This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa File: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (raw, json) Hash identifier: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY= Subject key identifier: FA:45:0F:EB:44:2B:85:60:2D:02:0C:BB:85:C1:8B:46:A0:CC:66:CD Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9BD64ADE33B8E408FBD82F1406A1 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202356 IP address blocks: 147.234.32.0/24 maxlen: 24 147.234.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9b:d6:4a:de:33:b8:e4:08:fb:d8:2f:14:06:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa450feb442b85602d020cbb85c18b46a0cc66cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:14:fb:ad:23:bf:5d:1a:b4:72:d4:14:04: 71:f4:c0:62:b2:88:1a:e0:f5:f8:e1:3f:1c:07:c2: 0c:ea:e3:aa:78:e7:83:61:70:59:ef:4e:9b:18:8d: 2d:b0:59:e2:11:00:a4:eb:d5:a8:bc:3d:28:67:5e: 1d:c6:35:b0:ea:f2:c6:55:55:1a:cb:96:75:67:7d: b7:66:19:8f:94:59:2a:53:88:94:e8:69:39:51:6d: 1b:2d:d0:8f:9b:e5:e7:e3:62:38:fa:9b:d6:7a:96: 01:56:4f:68:69:b0:3e:1f:77:56:2e:6e:41:72:08: 8b:f0:dc:e9:ca:f2:cf:48:5d:f7:24:00:f7:43:49: 8f:29:db:f7:91:23:b5:1f:e9:53:f0:ad:7d:46:f1: 2d:8f:99:7c:78:57:17:de:66:88:9e:eb:ce:43:ba: 26:ad:d1:c6:25:05:08:59:8b:a1:06:ec:77:47:7f: 20:f8:80:11:dc:e5:90:17:67:93:b6:a2:6f:4a:df: 2d:a1:ba:3b:65:b1:3c:de:3d:fd:fd:67:51:40:6a: 9d:86:a4:7c:cc:82:01:1e:58:cb:51:26:fa:90:db: 38:35:11:6d:67:3d:64:3c:2f:49:33:17:3e:a0:f4: dd:44:13:1e:fe:36:67:f9:fb:6d:1e:f4:cd:c9:31: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:0F:EB:44:2B:85:60:2D:02:0C:BB:85:C1:8B:46:A0:CC:66:CD X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.32.0/24 147.234.87.0/24 Signature Algorithm: sha256WithRSAEncryption 39:73:33:1d:7c:78:1d:ff:63:a2:ae:d1:9c:d6:b5:ac:1e:81: 46:44:9c:64:99:98:00:2c:67:53:09:e6:80:64:d9:e1:21:7a: db:96:f2:64:7d:1c:00:7c:fd:24:b1:c8:87:d7:78:7f:df:4e: a3:e8:6f:9a:97:b1:b8:a6:d0:4a:81:77:11:a8:65:bd:d5:74: c2:fb:fe:1f:9a:91:df:40:8f:7f:82:6c:53:a7:cb:b9:de:9b: bf:7a:28:78:f5:ef:a8:75:a2:c6:25:67:75:b9:17:cf:84:a6: 24:f3:00:28:2b:43:ea:58:06:86:17:f9:ad:e4:c2:b4:d4:ed: c9:80:70:d2:c1:5d:76:3c:5d:15:5d:3c:f6:81:d8:be:39:be: a7:40:64:45:0b:46:42:03:10:39:c5:49:7a:c9:f7:93:da:5f: dd:4b:b2:e7:c4:8f:3e:88:a4:bf:5b:1a:d0:9b:6b:4d:d4:75: 66:9f:0a:a5:1c:00:58:98:ea:2e:a1:d6:c2:87:41:f0:9a:ac: 28:e4:98:fb:87:23:93:04:76:34:fb:b6:c3:ba:98:b0:9e:b6: 34:ad:c7:03:d2:1f:11:86:dd:c8:63:1e:bb:09:fc:fa:5f:af: c4:98:e0:95:15:32:aa:94:70:3f:0f:05:91:8a:79:d2:ae:a7: ac:07:03:73 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt87ZvWSt4zuOQI+9gvFAahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQ1MGZlYjQ0MmI4NTYwMmQwMjBjYmI4NWMxOGI0NmEwY2M2NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+QU+60jv10atHLUFARx9MBisoga 4PX44T8cB8IM6uOqeOeDYXBZ706bGI0tsFniEQCk69WovD0oZ14dxjWw6vLGVVUa y5Z1Z323ZhmPlFkqU4iU6Gk5UW0bLdCPm+Xn42I4+pvWepYBVk9oabA+H3dWLm5B cgiL8NzpyvLPSF33JAD3Q0mPKdv3kSO1H+lT8K19RvEtj5l8eFcX3maInuvOQ7om rdHGJQUIWYuhBux3R38g+IAR3OWQF2eTtqJvSt8tobo7ZbE83j39/WdRQGqdhqR8 zIIBHljLUSb6kNs4NRFtZz1kPC9JMxc+oPTdRBMe/jZn+fttHvTNyTFpaQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPpFD+tEK4VgLQIMu4XBi0agzGbNMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvMS1rVVA2MFFyaFdBdEFneTdoY0dMUnFETVpzMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjAvOGRkYzM4LTdhMWEtNDkwNi1hOGVkLTQ0MzMyMjlhODQ3 My8xL0liclhUbjlzQ1VtaWMycFhSNFNXMTlpMFVPWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJPqIAME AJPqVzANBgkqhkiG9w0BAQsFAAOCAQEAOXMzHXx4Hf9joq7RnNa1rB6BRkScZJmY ACxnUwnmgGTZ4SF625byZH0cAHz9JLHIh9d4f99Oo+hvmpexuKbQSoF3EahlvdV0 wvv+H5qR30CPf4JsU6fLud6bv3ooePXvqHWixiVndbkXz4SmJPMAKCtD6lgGhhf5 reTCtNTtyYBw0sFddjxdFV089oHYvjm+p0BkRQtGQgMQOcVJesn3k9pf3Uuy58SP Poikv1sa0JtrTdR1Zp8KpRwAWJjqLqHWwodB8JqsKOSY+4cjkwR2NPu2w7qYsJ62 NK3HA9IfEYbdyGMeuwn8+l+vxJjglRUyqpRwPw8FkYp50q6nrAcDcw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:56 2026 by rpki-client