This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/N1QbEzwIiNyKqKQVhre6BH-1XNY.roa File: N1QbEzwIiNyKqKQVhre6BH-1XNY.roa (raw, json) Hash identifier: dq50jZDsFxy8RSAH12sYXs1xNOzLSBl1JywnIq03EGU= Subject key identifier: 37:54:1B:13:3C:08:88:DC:8A:A8:A4:15:86:B7:BA:04:7F:B5:5C:D6 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFF7A7EF4327BE90F47E74863BBDA Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/N1QbEzwIiNyKqKQVhre6BH-1XNY.roa Signing time: Fri 02 Jan 2026 06:17:54 +0000 ROA not before: Fri 02 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57403 IP address blocks: 188.241.240.0/24 maxlen: 24 188.241.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ff:7a:7e:f4:32:7b:e9:0f:47:e7:48:63:bb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37541b133c0888dc8aa8a41586b7ba047fb55cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:5f:72:c5:98:4d:4d:8a:36:6d:2c:e6:6c: c8:df:78:39:e0:dd:d1:35:6b:9f:65:89:ff:d8:ca: 01:f7:50:8e:e3:c0:03:3a:d5:ac:94:11:80:16:aa: 7a:33:b8:7a:61:30:5b:0e:45:af:d9:ce:54:a4:97: 14:c9:59:4c:1d:b8:e0:f6:b9:64:1c:53:dc:72:0d: ca:4a:6e:97:fb:31:2a:23:89:28:1a:ca:96:7e:b9: 5e:03:91:94:1c:42:f3:d1:e5:bd:ec:4d:9f:0d:d7: eb:45:0f:0f:3b:80:19:a1:02:87:ef:8f:88:d5:e0: 80:e7:96:09:24:ac:2f:72:e5:d4:e5:ab:02:07:3e: 83:8d:9f:1f:81:d6:6e:d2:30:81:74:48:f6:a1:b9: ef:9c:aa:97:3c:9f:9e:66:8d:77:83:4d:37:f4:59: 0b:7d:22:f8:b8:a7:f4:dd:c5:f3:14:49:53:ef:cb: 67:9f:36:c6:e9:9b:54:c6:f0:58:68:c6:e9:81:28: fb:cd:13:eb:f7:2f:7e:97:9f:08:fc:6c:a0:59:06: 63:fe:94:85:9f:fc:a3:ae:fb:23:51:d3:0b:b6:b7: c0:fd:47:62:27:0e:8d:59:97:16:99:25:78:42:e9: 0e:7e:e5:95:97:78:98:0c:ad:41:9c:65:fb:f6:56: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:54:1B:13:3C:08:88:DC:8A:A8:A4:15:86:B7:BA:04:7F:B5:5C:D6 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/N1QbEzwIiNyKqKQVhre6BH-1XNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.240.0/23 Signature Algorithm: sha256WithRSAEncryption 23:db:ad:95:c2:c5:58:12:04:8b:84:ac:32:0f:5f:32:c1:e0: 41:fa:46:f5:84:83:c2:b7:0f:d7:cb:68:ba:5e:e0:4c:61:ae: 78:11:9e:64:7a:b1:e4:c2:d3:e6:d9:5d:dd:e7:9e:61:17:74: c5:12:6b:b4:cd:44:a3:6a:be:ee:ed:38:fb:14:1e:9b:d4:eb: 74:8a:b1:d7:c4:f0:55:73:d6:98:bc:3a:4f:50:4d:b4:83:64: 1b:83:b9:53:c8:7f:87:ff:d1:58:1a:9a:77:c7:f9:d0:11:ee: dd:38:ee:d9:ad:bb:f0:7f:b6:8b:17:7b:90:4e:64:53:7e:6d: 12:e4:0d:46:e3:bb:cd:c2:06:bf:49:53:e9:ae:8b:1e:70:52: e4:d2:b9:31:8c:37:da:b7:6f:2c:bc:f0:89:22:b3:7e:c6:29: 67:ba:47:32:56:a5:09:78:bb:ed:b7:7c:60:8d:7b:66:bc:14: 30:33:2a:02:e1:51:b3:dd:0a:26:e5:10:b1:f9:c0:09:37:5a: b7:05:44:f4:1f:7d:b4:62:5a:cd:f4:35:33:55:d4:e9:c3:47: 7d:06:88:d2:7e:2f:17:61:89:f9:30:fc:05:b1:d7:31:48:6e: fb:14:88:87:e9:05:83:72:ad:82:a8:89:e7:1a:87:bc:3d:b5: 59:a4:30:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wv96fvQye+kPR+dIY7vaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzU0MWIxMzNjMDg4OGRjOGFhOGE0MTU4NmI3YmEwNDdmYjU1Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWxfcsWYTU2KNm0s5mzI33g54N3R NWufZYn/2MoB91CO48ADOtWslBGAFqp6M7h6YTBbDkWv2c5UpJcUyVlMHbjg9rlk HFPccg3KSm6X+zEqI4koGsqWfrleA5GUHELz0eW97E2fDdfrRQ8PO4AZoQKH74+I 1eCA55YJJKwvcuXU5asCBz6DjZ8fgdZu0jCBdEj2obnvnKqXPJ+eZo13g0039FkL fSL4uKf03cXzFElT78tnnzbG6ZtUxvBYaMbpgSj7zRPr9y9+l58I/GygWQZj/pSF n/yjrvsjUdMLtrfA/UdiJw6NWZcWmSV4QukOfuWVl3iYDK1BnGX79lbhQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdUGxM8CIjciqikFYa3ugR/tVzWMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvTjFRYkV6d0lpTnlLcUtRVmhyZTZCSC0xWE5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvPHwMA0G CSqGSIb3DQEBCwUAA4IBAQAj262VwsVYEgSLhKwyD18yweBB+kb1hIPCtw/Xy2i6 XuBMYa54EZ5kerHkwtPm2V3d555hF3TFEmu0zUSjar7u7Tj7FB6b1Ot0irHXxPBV c9aYvDpPUE20g2Qbg7lTyH+H/9FYGpp3x/nQEe7dOO7Zrbvwf7aLF3uQTmRTfm0S 5A1G47vNwga/SVPprosecFLk0rkxjDfat28svPCJIrN+xilnukcyVqUJeLvtt3xg jXtmvBQwMyoC4VGz3Qom5RCx+cAJN1q3BUT0H320YlrN9DUzVdTpw0d9BojSfi8X YYn5MPwFsdcxSG77FIiH6QWDcq2CqInnGoe8PbVZpDCt -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:40 2026 by rpki-client