This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/1R1NGCUOSW1LiHiCITHoK558Vbc.roa File: 1R1NGCUOSW1LiHiCITHoK558Vbc.roa (raw, json) Hash identifier: zT7tlG6Mu9v2k7UcaJAbV5WxMHw7/BViKEKtfLvKHQg= Subject key identifier: D5:1D:4D:18:25:0E:49:6D:4B:88:78:82:21:31:E8:2B:9E:7C:55:B7 Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Certificate serial: 019B7C128B581ED38A9AA658C7EB96F0BA28 Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/1R1NGCUOSW1LiHiCITHoK558Vbc.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 62.239.0.0/16 maxlen: 16 193.113.0.0/16 maxlen: 16 194.102.0.0/19 maxlen: 19 195.218.32.0/19 maxlen: 19 217.15.64.0/20 maxlen: 20 2a00:2380::/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8b:58:1e:d3:8a:9a:a6:58:c7:eb:96:f0:ba:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51d4d18250e496d4b8878822131e82b9e7c55b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:56:b0:77:0b:7c:98:47:f2:b1:d1:76:08: c4:4d:79:f7:e8:77:55:6b:58:a9:41:c4:dc:64:b1: 64:d7:f5:f7:59:b1:d7:b2:cf:8e:13:6c:95:cd:80: cd:79:d5:b4:da:39:55:99:9a:97:36:e6:b7:1b:3c: 21:1b:72:89:f0:33:0a:c1:d7:2d:9b:3f:96:06:8b: 05:f7:5b:b5:8e:32:40:71:d8:98:ee:5d:0b:8d:98: 6f:0b:76:35:4f:e7:94:6a:e2:93:3f:06:49:37:87: 2a:6e:6a:65:6c:e5:8c:44:37:5d:95:c9:d0:68:6a: 4e:71:c1:3c:9e:fe:3b:2c:8f:0e:3f:1a:51:b1:b5: 22:03:e5:0b:65:ce:39:a1:2a:47:ac:a0:b5:15:3d: f5:92:a5:ca:76:cd:0d:42:79:e5:6c:7f:37:37:f4: 44:3d:82:8b:66:f1:c6:9c:2c:c4:bd:86:34:3e:a1: bf:1f:24:e1:7e:56:5c:3b:39:aa:07:6d:8d:85:f8: 45:a3:fa:d2:a8:72:ee:bb:57:39:f2:9b:41:92:9d: 9e:7b:b5:88:e4:6a:2d:08:ea:1d:22:6b:51:87:b3: 63:e2:eb:ff:50:55:3b:ce:45:cf:3d:af:b1:b3:d8: 50:56:77:88:5f:60:a7:d9:40:79:f6:42:94:5f:1d: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:4D:18:25:0E:49:6D:4B:88:78:82:21:31:E8:2B:9E:7C:55:B7 X509v3 Authority Key Identifier: keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/1R1NGCUOSW1LiHiCITHoK558Vbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.239.0.0/16 193.113.0.0/16 194.102.0.0/19 195.218.32.0/19 217.15.64.0/20 IPv6: 2a00:2380::/25 Signature Algorithm: sha256WithRSAEncryption 01:45:9d:2b:43:f2:07:64:08:80:d3:a9:93:3c:50:a4:77:91: fc:14:fd:f2:59:da:ed:45:21:e4:1f:34:56:c9:b9:68:b0:39: 5a:24:08:97:de:ed:42:3d:7e:b9:23:bf:4e:79:38:57:8f:56: e5:1d:9a:0b:79:fc:5f:8d:dc:02:fc:ea:1e:b3:19:51:2a:10: 8a:7e:1b:99:1c:b2:c4:66:2e:10:b9:e0:7f:82:82:c5:2e:b6: 7f:12:1d:96:34:bb:92:38:ed:1c:9c:2c:14:e9:79:06:7c:9d: e8:b1:ea:08:b6:39:e5:a2:8f:67:55:b7:1c:64:62:c2:54:85: 7e:ab:4a:35:92:23:27:cc:91:6e:63:da:72:b4:1e:a4:bc:77: b5:92:7f:bc:a7:68:d0:5b:34:39:73:05:51:d3:4a:a6:01:da: f1:15:0f:7d:b5:60:7e:09:14:17:f9:68:3b:a9:d7:02:6a:e6: 86:4a:95:04:e0:62:3d:88:68:c5:ec:9c:f7:6d:13:01:fb:6d: 0d:a1:18:03:86:4f:b5:42:9a:19:72:c9:ab:eb:5f:f3:1c:0d: f1:74:30:35:ae:d6:68:20:32:55:39:da:f8:69:e2:0c:21:b5: 41:9f:6c:42:e4:e7:69:9b:d1:14:d7:f5:b7:19:c6:32:ab:ec: 7e:fa:a5:21 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt8EotYHtOKmqZYx+uW8LooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz NzRlZDgwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTFkNGQxODI1MGU0OTZkNGI4ODc4ODIyMTMxZTgyYjllN2M1NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr71WsHcLfJhH8rHRdgjETXn36HdV a1ipQcTcZLFk1/X3WbHXss+OE2yVzYDNedW02jlVmZqXNua3GzwhG3KJ8DMKwdct mz+WBosF91u1jjJAcdiY7l0LjZhvC3Y1T+eUauKTPwZJN4cqbmplbOWMRDddlcnQ aGpOccE8nv47LI8OPxpRsbUiA+ULZc45oSpHrKC1FT31kqXKds0NQnnlbH83N/RE PYKLZvHGnCzEvYY0PqG/HyThflZcOzmqB22NhfhFo/rSqHLuu1c58ptBkp2ee7WI 5GotCOodImtRh7Nj4uv/UFU7zkXPPa+xs9hQVneIX2Cn2UB59kKUXx2PPwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFNUdTRglDkltS4h4giEx6CuefFW3MB8GA1UdIwQY MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt NzE2OGFlMGI4Mjc4LzEvMVIxTkdDVU9TVzFMaUhpQ0lUSG9LNTU4VmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4 LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAiBAIAATAcAwMAPu8DAwDB cQMEBcJmAAMEBcPaIAMEBNkPQDANBAIAAjAHAwUHKgAjgDANBgkqhkiG9w0BAQsF AAOCAQEAAUWdK0PyB2QIgNOpkzxQpHeR/BT98lna7UUh5B80Vsm5aLA5WiQIl97t Qj1+uSO/Tnk4V49W5R2aC3n8X43cAvzqHrMZUSoQin4bmRyyxGYuELngf4KCxS62 fxIdljS7kjjtHJwsFOl5Bnyd6LHqCLY55aKPZ1W3HGRiwlSFfqtKNZIjJ8yRbmPa crQepLx3tZJ/vKdo0Fs0OXMFUdNKpgHa8RUPfbVgfgkUF/loO6nXAmrmhkqVBOBi PYhoxeyc920TAfttDaEYA4ZPtUKaGXLJq+tf8xwN8XQwNa7WaCAyVTna+GniDCG1 QZ9sQuTnaZvRFNf1txnGMqvsfvqlIQ== -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:22 2026 by rpki-client