This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-ZdPMcjvQDwjz87axUV9KCm36k0.roa File: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (raw, json) Hash identifier: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU= Subject key identifier: F9:97:4F:31:C8:EF:40:3C:23:CF:CE:DA:C5:45:7D:28:29:B7:EA:4D Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15BF170EC69EBFB7F196FF0A743455 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-ZdPMcjvQDwjz87axUV9KCm36k0.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19437 IP address blocks: 146.19.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bf:17:0e:c6:9e:bf:b7:f1:96:ff:0a:74:34:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9974f31c8ef403c23cfcedac5457d2829b7ea4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:69:0a:b0:b8:bc:5f:55:da:cf:7c:8c:38:47: 84:41:2e:a0:a9:42:8d:00:7e:9d:4f:8b:ef:e3:0e: 0c:0b:f5:ad:27:24:7d:2b:2f:e7:15:0e:1d:25:c0: 2f:6d:e8:44:bf:b3:aa:b0:fa:73:a5:43:ce:a8:6b: 90:55:38:c6:31:85:64:08:7f:60:98:1a:6e:2e:66: c3:71:65:82:73:d1:a2:9b:ba:71:44:29:ca:78:ff: ee:ca:f3:bb:af:53:66:67:7c:d3:b0:20:18:c5:d2: 58:4e:1f:cd:46:56:a6:f6:cb:a6:dc:6d:db:84:6c: c1:b3:4a:94:ac:08:8f:da:ce:f7:9e:24:5c:69:15: 93:2e:98:fc:36:c0:1a:97:05:40:bf:b0:61:57:f3: f5:b0:7d:6c:1f:59:43:d4:cf:8a:82:f3:ef:71:fd: be:97:63:18:08:af:97:f7:5d:80:27:0a:be:99:e0: 01:4a:d9:48:3b:34:4f:c8:03:61:8f:f2:e3:c5:a7: ea:ec:ae:46:8e:b8:5b:7f:85:4c:01:9b:64:fa:ea: ce:26:e7:9a:d7:19:c7:b9:ce:0a:37:43:cf:df:da: be:04:a7:a4:e9:83:a3:a8:60:3f:83:9b:8c:f1:44: 91:98:e7:80:b0:fb:66:1d:24:f0:69:f8:12:43:49: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:97:4F:31:C8:EF:40:3C:23:CF:CE:DA:C5:45:7D:28:29:B7:EA:4D X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-ZdPMcjvQDwjz87axUV9KCm36k0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.205.0/24 Signature Algorithm: sha256WithRSAEncryption 44:fb:71:33:b7:9a:a7:6a:a8:94:33:87:1f:aa:1d:c3:34:44: cd:73:5e:91:3d:2c:79:ac:d6:cc:79:de:73:d6:04:19:18:1d: 42:1c:b7:33:1b:d9:f5:8c:0f:bd:79:8e:36:1f:48:45:07:7e: a7:01:b3:02:c1:4b:02:ba:33:17:1f:92:89:2f:80:5a:b7:39: af:5b:99:6a:b1:d2:96:a5:b2:a3:f0:7a:59:66:96:22:ac:82: 38:f9:dc:52:78:8c:07:c5:5c:ca:7a:6e:e7:dc:f5:d9:fb:42: 2e:25:cf:a3:6e:62:5e:a5:00:a9:26:f4:1c:20:8a:b3:b7:43: 85:59:4e:c5:94:00:9b:76:b4:d6:8f:c7:50:7e:4e:60:31:e6: 51:f9:a5:bd:d9:5f:54:06:bf:72:5b:e0:1a:11:9b:ef:88:aa: 1d:aa:76:ff:6f:3e:09:49:4f:c1:66:65:9f:54:53:b3:62:d9: d2:7c:c5:33:46:a5:e9:17:9d:76:2b:95:77:60:bd:cc:40:8d: 4e:11:7d:d8:92:25:07:94:98:62:93:37:71:64:45:5a:49:73: 6d:41:e5:05:62:37:ac:f1:12:6a:3a:61:be:03:70:05:d1:65: 12:1c:be:5c:c7:fb:0b:21:96:f5:f1:89:df:28:55:85:a1:72: b9:5d:f9:da -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/Fb8XDsaev7fxlv8KdDRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTk3NGYzMWM4ZWY0MDNjMjNjZmNlZGFjNTQ1N2QyODI5YjdlYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mkKsLi8X1Xaz3yMOEeEQS6gqUKN AH6dT4vv4w4MC/WtJyR9Ky/nFQ4dJcAvbehEv7OqsPpzpUPOqGuQVTjGMYVkCH9g mBpuLmbDcWWCc9Gim7pxRCnKeP/uyvO7r1NmZ3zTsCAYxdJYTh/NRlam9sum3G3b hGzBs0qUrAiP2s73niRcaRWTLpj8NsAalwVAv7BhV/P1sH1sH1lD1M+KgvPvcf2+ l2MYCK+X912AJwq+meABStlIOzRPyANhj/Ljxafq7K5Gjrhbf4VMAZtk+urOJuea 1xnHuc4KN0PP39q+BKek6YOjqGA/g5uM8USRmOeAsPtmHSTwafgSQ0np2wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmXTzHI70A8I8/O2sVFfSgpt+pNMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvMS1aZFBNY2p2UUR3ano4N2F4VVY5S0NtMzZrMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzgvYTljNmRhLThlYTAtNDZiNy1hMWE2LTk5YWNiOTljZTc1 NC8xL2syZDlmTGtuSE9OaEpXNllNOHg3RlAwQ1ByNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITzTAN BgkqhkiG9w0BAQsFAAOCAQEARPtxM7eap2qolDOHH6odwzREzXNekT0seazWzHne c9YEGRgdQhy3MxvZ9YwPvXmONh9IRQd+pwGzAsFLArozFx+SiS+AWrc5r1uZarHS lqWyo/B6WWaWIqyCOPncUniMB8Vcynpu59z12ftCLiXPo25iXqUAqSb0HCCKs7dD hVlOxZQAm3a01o/HUH5OYDHmUfmlvdlfVAa/clvgGhGb74iqHap2/28+CUlPwWZl n1RTs2LZ0nzFM0al6ReddiuVd2C9zECNThF92JIlB5SYYpM3cWRFWklzbUHlBWI3 rPESajphvgNwBdFlEhy+XMf7CyGW9fGJ3yhVhaFyuV352g== -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:18 2026 by rpki-client