This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa File: 1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa (raw, json) Hash identifier: kxVoHYAy1StJ1GWwbeUY54WsYp9aXThsq2UtgssAUdE= Subject key identifier: FB:85:D3:1C:1A:0D:14:DA:F5:97:EE:43:94:9B:FB:90:23:84:02:C8 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019B77C6E49B22B1BE09B88744C4C0F78351 Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 64.190.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e4:9b:22:b1:be:09:b8:87:44:c4:c0:f7:83:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb85d31c1a0d14daf597ee43949bfb90238402c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:66:41:2b:76:da:51:8a:c2:1e:74:1e:bc: 50:ab:9e:92:62:a2:4b:7f:ce:2d:e3:4e:b7:9e:7b: 08:8d:b4:b4:35:4c:30:63:6d:5e:11:8f:52:e5:c4: f8:f2:d7:46:da:b0:6a:d0:b5:bf:77:58:5a:bb:d2: c1:e0:e8:42:18:ca:39:b8:ee:0e:0f:b6:b4:3f:c4: 3c:6d:68:a0:4b:4b:1b:27:6b:3e:f5:af:8a:39:9f: 3a:48:79:3a:d3:08:83:6e:b2:0c:05:70:b0:82:db: 50:f8:1e:d0:e8:68:80:b8:29:bf:5a:d1:ae:ea:d0: 5d:1f:5f:5a:60:b7:56:b9:49:2f:6b:f8:da:ae:14: 9a:8c:5b:2f:c5:8c:de:f1:1e:f2:64:da:0b:ab:20: da:2d:2b:d3:48:f6:7a:f2:b4:b9:79:aa:50:10:03: d4:6f:53:90:37:30:05:c2:6c:50:b1:6b:66:1a:00: 12:60:18:59:bb:f8:84:b1:34:b8:00:4b:cb:54:6b: f6:3c:6b:70:91:6d:d3:e5:ac:87:9b:ce:66:f1:4e: 4a:6d:8d:4e:c9:a4:0b:11:3c:69:35:02:90:67:f9: 4b:15:da:3c:41:7c:6f:64:57:bb:c0:14:e0:83:d8: 48:66:fc:78:d8:e0:c4:fc:6c:85:6a:a2:0c:c8:5e: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:D3:1C:1A:0D:14:DA:F5:97:EE:43:94:9B:FB:90:23:84:02:C8 X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.139.0/24 Signature Algorithm: sha256WithRSAEncryption 32:bb:52:8e:6c:7a:9a:70:a0:ca:12:45:39:fb:52:36:b1:1b: bc:d2:9d:bc:db:cd:e6:24:5f:f1:09:91:c0:26:b5:08:87:b7: 95:58:68:c5:47:6f:1e:b1:2c:32:b3:40:d6:e3:67:a7:ab:aa: 0f:ee:14:9e:6e:4b:9a:fd:8b:95:99:8d:c8:bf:61:35:1b:e4: 28:7c:7e:c8:ab:53:d7:85:5c:1f:e6:48:b2:50:b8:da:c4:be: f2:a2:80:7d:f8:fb:59:ed:8e:c0:8e:9d:25:11:6d:4b:64:e4: 20:f1:ac:f1:c7:43:47:43:a2:d5:3f:f6:20:15:10:e6:1b:0f: 42:a6:34:b8:1b:db:d3:09:dd:14:9e:4f:d2:f9:e9:f2:c7:1e: a2:25:bf:ce:9b:82:23:53:b1:6b:34:f5:0f:5d:d2:f9:1b:c0: bd:7e:71:28:02:11:ef:ba:64:99:b0:fd:31:31:27:9e:26:88: e3:40:34:26:7b:5c:54:98:90:b4:6a:e3:e8:d2:89:8a:00:c4: c9:e5:2a:2c:41:d3:71:21:fc:9e:3a:a7:ea:2e:8e:ee:84:9b: be:42:3e:5d:ca:4f:68:96:4f:b7:11:f6:43:01:f6:4e:18:4a: 02:20:d8:46:30:be:ad:3f:43:25:4c:56:f7:17:90:ef:6a:e9: 50:09:23:b6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xuSbIrG+CbiHRMTA94NRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjg1ZDMxYzFhMGQxNGRhZjU5N2VlNDM5NDliZmI5MDIzODQwMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvodmQSt22lGKwh50HrxQq56SYqJL f84t4063nnsIjbS0NUwwY21eEY9S5cT48tdG2rBq0LW/d1hau9LB4OhCGMo5uO4O D7a0P8Q8bWigS0sbJ2s+9a+KOZ86SHk60wiDbrIMBXCwgttQ+B7Q6GiAuCm/WtGu 6tBdH19aYLdWuUkva/jarhSajFsvxYze8R7yZNoLqyDaLSvTSPZ68rS5eapQEAPU b1OQNzAFwmxQsWtmGgASYBhZu/iEsTS4AEvLVGv2PGtwkW3T5ayHm85m8U5KbY1O yaQLETxpNQKQZ/lLFdo8QXxvZFe7wBTgg9hIZvx42ODE/GyFaqIMyF7XzQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuF0xwaDRTa9ZfuQ5Sb+5AjhALIMB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvMS00WFRIQm9ORk5yMWwtNURsSnY3a0NPRUFzZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjUvNTg5YTZiLTRkN2UtNDAxMi1hMGZjLWMwY2ViMDM3YWQ0 Mi8xLzZzTEJyOVM5N0pnRkJ2b0gzM3lHWXRWVS1rWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEC+izAN BgkqhkiG9w0BAQsFAAOCAQEAMrtSjmx6mnCgyhJFOftSNrEbvNKdvNvN5iRf8QmR wCa1CIe3lVhoxUdvHrEsMrNA1uNnp6uqD+4Unm5Lmv2LlZmNyL9hNRvkKHx+yKtT 14VcH+ZIslC42sS+8qKAffj7We2OwI6dJRFtS2TkIPGs8cdDR0Oi1T/2IBUQ5hsP QqY0uBvb0wndFJ5P0vnp8sceoiW/zpuCI1OxazT1D13S+RvAvX5xKAIR77pkmbD9 MTEnniaI40A0JntcVJiQtGrj6NKJigDEyeUqLEHTcSH8njqn6i6O7oSbvkI+XcpP aJZPtxH2QwH2ThhKAiDYRjC+rT9DJUxW9xeQ72rpUAkjtg== -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:23 2026 by rpki-client