This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1-kUUMwb8kgGIPx1rcb-0zSN8KzA.roa File: 1-kUUMwb8kgGIPx1rcb-0zSN8KzA.roa (raw, json) Hash identifier: 0op+31WFr/z/J1Osq9KZJ+GqF3Ia0/sNPRRDCJ99Rso= Subject key identifier: FA:45:14:33:06:FC:92:01:88:3F:1D:6B:71:BF:B4:CD:23:7C:2B:30 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CF8E578A7D33F404BD6934EE303EA Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1-kUUMwb8kgGIPx1rcb-0zSN8KzA.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 157.25.130.0/23 maxlen: 23 157.25.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f8:e5:78:a7:d3:3f:40:4b:d6:93:4e:e3:03:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa45143306fc9201883f1d6b71bfb4cd237c2b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:1b:4a:8c:59:c0:f3:b1:fd:a5:1b:bd:a5: c2:b8:fa:73:f8:e1:13:97:65:58:92:89:2e:30:6f: cd:dc:37:b7:dd:e8:3b:5b:e2:0c:fd:7a:6c:14:66: af:54:56:4a:26:c1:1e:70:50:ac:dd:28:4a:72:39: 1d:15:7b:b7:7d:e2:83:60:f6:28:91:2c:1f:2f:4d: 19:c2:fb:74:41:f9:b5:51:0f:51:fa:63:66:d0:3e: d9:b0:16:7d:30:57:73:40:ab:9e:e9:2d:81:8b:e3: 29:1b:bc:24:53:4c:21:12:61:68:84:8b:76:25:a0: 12:ba:b2:49:7a:c0:f2:51:b1:66:65:62:f3:b9:e4: c3:a2:8e:67:30:33:0b:56:8b:73:b4:bb:b0:89:5b: 39:d8:54:ed:63:82:2f:31:c6:2f:25:33:1d:18:19: 6d:bd:bf:35:b2:32:dc:ab:02:7c:e6:9a:26:e4:4c: cb:a2:5e:c9:21:33:78:28:9d:07:f9:a7:b3:e2:68: cc:35:82:b0:1d:0d:d7:d8:43:8b:8c:02:4f:95:11: 40:69:ae:64:2d:81:7a:45:97:6c:24:3a:5c:94:ec: 0a:7d:35:c7:04:29:44:a6:b4:f6:5e:ae:b2:ca:da: 76:aa:57:ba:6a:65:1c:e7:10:3a:bb:24:58:39:44: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:14:33:06:FC:92:01:88:3F:1D:6B:71:BF:B4:CD:23:7C:2B:30 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1-kUUMwb8kgGIPx1rcb-0zSN8KzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.130.0/23 157.25.174.0/23 Signature Algorithm: sha256WithRSAEncryption 78:4d:31:f9:4c:28:f1:c7:90:ac:a6:7f:31:1a:8d:5f:b3:44: 05:b4:30:65:bd:49:bf:35:50:c8:e3:e1:c7:f0:13:f6:b3:02: 70:7c:4c:d2:e6:be:d1:d4:0c:52:5b:13:cb:0a:61:5f:97:37: cd:55:5b:40:f5:c4:c9:40:50:fe:c7:f8:16:6d:ac:df:e6:b3: 4b:0a:8d:fe:5d:5b:7f:99:1d:42:86:45:8a:18:96:14:f9:37: d1:b4:ed:f9:52:01:d3:a2:0d:60:3b:87:40:b9:ea:a5:38:f5: 03:f7:19:48:cf:5a:22:51:e7:ad:2f:20:80:2a:e5:05:73:3c: 40:8f:f9:bc:f6:a7:71:2e:d1:88:3e:97:06:f7:bf:22:c4:c8: 21:2f:43:b0:da:38:61:e7:67:04:10:e6:fa:d7:10:80:ed:7b: ef:fc:35:1a:74:93:aa:b3:be:38:e0:23:f1:59:f0:18:13:ed: 54:6f:74:3e:9b:a8:a5:c9:da:67:0e:67:8e:c3:03:de:66:4e: 2b:cd:46:45:47:6d:92:aa:6f:e1:e0:e6:92:d4:fa:bd:e1:c0: a8:b1:8d:b5:ce:1f:21:95:f0:50:1b:31:59:10:e5:6c:b7:01: 2d:14:a0:0e:45:1c:31:2f:75:97:22:c8:86:12:85:8c:fa:96: 29:c3:1f:2d -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt9XPjleKfTP0BL1pNO4wPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQ1MTQzMzA2ZmM5MjAxODgzZjFkNmI3MWJmYjRjZDIzN2MyYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOsbSoxZwPOx/aUbvaXCuPpz+OET l2VYkokuMG/N3De33eg7W+IM/XpsFGavVFZKJsEecFCs3ShKcjkdFXu3feKDYPYo kSwfL00Zwvt0Qfm1UQ9R+mNm0D7ZsBZ9MFdzQKue6S2Bi+MpG7wkU0whEmFohIt2 JaASurJJesDyUbFmZWLzueTDoo5nMDMLVotztLuwiVs52FTtY4IvMcYvJTMdGBlt vb81sjLcqwJ85pom5EzLol7JITN4KJ0H+aez4mjMNYKwHQ3X2EOLjAJPlRFAaa5k LYF6RZdsJDpclOwKfTXHBClEprT2Xq6yytp2qle6amUc5xA6uyRYOUQK2QIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPpFFDMG/JIBiD8da3G/tM0jfCswMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvMS1rVVVNd2I4a2dHSVB4MXJjYi0welNOOEt6QS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmUvMWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBh Yi8xL0dzcGozeVNMZXQ4OTNRZm93dFB1M1FMTy1UTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAZ0ZggME AZ0ZrjANBgkqhkiG9w0BAQsFAAOCAQEAeE0x+Uwo8ceQrKZ/MRqNX7NEBbQwZb1J vzVQyOPhx/AT9rMCcHxM0ua+0dQMUlsTywphX5c3zVVbQPXEyUBQ/sf4Fm2s3+az SwqN/l1bf5kdQoZFihiWFPk30bTt+VIB06INYDuHQLnqpTj1A/cZSM9aIlHnrS8g gCrlBXM8QI/5vPancS7RiD6XBve/IsTIIS9DsNo4YednBBDm+tcQgO177/w1GnST qrO+OOAj8VnwGBPtVG90PpuopcnaZw5njsMD3mZOK81GRUdtkqpv4eDmktT6veHA qLGNtc4fIZXwUBsxWRDlbLcBLRSgDkUcMS91lyLIhhKFjPqWKcMfLQ== -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:22 2026 by rpki-client