This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/1-gB5rLPnht4_2fTXD19vo6rGOgY.roa File: 1-gB5rLPnht4_2fTXD19vo6rGOgY.roa (raw, json) Hash identifier: MrHKvfkkxIsYa65L6lLIguftbi69CSEX2nGOpQCCn6M= Subject key identifier: FA:00:79:AC:B3:E7:86:DE:3F:D9:F4:D7:0F:5F:6F:A3:AA:C6:3A:06 Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Certificate serial: 019B7EA4B3EE8AB54BBB46F6E69A863DABBD Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/1-gB5rLPnht4_2fTXD19vo6rGOgY.roa Signing time: Fri 02 Jan 2026 12:18:01 +0000 ROA not before: Fri 02 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203030 IP address blocks: 185.27.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b3:ee:8a:b5:4b:bb:46:f6:e6:9a:86:3d:ab:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Validity Not Before: Jan 2 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa0079acb3e786de3fd9f4d70f5f6fa3aac63a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:11:d5:6e:f2:81:2e:ee:48:5b:c7:a9:5b: 61:43:6b:fa:a6:a2:3f:4b:d3:53:e1:cf:b0:d2:29: 19:c1:4c:c2:30:7e:7c:c4:1d:cd:de:0f:d3:d1:47: 53:e9:68:55:2c:85:37:0a:59:47:92:ef:cc:10:4b: ea:c9:f6:37:9b:c6:13:e8:73:f7:0e:34:0d:ac:49: a2:a4:f7:c7:55:cd:9d:36:94:0f:e5:91:48:57:58: 9a:fa:2a:78:b5:d1:d5:30:54:eb:29:cf:8f:9b:a7: 61:0f:c1:a8:35:7b:dc:ab:bd:06:a9:9a:72:04:33: a0:64:b2:86:90:2b:d4:e2:48:e5:27:9b:aa:41:c2: 78:ed:73:ad:ba:e4:21:4d:ba:ae:2d:a6:2f:0f:a5: a8:78:1a:b0:47:95:64:c1:93:b9:29:18:6d:4a:f7: d4:cc:49:26:23:23:07:9f:cf:f1:4d:c7:bd:73:6f: d8:2f:b7:91:b6:72:7e:b6:02:65:8f:c9:3a:5f:72: 06:be:2f:bb:3b:85:b5:00:80:31:10:69:03:91:a6: 1a:e9:03:ce:0c:8e:99:27:77:4e:60:4c:29:58:b3: 9c:36:09:25:e0:e6:08:dc:5b:ce:7f:8d:69:70:09: 3a:b3:a3:00:b5:51:cf:cc:00:5a:be:44:72:dd:31: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:00:79:AC:B3:E7:86:DE:3F:D9:F4:D7:0F:5F:6F:A3:AA:C6:3A:06 X509v3 Authority Key Identifier: keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/1-gB5rLPnht4_2fTXD19vo6rGOgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.224.0/22 Signature Algorithm: sha256WithRSAEncryption 43:9c:26:aa:ab:63:c7:8f:e2:41:71:81:8a:60:6c:46:80:33: 12:05:45:2d:6d:b6:57:83:aa:1c:e7:58:36:e1:a8:ca:57:e5: 70:f8:fa:94:ef:9b:2c:e2:2e:a0:df:2b:60:0b:d4:de:80:92: 50:d5:ea:18:84:b8:d0:e3:9a:5c:cf:38:84:e1:be:47:bf:2e: 97:69:49:fd:0a:d4:2d:b4:b0:31:b2:db:5b:52:a0:c4:3c:38: 86:3b:cb:3b:28:ec:78:52:51:e6:76:98:e7:a6:5f:30:ee:db: 52:3e:31:77:2a:d3:a1:f0:9d:9a:2d:94:74:8b:c9:0b:1e:53: 59:86:b3:51:b3:4b:d5:39:90:1f:81:87:38:73:51:4e:35:79: aa:e4:d0:23:2a:13:e8:e7:49:ba:01:73:1e:64:2c:0e:8a:ac: d1:5e:4d:51:99:1a:73:28:19:e4:b6:a4:98:73:4d:66:bb:cb: e8:2b:3a:0f:cd:8b:f0:7a:d7:08:98:c4:10:74:0e:60:36:bd: 4a:b2:b0:ac:62:3e:5f:67:53:ab:d2:ad:41:ce:be:22:92:fa: 76:32:e2:c1:ab:d9:03:50:98:f7:f4:3c:fa:0c:31:54:da:ea: e4:5b:b6:d1:1a:b0:b9:a1:2c:00:c5:74:59:64:00:67:e7:24: 16:2e:66:78 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pLPuirVLu0b25pqGPau9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2NmMTM3MjQ1YWVjNjZiMmY2NzRhODU4MWE3NDQ5YWUy Y2ZjZTQwHhcNMjYwMTAyMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTAwNzlhY2IzZTc4NmRlM2ZkOWY0ZDcwZjVmNmZhM2FhYzYzYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XsR1W7ygS7uSFvHqVthQ2v6pqI/ S9NT4c+w0ikZwUzCMH58xB3N3g/T0UdT6WhVLIU3CllHku/MEEvqyfY3m8YT6HP3 DjQNrEmipPfHVc2dNpQP5ZFIV1ia+ip4tdHVMFTrKc+Pm6dhD8GoNXvcq70GqZpy BDOgZLKGkCvU4kjlJ5uqQcJ47XOtuuQhTbquLaYvD6WoeBqwR5VkwZO5KRhtSvfU zEkmIyMHn8/xTce9c2/YL7eRtnJ+tgJlj8k6X3IGvi+7O4W1AIAxEGkDkaYa6QPO DI6ZJ3dOYEwpWLOcNgkl4OYI3FvOf41pcAk6s6MAtVHPzABavkRy3TFl8wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoAeayz54beP9n01w9fb6OqxjoGMB8GA1UdIwQY MBaAFHrM8TckWuxmsvZ0qFgadEmuLPzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTIt N2ZjM2ZlMDVmMzEwLzEvMS1nQjVyTFBuaHQ0XzJmVFhEMTl2bzZyR09nWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvMzhmMjRiLWI2OGUtNDE0My1iYjUyLTdmYzNmZTA1ZjMx MC8xL2VzenhOeVJhN0dheTluU29XQnAwU2E0c19PUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkb4DAN BgkqhkiG9w0BAQsFAAOCAQEAQ5wmqqtjx4/iQXGBimBsRoAzEgVFLW22V4OqHOdY NuGoylflcPj6lO+bLOIuoN8rYAvU3oCSUNXqGIS40OOaXM84hOG+R78ul2lJ/QrU LbSwMbLbW1KgxDw4hjvLOyjseFJR5naY56ZfMO7bUj4xdyrTofCdmi2UdIvJCx5T WYazUbNL1TmQH4GHOHNRTjV5quTQIyoT6OdJugFzHmQsDoqs0V5NUZkacygZ5Lak mHNNZrvL6Cs6D82L8HrXCJjEEHQOYDa9SrKwrGI+X2dTq9KtQc6+IpL6djLiwavZ A1CY9/Q8+gwxVNrq5Fu20RqwuaEsAMV0WWQAZ+ckFi5meA== -----END CERTIFICATE-----Generated at Sun Jan 11 20:15:11 2026 by rpki-client