This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1rVTiELRxnjxNoowIG3antfcJPg.roa File: 1rVTiELRxnjxNoowIG3antfcJPg.roa (raw, json) Hash identifier: pKAvYLt9N1YlOHOdAHHkqyffI3+7GiS+AJ93ih7JHOo= Subject key identifier: D6:B5:53:88:42:D1:C6:78:F1:36:8A:30:20:6D:DA:9E:D7:DC:24:F8 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14657681C8EB5FC022D2BCDEB71081 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1rVTiELRxnjxNoowIG3antfcJPg.roa Signing time: Fri 02 Jan 2026 14:20:01 +0000 ROA not before: Fri 02 Jan 2026 14:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210546 IP address blocks: 147.45.198.0/24 maxlen: 24 147.45.199.0/24 maxlen: 24 147.45.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:65:76:81:c8:eb:5f:c0:22:d2:bc:de:b7:10:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6b5538842d1c678f1368a30206dda9ed7dc24f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:06:17:34:93:5e:81:c6:13:0c:d6:f0:d9: 13:ab:9b:1f:ef:46:13:a0:52:c2:fe:77:f5:af:a4: 8d:98:2a:fb:e1:dc:0c:2e:74:5e:9e:37:ed:16:76: 81:56:94:18:52:28:32:d3:99:b9:27:be:dd:06:eb: f6:6d:a7:fc:fb:c9:c0:1a:f4:fb:41:5f:4d:86:f4: 6b:64:13:f9:1e:93:1b:81:fe:a0:b0:72:d7:35:e7: 50:a6:a2:03:d4:28:d8:73:3c:59:22:c8:56:b4:3f: 30:10:48:be:1c:9e:8a:27:87:6f:03:d2:e9:16:71: 44:b6:38:e0:fd:f3:45:c7:63:95:ab:b5:69:9f:91: db:22:18:85:ee:69:2f:8b:f0:76:b0:fe:2c:2c:5f: fd:00:96:f1:44:30:78:7c:7b:01:8b:95:41:21:20: 0c:59:bf:e8:78:63:d4:e8:0c:08:e1:f5:9d:cc:88: ee:8c:72:1c:4c:81:9e:1a:3d:1b:4b:39:cd:1f:01: ad:f0:9d:0c:85:59:0c:41:f4:22:5d:1c:90:14:5c: c0:6c:cb:a6:19:66:d2:79:78:b8:fd:cd:65:b0:8c: 7a:f7:91:65:7e:23:1b:80:a7:40:b3:a3:f9:4e:2b: 01:76:1d:59:d3:df:90:64:50:d8:ce:bf:eb:04:fc: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B5:53:88:42:D1:C6:78:F1:36:8A:30:20:6D:DA:9E:D7:DC:24:F8 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1rVTiELRxnjxNoowIG3antfcJPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.198.0/23 147.45.218.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:12:84:22:92:17:8f:83:1d:53:49:08:77:57:5c:3a:e7:f8: 9a:41:25:6a:4d:5f:c0:74:f6:01:41:5d:85:fb:a5:8e:3b:44: 7e:42:74:37:c6:8f:a0:6f:73:65:aa:f8:a2:76:95:49:e2:49: ac:27:0d:b4:50:93:e9:87:2e:73:ef:82:05:3e:df:2f:e8:00: 04:4a:00:63:69:8f:1e:5e:e1:1c:a0:77:eb:bf:a3:4e:7a:dc: 6e:8e:fc:d2:65:68:56:0a:3c:38:ec:cc:c4:d2:25:b4:b6:62: 4d:cd:5f:12:ca:a4:a5:e9:82:66:8f:b2:7f:55:a0:a4:8e:78: 4f:d2:eb:fa:df:1c:67:6a:47:6b:cd:50:2b:6b:b4:1b:57:6f: e8:32:48:e1:6b:f5:51:94:6e:5d:81:89:01:68:28:fa:ed:c0: 5d:6c:2a:f0:b0:f8:b0:15:e9:b4:07:71:59:4c:90:32:f4:34: e4:7b:2c:09:47:b2:ca:1f:cf:e2:6e:4f:fa:e0:40:6a:a7:94: 7e:04:9d:2a:8a:d5:b8:1e:79:77:67:08:41:02:09:d7:b8:90: d0:ca:bf:67:f2:84:47:66:7c:d0:14:ab:57:46:9a:8c:94:99: 5c:d9:80:af:d4:c4:2b:87:8a:0d:21:d9:1b:00:27:99:3e:e4: 2d:22:46:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FGV2gcjrX8Ai0rzetxCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmI1NTM4ODQyZDFjNjc4ZjEzNjhhMzAyMDZkZGE5ZWQ3ZGMyNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EgGFzSTXoHGEwzW8NkTq5sf70YT oFLC/nf1r6SNmCr74dwMLnRenjftFnaBVpQYUigy05m5J77dBuv2baf8+8nAGvT7 QV9NhvRrZBP5HpMbgf6gsHLXNedQpqID1CjYczxZIshWtD8wEEi+HJ6KJ4dvA9Lp FnFEtjjg/fNFx2OVq7Vpn5HbIhiF7mkvi/B2sP4sLF/9AJbxRDB4fHsBi5VBISAM Wb/oeGPU6AwI4fWdzIjujHIcTIGeGj0bSznNHwGt8J0MhVkMQfQiXRyQFFzAbMum GWbSeXi4/c1lsIx695FlfiMbgKdAs6P5TisBdh1Z09+QZFDYzr/rBPzrvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNa1U4hC0cZ48TaKMCBt2p7X3CT4MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvMXJWVGlFTFJ4bmp4Tm9vd0lHM2FudGZjSlBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBky3GAwQA ky3aMA0GCSqGSIb3DQEBCwUAA4IBAQAdEoQikhePgx1TSQh3V1w65/iaQSVqTV/A dPYBQV2F+6WOO0R+QnQ3xo+gb3NlqviidpVJ4kmsJw20UJPphy5z74IFPt8v6AAE SgBjaY8eXuEcoHfrv6NOetxujvzSZWhWCjw47MzE0iW0tmJNzV8SyqSl6YJmj7J/ VaCkjnhP0uv63xxnakdrzVAra7QbV2/oMkjha/VRlG5dgYkBaCj67cBdbCrwsPiw Fem0B3FZTJAy9DTkeywJR7LKH8/ibk/64EBqp5R+BJ0qitW4Hnl3ZwhBAgnXuJDQ yr9n8oRHZnzQFKtXRpqMlJlc2YCv1MQrh4oNIdkbACeZPuQtIkbM -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:48 2026 by rpki-client