This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/1YvljUNqPjl_NOnU5hg14ZaI_CE.roa File: 1YvljUNqPjl_NOnU5hg14ZaI_CE.roa (raw, json) Hash identifier: gsdOnP+eye+UadTuGxyZwbY9HB+OIdkqfAluag+J3Ik= Subject key identifier: D5:8B:E5:8D:43:6A:3E:39:7F:34:E9:D4:E6:18:35:E1:96:88:FC:21 Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b Certificate serial: 019C2419F078D4D0BFD28504FFDDDFC1BAB1 Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/1YvljUNqPjl_NOnU5hg14ZaI_CE.roa Signing time: Tue 03 Feb 2026 15:23:25 +0000 ROA not before: Tue 03 Feb 2026 15:23:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214366 IP address blocks: 153.51.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:19:f0:78:d4:d0:bf:d2:85:04:ff:dd:df:c1:ba:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b Validity Not Before: Feb 3 15:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d58be58d436a3e397f34e9d4e61835e19688fc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:8c:3d:8d:d0:7e:ad:6e:31:c9:ea:6c:e7: 29:8e:fe:54:05:e0:3b:92:79:83:35:05:19:b3:8b: 91:7d:05:82:cb:bb:f5:ec:e8:46:2b:54:28:8e:c0: bd:3f:43:69:65:01:75:97:c0:08:b7:64:f6:4b:8f: 61:83:c0:41:03:ab:4a:dc:42:3c:f3:32:d8:e8:03: 3a:f2:b4:9e:76:ce:49:5d:cc:28:94:94:68:bc:15: 24:3d:4a:f0:92:63:1c:2a:d2:0b:fc:56:14:b6:93: b5:be:70:f6:39:be:1e:71:47:bb:ce:aa:cd:4c:d9: 9c:57:b6:c7:13:39:20:6f:02:4d:f7:20:6c:37:5d: 1f:a0:13:f3:3c:26:e8:7f:5d:13:45:b2:86:0b:1f: c9:05:7e:5d:b2:92:b0:a9:56:47:30:25:85:3f:19: 1d:ea:c5:cd:73:83:39:10:d9:45:d1:f0:20:7f:89: 64:1e:42:ad:d6:4d:ec:57:20:5f:27:c5:29:90:8a: bb:40:b0:84:89:91:66:a4:3c:16:c2:26:92:41:f4: 82:e8:8d:93:af:2b:8a:13:2a:da:55:28:8b:50:3f: 36:0d:ee:de:71:ae:45:49:6b:7b:a7:49:c4:8c:96: d8:a2:52:99:21:47:a1:1e:fe:be:1f:98:0e:21:59: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8B:E5:8D:43:6A:3E:39:7F:34:E9:D4:E6:18:35:E1:96:88:FC:21 X509v3 Authority Key Identifier: keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/1YvljUNqPjl_NOnU5hg14ZaI_CE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.51.32.0/19 Signature Algorithm: sha256WithRSAEncryption 11:99:a8:46:3d:4c:78:e7:98:09:30:a2:0d:78:f2:f8:84:e8: 93:24:1b:f6:6b:0a:ee:62:22:92:24:04:63:40:65:c1:65:8d: 0e:af:ad:f7:bf:0c:20:cc:4d:8a:91:1a:e4:43:e6:07:fe:fe: 85:c6:30:bf:57:e1:13:d8:02:09:4e:e9:5b:0b:a0:28:8c:cb: f1:f5:0c:d5:36:7e:55:a6:d4:c0:d9:dc:94:77:d0:ce:c5:e2: 58:57:3c:0b:2d:17:19:4b:9b:cb:53:4f:f0:53:39:52:55:be: 0b:51:93:eb:19:4b:16:e9:6f:1e:f8:49:7e:fd:f3:ae:a5:29: 68:2f:f5:59:b9:b1:29:5b:e9:40:b8:eb:fe:ab:1a:3b:9a:6c: 17:a2:ad:e5:80:61:73:ea:81:ab:f1:1d:b3:c7:dd:c8:f3:a7: 83:fd:da:12:90:9e:eb:e3:00:ad:2a:f7:38:88:26:10:e3:10: 15:9f:16:80:93:df:68:3b:ab:44:90:18:42:6c:f3:d6:99:1f: 92:ad:c3:58:90:63:0e:f5:13:2c:3e:1d:17:d5:9b:b4:36:49: 18:85:7f:8f:ab:41:f2:d1:a7:31:46:19:3f:0f:35:3f:7d:55: 47:f5:ee:a7:3e:a5:21:e0:44:ef:91:26:f1:1b:bf:05:d7:56: 33:39:50:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwkGfB41NC/0oUE/93fwbqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMDdiZjNiNzMzYTVjM2E3MWQ5Y2E4YzM2MjY5NDhkZjcx MjcwNWIwHhcNMjYwMjAzMTUyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNThiZTU4ZDQzNmEzZTM5N2YzNGU5ZDRlNjE4MzVlMTk2ODhmYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy6MPY3Qfq1uMcnqbOcpjv5UBeA7 knmDNQUZs4uRfQWCy7v17OhGK1QojsC9P0NpZQF1l8AIt2T2S49hg8BBA6tK3EI8 8zLY6AM68rSeds5JXcwolJRovBUkPUrwkmMcKtIL/FYUtpO1vnD2Ob4ecUe7zqrN TNmcV7bHEzkgbwJN9yBsN10foBPzPCbof10TRbKGCx/JBX5dspKwqVZHMCWFPxkd 6sXNc4M5ENlF0fAgf4lkHkKt1k3sVyBfJ8UpkIq7QLCEiZFmpDwWwiaSQfSC6I2T ryuKEyraVSiLUD82De7eca5FSWt7p0nEjJbYolKZIUehHv6+H5gOIVnbLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWL5Y1Daj45fzTp1OYYNeGWiPwhMB8GA1UdIwQY MBaAFCwHvztzOlw6cdnKjDYmlI33EnBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEFlX08zTTZYRHB4MmNxTU5pYVVqZmNTY0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNjA5MDUtMTI2Yi00N2RmLTk4OTkt MTE5OWJiOTc5ZDVhLzEvMVl2bGpVTnFQamxfTk9uVTVoZzE0WmFJX0NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNjA5MDUtMTI2Yi00N2RmLTk4OTktMTE5OWJiOTc5ZDVh LzEvTEFlX08zTTZYRHB4MmNxTU5pYVVqZmNTY0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmTMgMA0G CSqGSIb3DQEBCwUAA4IBAQARmahGPUx455gJMKINePL4hOiTJBv2awruYiKSJARj QGXBZY0Or633vwwgzE2KkRrkQ+YH/v6FxjC/V+ET2AIJTulbC6AojMvx9QzVNn5V ptTA2dyUd9DOxeJYVzwLLRcZS5vLU0/wUzlSVb4LUZPrGUsW6W8e+El+/fOupSlo L/VZubEpW+lAuOv+qxo7mmwXoq3lgGFz6oGr8R2zx93I86eD/doSkJ7r4wCtKvc4 iCYQ4xAVnxaAk99oO6tEkBhCbPPWmR+SrcNYkGMO9RMsPh0X1Zu0NkkYhX+Pq0Hy 0acxRhk/DzU/fVVH9e6nPqUh4ETvkSbxG78F11YzOVDt -----END CERTIFICATE-----Generated at Thu Feb 5 13:10:03 2026 by rpki-client