This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/m1puyXsqifJhZhUWL-_6YnwL1mI.roa File: m1puyXsqifJhZhUWL-_6YnwL1mI.roa (raw, json) Hash identifier: fIIYEWkHjVVTWq75uZEvzmf8hXUsvrfxvNJcwhLVfwI= Subject key identifier: 9B:5A:6E:C9:7B:2A:89:F2:61:66:15:16:2F:EF:FA:62:7C:0B:D6:62 Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Certificate serial: 019B7DCA1A4D7B7862936C820DAE98F4F917 Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/m1puyXsqifJhZhUWL-_6YnwL1mI.roa Signing time: Fri 02 Jan 2026 08:19:15 +0000 ROA not before: Fri 02 Jan 2026 08:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20530 IP address blocks: 185.1.103.0/24 maxlen: 24 185.196.12.0/24 maxlen: 24 185.196.13.0/24 maxlen: 24 185.196.15.0/24 maxlen: 24 2001:7f8:49::/48 maxlen: 64 2001:7f8:49::/64 maxlen: 64 2001:7f8:49:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1a:4d:7b:78:62:93:6c:82:0d:ae:98:f4:f9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Validity Not Before: Jan 2 08:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b5a6ec97b2a89f2616615162feffa627c0bd662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:ac:c0:24:b9:51:be:19:a6:e0:b3:c4:31: 77:65:51:d3:a7:75:58:87:af:3d:ee:41:f9:6e:7d: b1:51:2f:d4:af:7c:c5:1e:45:72:a8:64:f8:76:dd: 5d:0a:db:b0:44:a6:e8:e6:17:22:e4:36:85:5c:a3: 9a:54:83:45:99:01:34:bd:ce:fb:37:3f:01:11:12: 61:f2:c0:ba:05:7d:0d:88:31:7d:1e:a0:2c:98:77: 8d:2f:a9:bf:16:86:72:39:fb:b3:50:2e:6f:55:f7: b9:92:3b:5d:f3:3f:83:95:3d:27:6b:f5:31:42:87: b6:c3:0b:27:71:d3:7c:4b:92:30:8d:06:5f:44:38: 1f:9a:e1:4d:f1:e8:30:b7:88:b8:15:f9:a9:2f:f9: 28:c6:1b:41:0f:7b:b9:49:5e:f1:a7:22:fc:2c:40: 9d:98:d4:ee:ad:9c:54:cd:83:99:d7:72:5f:dc:57: ec:8d:d3:22:fb:74:9e:0f:0d:a2:8a:0f:89:71:d2: 09:1b:b9:81:26:41:c1:c7:6e:ef:92:f0:0e:57:7e: be:9b:79:9d:46:a0:f0:3a:14:42:5f:54:02:61:be: 1f:b7:2c:b0:e7:38:26:c8:3d:29:2c:14:b2:89:cd: bb:c1:1f:3c:4f:2f:e6:ef:fc:7c:53:a1:c4:11:eb: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5A:6E:C9:7B:2A:89:F2:61:66:15:16:2F:EF:FA:62:7C:0B:D6:62 X509v3 Authority Key Identifier: keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/m1puyXsqifJhZhUWL-_6YnwL1mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.103.0/24 185.196.12.0/23 185.196.15.0/24 IPv6: 2001:7f8:49::/48 Signature Algorithm: sha256WithRSAEncryption 68:4b:55:09:87:9f:61:f7:b1:30:45:dc:43:cb:a9:14:49:23: 43:12:ec:d0:60:ef:78:6e:c6:06:5e:e0:de:30:a8:09:14:39: a2:66:ee:63:7c:96:ff:3c:77:15:92:a6:8e:f5:f3:c0:c4:a3: d3:dc:0c:19:ee:f1:b0:22:a4:46:d8:7d:c2:ac:48:7b:f3:3e: a0:af:11:b7:8f:f8:d4:a4:01:9f:91:aa:e9:61:6c:1d:e2:85: c7:cd:26:6a:fc:4e:ca:e4:e2:3c:46:23:90:bb:18:6f:ab:b9: e6:38:25:66:0a:6a:29:4e:dd:d5:5d:6f:c2:be:45:74:26:cb: 5f:94:74:97:a1:53:29:b6:8a:59:49:05:d0:32:01:6a:44:f7: 3c:96:72:40:3f:1c:99:25:fe:4b:ca:d5:77:8e:b9:6a:60:6e: 94:c9:d5:70:7b:6e:e4:31:1f:19:b0:35:a3:07:ba:60:7b:57: 46:89:12:6b:6e:2b:d4:6b:76:a4:b5:bd:c8:fe:9c:e4:ed:ec: c0:b2:68:ff:3d:e2:15:a4:5c:77:ed:cd:d1:ab:9d:f8:63:c3: d0:c5:92:30:4b:2c:bf:8f:6d:ae:ea:2f:d8:7a:3a:d0:5c:51: 13:28:29:e3:5b:80:7b:14:af:5a:84:29:c8:03:24:df:8d:f0: 87:c6:ae:df -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9yhpNe3hik2yCDa6Y9PkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZjdmMjRkZTNhOWU1MmM5NGM2Y2E2ODAzMTI0NDFkZDlj MDg4MDQwHhcNMjYwMTAyMDgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjVhNmVjOTdiMmE4OWYyNjE2NjE1MTYyZmVmZmE2MjdjMGJkNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf6swCS5Ub4ZpuCzxDF3ZVHTp3VY h6897kH5bn2xUS/Ur3zFHkVyqGT4dt1dCtuwRKbo5hci5DaFXKOaVINFmQE0vc77 Nz8BERJh8sC6BX0NiDF9HqAsmHeNL6m/FoZyOfuzUC5vVfe5kjtd8z+DlT0na/Ux Qoe2wwsncdN8S5IwjQZfRDgfmuFN8egwt4i4FfmpL/koxhtBD3u5SV7xpyL8LECd mNTurZxUzYOZ13Jf3FfsjdMi+3SeDw2iig+JcdIJG7mBJkHBx27vkvAOV36+m3md RqDwOhRCX1QCYb4ftyyw5zgmyD0pLBSyic27wR88Ty/m7/x8U6HEEetkxQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJtabsl7KonyYWYVFi/v+mJ8C9ZiMB8GA1UdIwQY MBaAFLj38k3jqeUslMbKaAMSRB3ZwIgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYt ODNmMTU2YzdlZjkyLzEvbTFwdXlYc3FpZkpoWmhVV0wtXzZZbndMMW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYtODNmMTU2YzdlZjky LzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAuQFnAwQB ucQMAwQAucQPMA8EAgACMAkDBwAgAQf4AEkwDQYJKoZIhvcNAQELBQADggEBAGhL VQmHn2H3sTBF3EPLqRRJI0MS7NBg73huxgZe4N4wqAkUOaJm7mN8lv88dxWSpo71 88DEo9PcDBnu8bAipEbYfcKsSHvzPqCvEbeP+NSkAZ+RqulhbB3ihcfNJmr8Tsrk 4jxGI5C7GG+rueY4JWYKailO3dVdb8K+RXQmy1+UdJehUym2illJBdAyAWpE9zyW ckA/HJkl/kvK1XeOuWpgbpTJ1XB7buQxHxmwNaMHumB7V0aJEmtuK9RrdqS1vcj+ nOTt7MCyaP894hWkXHftzdGrnfhjw9DFkjBLLL+Pba7qL9h6OtBcURMoKeNbgHsU r1qEKcgDJN+N8IfGrt8= -----END CERTIFICATE-----Generated at Mon Jan 12 14:06:41 2026 by rpki-client