This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa File: 1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa (raw, json) Hash identifier: seOih4wjhJ6V5ThAImMQ9eV74z3GC26duBl8NYe046I= Subject key identifier: FB:4A:E9:27:76:04:68:08:BD:A3:69:73:59:5E:5E:05:7E:D6:D2:21 Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45 Certificate serial: 019B7C7FEA006B6E3CEB62F0855997A80248 Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49175 IP address blocks: 185.138.84.0/24 maxlen: 24 185.138.85.0/24 maxlen: 24 185.138.86.0/24 maxlen: 24 185.138.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ea:00:6b:6e:3c:eb:62:f0:85:59:97:a8:02:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45 Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb4ae92776046808bda36973595e5e057ed6d221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:7a:93:b8:b0:8e:2a:88:ac:cd:f9:3c:e5: b2:e8:cd:03:ba:e5:8f:d8:aa:a8:73:4c:86:d9:f9: 7e:2a:15:12:ba:d8:31:98:61:56:b2:29:85:a4:f5: bd:d9:e0:c2:87:17:12:94:f6:d5:63:67:35:a0:dc: 06:e7:b7:e7:00:42:04:0e:3c:80:58:00:75:65:ce: 42:08:b1:70:82:80:89:c8:41:07:5f:00:b9:4c:b7: 76:a4:a5:2b:b5:01:07:7b:2d:40:0b:fb:1d:3a:7e: 6d:d7:e6:49:09:a5:da:90:0e:48:83:fe:46:fa:cc: 35:0b:88:58:c4:7d:f1:11:a0:90:33:bc:d3:03:8e: 2b:ec:e9:41:6f:16:5d:da:a8:26:58:8d:df:8e:e1: 90:f7:ad:8a:ae:9c:4a:dd:cf:2f:f2:c4:9f:73:6a: 91:fc:cf:d2:d7:1b:0a:71:70:2d:6e:39:43:0a:a2: 3e:b1:b5:4d:be:c8:21:ea:5a:49:fb:d7:12:5f:ac: 81:fc:db:1f:64:f9:cf:ec:44:ba:80:24:21:6e:35: 94:24:45:37:4c:4d:fd:b2:45:0d:a3:95:36:dc:b5: ce:11:d3:2f:60:a5:cc:78:9b:e5:b1:30:c2:0f:bc: fd:97:a3:ed:41:f4:25:62:f7:fb:42:2b:86:99:ee: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:E9:27:76:04:68:08:BD:A3:69:73:59:5E:5E:05:7E:D6:D2:21 X509v3 Authority Key Identifier: keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.84.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:a7:1f:a6:44:90:8c:4e:8d:e5:7a:62:99:32:8a:c9:60:32: 7e:83:b4:34:88:79:28:a7:7c:f3:b0:79:da:88:ef:b4:20:71: 0e:ff:92:90:ed:2b:ca:13:f1:78:96:07:ee:86:18:50:60:ac: 9e:55:b0:20:8f:78:06:0a:33:11:f4:4b:6b:e8:95:1e:59:8a: 4f:ea:51:98:de:0c:ff:2a:de:5d:14:ac:03:8f:a5:92:d4:6d: ed:36:fb:b8:7e:90:0f:1a:a5:f2:df:f7:3a:4c:f1:8c:91:95: cd:1b:79:2a:6e:d2:4f:61:9e:65:29:c3:12:61:87:bf:b6:aa: 5a:ef:44:c6:ea:be:58:3f:72:b0:89:f3:ec:ba:a3:ad:8f:6e: ff:fc:c3:a5:9c:33:45:bd:8e:6b:48:c3:03:09:a5:45:ff:80: 93:3a:4f:48:42:21:d0:c7:fd:ec:57:a7:0c:46:d0:3e:2b:58: 19:f5:7d:9a:19:47:3e:5c:ff:8a:9d:b8:31:51:91:62:ca:68: b7:6f:69:22:38:71:05:71:3f:be:d3:ba:ae:96:dd:9c:23:8e: 3f:4e:86:98:55:1e:87:90:71:27:94:ab:ce:97:79:56:3a:f9: 50:0d:e5:6d:d3:8c:df:0a:74:b6:9c:af:f4:95:7f:fc:23:b0: cd:80:7e:69 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f+oAa24862LwhVmXqAJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjAxOTkwNDRjNTRjMjM3OTAzZjY1NmY4M2IyNjQwYzJk MWRmNDUwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjRhZTkyNzc2MDQ2ODA4YmRhMzY5NzM1OTVlNWUwNTdlZDZkMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxR6k7iwjiqIrM35POWy6M0DuuWP 2Kqoc0yG2fl+KhUSutgxmGFWsimFpPW92eDChxcSlPbVY2c1oNwG57fnAEIEDjyA WAB1Zc5CCLFwgoCJyEEHXwC5TLd2pKUrtQEHey1AC/sdOn5t1+ZJCaXakA5Ig/5G +sw1C4hYxH3xEaCQM7zTA44r7OlBbxZd2qgmWI3fjuGQ962KrpxK3c8v8sSfc2qR /M/S1xsKcXAtbjlDCqI+sbVNvsgh6lpJ+9cSX6yB/NsfZPnP7ES6gCQhbjWUJEU3 TE39skUNo5U23LXOEdMvYKXMeJvlsTDCD7z9l6PtQfQlYvf7QiuGme4ysQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtK6Sd2BGgIvaNpc1leXgV+1tIhMB8GA1UdIwQY MBaAFEAgGZBExUwjeQP2Vvg7JkDC0d9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUt NGI3NTBiYmM2MTY3LzEvMS0wcnBKM1lFYUFpOW8ybHpXVjVlQlg3VzBpRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWEvNGJhMGRjLTQ3MDItNDdjMS1iYTllLTRiNzUwYmJjNjE2 Ny8xL1FDQVprRVRGVENONUFfWlctRHNtUU1MUjMwVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmKVDAN BgkqhkiG9w0BAQsFAAOCAQEAe6cfpkSQjE6N5XpimTKKyWAyfoO0NIh5KKd887B5 2ojvtCBxDv+SkO0ryhPxeJYH7oYYUGCsnlWwII94BgozEfRLa+iVHlmKT+pRmN4M /yreXRSsA4+lktRt7Tb7uH6QDxql8t/3OkzxjJGVzRt5Km7ST2GeZSnDEmGHv7aq Wu9Exuq+WD9ysInz7LqjrY9u//zDpZwzRb2Oa0jDAwmlRf+AkzpPSEIh0Mf97Fen DEbQPitYGfV9mhlHPlz/ip24MVGRYspot29pIjhxBXE/vtO6rpbdnCOOP06GmFUe h5BxJ5Srzpd5Vjr5UA3lbdOM3wp0tpyv9JV//COwzYB+aQ== -----END CERTIFICATE-----Generated at Fri Jan 2 18:31:26 2026 by rpki-client