This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-_cGxImeGhpdXI57KIZyaVjnqP4.roa File: 1-_cGxImeGhpdXI57KIZyaVjnqP4.roa (raw, json) Hash identifier: RkLhWqMEQDCk+gpywzJgTJ8QkHQu1lqiCXHS5uWKwLM= Subject key identifier: FB:F7:06:C4:89:9E:1A:1A:5D:5C:8E:7B:28:86:72:69:58:E7:A8:FE Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DDDF7A2EAB759B08E5E6D19BD609 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-_cGxImeGhpdXI57KIZyaVjnqP4.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207689 IP address blocks: 159.148.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dd:df:7a:2e:ab:75:9b:08:e5:e6:d1:9b:d6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbf706c4899e1a1a5d5c8e7b2886726958e7a8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:ca:80:1f:da:a8:30:d5:e8:41:57:3f:2e: f9:ab:3c:4c:bb:b3:f2:c0:a7:3f:b0:19:69:63:71: 7d:13:76:4f:25:c0:d3:6e:f4:1f:97:48:3d:f6:c0: fa:59:84:30:56:26:9c:16:28:a1:50:82:f9:ba:9d: 3a:fe:9b:ba:56:57:f9:bf:d9:d5:18:f9:36:11:57: 1f:56:a8:52:49:a2:c5:fd:00:2d:2f:03:9e:5b:ff: b8:5f:86:9d:fb:98:65:32:59:92:54:61:e4:b1:d0: 10:bd:91:28:51:cc:d7:05:8b:f3:1b:87:35:8b:77: e0:4c:d7:9e:9e:f5:75:53:a1:0c:65:37:c7:5f:82: d6:3b:ce:01:b5:ff:f0:f2:a7:a5:75:f9:aa:3a:9e: 96:c7:69:47:57:84:e1:c0:cd:d1:35:ff:f5:6a:49: 03:52:45:ec:d9:31:b4:25:02:c4:4e:ea:df:b0:1f: 42:31:33:d9:25:b4:a2:99:78:97:92:52:8a:db:72: 2d:4b:2f:b3:4e:ee:ed:22:76:2a:d4:bf:e5:7a:68: fb:43:09:38:93:2f:f9:b6:e6:db:14:d5:1c:1a:d3: 85:56:a2:f0:f3:d0:e3:eb:82:9e:92:9f:99:2c:4e: 9d:d3:92:8d:98:a4:c1:88:a5:bf:b3:d1:e7:fd:bc: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F7:06:C4:89:9E:1A:1A:5D:5C:8E:7B:28:86:72:69:58:E7:A8:FE X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-_cGxImeGhpdXI57KIZyaVjnqP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.99.0/24 Signature Algorithm: sha256WithRSAEncryption 96:ea:a9:dd:9e:5e:f5:8d:61:5f:e4:ca:dd:9c:07:f8:30:cf: 6b:19:07:9b:dd:b0:35:dc:49:55:3d:c8:f9:bb:09:c3:1b:41: 0f:75:9b:ad:12:7b:ac:82:41:7a:96:90:2c:b8:15:0d:49:40: 85:7b:d5:9c:18:ff:9f:b4:68:eb:df:bc:db:e8:8a:88:2c:5d: 4d:b3:27:0a:85:fe:cd:78:24:09:b9:51:46:b1:f6:98:47:43: f4:7a:31:6d:06:60:7f:93:d5:54:fb:93:54:45:1d:f3:f5:37: 39:81:4f:16:c6:10:cd:0c:8b:66:f4:be:75:01:42:6d:0a:8a: ef:ce:0f:a4:d1:66:a4:77:f4:4b:9d:d2:79:a3:6e:2b:9c:b7: 3b:f7:e5:4f:77:7e:f7:79:a2:a0:10:aa:30:e3:f1:a2:5f:f6: 97:5c:43:6d:ae:b4:ee:fa:45:b1:96:3c:58:14:1b:ce:d5:81: 99:e1:a4:36:d3:f7:2c:59:08:ef:88:bd:7d:43:f7:20:71:67: d9:24:44:8e:df:52:da:e8:65:6b:86:e0:d8:4d:ac:ef:96:34: e9:7f:46:83:fe:00:80:a4:e4:dc:b1:d8:0b:f6:81:8c:fc:be: 88:b3:ce:b3:77:7b:d6:08:c2:93:5c:33:4a:e0:1d:d5:b5:3a: f2:cc:a2:61 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x93fei6rdZsI5ebRm9YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmY3MDZjNDg5OWUxYTFhNWQ1YzhlN2IyODg2NzI2OTU4ZTdhOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hXKgB/aqDDV6EFXPy75qzxMu7Py wKc/sBlpY3F9E3ZPJcDTbvQfl0g99sD6WYQwViacFiihUIL5up06/pu6Vlf5v9nV GPk2EVcfVqhSSaLF/QAtLwOeW/+4X4ad+5hlMlmSVGHksdAQvZEoUczXBYvzG4c1 i3fgTNeenvV1U6EMZTfHX4LWO84Btf/w8qeldfmqOp6Wx2lHV4ThwM3RNf/1akkD UkXs2TG0JQLETurfsB9CMTPZJbSimXiXklKK23ItSy+zTu7tInYq1L/lemj7Qwk4 ky/5tubbFNUcGtOFVqLw89Dj64Kekp+ZLE6d05KNmKTBiKW/s9Hn/bwpXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPv3BsSJnhoaXVyOeyiGcmlY56j+MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvMS1fY0d4SW1lR2hwZFhJNTdLSVp5YVZqbnFQNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2 Zi8xL3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ+UYzAN BgkqhkiG9w0BAQsFAAOCAQEAluqp3Z5e9Y1hX+TK3ZwH+DDPaxkHm92wNdxJVT3I +bsJwxtBD3WbrRJ7rIJBepaQLLgVDUlAhXvVnBj/n7Ro69+82+iKiCxdTbMnCoX+ zXgkCblRRrH2mEdD9HoxbQZgf5PVVPuTVEUd8/U3OYFPFsYQzQyLZvS+dQFCbQqK 784PpNFmpHf0S53SeaNuK5y3O/flT3d+93mioBCqMOPxol/2l1xDba607vpFsZY8 WBQbztWBmeGkNtP3LFkI74i9fUP3IHFn2SREjt9S2uhla4bg2E2s75Y06X9Gg/4A gKTk3LHYC/aBjPy+iLPOs3d71gjCk1wzSuAd1bU68syiYQ== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:05 2026 by rpki-client