This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/1-eZ3i0dxANHC7WiRV9EvIipS61A.roa File: 1-eZ3i0dxANHC7WiRV9EvIipS61A.roa (raw, json) Hash identifier: Ak1nuU6x8cZ4QdQ6COojFaQA6BvDEXKIeiGaihwMfjI= Subject key identifier: F9:E6:77:8B:47:71:00:D1:C2:ED:68:91:57:D1:2F:22:2A:52:EB:50 Certificate issuer: /CN=cbbf23ff986768362549462fe092c6315eacca40 Certificate serial: 019B7758B707EE3A43D91FADFB9F4713824B Authority key identifier: CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/1-eZ3i0dxANHC7WiRV9EvIipS61A.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199788 IP address blocks: 185.57.40.0/22 maxlen: 22 2a01:5ba0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b7:07:ee:3a:43:d9:1f:ad:fb:9f:47:13:82:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbf23ff986768362549462fe092c6315eacca40 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e6778b477100d1c2ed689157d12f222a52eb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:48:87:46:5f:56:f5:df:c3:9a:d8:67:c3: 71:2f:5e:2c:63:ab:44:4e:54:19:39:49:fd:a5:05: 35:34:94:05:a3:98:86:b1:95:56:1f:48:15:43:bc: 32:fc:bf:96:0e:7b:13:7f:a5:71:79:e4:cd:7e:cc: d7:f1:21:cb:47:20:33:b9:32:d5:de:31:78:68:74: e3:df:6f:f8:6c:db:c6:8f:d3:ba:74:84:c3:24:5f: a2:93:d6:19:4f:94:76:a9:82:5a:f1:74:b4:d2:42: 26:3a:c1:f3:f1:40:5b:38:d1:61:58:28:47:77:da: 01:f0:56:03:01:de:18:44:a4:5b:63:ad:ae:76:09: 20:d7:7f:de:8d:39:8d:f1:4b:83:7a:00:b1:e3:d2: a9:54:a2:db:96:46:cb:21:b8:a2:4c:7a:7a:ee:26: fe:47:ec:0d:a2:89:2a:9e:10:8a:77:ee:c0:bb:d0: 48:2b:eb:eb:8a:61:87:a1:00:9d:8a:7a:e9:b9:19: 74:37:a7:09:4b:f3:c6:91:36:bd:13:cc:35:77:e4: 34:ed:05:8c:bc:37:2c:87:a8:b4:c8:4c:0b:e4:db: 6d:1e:ca:11:2b:f8:71:ab:4c:54:ee:84:9b:3f:bb: f9:5f:a1:3c:2a:b7:ad:38:07:e1:ad:e4:d2:0e:ff: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E6:77:8B:47:71:00:D1:C2:ED:68:91:57:D1:2F:22:2A:52:EB:50 X509v3 Authority Key Identifier: keyid:CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/1-eZ3i0dxANHC7WiRV9EvIipS61A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.40.0/22 IPv6: 2a01:5ba0::/32 Signature Algorithm: sha256WithRSAEncryption 40:81:2f:b7:c1:e6:53:90:be:76:ed:c7:9d:27:7d:ee:a9:49: b3:a2:a7:46:d9:1d:2e:42:ef:d2:b7:96:b6:4f:99:b0:46:ba: 44:d2:55:4b:ef:17:62:a4:cb:d3:c8:28:91:e8:13:1a:14:ac: 09:3d:db:de:83:a3:3a:5d:5a:20:c3:3d:90:51:5c:64:d5:d3: 1c:94:e1:a5:a0:e4:48:06:78:6b:f2:f2:ed:f4:fd:d1:6f:36: aa:09:5c:e2:9d:6f:34:83:55:5e:95:b9:7b:1b:2a:f9:37:35: cb:0f:0b:e0:24:eb:e7:b9:c0:1b:99:09:b0:ef:92:74:82:0f: 10:38:b0:a4:f1:32:ee:d0:16:0a:fe:90:a1:4f:ff:ce:06:a0: 7b:32:bf:9b:09:79:62:4e:1b:5a:00:3c:38:f4:cf:b7:d8:b1: e8:fb:93:b3:bf:1b:13:2b:1d:62:27:a2:ca:ff:81:80:8f:1c: 1c:9d:b5:d5:d4:99:1b:ca:dd:b2:f3:aa:37:9f:45:8a:77:e9: 15:3c:c3:98:59:4c:b4:20:fa:52:87:78:f9:72:d6:84:33:6f: 66:df:49:7a:8d:9f:7b:c2:2b:72:07:86:a6:4a:b1:44:60:74: 18:cb:3d:4f:1d:c7:71:28:f8:de:6c:c2:10:60:ff:11:71:12: df:26:39:85 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3WLcH7jpD2R+t+59HE4JLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmYyM2ZmOTg2NzY4MzYyNTQ5NDYyZmUwOTJjNjMxNWVh Y2NhNDAwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU2Nzc4YjQ3NzEwMGQxYzJlZDY4OTE1N2QxMmYyMjJhNTJlYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuJIh0ZfVvXfw5rYZ8NxL14sY6tE TlQZOUn9pQU1NJQFo5iGsZVWH0gVQ7wy/L+WDnsTf6VxeeTNfszX8SHLRyAzuTLV 3jF4aHTj32/4bNvGj9O6dITDJF+ik9YZT5R2qYJa8XS00kImOsHz8UBbONFhWChH d9oB8FYDAd4YRKRbY62udgkg13/ejTmN8UuDegCx49KpVKLblkbLIbiiTHp67ib+ R+wNookqnhCKd+7Au9BIK+vrimGHoQCdinrpuRl0N6cJS/PGkTa9E8w1d+Q07QWM vDcsh6i0yEwL5NttHsoRK/hxq0xU7oSbP7v5X6E8KretOAfhreTSDv9uGQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPnmd4tHcQDRwu1okVfRLyIqUutQMB8GA1UdIwQY MBaAFMu/I/+YZ2g2JUlGL+CSxjFerMpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc4al81aG5hRFlsU1VZdjRKTEdNVjZzeWtBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xYTdiZTUtM2NmMi00MGM1LWJhNjct ODU0MTgyZjA5ZWY1LzEvMS1lWjNpMGR4QU5IQzdXaVJWOUV2SWlwUzYxQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjMvMWE3YmU1LTNjZjItNDBjNS1iYTY3LTg1NDE4MmYwOWVm NS8xL3k3OGpfNWhuYURZbFNVWXY0SkxHTVY2c3lrQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArk5KDAN BAIAAjAHAwUAKgFboDANBgkqhkiG9w0BAQsFAAOCAQEAQIEvt8HmU5C+du3HnSd9 7qlJs6KnRtkdLkLv0reWtk+ZsEa6RNJVS+8XYqTL08gokegTGhSsCT3b3oOjOl1a IMM9kFFcZNXTHJThpaDkSAZ4a/Ly7fT90W82qglc4p1vNINVXpW5exsq+Tc1yw8L 4CTr57nAG5kJsO+SdIIPEDiwpPEy7tAWCv6QoU//zgagezK/mwl5Yk4bWgA8OPTP t9ix6PuTs78bEysdYieiyv+BgI8cHJ211dSZG8rdsvOqN59FinfpFTzDmFlMtCD6 Uod4+XLWhDNvZt9Jeo2fe8IrcgeGpkqxRGB0GMs9Tx3HcSj43mzCEGD/EXES3yY5 hQ== -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:32 2026 by rpki-client