92:a5:a7:85:81:34:52:f9: d6:97:ee:32:78:04:1b:0e:f4:63:e1:e5:0f:58:2e: 00:fc:0c:61:de:30:54:85:52:48:92:4f:12:a9:c6: fb:15:b7:ae:ae:de:76:6b:a9:91:32:d4:05:b2:f7: d9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6A:D1:B3:B9:AC:78:3D:7C:16:FB:B8:86:B9:DD:E3:5B:80:CD:D0 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-mrRs7mseD18Fvu4hrnd41uAzdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.217.0/24 Signature Algorithm: sha256WithRSAEncryption 59:4d:40:f3:dd:17:39:f8:a8:a1:90:08:55:23:af:b9:63:ac: e2:0f:a9:28:11:ef:5c:c9:0c:ce:5e:cc:16:a4:e7:97:72:13: ad:e2:4b:b0:85:27:bc:9b:91:f7:5a:d1:22:8d:74:5e:a6:9a: 23:e7:43:41:96:0d:04:6e:f3:14:a5:42:fa:7b:cc:25:e3:f8: ca:d4:0e:2d:b3:1e:82:6d:92:ce:2b:96:15:60:e5:0b:4d:33: c5:e4:37:64:80:18:87:ca:6d:4e:7a:1d:e8:ff:82:dd:cc:9e: f2:62:a4:e4:0a:64:d0:66:52:1c:98:d8:9f:2d:19:67:46:16: a1:a8:a9:1e:ae:f1:d8:b9:51:c6:9d:05:6c:51:d8:d7:42:34: ba:09:70:ec:73:32:e3:3f:bb:df:01:68:43:08:5b:00:ed:a3: 27:5f:63:8b:56:ed:ab:72:37:5d:8e:20:fa:83:d7:3f:ed:6c: 24:64:55:e6:bd:98:e4:61:35:d0:d6:7a:fb:34:51:8b:a8:3c: 78:94:bc:e8:9a:3e:4e:5b:d8:8c:ad:4f:be:91:d8:dd:2f:ab: 10:b9:c7:0b:97:ba:54:92:d1:f0:32:a9:42:52:af:d5:b8:43: f1:08:c0:c4:cd:ee:62:39:cd:43:b7:8b:67:64:c7:27:5c:70: 67:39:de:59 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsxL7j6bsvdiV5pZmkwSqQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjE4MTExOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTZhZDFiM2I5YWM3ODNkN2MxNmZiYjg4NmI5ZGRlMzViODBjZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQJWzI62s/DK+Td9T/BDAjuzUO15 P9CNmUFNrVxTXEBBSMabFG0wUL+Ia6Cw2X+u/y/hJjp7RcENsVMP249Y3SgOi1wl wpmYOBiGFnShFzHSHw/H4rAScYdp2y1zckHiLpZSAW59qF7tnDRqx0eWMGlvuWMm dZjqQO8z+lr7+qSgnXVkUiYLt1WveT66ce8YYriwjZMqHS0ICwZYhzsWuWvc8cOr suvDMwDVPeVT+AhQPYlGK9rCmshk0D6uvHTQM9p0ezyaKBKCkqWnhYE0UvnWl+4y eAQbDvRj4eUPWC4A/Axh3jBUhVJIkk8Sqcb7Fbeurt52a6mRMtQFsvfZAQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPpq0bO5rHg9fBb7uIa53eNbgM3QMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvMS1tclJzN21zZUQxOEZ2dTRocm5kNDF1QXpkQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGIvMTkwODQzLTE4MDMtNDQ2Mi1hNzk1LTZiYzc1NTc4YjRj My8xL3RWZk0xRHItZ1c1SlV5S0w4VXAxM0NrQlM0MC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIn2TAN BgkqhkiG9w0BAQsFAAOCAQEAWU1A890XOfiooZAIVSOvuWOs4g+pKBHvXMkMzl7M FqTnl3ITreJLsIUnvJuR91rRIo10XqaaI+dDQZYNBG7zFKVC+nvMJeP4ytQOLbMe gm2SziuWFWDlC00zxeQ3ZIAYh8ptTnod6P+C3cye8mKk5Apk0GZSHJjYny0ZZ0YW oaipHq7x2LlRxp0FbFHY10I0uglw7HMy4z+73wFoQwhbAO2jJ19ji1btq3I3XY4g +oPXP+1sJGRV5r2Y5GE10NZ6+zRRi6g8eJS86Jo+TlvYjK1PvpHY3S+rELnHC5e6 VJLR8DKpQlKv1bhD8QjAxM3uYjnNQ7eLZ2THJ1xwZzneWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:19 2025 by rpki-client