This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1TVjOAo8I_-uBqZ_dawB3321wkw.roa File: 1TVjOAo8I_-uBqZ_dawB3321wkw.roa (raw, json) Hash identifier: mEnfQYEJuEQRZRRlontjZNPmJWq9db4IB/qA8qQ5wjg= Subject key identifier: D5:35:63:38:0A:3C:23:FF:AE:06:A6:7F:75:AC:01:DF:7D:B5:C2:4C Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7BFBA856D843BF497F9644D23841B Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1TVjOAo8I_-uBqZ_dawB3321wkw.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6832 IP address blocks: 159.148.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bf:ba:85:6d:84:3b:f4:97:f9:64:4d:23:84:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d53563380a3c23ffae06a67f75ac01df7db5c24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:90:5e:6e:1d:56:f7:13:7b:11:43:9a:26:a5: 3e:63:92:62:74:9f:1e:88:61:be:59:b1:c0:41:9d: 54:7a:76:d4:36:ff:fa:41:18:1e:50:3b:fd:e1:4b: 63:25:5e:22:99:0a:31:ae:a1:a4:aa:b9:ee:a3:1d: ef:25:5c:72:89:70:fc:22:ef:4e:0e:de:8a:0e:2e: b1:e4:14:14:22:22:19:6c:e7:71:34:53:b5:90:4b: bd:62:df:2b:3f:b5:15:e7:ea:b8:de:7b:f7:3f:a3: 5e:34:8a:ed:c5:c0:e4:0e:80:c0:6e:89:27:70:f7: 54:08:cd:76:21:70:8b:56:20:22:b1:16:a7:d8:bb: 40:d6:fc:ea:86:ec:14:04:41:91:44:61:56:ec:8c: b3:88:ef:96:d1:12:e7:10:5d:d8:9c:5f:bb:2c:ca: 1c:42:72:2f:53:88:96:19:34:b4:42:84:2f:48:a7: 0e:a7:3b:44:4b:df:23:42:3c:c0:19:6d:f0:64:3c: 4d:d0:d1:35:ef:26:64:ee:16:f4:a2:9e:31:b4:24: 3f:59:23:e7:47:4a:d0:06:87:08:1b:70:c5:c8:9a: 0c:fc:96:9a:10:eb:89:3f:7b:2e:90:a0:28:6d:e9: b4:aa:e6:e4:23:a9:15:86:5e:97:ab:57:17:94:9e: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:35:63:38:0A:3C:23:FF:AE:06:A6:7F:75:AC:01:DF:7D:B5:C2:4C X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1TVjOAo8I_-uBqZ_dawB3321wkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.144.0/24 Signature Algorithm: sha256WithRSAEncryption 16:46:10:bd:59:ef:b4:10:2a:e6:28:89:2f:04:91:68:69:ab: d3:7d:58:65:54:f0:d2:b3:56:77:aa:0f:ee:07:8e:08:f9:e2: 4f:a8:8f:0b:03:e0:93:d0:b6:53:86:00:f4:84:de:77:1c:c9: 7a:4e:26:06:c0:da:e8:a4:d3:dd:40:56:cb:29:55:f0:79:03: b9:df:f5:af:1e:d7:56:6c:da:c1:52:4a:69:0a:68:32:92:aa: c7:ca:04:f7:26:39:f1:56:30:aa:5a:df:40:a6:0d:eb:39:2f: a8:1b:31:51:f3:a4:3e:8e:6d:ae:6f:57:c3:96:13:7c:22:03: 98:dd:c2:94:c0:bf:84:41:40:9a:d0:d1:9e:31:8a:1f:6f:43: 61:6f:fb:3d:1a:9e:b9:49:10:81:a9:9f:79:11:0d:cc:25:f0: b8:7b:06:bc:89:73:27:22:72:ac:5e:c3:8c:28:69:b9:35:b6: e9:93:d1:e0:07:f2:2a:15:7f:3a:0c:fd:43:ff:5b:18:da:77: 99:c6:f4:4b:2e:1f:85:b2:d2:59:2d:48:a1:65:8b:a0:4e:27: 03:1c:ec:73:8f:48:a4:2f:31:01:e1:77:f0:98:3d:79:fe:98: b7:34:6d:84:53:6d:1b:4e:1d:3f:af:62:ae:b8:83:6d:f1:f3: b0:72:b8:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7+6hW2EO/SX+WRNI4QbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTM1NjMzODBhM2MyM2ZmYWUwNmE2N2Y3NWFjMDFkZjdkYjVjMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJBebh1W9xN7EUOaJqU+Y5JidJ8e iGG+WbHAQZ1UenbUNv/6QRgeUDv94UtjJV4imQoxrqGkqrnuox3vJVxyiXD8Iu9O Dt6KDi6x5BQUIiIZbOdxNFO1kEu9Yt8rP7UV5+q43nv3P6NeNIrtxcDkDoDAbokn cPdUCM12IXCLViAisRan2LtA1vzqhuwUBEGRRGFW7IyziO+W0RLnEF3YnF+7LMoc QnIvU4iWGTS0QoQvSKcOpztES98jQjzAGW3wZDxN0NE17yZk7hb0op4xtCQ/WSPn R0rQBocIG3DFyJoM/JaaEOuJP3sukKAobem0qubkI6kVhl6Xq1cXlJ6b9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNU1YzgKPCP/rgamf3WsAd99tcJMMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvMVRWak9BbzhJXy11QnFaX2Rhd0IzMzIxd2t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5SQMA0G CSqGSIb3DQEBCwUAA4IBAQAWRhC9We+0ECrmKIkvBJFoaavTfVhlVPDSs1Z3qg/u B44I+eJPqI8LA+CT0LZThgD0hN53HMl6TiYGwNropNPdQFbLKVXweQO53/WvHtdW bNrBUkppCmgykqrHygT3JjnxVjCqWt9Apg3rOS+oGzFR86Q+jm2ub1fDlhN8IgOY 3cKUwL+EQUCa0NGeMYofb0Nhb/s9Gp65SRCBqZ95EQ3MJfC4ewa8iXMnInKsXsOM KGm5Nbbpk9HgB/IqFX86DP1D/1sY2neZxvRLLh+FstJZLUihZYugTicDHOxzj0ik LzEB4XfwmD15/pi3NG2EU20bTh0/r2KuuINt8fOwcri4 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:38 2026 by rpki-client