This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa File: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (raw, json) Hash identifier: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw= Subject key identifier: D5:39:B6:84:F0:5E:47:59:17:B8:90:BF:E0:59:9A:D0:15:5C:EB:2D Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0 Certificate serial: 019B7D5CED530F3673958BAE418359B2726B Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 145.46.168.0/24 maxlen: 24 145.46.169.0/24 maxlen: 24 145.46.170.0/24 maxlen: 24 145.46.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ed:53:0f:36:73:95:8b:ae:41:83:59:b2:72:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d539b684f05e475917b890bfe0599ad0155ceb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ef:bd:d4:bd:40:73:2c:4e:3e:51:59:fc:7b: be:c3:79:ff:44:38:70:a3:fe:56:d9:c6:20:1b:f0: 5f:eb:90:70:cc:68:f9:ce:d9:75:25:16:2a:a8:de: c7:74:18:c9:e5:f2:c4:52:b3:b0:14:c9:48:35:7b: 55:c3:4e:91:7d:5c:24:7c:f4:5c:01:42:41:e0:c6: 07:90:c1:b4:ad:ec:e1:ac:83:08:78:f1:80:8e:38: 71:a9:06:8b:e8:7d:73:ed:bf:96:c9:b3:76:4f:a2: bf:01:84:1f:a3:0a:fa:cb:9f:ad:a1:24:ae:8f:fc: 1e:93:01:31:67:55:9e:5b:b9:fc:46:d0:4f:57:4b: 01:fe:9c:b2:06:54:93:93:1b:20:31:35:07:ca:25: 58:2a:8b:0e:4c:c4:dc:df:62:6b:31:25:6a:82:8e: 86:0f:26:7b:d8:81:5d:6e:76:62:fa:7c:83:df:d8: a7:16:95:5f:61:c2:cf:62:57:85:7a:05:b6:83:f2: c8:32:74:c9:b8:3d:d1:e1:37:11:56:cd:8e:8d:2b: b8:72:73:77:1d:a0:2d:47:ba:57:62:5d:51:e5:af: 39:26:3c:23:5b:29:8f:dc:3f:ee:7e:46:60:db:67: fd:dd:fc:a8:df:d8:3d:8d:82:aa:10:8a:a3:e7:32: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:B6:84:F0:5E:47:59:17:B8:90:BF:E0:59:9A:D0:15:5C:EB:2D X509v3 Authority Key Identifier: keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.46.168.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:a2:9a:7e:48:ab:69:a8:05:28:22:3e:7d:95:0f:0e:58:1a: d9:17:43:33:72:54:ec:e5:c4:e8:38:56:a0:31:f7:0a:58:f7: a2:04:ff:d1:ea:c5:37:55:51:b1:ec:52:99:a4:73:24:70:cf: 69:14:e7:56:02:18:b6:8c:d3:90:ef:93:95:ee:a5:a4:01:7a: bc:d9:35:cd:bc:4e:ad:e3:f9:d5:af:d5:14:f3:43:61:58:82: 43:76:bf:98:7b:5c:81:ea:19:44:1c:f1:ef:32:8f:fc:6d:96: 04:7a:fd:9f:5b:56:ad:ea:49:12:83:24:fc:59:15:8a:b5:18: cb:12:b0:a3:c8:3d:d9:73:3d:b9:6e:df:5f:4d:d3:e9:56:db: f5:92:44:d2:3c:42:67:23:53:21:6c:89:3e:b0:f3:da:12:12: ff:da:aa:c3:c7:e4:17:98:b5:fc:19:08:ba:cf:b9:7f:2a:3e: 95:4c:79:da:2d:85:10:cd:1c:64:83:ff:2e:a8:69:f3:1c:49: 67:de:96:d4:71:ae:bd:e6:ba:15:51:ef:7e:7c:80:3f:72:23: 62:46:4d:3f:42:e4:5b:8c:d4:a3:48:19:92:cb:71:2b:03:a4: 3c:be:5f:bc:70:f4:0e:62:91:5a:2d:91:c3:22:78:e6:0f:1b: af:5c:92:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XO1TDzZzlYuuQYNZsnJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh ZWZjZDAwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTM5YjY4NGYwNWU0NzU5MTdiODkwYmZlMDU5OWFkMDE1NWNlYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9O+91L1AcyxOPlFZ/Hu+w3n/RDhw o/5W2cYgG/Bf65BwzGj5ztl1JRYqqN7HdBjJ5fLEUrOwFMlINXtVw06RfVwkfPRc AUJB4MYHkMG0rezhrIMIePGAjjhxqQaL6H1z7b+WybN2T6K/AYQfowr6y5+toSSu j/wekwExZ1WeW7n8RtBPV0sB/pyyBlSTkxsgMTUHyiVYKosOTMTc32JrMSVqgo6G DyZ72IFdbnZi+nyD39inFpVfYcLPYleFegW2g/LIMnTJuD3R4TcRVs2OjSu4cnN3 HaAtR7pXYl1R5a85JjwjWymP3D/ufkZg22f93fyo39g9jYKqEIqj5zKrPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNU5toTwXkdZF7iQv+BZmtAVXOstMB8GA1UdIwQY MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt NzcwZjhlYWIyYWU3LzEvMVRtMmhQQmVSMWtYdUpDXzRGbWEwQlZjNnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3 LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkS6oMA0G CSqGSIb3DQEBCwUAA4IBAQCaopp+SKtpqAUoIj59lQ8OWBrZF0MzclTs5cToOFag MfcKWPeiBP/R6sU3VVGx7FKZpHMkcM9pFOdWAhi2jNOQ75OV7qWkAXq82TXNvE6t 4/nVr9UU80NhWIJDdr+Ye1yB6hlEHPHvMo/8bZYEev2fW1at6kkSgyT8WRWKtRjL ErCjyD3Zcz25bt9fTdPpVtv1kkTSPEJnI1MhbIk+sPPaEhL/2qrDx+QXmLX8GQi6 z7l/Kj6VTHnaLYUQzRxkg/8uqGnzHEln3pbUca695roVUe9+fIA/ciNiRk0/QuRb jNSjSBmSy3ErA6Q8vl+8cPQOYpFaLZHDInjmDxuvXJLm -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:56 2026 by rpki-client