This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/1-uY3ByKZWX6EbvY022ukUYAIf0A.roa File: 1-uY3ByKZWX6EbvY022ukUYAIf0A.roa (raw, json) Hash identifier: RrYvBD/sXCQXZ4ZUGRnJ0kZRIByBBH3L6RfLx0gb2ec= Subject key identifier: FA:E6:37:07:22:99:59:7E:84:6E:F6:34:DB:6B:A4:51:80:08:7F:40 Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94 Certificate serial: 019B7F15128B5217BE5CC15EB467F715ADCB Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/1-uY3ByKZWX6EbvY022ukUYAIf0A.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.146.173.0/24 maxlen: 24 185.146.174.0/24 maxlen: 24 185.146.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:12:8b:52:17:be:5c:c1:5e:b4:67:f7:15:ad:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94 Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae637072299597e846ef634db6ba45180087f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7a:d6:1c:17:3a:79:b8:63:10:71:1b:47:3c: 75:2c:8b:c1:f3:7e:e6:2e:8e:f1:79:9e:f2:78:8f: 19:2c:93:72:31:31:a7:18:7c:a0:56:7d:e4:a6:88: d7:c1:87:d7:5a:34:eb:06:18:e6:83:5e:e5:59:02: 6b:1e:aa:44:01:b8:ae:b5:bd:17:bb:c2:67:5d:69: d8:5e:17:38:7e:e7:20:de:50:92:c9:60:20:30:0d: 52:64:ee:b9:9f:cc:f8:34:74:60:48:9e:a1:c5:9d: 4c:02:20:ba:db:17:2c:2f:af:3f:e9:ec:11:2e:e7: c2:4b:77:17:f6:5f:6d:67:c1:0e:d9:2e:fb:81:90: 88:99:32:52:84:c7:5b:ae:39:98:82:fe:a6:f3:8d: 4c:33:bd:22:65:43:c2:b8:1b:dc:8a:41:92:d5:f1: 24:34:90:c5:24:69:94:26:a6:5a:0e:50:92:e3:15: 6c:6a:1d:6e:b1:cf:52:fb:de:4b:22:ea:d3:5f:86: c2:88:2f:76:99:e9:e3:fd:d7:ad:a6:96:2e:71:c0: 36:e0:62:0d:3b:4b:02:1a:12:c9:8b:33:2d:8e:7b: 2a:1d:c5:1b:23:e1:0f:73:65:3d:bc:b8:dc:19:1e: 28:86:a6:55:3e:cb:02:13:24:13:fe:45:d6:d0:1e: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E6:37:07:22:99:59:7E:84:6E:F6:34:DB:6B:A4:51:80:08:7F:40 X509v3 Authority Key Identifier: keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/1-uY3ByKZWX6EbvY022ukUYAIf0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.173.0-185.146.175.255 Signature Algorithm: sha256WithRSAEncryption 52:a9:76:bb:6b:95:45:dc:83:bb:93:4a:f8:08:e5:6d:36:9c: 26:27:df:ee:5b:ae:9a:67:aa:fc:35:fa:4e:b9:09:21:ba:b9: b9:a5:67:c6:95:9c:62:88:2a:d8:1a:11:a7:30:b8:e3:b6:82: 45:51:7b:c0:83:2a:13:f8:76:dd:4e:c7:fc:af:c1:b0:27:43: 96:0c:8f:99:01:cf:eb:d6:1a:d9:75:a7:77:41:74:db:fc:e9: 45:fe:84:0d:67:ae:5f:89:9f:ae:ba:4e:54:7b:69:a9:fd:3b: 8e:f8:83:e9:30:3b:fa:a5:26:6c:2c:39:e2:71:3c:69:65:49: 4e:38:37:ce:b7:45:ed:1c:c1:9b:6a:22:e0:cc:79:74:3f:5d: e7:7f:00:3b:3d:9e:c6:5b:40:7c:2b:71:4d:4b:b5:31:2e:e0: 1f:60:6d:0d:fa:5d:2f:2d:72:64:22:fc:18:38:b1:9c:f3:0b: ce:9c:93:e8:de:0b:d0:98:6f:3d:0f:5f:0c:76:6e:2f:33:c0: cb:2e:cf:a1:ab:00:b4:cd:49:ac:23:f1:47:e2:16:e9:83:e4: 1b:8f:f9:7c:a7:d9:a8:c5:99:d5:1a:40:d9:0a:51:2d:f4:9a: 6f:35:32:55:5a:7c:51:2b:53:04:1f:f3:2b:6f:f9:71:a4:e5: b0:bc:2e:4b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt/FRKLUhe+XMFetGf3Fa3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDQ4OWRjOWMwYTc0YzJlZDUzZTFkOWUxZmJmZGQ4Yzg3 NzNiOTQwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWU2MzcwNzIyOTk1OTdlODQ2ZWY2MzRkYjZiYTQ1MTgwMDg3ZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XrWHBc6ebhjEHEbRzx1LIvB837m Lo7xeZ7yeI8ZLJNyMTGnGHygVn3kpojXwYfXWjTrBhjmg17lWQJrHqpEAbiutb0X u8JnXWnYXhc4fucg3lCSyWAgMA1SZO65n8z4NHRgSJ6hxZ1MAiC62xcsL68/6ewR LufCS3cX9l9tZ8EO2S77gZCImTJShMdbrjmYgv6m841MM70iZUPCuBvcikGS1fEk NJDFJGmUJqZaDlCS4xVsah1usc9S+95LIurTX4bCiC92menj/detppYuccA24GIN O0sCGhLJizMtjnsqHcUbI+EPc2U9vLjcGR4ohqZVPssCEyQT/kXW0B6/eQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPrmNwcimVl+hG72NNtrpFGACH9AMB8GA1UdIwQY MBaAFBoEidycCnTC7VPh2eH7/djIdzuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dTSjNKd0tkTUx0VS1IWjRmdjkyTWgzTzVRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMWM1MmMtNDFhYS00ZTk1LWFkNjct YTAyMWE2M2RkZmMzLzEvMS11WTNCeUtaV1g2RWJ2WTAyMnVrVVlBSWYwQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWEvMTFjNTJjLTQxYWEtNGU5NS1hZDY3LWEwMjFhNjNkZGZj My8xL0dnU0ozSndLZE1MdFUtSFo0ZnY5Mk1oM081US5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAuZKt AwQEuZKgMA0GCSqGSIb3DQEBCwUAA4IBAQBSqXa7a5VF3IO7k0r4COVtNpwmJ9/u W66aZ6r8NfpOuQkhurm5pWfGlZxiiCrYGhGnMLjjtoJFUXvAgyoT+HbdTsf8r8Gw J0OWDI+ZAc/r1hrZdad3QXTb/OlF/oQNZ65fiZ+uuk5Ue2mp/TuO+IPpMDv6pSZs LDnicTxpZUlOODfOt0XtHMGbaiLgzHl0P13nfwA7PZ7GW0B8K3FNS7UxLuAfYG0N +l0vLXJkIvwYOLGc8wvOnJPo3gvQmG89D18Mdm4vM8DLLs+hqwC0zUmsI/FH4hbp g+Qbj/l8p9moxZnVGkDZClEt9JpvNTJVWnxRK1MEH/Mrb/lxpOWwvC5L -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:11 2026 by rpki-client