This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/1-GuB2dsXmhfM3FVaD28Jix7MeSQ.roa File: 1-GuB2dsXmhfM3FVaD28Jix7MeSQ.roa (raw, json) Hash identifier: Q33tcZF/wyJSnNSwGnNmjRCSYTNjYtXeUBk3UB7+jJ4= Subject key identifier: F8:6B:81:D9:DB:17:9A:17:CC:DC:55:5A:0F:6F:09:8B:1E:CC:79:24 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B77C69A86D3D0D0E3D54175052D560060 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/1-GuB2dsXmhfM3FVaD28Jix7MeSQ.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33667 IP address blocks: 9.142.32.0/19 maxlen: 19 9.142.48.0/20 maxlen: 20 9.142.64.0/18 maxlen: 18 9.142.96.0/19 maxlen: 19 9.142.192.0/19 maxlen: 19 138.226.48.0/21 maxlen: 21 138.226.64.0/20 maxlen: 20 138.226.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:86:d3:d0:d0:e3:d5:41:75:05:2d:56:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f86b81d9db179a17ccdc555a0f6f098b1ecc7924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ba:9a:d2:32:0a:3d:f8:90:17:c1:7a:3f:db: d3:d7:2a:90:57:75:48:18:ac:c4:b1:af:67:7f:71: 49:9f:76:65:a7:75:49:f7:6e:3d:aa:35:fd:87:02: 4b:52:47:de:87:80:d4:bc:90:7a:5c:e9:66:5f:88: 9c:45:67:58:24:08:81:e7:1f:85:82:6c:bb:e5:a6: d3:1f:11:c2:1a:f5:78:a6:70:aa:00:bb:57:5f:c9: d6:40:ec:78:67:ed:9e:58:10:7f:46:43:ff:e7:78: 55:39:0f:d9:ee:02:ab:52:8f:c3:1d:70:6c:63:49: e1:79:c4:86:02:8e:49:51:de:ce:a7:d5:71:68:5d: 13:16:15:18:5f:ae:92:92:13:76:95:47:7c:c0:58: dc:09:11:7b:5b:49:50:56:87:50:52:2b:70:4b:80: 36:ec:55:6f:73:18:c4:10:7d:e4:62:bb:f9:e9:25: 85:da:c8:57:da:b2:95:f9:ab:3e:97:95:3c:a7:ef: 8a:a8:da:71:ae:10:35:a8:eb:7f:61:00:a1:ad:03: 47:4e:10:ae:0a:fd:86:39:ff:16:89:62:74:d7:17: 60:a2:18:7d:37:84:63:7b:34:3a:73:fb:0a:76:24: 57:7b:a5:09:3f:d7:48:49:8e:ea:b8:9b:01:49:0f: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:81:D9:DB:17:9A:17:CC:DC:55:5A:0F:6F:09:8B:1E:CC:79:24 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/1-GuB2dsXmhfM3FVaD28Jix7MeSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.142.32.0-9.142.127.255 9.142.192.0/19 138.226.48.0/21 138.226.64.0/20 138.226.112.0/21 Signature Algorithm: sha256WithRSAEncryption 01:f2:f8:a5:4c:b1:7b:06:5c:24:8a:a0:f7:36:6c:c2:9d:d1: c9:79:51:d1:3c:62:15:25:fc:42:b4:14:9b:6e:da:7f:11:84: 9c:00:28:7c:f4:13:01:55:0f:75:69:ad:a4:af:7c:53:89:15: 3d:43:a9:27:70:75:96:a1:b2:3c:37:dc:ac:9a:f7:0c:00:79: f4:b1:cd:87:5b:52:20:4a:24:f2:59:70:9f:53:6e:b0:5b:b2: 40:5e:8b:77:8c:5a:f2:d6:dd:34:f7:9a:cf:93:ff:ee:77:3c: bb:57:28:f2:2c:da:87:55:61:cb:0b:51:0c:1e:24:96:a4:60: 9b:8d:32:c0:cf:c0:4a:3a:08:d5:9b:6a:2b:48:c4:f1:22:15: 4b:11:5b:a3:fb:83:86:e4:e7:76:b4:29:ca:0d:98:52:07:e9: d7:ff:88:d2:c1:47:6c:9b:55:4c:2d:d2:ef:b6:db:b8:ce:af: 4c:1d:c6:6c:53:cb:3a:28:aa:3e:76:cf:bc:76:92:24:85:e8: 13:f1:49:1e:d2:20:87:3c:4c:c3:d1:5d:c0:7a:65:4b:4d:ea: 19:2b:72:45:e2:63:34:cd:b9:cd:e6:75:07:d0:4a:61:02:80: 58:d4:d6:c9:1f:82:91:af:60:78:96:97:7e:fa:40:30:dc:5c: 8a:cc:70:be -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xpqG09DQ49VBdQUtVgBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODZiODFkOWRiMTc5YTE3Y2NkYzU1NWEwZjZmMDk4YjFlY2M3OTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Lqa0jIKPfiQF8F6P9vT1yqQV3VI GKzEsa9nf3FJn3Zlp3VJ9249qjX9hwJLUkfeh4DUvJB6XOlmX4icRWdYJAiB5x+F gmy75abTHxHCGvV4pnCqALtXX8nWQOx4Z+2eWBB/RkP/53hVOQ/Z7gKrUo/DHXBs Y0nhecSGAo5JUd7Op9VxaF0TFhUYX66SkhN2lUd8wFjcCRF7W0lQVodQUitwS4A2 7FVvcxjEEH3kYrv56SWF2shX2rKV+as+l5U8p++KqNpxrhA1qOt/YQChrQNHThCu Cv2GOf8WiWJ01xdgohh9N4RjezQ6c/sKdiRXe6UJP9dISY7quJsBSQ9mVwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPhrgdnbF5oXzNxVWg9vCYsezHkkMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvMS1HdUIyZHNYbWhmTTNGVmFEMjhKaXg3TWVTUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzUvYTFhZTcwLTc5OTYtNDY4Ny1hMGQ3LTVlMGY0YWI4MDli Yi8xL2RENUVmdHVLWGc0YkhYOWMzQ2g4TmtwZnNMVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJjAMAwQFCY4g AwQHCY4AAwQFCY7AAwQDiuIwAwQEiuJAAwQDiuJwMA0GCSqGSIb3DQEBCwUAA4IB AQAB8vilTLF7BlwkiqD3NmzCndHJeVHRPGIVJfxCtBSbbtp/EYScACh89BMBVQ91 aa2kr3xTiRU9Q6kncHWWobI8N9ysmvcMAHn0sc2HW1IgSiTyWXCfU26wW7JAXot3 jFry1t0095rPk//udzy7VyjyLNqHVWHLC1EMHiSWpGCbjTLAz8BKOgjVm2orSMTx IhVLEVuj+4OG5Od2tCnKDZhSB+nX/4jSwUdsm1VMLdLvttu4zq9MHcZsU8s6KKo+ ds+8dpIkhegT8Uke0iCHPEzD0V3AemVLTeoZK3JF4mM0zbnN5nUH0EphAoBY1NbJ H4KRr2B4lpd++kAw3FyKzHC+ -----END CERTIFICATE-----Generated at Tue Jan 20 15:33:50 2026 by rpki-client