This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/m1C5L7CbhAcIOumOYRBFsLzm0eE.roa File: m1C5L7CbhAcIOumOYRBFsLzm0eE.roa (raw, json) Hash identifier: SYAtLc5fN9d8S/lPjJCzeOzecwlCkRAmvHG5vPw/tRY= Subject key identifier: 9B:50:B9:2F:B0:9B:84:07:08:3A:E9:8E:61:10:45:B0:BC:E6:D1:E1 Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24 Certificate serial: 019B7D5CE50F51A176E004276C81A7169005 Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/m1C5L7CbhAcIOumOYRBFsLzm0eE.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215130 IP address blocks: 45.129.73.0/24 maxlen: 24 83.142.28.0/24 maxlen: 24 2a14:3940::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e5:0f:51:a1:76:e0:04:27:6c:81:a7:16:90:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b50b92fb09b8407083ae98e611045b0bce6d1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:a8:84:44:ac:5f:75:3a:a4:29:38:23:ec: c0:f1:4c:39:2d:ed:05:08:bb:3f:4c:1a:48:45:a2: 53:08:92:a9:c6:1e:b9:e8:e9:a7:b2:f3:35:4b:e2: 96:67:d5:7f:10:2f:c0:cf:db:e8:45:ef:ea:86:da: 08:ab:d9:71:19:63:c5:24:63:00:9d:a7:5a:95:68: 80:57:19:67:56:77:82:96:92:8f:17:66:80:88:31: 21:e6:a6:56:79:31:c9:c9:f4:00:8a:1f:ec:52:48: ae:a7:43:c4:a9:0f:ce:de:90:b9:02:5a:28:72:15: 9b:b6:d2:49:4d:8f:13:d7:3d:53:74:f6:49:f6:ff: 76:e5:d0:9b:93:d3:6d:26:de:60:7f:28:c1:06:88: c0:66:8c:c6:eb:39:6a:b2:2b:58:9a:03:c0:33:43: 6c:ca:a8:83:4d:fc:30:ab:be:e1:83:37:7c:5b:47: 7d:ab:3c:5d:67:5b:10:56:7d:15:b0:20:4d:da:fa: f2:f4:97:a6:e7:a1:a8:34:96:78:93:76:3d:61:b5: 36:76:fe:e8:37:e7:c8:a1:be:87:90:8d:ab:c1:14: 0c:db:85:12:35:13:00:1d:2a:8c:0f:da:aa:b6:3a: a0:60:64:70:85:3d:65:c5:b3:4e:a2:4d:0e:ab:a8: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:B9:2F:B0:9B:84:07:08:3A:E9:8E:61:10:45:B0:BC:E6:D1:E1 X509v3 Authority Key Identifier: keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/m1C5L7CbhAcIOumOYRBFsLzm0eE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.73.0/24 83.142.28.0/24 IPv6: 2a14:3940::/29 Signature Algorithm: sha256WithRSAEncryption 18:d2:7a:05:1d:9e:4e:35:bc:88:a6:5d:d1:3c:c5:84:05:9f: bf:1f:47:cc:b7:3f:42:1c:9f:30:89:ee:74:39:d6:d1:57:65: 1c:4a:1f:1b:e2:75:60:ed:63:9a:59:e7:f4:1d:6a:5a:5d:eb: e8:54:c1:11:88:a1:2a:a9:29:b6:7d:c5:be:c3:27:a1:c7:66: 04:9f:8f:c4:e9:d0:e0:ae:25:bd:9c:c9:8e:79:37:36:a0:60: 6f:a9:14:05:cb:e6:fd:51:9d:8b:fb:7e:d9:34:73:f7:f2:76: 08:15:8a:1a:82:83:a9:00:8d:db:cd:c5:d3:ae:94:75:db:b3: 16:a2:98:28:d6:ac:14:4f:3f:e3:c2:01:b2:94:5d:83:30:93: 5f:f8:36:20:ee:ff:1c:c2:28:e8:8c:3b:0d:f4:64:38:4c:d0: b7:40:74:1c:e2:32:de:ec:b1:b4:0f:ae:9c:2f:ab:1a:7c:bb: 5a:06:c8:4d:7a:9b:46:7f:92:ae:98:1c:d8:ed:ca:39:cd:9b: 0b:6c:82:bb:fc:c5:c4:36:25:41:e6:14:1f:d3:14:7a:f4:5d: ec:29:90:ba:67:b4:8b:78:c4:76:f6:51:3c:43:f2:f4:c3:85: 47:78:5b:d4:ae:d7:74:4b:27:5d:d9:bb:8d:b9:c7:6e:7a:5a: b5:0c:89:ec -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XOUPUaF24AQnbIGnFpAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZjRiOWY0ODU2NDIwODlmMzZiMTc0ZDk2NDJkYzQ4Mzdm ZjRkMjQwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjUwYjkyZmIwOWI4NDA3MDgzYWU5OGU2MTEwNDViMGJjZTZkMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRuohESsX3U6pCk4I+zA8Uw5Le0F CLs/TBpIRaJTCJKpxh656OmnsvM1S+KWZ9V/EC/Az9voRe/qhtoIq9lxGWPFJGMA nadalWiAVxlnVneClpKPF2aAiDEh5qZWeTHJyfQAih/sUkiup0PEqQ/O3pC5Aloo chWbttJJTY8T1z1TdPZJ9v925dCbk9NtJt5gfyjBBojAZozG6zlqsitYmgPAM0Ns yqiDTfwwq77hgzd8W0d9qzxdZ1sQVn0VsCBN2vry9Jem56GoNJZ4k3Y9YbU2dv7o N+fIob6HkI2rwRQM24USNRMAHSqMD9qqtjqgYGRwhT1lxbNOok0Oq6jWqwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJtQuS+wm4QHCDrpjmEQRbC85tHhMB8GA1UdIwQY MBaAFCT0ufSFZCCJ82sXTZZC3Eg3/00kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAt YzA3Yjk4ZjZlNzY1LzEvbTFDNUw3Q2JoQWNJT3VtT1lSQkZzTHptMGVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAtYzA3Yjk4ZjZlNzY1 LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALYFJAwQA U44cMA0EAgACMAcDBQMqFDlAMA0GCSqGSIb3DQEBCwUAA4IBAQAY0noFHZ5ONbyI pl3RPMWEBZ+/H0fMtz9CHJ8wie50OdbRV2UcSh8b4nVg7WOaWef0HWpaXevoVMER iKEqqSm2fcW+wyehx2YEn4/E6dDgriW9nMmOeTc2oGBvqRQFy+b9UZ2L+37ZNHP3 8nYIFYoagoOpAI3bzcXTrpR127MWopgo1qwUTz/jwgGylF2DMJNf+DYg7v8cwijo jDsN9GQ4TNC3QHQc4jLe7LG0D66cL6safLtaBshNeptGf5KumBzY7co5zZsLbIK7 /MXENiVB5hQf0xR69F3sKZC6Z7SLeMR29lE8Q/L0w4VHeFvUrtd0Sydd2buNucdu elq1DIns -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:58 2026 by rpki-client