This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-V4c1dO-uQwsSLTuPCARWqGquvA.roa File: 1-V4c1dO-uQwsSLTuPCARWqGquvA.roa (raw, json) Hash identifier: 05bsSmRTLsqlQqaAJYUR6tB90rhVXREfO4xl9Ohf9wQ= Subject key identifier: F9:5E:1C:D5:D3:BE:B9:0C:2C:48:B4:EE:3C:20:11:5A:A1:AA:BA:F0 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C4DFC9ABDFC5F4824BFA8A5131A7 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-V4c1dO-uQwsSLTuPCARWqGquvA.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 158.173.129.0/24 maxlen: 24 158.173.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c4:df:c9:ab:df:c5:f4:82:4b:fa:8a:51:31:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f95e1cd5d3beb90c2c48b4ee3c20115aa1aabaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:63:26:46:b3:e1:20:8e:79:f0:4d:d9:dd: d7:e4:ee:c2:a3:49:17:c2:4f:4b:6d:c8:bc:ee:5b: 7b:ef:5a:d8:64:20:1a:9f:e7:77:29:e4:6b:04:04: 25:d4:3f:b1:32:dd:e2:ef:c6:40:63:b8:a4:2c:a2: a5:59:6c:ed:39:31:e4:f4:4f:89:39:05:84:a2:90: 7e:ea:8e:40:e3:f5:76:fa:16:a3:53:be:ae:7f:8c: a1:0b:48:b0:40:e7:64:84:2b:05:c6:cf:0a:09:13: 0a:72:bc:65:b0:7f:d3:89:ef:6e:f4:39:06:08:9a: 08:19:29:75:30:69:4d:fd:02:c3:4d:78:1c:c9:c9: b3:59:f7:58:50:9c:70:e5:17:9a:f2:ca:ed:a8:bf: d7:fe:ea:ac:b5:6d:f5:f9:62:ef:8d:84:8b:5b:aa: 84:a4:b3:6b:1e:b0:b4:1e:41:6c:16:c4:09:8b:a7: b6:e3:77:4e:08:20:e2:0d:35:4a:c2:94:95:ae:0d: f2:94:5b:9d:50:fc:02:17:a2:da:6c:6c:13:0a:d2: a2:50:a4:bf:59:00:1a:35:7e:b3:95:47:5a:94:1e: 6f:59:08:0a:04:95:6f:ba:f0:04:20:a5:c8:52:0a: d3:0c:64:77:79:cb:46:f5:b1:7e:5d:bd:ea:ec:36: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5E:1C:D5:D3:BE:B9:0C:2C:48:B4:EE:3C:20:11:5A:A1:AA:BA:F0 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-V4c1dO-uQwsSLTuPCARWqGquvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.129.0-158.173.130.255 Signature Algorithm: sha256WithRSAEncryption d0:8d:2d:42:a7:2e:f5:8f:5e:a8:61:16:f8:eb:fd:fc:e4:06: 75:10:4b:61:ce:9e:50:9c:fa:49:8b:1e:98:98:64:0d:3b:42: e7:02:33:2e:96:ac:97:df:5c:dd:23:71:8c:fb:55:12:43:c1: ed:35:e0:0e:ba:dd:ae:58:b3:e7:02:74:57:67:08:52:35:5a: dc:a0:23:3b:0e:ec:37:03:72:27:e9:e9:9d:31:c5:88:00:6f: 8d:01:02:e5:ca:d4:f1:51:29:cd:9c:f3:6e:d4:9a:ef:44:00: 24:23:51:17:27:2f:b4:24:8d:52:96:56:7a:74:c3:67:82:86: 77:2a:97:6c:ff:29:9d:42:4c:7f:16:60:41:14:cd:93:34:ca: a0:8a:42:53:d8:da:e8:78:a1:a4:2f:2c:c7:df:c0:c6:f6:d2: fe:3f:47:72:31:be:b1:99:ee:7f:01:89:ff:81:08:7b:5d:eb: 2a:f8:46:d1:77:64:56:0c:eb:f9:f5:67:54:dd:81:bd:33:d5: 41:19:24:93:d9:83:a0:fc:a4:d7:17:99:0f:6c:90:d4:95:65: 7a:22:d7:41:b7:78:d0:a6:69:9a:1e:62:7b:46:1e:fe:48:e5: 49:7e:57:a8:68:97:f7:48:93:9e:65:f2:ec:f0:5e:02:0d:1a: 65:4b:37:d2 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt+N8TfyavfxfSCS/qKUTGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTVlMWNkNWQzYmViOTBjMmM0OGI0ZWUzYzIwMTE1YWExYWFiYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq1jJkaz4SCOefBN2d3X5O7Co0kX wk9Lbci87lt771rYZCAan+d3KeRrBAQl1D+xMt3i78ZAY7ikLKKlWWztOTHk9E+J OQWEopB+6o5A4/V2+hajU76uf4yhC0iwQOdkhCsFxs8KCRMKcrxlsH/Tie9u9DkG CJoIGSl1MGlN/QLDTXgcycmzWfdYUJxw5Rea8srtqL/X/uqstW31+WLvjYSLW6qE pLNrHrC0HkFsFsQJi6e243dOCCDiDTVKwpSVrg3ylFudUPwCF6LabGwTCtKiUKS/ WQAaNX6zlUdalB5vWQgKBJVvuvAEIKXIUgrTDGR3ectG9bF+Xb3q7DZuhwIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPleHNXTvrkMLEi07jwgEVqhqrrwMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvMS1WNGMxZE8tdVF3c1NMVHVQQ0FSV3FHcXV2QS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjYvMmJhOTdlLTU5OGItNDhkZC04ZDU2LWY1ZmI3MWI5YTUx Zi8xLzhFcFlCSDgzdThCWGxFdV9qSzJIUW9lVmt0by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAnq2B AwQAnq2CMA0GCSqGSIb3DQEBCwUAA4IBAQDQjS1Cpy71j16oYRb46/385AZ1EEth zp5QnPpJix6YmGQNO0LnAjMulqyX31zdI3GM+1USQ8HtNeAOut2uWLPnAnRXZwhS NVrcoCM7Duw3A3In6emdMcWIAG+NAQLlytTxUSnNnPNu1JrvRAAkI1EXJy+0JI1S llZ6dMNngoZ3Kpds/ymdQkx/FmBBFM2TNMqgikJT2NroeKGkLyzH38DG9tL+P0dy Mb6xme5/AYn/gQh7Xesq+EbRd2RWDOv59WdU3YG9M9VBGSST2YOg/KTXF5kPbJDU lWV6ItdBt3jQpmmaHmJ7Rh7+SOVJfleoaJf3SJOeZfLs8F4CDRplSzfS -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:15 2026 by rpki-client