This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-NKgS-OlkTR3AMcZYtLpueHhcaI.roa File: 1-NKgS-OlkTR3AMcZYtLpueHhcaI.roa (raw, json) Hash identifier: AUf7LoTu8SoPwotfF3KfnHwWpo9NlH7bsrXEWEf6lJY= Subject key identifier: F8:D2:A0:4B:E3:A5:91:34:77:00:C7:19:62:D2:E9:B9:E1:E1:71:A2 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82DEE42EA1F82258117968270A1517 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-NKgS-OlkTR3AMcZYtLpueHhcaI.roa Signing time: Fri 02 Jan 2026 16:20:41 +0000 ROA not before: Fri 02 Jan 2026 16:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212653 IP address blocks: 83.143.117.0/24 maxlen: 24 185.185.43.0/24 maxlen: 24 193.34.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:de:e4:2e:a1:f8:22:58:11:79:68:27:0a:15:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8d2a04be3a591347700c71962d2e9b9e1e171a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:31:f4:06:db:34:94:60:fb:6d:86:26:69: 25:93:17:81:b7:9c:94:ee:0f:32:5b:8c:08:18:bb: 49:19:2f:49:4d:2c:c1:25:5f:fc:6d:6e:7c:cf:ec: 08:9c:ba:e8:32:b0:0f:2b:1f:09:e9:79:c7:66:27: 17:2a:23:d7:5d:b3:53:41:2e:de:5f:77:1a:6a:56: 72:ee:88:fe:ed:22:0f:c6:b4:ac:d8:7b:9f:ba:16: c5:e8:1e:eb:71:b8:a9:d0:d5:84:72:ad:aa:27:90: 82:50:b6:91:81:33:8b:e9:90:5a:a2:55:a5:2c:05: 9f:8f:72:6c:1c:6a:e6:86:fc:6b:c6:ac:fa:4d:6f: 89:bb:64:aa:3d:12:6c:31:a6:45:5f:3d:3d:49:38: d9:39:17:3c:5d:17:fa:68:b1:09:82:cb:1c:97:be: ce:31:45:2d:8c:83:a9:46:d0:54:f5:02:c4:3e:86: 97:fa:35:d5:aa:63:71:6c:f4:55:29:2e:6a:0e:0d: 1e:14:81:ea:64:ae:e3:d6:8c:45:02:9b:e5:b2:91: 18:20:c2:ba:d6:f3:ae:f6:b0:80:c0:67:24:9b:d7: d9:5c:6c:94:3c:7e:17:57:6f:3e:92:96:d5:82:b8: 9c:d0:61:c2:6d:42:1b:99:d2:43:80:a1:b8:61:fe: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D2:A0:4B:E3:A5:91:34:77:00:C7:19:62:D2:E9:B9:E1:E1:71:A2 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-NKgS-OlkTR3AMcZYtLpueHhcaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.117.0/24 185.185.43.0/24 193.34.79.0/24 Signature Algorithm: sha256WithRSAEncryption a7:b1:f8:c1:bb:1f:d5:54:ad:d6:47:b8:ba:ec:ed:91:06:0d: 7a:b9:e5:f5:d8:66:ff:da:0b:cc:f9:ff:19:1e:31:76:99:f9: 54:48:32:ce:13:d7:7f:b8:63:24:f1:61:c8:c4:5a:9f:ba:7f: d5:c0:e3:fc:40:e9:f6:d7:8e:d8:0d:1c:05:f0:fd:98:7a:45: 16:5b:1c:4a:b4:ca:57:16:aa:19:a2:da:06:ba:03:68:3f:ed: 58:b4:93:9a:cf:dc:87:0d:4d:97:0d:7b:af:31:c7:4e:5c:d5: 94:e7:d9:09:14:b4:27:af:74:4d:d7:ad:9e:c3:34:31:c1:bc: cc:d3:f4:03:91:2e:48:fc:d1:80:ee:97:6a:98:28:db:60:46: ba:8b:fd:fe:fc:1f:0b:6c:0f:29:dd:7d:75:c5:bb:ca:06:48: 58:27:38:8e:9b:1c:3a:b8:83:32:ea:d0:23:e5:78:92:33:ea: 37:59:86:0b:ff:5c:29:dc:f3:2b:02:f7:24:a7:22:e6:14:db: 85:6e:27:17:3d:77:43:a2:0d:74:00:27:64:5e:07:dc:fd:f9: 91:68:63:00:68:11:4a:41:6c:93:79:10:be:0a:e8:21:a2:b2: ef:43:f2:24:78:4e:4a:72:28:52:78:93:c5:06:72:ae:0d:07: f2:a3:79:c6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/gt7kLqH4IlgReWgnChUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQyYTA0YmUzYTU5MTM0NzcwMGM3MTk2MmQyZTliOWUxZTE3MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Mx9AbbNJRg+22GJmklkxeBt5yU 7g8yW4wIGLtJGS9JTSzBJV/8bW58z+wInLroMrAPKx8J6XnHZicXKiPXXbNTQS7e X3caalZy7oj+7SIPxrSs2HufuhbF6B7rcbip0NWEcq2qJ5CCULaRgTOL6ZBaolWl LAWfj3JsHGrmhvxrxqz6TW+Ju2SqPRJsMaZFXz09STjZORc8XRf6aLEJgsscl77O MUUtjIOpRtBU9QLEPoaX+jXVqmNxbPRVKS5qDg0eFIHqZK7j1oxFApvlspEYIMK6 1vOu9rCAwGckm9fZXGyUPH4XV28+kpbVgric0GHCbUIbmdJDgKG4Yf7VCQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPjSoEvjpZE0dwDHGWLS6bnh4XGiMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvMS1OS2dTLU9sa1RSM0FNY1pZdExwdWVIaGNhSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5 Yi8xL3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFOPdQME ALm5KwMEAMEiTzANBgkqhkiG9w0BAQsFAAOCAQEAp7H4wbsf1VSt1ke4uuztkQYN ernl9dhm/9oLzPn/GR4xdpn5VEgyzhPXf7hjJPFhyMRan7p/1cDj/EDp9teO2A0c BfD9mHpFFlscSrTKVxaqGaLaBroDaD/tWLSTms/chw1Nlw17rzHHTlzVlOfZCRS0 J690TdetnsM0McG8zNP0A5EuSPzRgO6Xapgo22BGuov9/vwfC2wPKd19dcW7ygZI WCc4jpscOriDMurQI+V4kjPqN1mGC/9cKdzzKwL3JKci5hTbhW4nFz13Q6INdAAn ZF4H3P35kWhjAGgRSkFsk3kQvgroIaKy70PyJHhOSnIoUniTxQZyrg0H8qN5xg== -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:06 2026 by rpki-client