This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa File: 1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa (raw, json) Hash identifier: zpB+4xP9DfxiPXYyO76KcFfYZAOeUtNUuwf832esy4E= Subject key identifier: FB:82:B5:21:53:89:9F:B9:C0:4F:4A:EA:EF:EB:C1:34:A0:DF:38:7D Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508 Certificate serial: 019B7CEE09EBC1ACC269DDA03560DA53D091 Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209590 IP address blocks: 195.248.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:09:eb:c1:ac:c2:69:dd:a0:35:60:da:53:d0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb82b52153899fb9c04f4aeaefebc134a0df387d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:71:4b:74:48:52:8c:9f:d8:a5:0d:ed:fc:cf: d8:f8:22:a2:2a:ed:ed:cf:79:db:8b:bd:0e:ef:35: 3b:63:a2:25:8a:16:8b:8a:71:24:5b:46:5b:8f:97: 37:c6:11:90:5b:de:7e:2e:9a:18:57:50:0d:ca:66: 3f:c9:b6:d9:f7:01:d6:1c:5a:5a:83:ab:a1:ac:e5: bd:05:07:ab:0c:1c:3a:b0:fb:44:77:7e:ff:d3:b3: 68:c7:96:04:d3:40:77:e8:ae:0d:73:43:0c:7f:57: f5:34:5d:4d:35:bb:e4:57:ff:51:bc:18:53:96:39: e5:0f:3a:61:5f:48:e7:9b:67:f7:9e:b7:2d:1a:55: 82:07:5e:4f:3b:68:b9:b6:f9:59:e4:e1:db:f8:96: 2a:ac:40:03:dc:23:cd:b3:c6:83:a1:ef:8d:24:5e: 06:c1:fd:fd:7b:79:86:2f:5b:6e:5e:20:f4:c2:84: cc:57:13:7f:a0:80:4b:2d:73:3b:71:90:77:cb:2f: 7b:ce:ea:e5:f5:01:be:1d:fc:fa:58:c8:d8:c4:3e: 94:3d:ab:ed:c4:81:a5:19:1f:47:c7:f5:8c:51:9d: d0:02:f8:ef:a5:4a:e2:6c:8f:06:e9:fd:c4:58:d7: b1:ca:8f:c8:55:e3:2e:5a:92:87:95:f0:30:49:17: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:82:B5:21:53:89:9F:B9:C0:4F:4A:EA:EF:EB:C1:34:A0:DF:38:7D X509v3 Authority Key Identifier: keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.77.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:84:e3:01:17:e3:07:bd:9e:2b:45:4c:17:81:1f:f0:f1:77: 9f:a7:fe:6a:ef:ac:a4:f7:13:27:74:59:9f:54:20:27:46:0b: 6f:27:2c:6f:97:c8:0f:ce:cf:8d:e5:87:5b:7b:46:18:4a:fa: df:84:73:25:35:da:54:bf:86:a3:bf:37:6f:1d:3a:6b:a8:df: ac:f8:74:d1:ab:9f:48:e9:31:98:3d:d6:7c:6b:28:bc:83:c2: 79:31:ce:68:3e:20:c8:c6:1a:d8:1e:41:58:22:8a:4b:5d:db: 10:57:4d:16:41:e0:29:1d:1d:31:c2:0d:08:48:30:61:86:0e: 16:70:49:dc:4d:bc:b6:a2:88:a4:57:90:6d:9c:65:aa:e2:d7: 7a:85:3a:c7:ea:ef:b7:70:f6:36:59:bd:cd:a5:2f:65:f2:6b: fd:f5:f7:8b:ba:20:18:c7:27:2e:f2:ae:74:b1:1f:ac:9b:76: 78:32:5f:27:ad:25:d3:4d:b1:94:2d:74:81:cc:77:67:cb:02: cc:d6:06:f3:a5:fb:55:a2:b4:d0:b9:f2:05:76:3f:05:3a:1e: 76:7a:72:f6:95:b5:91:0c:ac:a6:ff:41:94:5a:b6:bc:41:3d: d5:cb:69:d7:dd:2e:39:b1:e3:d1:72:fe:5e:43:72:e8:38:92: 34:84:77:c0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87gnrwazCad2gNWDaU9CRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODhkMzBkMzUwMmQxZGZiYWU5MzBkNWVhOWNjOWQ3MjYz ZTk1MDgwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjgyYjUyMTUzODk5ZmI5YzA0ZjRhZWFlZmViYzEzNGEwZGYzODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/HFLdEhSjJ/YpQ3t/M/Y+CKiKu3t z3nbi70O7zU7Y6IlihaLinEkW0Zbj5c3xhGQW95+LpoYV1ANymY/ybbZ9wHWHFpa g6uhrOW9BQerDBw6sPtEd37/07Nox5YE00B36K4Nc0MMf1f1NF1NNbvkV/9RvBhT ljnlDzphX0jnm2f3nrctGlWCB15PO2i5tvlZ5OHb+JYqrEAD3CPNs8aDoe+NJF4G wf39e3mGL1tuXiD0woTMVxN/oIBLLXM7cZB3yy97zurl9QG+Hfz6WMjYxD6UPavt xIGlGR9Hx/WMUZ3QAvjvpUribI8G6f3EWNexyo/IVeMuWpKHlfAwSRfhDQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuCtSFTiZ+5wE9K6u/rwTSg3zh9MB8GA1UdIwQY MBaAFHqI0w01AtHfuukw1eqcydcmPpUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYt MGExYzEzYTY4YmU0LzEvMS00SzFJVk9KbjduQVQwcnE3LXZCTktEZk9IMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjEvODhjYmQyLTUxYWItNGNkMy04ZDQ2LTBhMWMxM2E2OGJl NC8xL2VvalREVFVDMGQtNjZURFY2cHpKMXlZLWxRZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMP4TTAN BgkqhkiG9w0BAQsFAAOCAQEAnoTjARfjB72eK0VMF4Ef8PF3n6f+au+spPcTJ3RZ n1QgJ0YLbycsb5fID87PjeWHW3tGGEr634RzJTXaVL+Go783bx06a6jfrPh00auf SOkxmD3WfGsovIPCeTHOaD4gyMYa2B5BWCKKS13bEFdNFkHgKR0dMcINCEgwYYYO FnBJ3E28tqKIpFeQbZxlquLXeoU6x+rvt3D2Nlm9zaUvZfJr/fX3i7ogGMcnLvKu dLEfrJt2eDJfJ60l002xlC10gcx3Z8sCzNYG86X7VaK00LnyBXY/BToednpy9pW1 kQyspv9BlFq2vEE91ctp190uObHj0XL+XkNy6DiSNIR3wA== -----END CERTIFICATE-----Generated at Mon Jan 12 22:44:00 2026 by rpki-client