This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa File: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (raw, json) Hash identifier: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84= Subject key identifier: D4:01:D6:76:AB:1F:2D:95:95:9E:97:7B:C9:2A:50:0A:F5:BE:8E:C7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B7AC95A6AF6EA55EE78501BC99B50FBBD Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa Signing time: Thu 01 Jan 2026 18:19:34 +0000 ROA not before: Thu 01 Jan 2026 18:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 176.46.143.0/24 maxlen: 24 176.46.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5a:6a:f6:ea:55:ee:78:50:1b:c9:9b:50:fb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d401d676ab1f2d95959e977bc92a500af5be8ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:54:04:6a:49:5e:5d:a2:cd:6d:95:c2:8a: 0e:30:9f:30:4d:8e:4a:78:4a:29:2a:4f:f8:01:a5: 75:5c:11:4b:10:60:1e:f0:35:1e:51:59:a4:47:4e: 9d:d4:49:97:47:d5:1b:6a:75:7b:94:ad:a8:be:fb: dd:a7:e3:3e:a7:e4:7a:51:59:8e:a8:5e:7f:4c:69: 71:5f:b8:59:81:5a:02:35:ea:d3:52:6a:4b:26:d5: 99:d0:05:fa:30:fc:f0:3d:27:7a:a1:df:5b:c6:b5: 43:41:96:f7:c0:85:79:66:18:51:de:2d:8d:3a:3c: c8:04:eb:f1:ad:fe:d5:83:29:1d:fe:66:78:5f:0e: fa:ea:aa:d4:60:8b:59:80:ef:bc:50:7c:c8:90:76: 39:8e:08:af:98:19:3f:ab:3d:60:89:9a:1f:7c:9f: eb:88:0f:86:d1:8d:c9:41:b2:15:13:0e:2c:a3:94: d0:f2:41:5e:2e:f0:00:88:84:9e:e8:0c:fe:72:de: 24:f7:4f:ea:31:dd:eb:06:b3:73:d5:6d:81:69:bf: 58:5d:67:aa:f8:ed:10:69:06:7a:14:25:8f:68:8d: c6:62:74:61:db:cb:b4:90:8d:18:58:fb:7b:b2:4d: a4:38:8a:03:ea:5a:a7:4e:47:71:e8:2e:0f:d0:d3: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:01:D6:76:AB:1F:2D:95:95:9E:97:7B:C9:2A:50:0A:F5:BE:8E:C7 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.46.143.0/24 176.46.146.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f1:8a:95:d5:c2:e6:7c:1d:32:57:3c:9e:d3:37:f0:95:fd: 86:1b:12:c5:9a:7f:c3:6c:d9:96:fb:f0:e4:87:f7:97:9a:57: c9:75:d5:80:79:7b:34:83:3d:b3:89:48:65:d6:80:e7:0d:38: 58:87:58:33:75:17:42:4a:5a:4f:69:04:a4:fa:9a:67:c1:32: 52:ce:10:5f:ca:86:20:69:01:9f:6b:6c:fa:af:6a:ee:fc:da: 7a:fb:c2:3d:ca:e2:8e:31:b0:eb:74:9d:2b:cd:fa:49:b7:48: 69:19:48:6a:70:7a:68:be:2b:4c:22:47:d4:2f:a5:eb:9d:3e: ce:6b:ed:a7:d7:9d:e7:81:0e:ec:6d:06:4e:91:cb:61:5b:f2: 7d:66:31:be:ce:bd:e1:45:76:f5:fd:15:f7:ed:24:fc:16:9e: 08:9d:1d:52:34:10:3f:c5:48:c2:27:95:fe:fc:c7:fb:47:33: a8:68:66:f8:77:b6:40:b0:bb:72:1d:30:2a:1b:5d:da:90:10: c8:a5:28:a8:04:71:07:74:55:67:ac:62:0a:ed:69:46:90:2f: 14:c8:67:24:1b:b0:01:25:42:6f:bb:f5:3c:0b:44:2b:f2:70: e2:44:42:ed:72:2b:dd:92:df:cd:fe:b3:1c:c8:97:5f:f0:4b: 04:ab:48:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yVpq9upV7nhQG8mbUPu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDAxZDY3NmFiMWYyZDk1OTU5ZTk3N2JjOTJhNTAwYWY1YmU4ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmRUBGpJXl2izW2VwooOMJ8wTY5K eEopKk/4AaV1XBFLEGAe8DUeUVmkR06d1EmXR9UbanV7lK2ovvvdp+M+p+R6UVmO qF5/TGlxX7hZgVoCNerTUmpLJtWZ0AX6MPzwPSd6od9bxrVDQZb3wIV5ZhhR3i2N OjzIBOvxrf7Vgykd/mZ4Xw766qrUYItZgO+8UHzIkHY5jgivmBk/qz1giZoffJ/r iA+G0Y3JQbIVEw4so5TQ8kFeLvAAiISe6Az+ct4k90/qMd3rBrNz1W2Bab9YXWeq +O0QaQZ6FCWPaI3GYnRh28u0kI0YWPt7sk2kOIoD6lqnTkdx6C4P0NOM4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNQB1narHy2VlZ6Xe8kqUAr1vo7HMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMUFIV2Rxc2ZMWldWbnBkN3lTcFFDdlctanNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsC6PAwQA sC6SMA0GCSqGSIb3DQEBCwUAA4IBAQCT8YqV1cLmfB0yVzye0zfwlf2GGxLFmn/D bNmW+/Dkh/eXmlfJddWAeXs0gz2ziUhl1oDnDThYh1gzdRdCSlpPaQSk+ppnwTJS zhBfyoYgaQGfa2z6r2ru/Np6+8I9yuKOMbDrdJ0rzfpJt0hpGUhqcHpovitMIkfU L6XrnT7Oa+2n153ngQ7sbQZOkcthW/J9ZjG+zr3hRXb1/RX37ST8Fp4InR1SNBA/ xUjCJ5X+/Mf7RzOoaGb4d7ZAsLtyHTAqG13akBDIpSioBHEHdFVnrGIK7WlGkC8U yGckG7ABJUJvu/U8C0Qr8nDiRELtcivdkt/N/rMcyJdf8EsEq0gX -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:50 2026 by rpki-client