This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/1-w3-HT-b4gN55Ez02d0Ltxhd_18.roa File: 1-w3-HT-b4gN55Ez02d0Ltxhd_18.roa (raw, json) Hash identifier: SZE3EWQBz3QYJjq31FoNPzS9VUyILcF5vCKxR6HmvGg= Subject key identifier: FB:0D:FE:1D:3F:9B:E2:03:79:E4:4C:F4:D9:DD:0B:B7:18:5D:FF:5F Certificate issuer: /CN=4ca85ad43b7b47e752878307184794d70a02766c Certificate serial: 019B7C128F0A35715EC81919F7C0798FBC49 Authority key identifier: 4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/1-w3-HT-b4gN55Ez02d0Ltxhd_18.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29028 IP address blocks: 194.169.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8f:0a:35:71:5e:c8:19:19:f7:c0:79:8f:bc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca85ad43b7b47e752878307184794d70a02766c Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb0dfe1d3f9be20379e44cf4d9dd0bb7185dff5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:b2:80:d8:e6:7e:b6:88:2b:57:12:53:6b: 3d:26:d7:e1:9d:62:b5:3e:36:90:58:c1:fa:86:da: e9:6f:a2:5a:34:a7:3a:b5:fa:53:6c:fa:ca:29:67: 3b:fd:fb:17:76:c3:7b:6e:04:38:c2:a9:19:c5:de: 8c:dd:58:91:9d:6c:9f:de:d7:84:8e:84:9a:f1:c7: 0f:90:39:fe:11:b7:47:24:a8:2e:a0:79:35:1f:bd: ff:bd:d7:59:65:05:d2:a2:65:5a:28:cf:96:61:72: cc:34:74:95:59:cf:1d:7e:5b:b9:39:3b:a5:13:5b: b0:43:03:7b:83:17:8c:2e:83:d2:25:0c:2f:b6:73: 97:bb:f8:78:85:91:20:0d:d5:d8:e3:0a:e1:4d:d2: 8a:c8:a0:6e:e9:b9:a9:24:bc:dc:9b:c5:6f:89:0f: f2:f9:f4:fd:6d:f6:81:5c:8a:42:dc:18:dd:67:50: d1:f9:36:63:da:f2:31:f2:1c:34:e1:57:16:49:26: 99:09:a5:83:de:ed:83:1e:d7:09:b5:04:12:ae:74: f5:b9:f4:90:69:15:b8:02:b7:6f:72:08:52:d5:79: d9:9b:a2:5c:72:0e:50:ae:64:1b:71:c4:34:fe:9f: 6c:8c:57:fd:a3:1b:76:10:da:a8:13:22:43:aa:59: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0D:FE:1D:3F:9B:E2:03:79:E4:4C:F4:D9:DD:0B:B7:18:5D:FF:5F X509v3 Authority Key Identifier: keyid:4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/1-w3-HT-b4gN55Ez02d0Ltxhd_18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.248.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:fa:bc:73:10:1c:9c:b9:d2:cd:9f:fc:05:37:50:ab:cb:d0: 1a:d5:ee:e0:82:b0:2f:08:31:70:57:1b:c4:98:51:c5:ab:6a: f6:a4:6d:eb:12:7c:c2:e2:53:27:97:12:e5:8b:75:3d:b9:47: 72:ad:8b:b6:e8:f8:69:aa:35:1a:8a:2b:92:c2:fb:9a:b1:3c: 86:b4:8e:29:ef:39:f3:f4:12:29:b1:66:ec:83:67:06:07:4d: 32:d4:45:29:52:2c:ec:8b:42:4e:79:91:1b:91:d3:79:8c:71: d6:29:5c:9e:0c:b0:bf:f2:07:46:35:91:ee:65:57:de:a9:91: d0:f4:9d:f2:97:63:4a:1f:1f:e5:36:97:60:5b:85:6e:96:6f: 62:6f:df:42:61:17:17:94:4a:57:86:2e:87:25:f8:a6:84:e6: 1e:f5:97:56:68:ab:a3:1a:b0:10:cf:9f:b3:24:45:5a:c3:f3: 47:ce:74:37:47:3b:38:69:46:26:13:2c:07:88:78:d9:bd:a4: d4:f6:c4:48:00:35:0a:2c:c9:a1:5d:1a:e6:11:b3:2e:f5:c2: 56:29:86:df:36:48:e8:5a:46:bd:78:29:43:10:3f:f7:82:d2: 09:ec:2d:a8:a4:34:3e:18:82:9c:ae:70:6f:1c:8a:40:a4:b1: e7:c5:4f:6a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8Eo8KNXFeyBkZ98B5j7xJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTg1YWQ0M2I3YjQ3ZTc1Mjg3ODMwNzE4NDc5NGQ3MGEw Mjc2NmMwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBkZmUxZDNmOWJlMjAzNzllNDRjZjRkOWRkMGJiNzE4NWRmZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb6ygNjmfraIK1cSU2s9JtfhnWK1 PjaQWMH6htrpb6JaNKc6tfpTbPrKKWc7/fsXdsN7bgQ4wqkZxd6M3ViRnWyf3teE joSa8ccPkDn+EbdHJKguoHk1H73/vddZZQXSomVaKM+WYXLMNHSVWc8dflu5OTul E1uwQwN7gxeMLoPSJQwvtnOXu/h4hZEgDdXY4wrhTdKKyKBu6bmpJLzcm8VviQ/y +fT9bfaBXIpC3BjdZ1DR+TZj2vIx8hw04VcWSSaZCaWD3u2DHtcJtQQSrnT1ufSQ aRW4ArdvcghS1XnZm6Jccg5QrmQbccQ0/p9sjFf9oxt2ENqoEyJDqln/hQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsN/h0/m+IDeeRM9NndC7cYXf9fMB8GA1UdIwQY MBaAFEyoWtQ7e0fnUoeDBxhHlNcKAnZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtoYTFEdDdSLWRTaDRNSEdFZVUxd29DZG13LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYmVhOGYtOWZiYy00NzY1LTkzYmMt MjIyMjUyOTI5ODczLzEvMS13My1IVC1iNGdONTVFejAyZDBMdHhoZF8xOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjAvMmJlYThmLTlmYmMtNDc2NS05M2JjLTIyMjI1MjkyOTg3 My8xL1RLaGExRHQ3Ui1kU2g0TUhHRWVVMXdvQ2Rtdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKp+DAN BgkqhkiG9w0BAQsFAAOCAQEAS/q8cxAcnLnSzZ/8BTdQq8vQGtXu4IKwLwgxcFcb xJhRxatq9qRt6xJ8wuJTJ5cS5Yt1PblHcq2Ltuj4aao1GoorksL7mrE8hrSOKe85 8/QSKbFm7INnBgdNMtRFKVIs7ItCTnmRG5HTeYxx1ilcngywv/IHRjWR7mVX3qmR 0PSd8pdjSh8f5TaXYFuFbpZvYm/fQmEXF5RKV4YuhyX4poTmHvWXVmiroxqwEM+f syRFWsPzR850N0c7OGlGJhMsB4h42b2k1PbESAA1CizJoV0a5hGzLvXCVimG3zZI 6FpGvXgpQxA/94LSCewtqKQ0PhiCnK5wbxyKQKSx58VPag== -----END CERTIFICATE-----Generated at Mon Jan 12 07:35:38 2026 by rpki-client