This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/1-LQW0hELrOlw1d0vdgbz08TyBgo.roa File: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (raw, json) Hash identifier: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk= Subject key identifier: F8:B4:16:D2:11:0B:AC:E9:70:D5:DD:2F:76:06:F3:D3:C4:F2:06:0A Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Certificate serial: 019B7834B85291731E05437F28710219AC2C Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/1-LQW0hELrOlw1d0vdgbz08TyBgo.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 149.222.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b8:52:91:73:1e:05:43:7f:28:71:02:19:ac:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b416d2110bace970d5dd2f7606f3d3c4f2060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:79:0c:5e:30:2f:6c:42:8b:1c:68:35:65: d5:ac:d6:49:c4:fc:67:e8:4a:dd:2b:58:0b:6f:c5: e7:30:d9:86:15:0f:a1:ad:c3:36:3a:0a:00:22:65: 9a:60:ea:a5:80:2a:89:53:3f:19:bb:55:90:c7:e4: 75:6b:17:c4:de:93:d7:3b:da:cb:e7:5c:89:ea:61: 8a:ad:6c:c1:e9:92:4a:7f:d9:ee:94:3d:4a:9a:d4: 3c:a5:10:e3:25:f8:b0:70:db:fc:21:b6:69:10:a9: ee:49:32:df:c9:75:f4:49:a7:bb:af:76:9c:49:26: c7:fb:49:92:aa:35:39:08:8b:2b:b0:94:40:36:79: 75:1a:6b:ff:93:f3:a5:7d:09:eb:b0:01:ee:4a:2d: 8e:c4:1c:b3:2b:48:2e:a9:80:4e:e8:de:28:62:53: 6c:84:32:bf:99:f7:0e:b4:aa:8e:91:ff:28:b0:0b: 35:80:85:07:da:58:be:e5:35:84:02:04:fb:28:2a: 51:14:59:96:8e:14:38:e5:5c:6a:77:c7:9d:5b:5e: 3c:9d:d7:0f:97:49:96:65:78:66:51:16:92:c1:41: b1:d2:3e:9a:5a:b8:b2:61:93:1e:e8:3b:b4:a9:31: 42:e0:58:e6:41:bb:61:e3:8c:b3:24:1c:54:55:cf: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:16:D2:11:0B:AC:E9:70:D5:DD:2F:76:06:F3:D3:C4:F2:06:0A X509v3 Authority Key Identifier: keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/1-LQW0hELrOlw1d0vdgbz08TyBgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.222.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:bf:b2:38:6a:e8:c5:fa:01:db:e9:08:82:c2:fa:98:43:67: 4c:da:c9:be:0e:aa:99:4e:0f:bc:1b:fe:8d:59:77:17:63:b3: ee:f6:83:8e:ed:e3:b5:4a:a2:b7:f9:b2:35:9d:c4:19:6e:30: 54:86:4c:d1:06:b4:1a:c0:91:81:f0:73:d3:10:6e:c9:22:63: 1f:7c:1c:6f:f9:7c:f6:8e:b6:3f:9a:3c:56:50:d0:af:85:69: e8:62:c5:87:01:fc:c3:41:4d:25:52:b4:66:f1:5f:6a:58:ab: 47:f4:0e:57:2b:b4:71:14:17:45:f9:1a:41:14:b5:53:91:d5: 41:88:13:ff:2c:c2:3a:eb:73:8c:2b:62:d1:9d:e2:84:f3:bc: 5f:36:b3:ab:ab:e9:c2:dd:2a:2b:77:ac:e6:c5:67:02:4c:95: 01:0d:14:43:0b:3f:d8:dc:f3:cf:a4:e3:0c:bf:fe:8a:87:78: f3:76:7a:85:b4:7d:97:24:5e:d0:7a:7b:55:84:a0:98:37:1e: 7b:b4:e6:e9:af:bb:f0:16:26:95:c1:80:98:62:14:2e:07:68: 06:b4:a3:cd:33:70:8d:17:f6:df:f9:5b:c9:7c:1e:cc:27:0c: d5:2b:11:0f:d5:4c:b7:83:a3:7f:03:ba:bd:f8:96:1f:a1:f8: a1:13:25:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLhSkXMeBUN/KHECGawsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNTdmNTQ0ZjUzZjM1ZDhkMmU3M2NiMjk2NWI0ZjRkN2Qw MjI5NTkwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI0MTZkMjExMGJhY2U5NzBkNWRkMmY3NjA2ZjNkM2M0ZjIwNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/B5DF4wL2xCixxoNWXVrNZJxPxn 6ErdK1gLb8XnMNmGFQ+hrcM2OgoAImWaYOqlgCqJUz8Zu1WQx+R1axfE3pPXO9rL 51yJ6mGKrWzB6ZJKf9nulD1KmtQ8pRDjJfiwcNv8IbZpEKnuSTLfyXX0Sae7r3ac SSbH+0mSqjU5CIsrsJRANnl1Gmv/k/OlfQnrsAHuSi2OxByzK0guqYBO6N4oYlNs hDK/mfcOtKqOkf8osAs1gIUH2li+5TWEAgT7KCpRFFmWjhQ45Vxqd8edW148ndcP l0mWZXhmURaSwUGx0j6aWriyYZMe6Du0qTFC4FjmQbth44yzJBxUVc+z+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPi0FtIRC6zpcNXdL3YG89PE8gYKMB8GA1UdIwQY MBaAFLBX9UT1PzXY0uc8spZbT019AilZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgt NGVhN2ExYWU5OGRlLzEvMS1MUVcwaEVMck9sdzFkMHZkZ2J6MDhUeUJnby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGIvZWZlMGUwLTM0ZjctNDI5ZS05ZjM4LTRlYTdhMWFlOThk ZS8xL3NGZjFSUFVfTmRqUzV6eXlsbHRQVFgwQ0tWay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJXeMA0G CSqGSIb3DQEBCwUAA4IBAQBJv7I4aujF+gHb6QiCwvqYQ2dM2sm+DqqZTg+8G/6N WXcXY7Pu9oOO7eO1SqK3+bI1ncQZbjBUhkzRBrQawJGB8HPTEG7JImMffBxv+Xz2 jrY/mjxWUNCvhWnoYsWHAfzDQU0lUrRm8V9qWKtH9A5XK7RxFBdF+RpBFLVTkdVB iBP/LMI663OMK2LRneKE87xfNrOrq+nC3Sord6zmxWcCTJUBDRRDCz/Y3PPPpOMM v/6Kh3jzdnqFtH2XJF7QentVhKCYNx57tObpr7vwFiaVwYCYYhQuB2gGtKPNM3CN F/bf+VvJfB7MJwzVKxEP1Uy3g6N/A7q9+JYfofihEyXy -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:00 2026 by rpki-client