This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n1G43pV_kMhtUONi62E9bL-Bjp0.roa File: n1G43pV_kMhtUONi62E9bL-Bjp0.roa (raw, json) Hash identifier: zCEKp2bSaIiVO3WrZrEurPrPR28vlGzxiBXJFbAxpew= Subject key identifier: 9F:51:B8:DE:95:7F:90:C8:6D:50:E3:62:EB:61:3D:6C:BF:81:8E:9D Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4978282E120109CF4F7E7CFA843D3 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n1G43pV_kMhtUONi62E9bL-Bjp0.roa Signing time: Thu 01 Jan 2026 22:19:02 +0000 ROA not before: Thu 01 Jan 2026 22:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53730 IP address blocks: 2.56.137.0/24 maxlen: 24 45.148.165.0/24 maxlen: 24 185.210.137.0/24 maxlen: 24 193.148.61.0/24 maxlen: 24 193.148.63.0/24 maxlen: 24 194.32.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:97:82:82:e1:20:10:9c:f4:f7:e7:cf:a8:43:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f51b8de957f90c86d50e362eb613d6cbf818e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:6e:3c:28:c7:96:5a:e0:e5:57:5d:5a:9e: ee:47:90:3b:2f:03:35:eb:49:b2:80:c6:40:e0:28: 29:ed:91:15:f4:c8:20:15:f0:db:bc:5a:7f:15:63: e3:bd:e5:b2:28:ac:3b:df:0f:42:11:69:ff:bd:ba: 63:c8:ad:4a:5e:2c:79:d9:71:64:99:82:c9:7d:b9: e1:a3:1d:1e:46:05:6b:31:4b:f8:0f:dc:3c:d2:17: a2:35:f7:26:df:e8:21:ab:17:dd:c8:02:d9:eb:d2: 3c:92:eb:c6:e0:39:7c:cf:dc:e5:27:f7:04:43:05: f6:c8:a0:73:82:c9:dd:26:86:71:53:33:9c:0c:7a: 92:5e:57:fe:55:d2:66:14:50:5e:ab:83:14:7a:f5: a4:07:d0:98:7e:bc:b0:a2:4b:a8:f3:c1:00:0a:bb: db:02:46:6e:3f:4d:95:44:3f:a8:f6:0f:34:90:28: 1c:da:e8:27:d2:f4:c2:fa:1b:b3:11:ac:47:b8:3d: 03:d4:06:a6:db:f0:c4:79:fe:eb:35:34:bd:db:f9: 9a:aa:ef:ab:7a:a1:ad:f0:ac:df:a5:bf:f3:fe:06: 83:21:a6:ca:69:4a:14:b4:21:f6:0d:cf:49:0c:d3: e7:e7:ac:96:48:8c:b5:ce:06:46:96:ad:53:d6:03: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:51:B8:DE:95:7F:90:C8:6D:50:E3:62:EB:61:3D:6C:BF:81:8E:9D X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n1G43pV_kMhtUONi62E9bL-Bjp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.137.0/24 45.148.165.0/24 185.210.137.0/24 193.148.61.0/24 193.148.63.0/24 194.32.127.0/24 Signature Algorithm: sha256WithRSAEncryption 21:21:88:ce:39:5b:82:60:f0:61:71:15:b0:dc:dc:60:ad:ae: cf:31:ad:ee:68:1c:0f:cc:92:29:42:ef:2a:80:56:92:5e:64: 06:75:6d:07:5d:53:9c:14:bf:33:43:fc:9f:0e:f7:fe:12:c2: e6:15:e9:b0:c1:b4:9e:ae:3f:0a:2c:e7:19:db:65:07:c4:0c: b9:36:3a:2c:39:cc:67:7d:76:c7:e2:50:b2:75:34:f4:8a:a9: 4f:bd:2d:f6:a4:78:22:a4:20:b7:d6:c9:27:4e:33:d4:b4:0e: 1e:39:0d:c9:ca:80:3c:58:5c:3e:09:4b:57:f1:e7:b7:cd:f6: 42:a2:96:15:b2:09:8c:7c:46:43:8d:72:8c:20:2d:20:a6:d8: f3:f5:ab:ca:6b:f8:7c:98:51:3d:63:ab:8d:57:2c:73:27:2d: 23:5c:31:85:38:dd:f1:6c:0e:6d:89:e1:48:8e:1a:d4:bf:33: 7a:07:69:d8:4e:92:f8:5d:69:83:9f:20:ea:71:eb:9c:80:a2: 28:8d:9a:f9:6a:01:70:af:fe:67:66:59:25:ee:94:96:ed:3c: 15:b5:0b:73:10:5e:64:36:59:4f:92:7c:3f:a2:2a:29:2f:64: e4:67:1c:56:29:94:b0:16:34:49:72:c6:27:c2:71:66:3b:cb: 93:76:38:99 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pJeCguEgEJz09+fPqEPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjUxYjhkZTk1N2Y5MGM4NmQ1MGUzNjJlYjYxM2Q2Y2JmODE4ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pluPCjHllrg5VddWp7uR5A7LwM1 60mygMZA4Cgp7ZEV9MggFfDbvFp/FWPjveWyKKw73w9CEWn/vbpjyK1KXix52XFk mYLJfbnhox0eRgVrMUv4D9w80heiNfcm3+ghqxfdyALZ69I8kuvG4Dl8z9zlJ/cE QwX2yKBzgsndJoZxUzOcDHqSXlf+VdJmFFBeq4MUevWkB9CYfrywokuo88EACrvb AkZuP02VRD+o9g80kCgc2ugn0vTC+huzEaxHuD0D1Aam2/DEef7rNTS92/maqu+r eqGt8Kzfpb/z/gaDIabKaUoUtCH2Dc9JDNPn56yWSIy1zgZGlq1T1gPB/QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJ9RuN6Vf5DIbVDjYuthPWy/gY6dMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvbjFHNDNwVl9rTWh0VU9OaTYyRTliTC1CanAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjiJAwQA LZSlAwQAudKJAwQAwZQ9AwQAwZQ/AwQAwiB/MA0GCSqGSIb3DQEBCwUAA4IBAQAh IYjOOVuCYPBhcRWw3Nxgra7PMa3uaBwPzJIpQu8qgFaSXmQGdW0HXVOcFL8zQ/yf Dvf+EsLmFemwwbSerj8KLOcZ22UHxAy5NjosOcxnfXbH4lCydTT0iqlPvS32pHgi pCC31sknTjPUtA4eOQ3JyoA8WFw+CUtX8ee3zfZCopYVsgmMfEZDjXKMIC0gptjz 9avKa/h8mFE9Y6uNVyxzJy0jXDGFON3xbA5tieFIjhrUvzN6B2nYTpL4XWmDnyDq ceucgKIojZr5agFwr/5nZlkl7pSW7TwVtQtzEF5kNllPknw/oiopL2TkZxxWKZSw FjRJcsYnwnFmO8uTdjiZ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:24 2026 by rpki-client