This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/1IT2YxPCfIxNq71vO4148RYnUFE.roa File: 1IT2YxPCfIxNq71vO4148RYnUFE.roa (raw, json) Hash identifier: Wc3xK74C+nn8hA7fgodWur3oZYQffDuB/6q65gbxW3o= Subject key identifier: D4:84:F6:63:13:C2:7C:8C:4D:AB:BD:6F:3B:8D:78:F1:16:27:50:51 Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d Certificate serial: 019B79ED3F92AC3B95E2EC56E639E843DD65 Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/1IT2YxPCfIxNq71vO4148RYnUFE.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 143.55.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3f:92:ac:3b:95:e2:ec:56:e6:39:e8:43:dd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d484f66313c27c8c4dabbd6f3b8d78f116275051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:7e:1f:3b:30:cd:63:4d:ea:c4:1c:a2:95: b3:78:24:8b:af:61:81:ea:39:98:64:bb:af:57:73: b5:5c:65:4c:02:c2:c3:f3:47:1e:0e:ce:2e:a4:a7: 9f:c1:8e:82:54:ed:4c:46:8d:8c:5a:45:85:60:09: 6b:22:d7:eb:48:7e:12:07:87:1e:d4:9f:6a:82:90: 6c:95:f7:6c:3f:b4:c1:9d:ee:9b:1f:4e:1f:8a:5e: 2e:94:c5:ee:11:3b:29:fc:12:66:16:ee:64:96:40: d0:1f:5f:25:0b:8c:75:d9:6c:31:4d:2d:f1:20:6b: 11:e4:5c:63:7a:d8:ba:dc:3b:51:c9:41:c2:58:74: 6a:08:40:b3:9d:5e:88:b1:b3:a1:09:00:84:b7:1c: c3:b6:eb:0d:cd:73:73:4d:8f:c9:76:b6:5e:19:93: 45:cd:4c:a4:71:38:e6:b6:a3:fe:08:d1:61:52:82: ad:a6:a4:82:1a:4d:67:3f:75:ba:26:80:2b:ea:cc: c6:25:f6:7a:0c:c7:5b:8d:b3:a7:c9:fd:a2:cd:c5: 55:04:8c:a2:05:79:68:4a:70:86:3b:30:98:0c:7d: 12:42:51:ef:e6:c6:1b:b5:6e:db:78:c4:05:f6:46: 7c:e0:9b:0e:9f:83:71:cf:5e:05:06:ec:ad:3a:39: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:F6:63:13:C2:7C:8C:4D:AB:BD:6F:3B:8D:78:F1:16:27:50:51 X509v3 Authority Key Identifier: keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/1IT2YxPCfIxNq71vO4148RYnUFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.55.151.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:c2:32:2c:56:ed:22:29:36:d9:6b:e4:3d:c6:a8:31:f2:02: 7e:5d:be:2f:9c:6c:7a:c0:3f:9e:2c:6b:11:ea:a2:6f:82:5e: ed:cb:78:39:c8:eb:00:e1:94:fc:0e:74:55:7d:15:bd:c7:40: bc:c8:01:bc:5a:1a:b1:97:25:22:87:4a:4d:42:53:29:5d:78: 15:e9:ff:89:e8:8f:4b:f8:63:9d:17:09:78:b8:e3:27:a4:f3: f6:a9:30:cd:11:36:3f:a0:7a:c8:b3:46:72:97:2c:15:6f:ae: d9:8c:2d:e7:35:55:c8:30:ca:23:fd:11:38:3c:57:ad:9d:94: fe:ce:a8:05:21:d4:8f:2e:2c:27:36:5f:5c:e5:b5:5d:9e:9f: aa:8f:d7:75:96:c1:32:54:fe:2d:2b:50:9d:a3:d8:98:31:5c: 6d:cb:ba:a8:30:8a:57:51:b1:42:62:7f:d6:21:6c:f4:bb:00: f6:3b:97:1b:9f:e5:de:40:c1:11:94:9f:cd:0e:b8:bd:a4:44: 5d:bd:a1:68:08:e4:67:78:d9:2e:34:bc:c6:09:af:ae:07:c6: 42:da:d9:de:13:d5:13:bc:28:20:da:24:e1:88:c7:db:a3:34: 46:d2:f0:ef:78:80:f9:d1:98:ec:e3:67:5a:50:fd:9a:46:10: a7:ee:77:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57T+SrDuV4uxW5jnoQ91lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmE5ZDU0MjI5NzU3N2IzN2FhMGM0MjMxOTVhZmUyYTk4 ZTEzNWQwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDg0ZjY2MzEzYzI3YzhjNGRhYmJkNmYzYjhkNzhmMTE2Mjc1MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZV+HzswzWNN6sQcopWzeCSLr2GB 6jmYZLuvV3O1XGVMAsLD80ceDs4upKefwY6CVO1MRo2MWkWFYAlrItfrSH4SB4ce 1J9qgpBslfdsP7TBne6bH04fil4ulMXuETsp/BJmFu5klkDQH18lC4x12WwxTS3x IGsR5Fxjeti63DtRyUHCWHRqCECznV6IsbOhCQCEtxzDtusNzXNzTY/JdrZeGZNF zUykcTjmtqP+CNFhUoKtpqSCGk1nP3W6JoAr6szGJfZ6DMdbjbOnyf2izcVVBIyi BXloSnCGOzCYDH0SQlHv5sYbtW7beMQF9kZ84JsOn4Nxz14FBuytOjlJ6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSE9mMTwnyMTau9bzuNePEWJ1BRMB8GA1UdIwQY MBaAFDZqnVQil1d7N6oMQjGVr+KpjhNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4Mzkt ZDE4NWRlYzA2MDEyLzEvMUlUMll4UENmSXhOcTcxdk80MTQ4UlluVUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4MzktZDE4NWRlYzA2MDEy LzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzeXMA0G CSqGSIb3DQEBCwUAA4IBAQA6wjIsVu0iKTbZa+Q9xqgx8gJ+Xb4vnGx6wD+eLGsR 6qJvgl7ty3g5yOsA4ZT8DnRVfRW9x0C8yAG8WhqxlyUih0pNQlMpXXgV6f+J6I9L +GOdFwl4uOMnpPP2qTDNETY/oHrIs0ZylywVb67ZjC3nNVXIMMoj/RE4PFetnZT+ zqgFIdSPLiwnNl9c5bVdnp+qj9d1lsEyVP4tK1Cdo9iYMVxty7qoMIpXUbFCYn/W IWz0uwD2O5cbn+XeQMERlJ/NDri9pERdvaFoCORneNkuNLzGCa+uB8ZC2tneE9UT vCgg2iThiMfbozRG0vDveID50Zjs42daUP2aRhCn7nfr -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:48 2026 by rpki-client