This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-Nas47NsFt9rQZVc-lpYGV1wUFI.roa File: 1-Nas47NsFt9rQZVc-lpYGV1wUFI.roa (raw, json) Hash identifier: 5zFMEDnYjVLNOBqA7ZAr39mWcnXvrE9TaBX9S19F0As= Subject key identifier: F8:D6:AC:E3:B3:6C:16:DF:6B:41:95:5C:FA:5A:58:19:5D:70:50:52 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8577272628DE1C495508CC1E6CC1CC Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-Nas47NsFt9rQZVc-lpYGV1wUFI.roa Signing time: Fri 02 Jan 2026 16:23:31 +0000 ROA not before: Fri 02 Jan 2026 16:23:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 192.124.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:77:27:26:28:de:1c:49:55:08:cc:1e:6c:c1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8d6ace3b36c16df6b41955cfa5a58195d705052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:c5:50:64:90:fc:eb:3b:52:ff:6b:bb:4b: 9f:ce:3c:dd:07:7a:e7:17:ee:5b:af:a1:3f:2c:58: 53:fa:31:76:14:15:d7:f2:42:3a:e3:44:3e:13:8f: 2f:07:ec:23:cd:cc:a2:14:0c:4d:bb:04:f6:43:d9: 45:85:3e:09:5a:16:9a:a1:d4:64:40:9e:e8:b3:5b: 98:22:ba:7d:43:02:28:32:5e:af:0d:56:76:a2:24: 3d:56:74:0d:54:53:84:71:e9:1c:91:61:07:da:32: 86:6a:43:6a:1e:4f:a9:70:4e:bf:15:2d:ce:12:c2: a1:b5:7f:d4:fb:96:13:ad:42:10:83:5b:5d:d1:5c: a7:01:1a:30:9e:c6:7f:3a:91:0b:8b:08:54:db:ff: c4:37:2b:0d:08:84:18:2d:37:d9:d7:ce:7e:b7:7f: 1a:57:4f:d9:bd:ed:58:62:4b:57:bd:49:36:d9:18: b8:09:9c:0a:7d:5f:8e:50:7b:bb:79:99:84:5b:76: a7:b1:58:18:99:17:3f:d6:77:f1:25:a9:e8:36:6e: 84:d4:ad:ec:de:6b:8f:54:6c:59:09:7d:c3:3b:9f: d9:98:a0:53:73:ae:18:21:3a:66:4f:42:98:27:00: 8e:81:3f:9a:6a:30:d8:d3:9e:5e:2c:2c:1a:32:eb: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:AC:E3:B3:6C:16:DF:6B:41:95:5C:FA:5A:58:19:5D:70:50:52 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-Nas47NsFt9rQZVc-lpYGV1wUFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.178.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:4f:1f:27:e1:a4:65:17:48:26:d1:05:29:ae:e6:6d:4b:33: 6b:7c:81:b2:8e:e2:cc:6b:8e:4c:e7:d4:1c:ad:ea:98:af:86: 6b:ea:b7:91:7d:bf:10:13:27:78:be:6c:a9:f6:b4:f9:22:22: 76:a8:a7:d6:af:4a:51:df:3b:1c:07:62:50:86:28:ce:c5:51: a2:ba:17:3f:96:2a:a7:d6:58:cc:d0:3e:dc:56:e6:00:1c:0c: 3b:50:66:0a:9a:fe:21:1d:94:b6:b2:e5:82:e1:a9:49:87:cc: 9a:99:66:d5:cc:8d:4f:69:32:59:bc:35:54:68:59:6a:4e:be: 32:b1:a2:43:7d:6f:19:9c:40:5d:78:fa:80:63:05:73:74:9a: 29:af:78:2a:c6:b5:cd:73:31:66:7c:7d:eb:dc:83:67:9c:d1: e3:da:a2:cc:f9:b3:60:b5:18:10:fb:88:2f:66:f7:81:eb:fe: 61:9b:33:dd:7a:c6:d1:c4:0c:1b:53:69:31:6a:6c:e6:b3:c3: 45:e8:57:d0:3a:87:60:fb:07:b5:d0:db:18:c0:4b:44:25:39: 50:65:cc:fe:47:e2:53:ce:dd:b1:66:a7:07:91:25:6e:ce:b3: f7:8a:7f:06:ad:e2:a8:d5:1e:22:ae:9d:5a:45:1f:c8:2f:30: 4a:03:43:01 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hXcnJijeHElVCMwebMHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQ2YWNlM2IzNmMxNmRmNmI0MTk1NWNmYTVhNTgxOTVkNzA1MDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS/FUGSQ/Os7Uv9ru0ufzjzdB3rn F+5br6E/LFhT+jF2FBXX8kI640Q+E48vB+wjzcyiFAxNuwT2Q9lFhT4JWhaaodRk QJ7os1uYIrp9QwIoMl6vDVZ2oiQ9VnQNVFOEcekckWEH2jKGakNqHk+pcE6/FS3O EsKhtX/U+5YTrUIQg1td0VynARownsZ/OpELiwhU2//ENysNCIQYLTfZ185+t38a V0/Zve1YYktXvUk22Ri4CZwKfV+OUHu7eZmEW3ansVgYmRc/1nfxJanoNm6E1K3s 3muPVGxZCX3DO5/ZmKBTc64YITpmT0KYJwCOgT+aajDY055eLCwaMutfVwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPjWrOOzbBbfa0GVXPpaWBldcFBSMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvMS1OYXM0N05zRnQ5clFaVmMtbHBZR1Yxd1VGSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0 My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMB8sjAN BgkqhkiG9w0BAQsFAAOCAQEALE8fJ+GkZRdIJtEFKa7mbUsza3yBso7izGuOTOfU HK3qmK+Ga+q3kX2/EBMneL5sqfa0+SIidqin1q9KUd87HAdiUIYozsVRoroXP5Yq p9ZYzNA+3FbmABwMO1BmCpr+IR2UtrLlguGpSYfMmplm1cyNT2kyWbw1VGhZak6+ MrGiQ31vGZxAXXj6gGMFc3SaKa94Ksa1zXMxZnx969yDZ5zR49qizPmzYLUYEPuI L2b3gev+YZsz3XrG0cQMG1NpMWps5rPDRehX0DqHYPsHtdDbGMBLRCU5UGXM/kfi U87dsWanB5Elbs6z94p/Bq3iqNUeIq6dWkUfyC8wSgNDAQ== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client