This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-J1E-YTrGXfoYGYI1z551n4rKUI.roa File: 1-J1E-YTrGXfoYGYI1z551n4rKUI.roa (raw, json) Hash identifier: xpExUjm4dH02yKjGw4b3z+n9XtFpz7E/362W/a7s/HI= Subject key identifier: F8:9D:44:F9:84:EB:19:77:E8:60:66:08:D7:3E:79:D6:7E:2B:29:42 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3830049B452B5304F878B0D87877CE Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-J1E-YTrGXfoYGYI1z551n4rKUI.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201781 IP address blocks: 146.185.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:30:04:9b:45:2b:53:04:f8:78:b0:d8:78:77:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f89d44f984eb1977e8606608d73e79d67e2b2942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:15:5a:18:d2:09:5b:1c:7d:4d:f5:89:d4: d7:2e:fa:7a:98:57:b6:33:47:4e:6b:ba:d3:c4:77: 89:25:7f:96:e7:bd:07:66:4f:21:98:f6:14:62:3f: a2:80:cb:69:b6:6f:26:36:5d:11:bd:02:aa:88:33: e9:ad:04:d4:65:89:cc:f5:e9:2c:b9:35:36:8b:9b: 6b:89:db:b4:5f:85:84:aa:db:76:0a:a2:c3:92:ea: b4:ff:9f:e2:2f:a4:de:22:38:4a:7d:f5:f2:3a:60: b8:54:ba:ea:dc:b5:c4:78:d7:18:59:b1:10:8c:ee: 69:33:38:22:1f:6e:47:1a:20:91:d0:d0:be:64:78: 08:79:b7:1c:46:b8:e4:40:40:35:b5:ed:36:6c:c6: ae:3a:be:01:c8:98:05:6e:73:64:78:5a:78:65:9c: f2:d0:9c:68:fd:a1:41:f0:7f:19:d6:3c:3c:37:d1: d3:6d:eb:1c:18:f1:dc:3f:c6:d3:dc:d4:86:53:90: a9:e4:f5:1a:13:68:81:f7:60:a2:e5:52:a9:07:55: 33:9d:63:4b:9e:fe:53:8a:d0:3f:d6:2c:92:60:72: 26:ec:7d:d6:e6:3b:2d:d1:60:43:62:08:fb:bb:f0: 5c:ed:2c:ce:ba:30:27:af:4b:a0:0e:31:92:b3:29: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:44:F9:84:EB:19:77:E8:60:66:08:D7:3E:79:D6:7E:2B:29:42 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-J1E-YTrGXfoYGYI1z551n4rKUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.185.246.0/23 Signature Algorithm: sha256WithRSAEncryption 65:2d:2d:99:04:d2:68:a8:6b:d5:b6:6f:e1:9c:4d:92:2f:49: dd:ab:1e:07:b8:19:90:3b:d2:06:47:c7:46:4a:43:65:01:4f: 98:fc:a5:a4:f4:43:21:c2:29:f8:2f:0a:5d:ef:41:11:f3:0e: e6:3c:2a:a7:da:6d:4b:92:ae:63:58:77:c0:c8:2b:64:df:a2: 55:73:70:61:e0:59:81:47:b2:9d:be:85:82:d1:6a:06:e9:b3: b2:e3:d7:55:7d:a9:91:be:2a:a1:6a:50:10:c4:5d:c1:10:82: 42:a5:95:b2:29:5c:53:93:7d:67:12:35:22:87:c1:45:75:c9: 79:97:8c:03:f5:9d:63:ad:b3:d1:a5:8d:33:82:cc:f6:6b:b5: f8:8c:61:55:53:e0:8c:e3:5a:c9:3a:66:27:ad:c6:fd:79:47: c8:9c:75:84:6b:84:d7:53:0a:6d:ca:85:da:fe:4d:82:9e:30: 16:84:2b:39:55:db:d5:bd:3a:7b:ff:07:58:6b:4c:e7:23:97: 84:c5:e0:81:f0:c4:c3:1c:a9:c3:5f:63:7f:e7:bc:0a:ea:d3: 37:dd:ea:30:d2:b1:11:8b:b5:28:a5:77:4c:52:3d:62:82:31: 78:0c:00:e8:21:a7:ed:6d:0e:9b:f8:5f:04:60:c3:b4:f6:e5: 81:92:8b:ac -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+ODAEm0UrUwT4eLDYeHfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODlkNDRmOTg0ZWIxOTc3ZTg2MDY2MDhkNzNlNzlkNjdlMmIyOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRYVWhjSCVscfU31idTXLvp6mFe2 M0dOa7rTxHeJJX+W570HZk8hmPYUYj+igMtptm8mNl0RvQKqiDPprQTUZYnM9eks uTU2i5tridu0X4WEqtt2CqLDkuq0/5/iL6TeIjhKffXyOmC4VLrq3LXEeNcYWbEQ jO5pMzgiH25HGiCR0NC+ZHgIebccRrjkQEA1te02bMauOr4ByJgFbnNkeFp4ZZzy 0Jxo/aFB8H8Z1jw8N9HTbescGPHcP8bT3NSGU5Cp5PUaE2iB92Ci5VKpB1UznWNL nv5TitA/1iySYHIm7H3W5jst0WBDYgj7u/Bc7SzOujAnr0ugDjGSsymLBQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPidRPmE6xl36GBmCNc+edZ+KylCMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvMS1KMUUtWVRyR1hmb1lHWUkxejU1MW40cktVSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQz Yi8xLzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZK59jAN BgkqhkiG9w0BAQsFAAOCAQEAZS0tmQTSaKhr1bZv4ZxNki9J3aseB7gZkDvSBkfH RkpDZQFPmPylpPRDIcIp+C8KXe9BEfMO5jwqp9ptS5KuY1h3wMgrZN+iVXNwYeBZ gUeynb6FgtFqBumzsuPXVX2pkb4qoWpQEMRdwRCCQqWVsilcU5N9ZxI1IofBRXXJ eZeMA/WdY62z0aWNM4LM9mu1+IxhVVPgjONayTpmJ63G/XlHyJx1hGuE11MKbcqF 2v5Ngp4wFoQrOVXb1b06e/8HWGtM5yOXhMXggfDEwxypw19jf+e8CurTN93qMNKx EYu1KKV3TFI9YoIxeAwA6CGn7W0Om/hfBGDDtPblgZKLrA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:23:14 2026 by rpki-client