This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/1t1mh1im05R5TEOwI71Jiu37ecs.roa File: 1t1mh1im05R5TEOwI71Jiu37ecs.roa (raw, json) Hash identifier: m9uNu74yMGw3x49FIpVoScb0nsc8GhB3C9Hq/L+dUZE= Subject key identifier: D6:DD:66:87:58:A6:D3:94:79:4C:43:B0:23:BD:49:8A:ED:FB:79:CB Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a Certificate serial: 019B797DF6AB65F886B36360906FE40BE841 Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/1t1mh1im05R5TEOwI71Jiu37ecs.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59652 IP address blocks: 176.124.128.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f6:ab:65:f8:86:b3:63:60:90:6f:e4:0b:e8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6dd668758a6d394794c43b023bd498aedfb79cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:4a:7a:91:15:23:6b:1c:78:54:45:23:80: 0d:97:8c:82:66:07:8c:1a:fa:c7:a2:0a:18:1f:5b: 8b:a6:d9:a2:ac:7d:ec:5b:2d:93:e9:a1:91:d2:92: 60:54:60:2d:7d:49:29:bf:c3:ff:d9:08:72:45:23: a7:f2:ed:91:86:ec:47:06:0d:f0:0f:25:b8:c8:2f: 2c:e6:bb:47:c2:73:9b:8d:9f:31:97:a0:a2:41:10: 81:16:d7:cf:e3:8b:c4:e8:48:1c:ff:7a:e7:d8:b6: 00:18:50:7b:97:14:4e:21:45:02:08:d1:71:2f:2c: af:2e:60:7a:49:28:7d:f9:13:f5:39:c0:40:e4:1b: c3:07:be:42:0e:52:fd:5a:f1:55:33:85:49:6b:b5: 34:a3:cf:ba:11:3e:d0:7f:45:35:f2:6c:d7:4c:12: a3:31:3f:a3:aa:a6:96:00:a0:28:d3:89:ed:01:b5: 92:b4:01:dd:5c:1b:ae:9f:d4:63:57:9d:a5:4c:b2: ba:ee:1b:12:8f:ca:68:bb:ec:27:c8:1c:ec:1e:7b: 1c:e7:82:99:5f:ad:3e:ba:95:5f:b1:b9:8e:c9:39: d3:27:c1:63:f4:42:c8:cf:49:18:ec:f6:1d:bb:e6: 96:7b:d3:2f:c1:56:7c:f6:c2:8f:09:de:11:28:8b: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DD:66:87:58:A6:D3:94:79:4C:43:B0:23:BD:49:8A:ED:FB:79:CB X509v3 Authority Key Identifier: keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/1t1mh1im05R5TEOwI71Jiu37ecs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.128.0/21 Signature Algorithm: sha256WithRSAEncryption 22:03:55:26:af:cc:74:d5:10:1d:8c:49:c8:f3:72:ef:ee:a6: 2a:60:9b:cb:18:b5:5c:40:5b:d6:89:c9:42:5c:58:23:9a:bd: 87:e6:59:e0:12:4b:f9:13:11:f2:85:9f:60:ea:80:23:d7:3b: c8:3c:22:bd:ac:a1:ff:bd:1a:71:f2:f2:e4:0d:c9:28:ce:45: 58:85:46:33:ce:e9:2b:e2:1b:21:0a:a3:f9:d9:c7:19:7f:2f: c2:f2:3f:fb:1e:e4:8d:7c:56:b0:45:a1:2f:5b:20:6c:91:07: 63:d6:1e:ff:dd:5a:05:57:f3:66:4a:4e:2b:dd:40:1e:64:c6: 3c:66:76:35:99:fb:9a:71:23:b6:b9:07:4e:72:66:50:b8:12: 5b:f0:7e:1f:25:ae:a9:bb:e7:aa:27:30:74:36:7e:45:4d:36: ba:8f:d8:dc:21:8b:ae:6d:33:4c:70:a0:e8:c2:bd:03:87:47: 4d:f3:c8:2e:2b:d3:7a:04:c1:a6:92:3a:7f:0d:6e:f2:ca:c3: f6:2a:83:07:ef:53:9e:e3:3e:4f:77:c2:b4:30:c2:0d:5e:ae: db:a1:06:ab:6d:54:e2:ec:c6:ae:f9:46:26:e1:a9:44:93:9a: 7d:58:36:07:a7:41:e9:de:90:f4:8d:85:95:b7:7d:fd:ff:22: 2e:91:27:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffarZfiGs2NgkG/kC+hBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTc0ZGE0NWQ1OTE0ZWRlMTM4MWVlYWY5YzJiYjE2NDVi NjY0M2EwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmRkNjY4NzU4YTZkMzk0Nzk0YzQzYjAyM2JkNDk4YWVkZmI3OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv1KepEVI2sceFRFI4ANl4yCZgeM GvrHogoYH1uLptmirH3sWy2T6aGR0pJgVGAtfUkpv8P/2QhyRSOn8u2RhuxHBg3w DyW4yC8s5rtHwnObjZ8xl6CiQRCBFtfP44vE6Egc/3rn2LYAGFB7lxROIUUCCNFx LyyvLmB6SSh9+RP1OcBA5BvDB75CDlL9WvFVM4VJa7U0o8+6ET7Qf0U18mzXTBKj MT+jqqaWAKAo04ntAbWStAHdXBuun9RjV52lTLK67hsSj8pou+wnyBzsHnsc54KZ X60+upVfsbmOyTnTJ8Fj9ELIz0kY7PYdu+aWe9MvwVZ89sKPCd4RKIsaWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbdZodYptOUeUxDsCO9SYrt+3nLMB8GA1UdIwQY MBaAFJ+XTaRdWRTt4Tge6vnCuxZFtmQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQt N2Q1ZWNiNGYxODFmLzEvMXQxbWgxaW0wNVI1VEVPd0k3MUppdTM3ZWNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQtN2Q1ZWNiNGYxODFm LzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHyAMA0G CSqGSIb3DQEBCwUAA4IBAQAiA1Umr8x01RAdjEnI83Lv7qYqYJvLGLVcQFvWiclC XFgjmr2H5lngEkv5ExHyhZ9g6oAj1zvIPCK9rKH/vRpx8vLkDckozkVYhUYzzukr 4hshCqP52ccZfy/C8j/7HuSNfFawRaEvWyBskQdj1h7/3VoFV/NmSk4r3UAeZMY8 ZnY1mfuacSO2uQdOcmZQuBJb8H4fJa6pu+eqJzB0Nn5FTTa6j9jcIYuubTNMcKDo wr0Dh0dN88guK9N6BMGmkjp/DW7yysP2KoMH71Oe4z5Pd8K0MMINXq7boQarbVTi 7Mau+UYm4alEk5p9WDYHp0Hp3pD0jYWVt339/yIukSci -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:00 2026 by rpki-client