This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/1PqW9xAwSo4dm4VeDiS9Ue0wick.roa File: 1PqW9xAwSo4dm4VeDiS9Ue0wick.roa (raw, json) Hash identifier: CB5tgTJXzCAm94J5KAhAijPRRc4JVl9OlDSGMEw6Gl4= Subject key identifier: D4:FA:96:F7:10:30:4A:8E:1D:9B:85:5E:0E:24:BD:51:ED:30:89:C9 Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d Certificate serial: 019B78A3292E91F042B02CA5E895FB19FAEF Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/1PqW9xAwSo4dm4VeDiS9Ue0wick.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 146.19.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:29:2e:91:f0:42:b0:2c:a5:e8:95:fb:19:fa:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4fa96f710304a8e1d9b855e0e24bd51ed3089c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:4d:99:a9:ff:39:39:a6:81:10:03:88:0a: 85:c8:9f:54:a8:14:5e:69:51:96:ba:d4:49:80:30: 43:b6:86:fc:a8:6a:ec:65:86:cc:a3:df:10:f2:af: 47:09:20:14:14:30:00:ed:e5:8f:5b:0c:bd:3c:a3: e4:7f:6f:e3:be:94:7c:a9:7b:aa:b5:31:97:10:0d: cc:bf:7d:f4:08:74:e2:21:8f:b5:4a:06:92:49:bf: 96:63:1c:d7:27:54:a4:83:c0:82:bc:e0:45:b2:61: 4d:19:2d:a5:2c:b5:88:38:85:e2:93:b3:b0:3b:a0: 1a:c0:e1:73:58:ab:c7:2d:2d:0a:ea:98:b4:e1:fb: 78:7f:7c:41:e1:77:22:8f:ac:3f:34:5e:7e:c7:8c: be:8a:5e:d4:13:a2:b0:f9:55:28:c0:c9:d9:b5:e7: f1:62:12:87:00:14:15:4d:e4:10:21:ae:95:2b:59: ce:07:d5:5b:9e:7b:c5:b8:c6:13:68:24:7e:32:c3: 0e:fa:76:bc:fa:ef:9b:b1:fb:4f:74:39:c2:cf:22: a7:f8:7c:c6:4d:30:14:9c:57:6f:e9:49:b7:88:57: b9:bd:fe:91:6d:66:67:19:57:23:96:60:dc:48:db: 16:b1:0d:e0:a5:bd:5b:77:fd:ec:1f:11:9b:af:b4: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FA:96:F7:10:30:4A:8E:1D:9B:85:5E:0E:24:BD:51:ED:30:89:C9 X509v3 Authority Key Identifier: keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/1PqW9xAwSo4dm4VeDiS9Ue0wick.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.191.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:41:d8:5f:49:9a:20:2c:25:f7:d2:85:4b:c2:51:a9:6d:35: b8:7a:38:25:66:0d:0f:6f:36:30:20:05:ca:e9:c2:a2:56:21: d5:11:83:cb:59:3e:3f:fe:d2:91:8e:14:a8:a6:87:7c:c8:fb: f2:99:56:c1:0b:85:87:be:03:d0:4d:e0:86:53:4d:5b:f3:8f: ef:c5:f0:48:0c:5d:86:8f:08:c7:2c:6f:9f:88:81:10:33:fd: 46:4e:8a:42:f6:97:97:c8:28:38:b4:dd:5a:68:8e:0c:8e:67: 62:39:90:f3:27:95:b7:b1:1f:ba:2b:1f:8c:98:2e:b3:46:95: 1c:c5:84:a9:62:79:66:6c:fb:b8:60:47:6b:bf:e9:b3:25:6f: df:73:db:5e:57:74:f1:80:11:51:7a:4a:29:db:43:7c:87:e3: 65:f0:45:c5:c4:33:b9:8f:2f:93:22:17:1a:6e:9b:f6:6b:a2: b8:8a:05:64:9c:4d:60:d8:6c:d3:6b:fb:83:1a:3d:7c:b5:06: 9b:a2:82:9b:a2:74:27:e5:00:70:bc:71:68:92:9f:38:5e:c6: 1c:48:f0:ff:30:ed:99:3e:0b:b7:1a:61:84:f4:79:4b:98:43: 2d:2f:18:c3:ee:6b:02:57:4b:69:c6:de:da:4c:23:9c:e3:10: 59:97:d3:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oykukfBCsCyl6JX7GfrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWM3YjU2MDdjNTM2NjU3ZmQ1NzQ4ZjZmNjViMjRhYzEy ZWIxN2QwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGZhOTZmNzEwMzA0YThlMWQ5Yjg1NWUwZTI0YmQ1MWVkMzA4OWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhxNman/OTmmgRADiAqFyJ9UqBRe aVGWutRJgDBDtob8qGrsZYbMo98Q8q9HCSAUFDAA7eWPWwy9PKPkf2/jvpR8qXuq tTGXEA3Mv330CHTiIY+1SgaSSb+WYxzXJ1Skg8CCvOBFsmFNGS2lLLWIOIXik7Ow O6AawOFzWKvHLS0K6pi04ft4f3xB4Xcij6w/NF5+x4y+il7UE6Kw+VUowMnZtefx YhKHABQVTeQQIa6VK1nOB9VbnnvFuMYTaCR+MsMO+na8+u+bsftPdDnCzyKn+HzG TTAUnFdv6Um3iFe5vf6RbWZnGVcjlmDcSNsWsQ3gpb1bd/3sHxGbr7RaoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNT6lvcQMEqOHZuFXg4kvVHtMInJMB8GA1UdIwQY MBaAFDUce1YHxTZlf9V0j29lskrBLrF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMt NjUxNzA3YzkxZmQzLzEvMVBxVzl4QXdTbzRkbTRWZURpUzlVZTB3aWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMtNjUxNzA3YzkxZmQz LzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhO/MA0G CSqGSIb3DQEBCwUAA4IBAQBcQdhfSZogLCX30oVLwlGpbTW4ejglZg0PbzYwIAXK 6cKiViHVEYPLWT4//tKRjhSopod8yPvymVbBC4WHvgPQTeCGU01b84/vxfBIDF2G jwjHLG+fiIEQM/1GTopC9peXyCg4tN1aaI4MjmdiOZDzJ5W3sR+6Kx+MmC6zRpUc xYSpYnlmbPu4YEdrv+mzJW/fc9teV3TxgBFRekop20N8h+Nl8EXFxDO5jy+TIhca bpv2a6K4igVknE1g2GzTa/uDGj18tQabooKbonQn5QBwvHFokp84XsYcSPD/MO2Z Pgu3GmGE9HlLmEMtLxjD7msCV0tpxt7aTCOc4xBZl9MV -----END CERTIFICATE-----Generated at Mon Jan 19 17:46:52 2026 by rpki-client