This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-EhTzIXb5soTzo3dGMLv-taIBZA.roa File: 1-EhTzIXb5soTzo3dGMLv-taIBZA.roa (raw, json) Hash identifier: RTi5MS7BZAEPd4W17363KztUiLVHh+50Bnk0kSz2+GU= Subject key identifier: F8:48:53:CC:85:DB:E6:CA:13:CE:8D:DD:18:C2:EF:FA:D6:88:05:90 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802904783B0BC1F5B388BD5041C686 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-EhTzIXb5soTzo3dGMLv-taIBZA.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211507 IP address blocks: 45.67.138.0/24 maxlen: 24 45.133.73.0/24 maxlen: 24 45.137.69.0/24 maxlen: 24 45.137.201.0/24 maxlen: 24 45.141.117.0/24 maxlen: 24 45.141.119.0/24 maxlen: 24 92.119.164.0/24 maxlen: 24 92.119.165.0/24 maxlen: 24 185.132.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:29:04:78:3b:0b:c1:f5:b3:88:bd:50:41:c6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f84853cc85dbe6ca13ce8ddd18c2effad6880590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:a6:ce:41:1b:76:18:7a:f3:01:0a:b4:22: 4e:39:6e:21:67:a0:c9:f3:5a:0a:d7:0a:ea:e7:83: 99:4e:e7:1e:43:06:2a:46:fd:bd:49:bb:28:e3:da: 6f:9c:90:d4:74:cb:4d:f3:55:79:a9:3a:a1:29:ab: dc:22:8b:52:c2:20:6f:d4:84:0b:5f:8e:22:4a:9c: d4:b3:6c:80:de:b2:c7:21:26:bb:38:4a:2d:d0:ca: 00:80:0e:b4:af:bc:4d:8a:48:21:6d:50:77:32:f9: 78:f8:18:b3:6c:fa:94:6c:d5:b1:24:10:59:34:64: ee:bb:ab:ad:03:fb:29:62:f9:e5:c6:ad:6b:ee:3a: f9:07:ed:d8:76:d5:da:aa:ba:51:b5:96:6e:36:1d: 6d:9e:e8:26:16:2d:4c:cc:54:85:5e:28:5a:d5:e7: d2:07:c5:8e:44:bd:fc:70:6f:4c:83:07:3a:fb:7b: 92:62:b8:e8:25:90:39:ba:00:a9:c9:6b:aa:26:72: ea:e0:11:22:3d:23:d5:b8:08:62:c2:46:48:4c:e0: 9e:3e:ad:f4:76:01:5b:d9:1d:ae:49:6c:6d:4f:f0: f7:52:86:f2:86:03:a2:0c:a9:35:07:8a:32:7f:59: e9:5e:23:fa:71:23:be:7c:b7:96:19:44:07:53:9b: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:48:53:CC:85:DB:E6:CA:13:CE:8D:DD:18:C2:EF:FA:D6:88:05:90 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-EhTzIXb5soTzo3dGMLv-taIBZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.138.0/24 45.133.73.0/24 45.137.69.0/24 45.137.201.0/24 45.141.117.0/24 45.141.119.0/24 92.119.164.0/23 185.132.53.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:d1:95:12:b0:f6:bf:3c:9c:b0:2e:6d:06:ba:09:1a:21:51: ec:04:1a:19:77:a6:1b:43:8b:26:e4:05:47:6f:ee:1c:11:3d: 89:0d:25:59:81:5f:c7:95:9d:2e:0e:e5:79:2e:b5:96:fb:a1: 87:73:85:d9:97:bf:ea:6b:08:a7:dd:f1:b9:4a:9d:d5:7d:6e: 75:c0:ea:4b:66:0a:38:41:7d:0d:7d:1a:c7:54:c1:56:f3:5b: 96:49:a5:f0:8c:c1:69:9d:6a:8e:c6:2c:b9:8f:99:9a:20:ab: 55:ea:2a:72:65:eb:e4:cc:f8:09:b0:a2:8e:de:82:4f:cd:15: 7c:78:76:d5:cf:5c:0e:e3:d4:37:c5:eb:d9:b6:75:34:c4:43: 17:d0:dc:ad:c1:68:5d:0a:13:c0:7f:5b:b0:69:fd:e3:fe:56: a9:85:a3:fd:51:5d:f1:ff:c0:c0:3e:2b:7f:97:1b:a7:77:8d: a1:6d:7a:6c:58:70:fe:89:fa:cf:62:08:a1:70:46:f8:5f:07: fa:1d:d4:ce:85:83:b5:a1:86:55:61:73:e8:52:25:c6:6d:8d: 69:3a:81:24:dc:41:67:4c:e7:9b:cf:9b:ea:49:fc:91:01:d2: ce:20:0d:b2:ae:53:8f:96:48:b1:0c:a0:3b:a2:d0:f8:16:b2: 4e:3d:63:5a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt8gCkEeDsLwfWziL1QQcaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODQ4NTNjYzg1ZGJlNmNhMTNjZThkZGQxOGMyZWZmYWQ2ODgwNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfumzkEbdhh68wEKtCJOOW4hZ6DJ 81oK1wrq54OZTuceQwYqRv29Sbso49pvnJDUdMtN81V5qTqhKavcIotSwiBv1IQL X44iSpzUs2yA3rLHISa7OEot0MoAgA60r7xNikghbVB3Mvl4+BizbPqUbNWxJBBZ NGTuu6utA/spYvnlxq1r7jr5B+3YdtXaqrpRtZZuNh1tnugmFi1MzFSFXiha1efS B8WORL38cG9Mgwc6+3uSYrjoJZA5ugCpyWuqJnLq4BEiPSPVuAhiwkZITOCePq30 dgFb2R2uSWxtT/D3UobyhgOiDKk1B4oyf1npXiP6cSO+fLeWGUQHU5s3RQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFPhIU8yF2+bKE86N3RjC7/rWiAWQMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvMS1FaFR6SVhiNXNvVHpvM2RHTUx2LXRhSUJaQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1 NC8xL0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAC1DigME AC2FSQMEAC2JRQMEAC2JyQMEAC2NdQMEAC2NdwMEAVx3pAMEALmENTANBgkqhkiG 9w0BAQsFAAOCAQEAXNGVErD2vzycsC5tBroJGiFR7AQaGXemG0OLJuQFR2/uHBE9 iQ0lWYFfx5WdLg7leS61lvuhh3OF2Ze/6msIp93xuUqd1X1udcDqS2YKOEF9DX0a x1TBVvNblkml8IzBaZ1qjsYsuY+ZmiCrVeoqcmXr5Mz4CbCijt6CT80VfHh21c9c DuPUN8Xr2bZ1NMRDF9DcrcFoXQoTwH9bsGn94/5WqYWj/VFd8f/AwD4rf5cbp3eN oW16bFhw/on6z2IIoXBG+F8H+h3UzoWDtaGGVWFz6FIlxm2NaTqBJNxBZ0znm8+b 6kn8kQHSziANsq5Tj5ZIsQygO6LQ+BayTj1jWg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:30 2026 by rpki-client