This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa File: 1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa (raw, json) Hash identifier: JGYkH4jrc0W9U8ZV3mJqPcgKRn06DtzcgGerdHLNLUc= Subject key identifier: FA:40:1E:45:C6:2C:F0:DF:37:E2:23:43:30:3A:6B:3A:A2:7C:0D:B8 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8381DCAD0ADD6F81D7D0C08652A2CF Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa Signing time: Fri 02 Jan 2026 16:21:23 +0000 ROA not before: Fri 02 Jan 2026 16:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 188.209.142.0/24 maxlen: 24 188.209.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:81:dc:ad:0a:dd:6f:81:d7:d0:c0:86:52:a2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa401e45c62cf0df37e22343303a6b3aa27c0db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c8:ab:b6:53:fb:cb:d3:27:9e:a5:a3:cc:a0: 6f:4c:8b:b4:eb:5f:34:03:9a:2b:fe:e0:d4:8e:ab: a0:5b:0d:97:52:e8:5e:85:f9:d5:d0:55:80:c1:21: 32:ee:42:62:18:b8:33:3b:87:bd:98:c1:67:9e:95: 25:90:29:0e:8e:4f:0b:d5:60:c5:f4:37:ab:94:be: c2:b7:4a:fb:5e:4b:dc:02:b9:d3:2e:13:e5:04:5e: c7:97:93:f7:6b:4a:cc:ac:30:8f:a6:75:64:50:a4: ee:d5:13:06:2a:90:a7:7f:d0:b5:b4:55:08:6c:78: fe:bc:d8:1d:85:99:a7:ad:72:65:f5:b8:04:78:92: 59:68:9f:e7:ce:f3:ab:49:8f:43:7d:99:7c:26:0c: bd:97:7c:ce:a4:63:2a:97:7b:2b:05:75:96:97:3b: 8e:b5:0b:6c:1a:ac:73:7b:56:ff:d7:a7:57:5c:49: 64:31:b9:81:a1:9d:78:b5:7e:38:c6:eb:16:cd:df: 61:ef:40:9c:13:28:b6:44:5c:2d:d3:7d:bb:a7:19: 4e:b9:2c:d0:a6:41:0b:61:81:8a:a8:48:a1:b3:d2: 35:28:a5:9f:1a:a8:dc:2c:03:7c:ec:96:24:86:f9: 60:11:3f:af:11:02:ce:71:7e:ef:0f:27:b8:6a:e4: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:40:1E:45:C6:2C:F0:DF:37:E2:23:43:30:3A:6B:3A:A2:7C:0D:B8 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.142.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:46:9a:75:de:13:18:10:30:a8:96:02:5d:15:13:d9:19:b5: 7c:0d:f5:b8:81:21:f6:01:73:86:d3:7e:fd:ad:6d:34:05:b6: 23:da:c9:55:cf:76:7f:aa:ac:8a:bb:a9:90:09:82:7b:da:39: 20:3e:32:19:82:49:00:76:47:f3:9a:0a:e4:33:ea:c4:1f:bf: 7c:4c:42:ff:6d:4f:7e:35:96:16:2d:26:4a:3b:56:24:d7:8d: 81:0c:da:20:0c:be:8a:76:f4:13:22:f5:bf:f7:3c:93:55:9f: 25:55:c2:94:e3:17:bf:06:70:a9:7d:1b:8f:e0:35:51:91:f4: 0e:a1:fc:4b:50:b5:6f:34:40:c8:08:04:59:a2:c8:78:58:06: 85:3f:ba:21:2f:18:e2:19:be:92:d7:25:89:96:aa:6e:a0:06: b3:d5:81:1e:66:2c:6a:44:58:69:c9:34:e5:9d:8d:6c:9e:62: ad:cb:b3:a8:81:ae:ff:f1:be:60:71:fe:9c:7d:4c:72:d1:5f: 56:07:f0:33:34:41:6c:ed:a7:84:e4:69:11:fd:f4:a6:56:ea: ba:2a:5d:19:ca:de:8c:16:a1:db:f5:96:13:95:23:72:a8:0f: 83:a6:47:6f:23:a0:86:6a:19:c0:4c:43:08:02:00:26:a1:8b: 30:a3:d6:62 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/g4HcrQrdb4HX0MCGUqLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQwMWU0NWM2MmNmMGRmMzdlMjIzNDMzMDNhNmIzYWEyN2MwZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MirtlP7y9MnnqWjzKBvTIu06180 A5or/uDUjqugWw2XUuhehfnV0FWAwSEy7kJiGLgzO4e9mMFnnpUlkCkOjk8L1WDF 9DerlL7Ct0r7XkvcArnTLhPlBF7Hl5P3a0rMrDCPpnVkUKTu1RMGKpCnf9C1tFUI bHj+vNgdhZmnrXJl9bgEeJJZaJ/nzvOrSY9DfZl8Jgy9l3zOpGMql3srBXWWlzuO tQtsGqxze1b/16dXXElkMbmBoZ14tX44xusWzd9h70CcEyi2RFwt0327pxlOuSzQ pkELYYGKqEihs9I1KKWfGqjcLAN87JYkhvlgET+vEQLOcX7vDye4auTVXQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPpAHkXGLPDfN+IjQzA6azqifA24MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvMS1rQWVSY1lzOE44MzRpTkRNRHByT3FKOERiZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTAvMzk1MzI4LWY0NjEtNDRiNy1iMDMxLTNmOGI1NWRhMWFj NC8xL0JSOHBSaTU2ZmFmclgwWGFlSFB4VGtBXzQ2cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbzRjjAN BgkqhkiG9w0BAQsFAAOCAQEAakaadd4TGBAwqJYCXRUT2Rm1fA31uIEh9gFzhtN+ /a1tNAW2I9rJVc92f6qsirupkAmCe9o5ID4yGYJJAHZH85oK5DPqxB+/fExC/21P fjWWFi0mSjtWJNeNgQzaIAy+inb0EyL1v/c8k1WfJVXClOMXvwZwqX0bj+A1UZH0 DqH8S1C1bzRAyAgEWaLIeFgGhT+6IS8Y4hm+ktcliZaqbqAGs9WBHmYsakRYack0 5Z2NbJ5ircuzqIGu//G+YHH+nH1MctFfVgfwMzRBbO2nhORpEf30plbquipdGcre jBah2/WWE5UjcqgPg6ZHbyOghmoZwExDCAIAJqGLMKPWYg== -----END CERTIFICATE-----Generated at Mon Jan 19 11:26:17 2026 by rpki-client