This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/F1ia1Weaubn8eKzVn8s3JrMAdx4.roa File: F1ia1Weaubn8eKzVn8s3JrMAdx4.roa (raw, json) Hash identifier: N+hr1h8NlI+FxivU5QhlJspaJlXj+zDKR5ugxOa3HpE= Subject key identifier: 17:58:9A:D5:67:9A:B9:B9:FC:78:AC:D5:9F:CB:37:26:B3:00:77:1E Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2 Certificate serial: 019B7C803361E0B49A15AEF2294FCE0087DD Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/F1ia1Weaubn8eKzVn8s3JrMAdx4.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 137.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:33:61:e0:b4:9a:15:ae:f2:29:4f:ce:00:87:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17589ad5679ab9b9fc78acd59fcb3726b300771e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:db:a8:d4:d5:7f:b9:98:82:49:0d:60:28: a2:48:e2:14:79:9d:97:cb:ef:3c:1e:c4:b2:f7:25: 56:91:6e:4b:2f:a3:94:6f:0e:1c:79:ca:20:61:85: 5e:56:b0:cb:3b:49:94:76:57:10:fb:d8:df:82:b0: ea:64:11:f0:3f:23:60:5e:9e:4a:d4:c6:e1:81:5c: 1c:11:b2:b4:b1:0f:53:6f:c4:c6:4a:50:09:0b:92: 8d:1b:67:13:ec:40:c6:63:7a:6f:10:97:54:3e:08: 46:02:68:6d:1f:89:d0:27:88:8b:05:a6:04:25:c1: 7a:7b:b3:d3:3b:1c:14:db:98:7d:58:b5:c1:7c:6b: b2:41:10:29:2e:0a:af:8e:2b:07:35:f9:03:72:85: e9:86:b5:47:65:3c:9a:70:7f:2f:3e:b2:38:94:41: dd:17:42:23:3d:44:98:23:a4:57:dd:86:19:65:fb: 8f:d4:cf:bd:0a:dc:50:a0:6e:a9:93:20:7b:06:35: 9a:20:21:20:1f:95:79:5e:2e:c7:0c:5d:d9:e5:5d: e2:52:6a:bd:4f:58:ac:49:e0:9d:1e:0f:85:61:1a: da:4c:a5:98:68:0f:16:c7:aa:78:75:44:2f:9f:89: 26:f5:26:5c:4a:1d:c9:2c:61:49:82:9d:67:83:79: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:58:9A:D5:67:9A:B9:B9:FC:78:AC:D5:9F:CB:37:26:B3:00:77:1E X509v3 Authority Key Identifier: keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/F1ia1Weaubn8eKzVn8s3JrMAdx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption b9:18:ac:99:ad:dd:72:ce:6c:1a:d9:b8:96:a8:28:d4:53:71: 36:d5:75:dc:8d:26:08:04:57:51:73:fd:38:74:3e:35:59:e5: c1:15:e4:b5:ec:86:0a:b6:9d:be:9a:e6:60:8a:02:1d:c2:21: 15:f9:4e:e0:80:eb:71:e2:45:e3:db:97:46:c1:11:29:20:1f: af:0e:f2:6f:3e:41:3e:da:14:74:8e:a8:fc:56:cc:b4:b4:c4: d9:0a:e6:9a:eb:87:93:37:2f:7b:2d:a6:6c:78:42:f4:cd:22: 24:cf:87:17:90:5b:b6:a5:e0:cb:5d:f8:b1:ca:2a:69:f6:26: e2:c9:b4:ec:f6:0f:05:02:46:cc:5a:72:40:9b:78:07:2e:ea: 4f:90:ff:51:5e:13:61:c0:81:96:91:9b:ba:93:f1:cd:85:c6: 21:30:ee:a4:15:ee:5a:a5:07:22:b0:1b:a1:b7:16:97:c7:c0: eb:1b:49:f4:cd:83:24:77:2c:bc:a0:e9:e0:8c:cf:8c:a3:38: 55:8f:ac:37:34:1b:51:b9:fb:35:6b:ef:6b:62:04:22:e9:62: 96:77:9c:45:3f:8e:75:68:84:31:65:57:b6:fb:e0:55:c4:51: 9d:39:95:8f:85:b7:9f:54:be:d0:80:c2:7f:4e:c2:59:8e:87: 03:55:44:be -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8gDNh4LSaFa7yKU/OAIfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNmQ0Yzc1Y2ViZTg5NjE0Y2YyZTdlMmU2MTRjMDM2ZjZm NTNlZTIwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzU4OWFkNTY3OWFiOWI5ZmM3OGFjZDU5ZmNiMzcyNmIzMDA3NzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0TbqNTVf7mYgkkNYCiiSOIUeZ2X y+88HsSy9yVWkW5LL6OUbw4cecogYYVeVrDLO0mUdlcQ+9jfgrDqZBHwPyNgXp5K 1MbhgVwcEbK0sQ9Tb8TGSlAJC5KNG2cT7EDGY3pvEJdUPghGAmhtH4nQJ4iLBaYE JcF6e7PTOxwU25h9WLXBfGuyQRApLgqvjisHNfkDcoXphrVHZTyacH8vPrI4lEHd F0IjPUSYI6RX3YYZZfuP1M+9CtxQoG6pkyB7BjWaICEgH5V5Xi7HDF3Z5V3iUmq9 T1isSeCdHg+FYRraTKWYaA8Wx6p4dUQvn4km9SZcSh3JLGFJgp1ng3k+6wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBdYmtVnmrm5/His1Z/LNyazAHceMB8GA1UdIwQY MBaAFNJtTHXOvolhTPLn4uYUwDb29T7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUt ODg5MzhiZDUzYzE2LzEvRjFpYTFXZWF1Ym44ZUt6Vm44czNKck1BZHg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUtODg5MzhiZDUzYzE2 LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAifgwDQYJ KoZIhvcNAQELBQADggEBALkYrJmt3XLObBrZuJaoKNRTcTbVddyNJggEV1Fz/Th0 PjVZ5cEV5LXshgq2nb6a5mCKAh3CIRX5TuCA63HiRePbl0bBESkgH68O8m8+QT7a FHSOqPxWzLS0xNkK5prrh5M3L3stpmx4QvTNIiTPhxeQW7al4Mtd+LHKKmn2JuLJ tOz2DwUCRsxackCbeAcu6k+Q/1FeE2HAgZaRm7qT8c2FxiEw7qQV7lqlByKwG6G3 FpfHwOsbSfTNgyR3LLyg6eCMz4yjOFWPrDc0G1G5+zVr72tiBCLpYpZ3nEU/jnVo hDFlV7b74FXEUZ05lY+Ft59UvtCAwn9OwlmOhwNVRL4= -----END CERTIFICATE-----Generated at Tue Jan 27 11:27:35 2026 by rpki-client