This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/1-CfAQPnHbYYCEoKxuhItskljCHs.roa File: 1-CfAQPnHbYYCEoKxuhItskljCHs.roa (raw, json) Hash identifier: WTELyKm4OH4Q12BiZgyRDXiy7VL64q36cWNiezWQuws= Subject key identifier: F8:27:C0:40:F9:C7:6D:86:02:12:82:B1:BA:12:2D:B2:49:63:08:7B Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb Certificate serial: 019B21ADFE99246258C9CD68839AE0760F9C Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/1-CfAQPnHbYYCEoKxuhItskljCHs.roa Signing time: Mon 15 Dec 2025 11:03:29 +0000 ROA not before: Mon 15 Dec 2025 11:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59756 IP address blocks: 146.0.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ad:fe:99:24:62:58:c9:cd:68:83:9a:e0:76:0f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb Validity Not Before: Dec 15 11:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f827c040f9c76d86021282b1ba122db24963087b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:59:d2:00:fa:f0:37:1d:5f:c8:30:61:1d: 63:d5:8e:bf:6e:0a:83:9d:7a:94:db:e7:34:32:34: 88:b2:ea:79:65:be:ca:2d:3e:06:fa:cf:3b:16:97: c7:91:4f:f4:ce:16:9b:ac:92:17:c0:a4:b9:74:91: b9:fa:1d:47:ce:93:cb:85:a0:a5:4d:0f:e1:54:69: 0d:85:fb:92:50:8b:b7:ec:77:e7:8d:17:2a:b5:37: 30:01:8d:74:b2:3d:36:4c:b4:4f:6b:e0:e4:28:fa: 8c:ba:1b:b5:86:33:41:20:9f:d9:72:32:d8:40:14: 1c:0b:80:3a:dc:f3:78:6f:79:99:bf:72:d1:ee:cb: 22:c4:37:91:f7:3d:eb:1b:de:b7:20:9d:85:cd:2c: 6f:98:6e:0f:09:ef:fb:61:0c:40:a1:97:01:3c:1a: 4a:7a:d7:3a:55:f8:a7:43:4b:65:1a:ec:f9:29:2b: 20:bc:17:4f:86:0d:ff:97:54:04:30:6b:95:b1:86: 91:dc:19:b4:98:cc:16:dd:02:e3:ce:27:3d:ad:1e: 85:78:be:5d:5b:aa:0b:1a:f7:94:0a:a9:41:71:4e: ab:a2:a8:10:c5:ce:1f:27:1e:a3:36:97:eb:bb:1a: a8:6f:b0:3f:8c:29:2a:8a:1a:31:ee:88:a6:2d:b0: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:27:C0:40:F9:C7:6D:86:02:12:82:B1:BA:12:2D:B2:49:63:08:7B X509v3 Authority Key Identifier: keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/1-CfAQPnHbYYCEoKxuhItskljCHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.0.56.0/24 Signature Algorithm: sha256WithRSAEncryption 87:da:78:f3:eb:86:c2:b9:3e:7a:24:ce:0a:25:20:54:a3:10: 84:cc:80:ca:44:73:02:55:4d:c1:76:a1:0b:b2:0a:6e:0b:35: 8f:6d:a0:74:c7:c2:be:e6:7a:49:cf:d8:63:70:5c:e2:f3:ec: f0:b6:19:15:ec:25:e7:ce:cf:b1:1a:03:26:ba:ac:5c:99:ee: 5a:4b:13:77:65:69:53:6e:da:64:bb:dd:eb:a3:5c:00:d3:48: 85:c6:06:59:e8:56:bf:d7:ff:9e:e3:9e:de:c8:10:89:36:f3: f7:12:90:9b:6a:30:15:5c:f5:31:9d:af:7f:e9:ad:c7:22:cf: 2a:fd:c7:d1:49:16:f8:48:43:ac:d0:49:28:31:02:a9:a3:b6: d0:07:4c:96:ae:dd:cf:fc:a5:fa:a5:89:e3:3d:f6:f3:0c:6e: 37:14:4b:d7:8e:73:73:24:8e:f8:cf:9d:38:2e:f1:1b:19:2f: 01:03:7f:de:8f:33:51:1d:b5:23:0b:12:0a:bc:fb:c0:3b:4a: c7:42:2f:94:7c:79:6f:a3:ad:b5:40:29:a9:e3:20:99:fe:55: d1:e3:15:68:a0:2f:60:81:b5:ea:c6:20:ca:93:2a:0c:0c:35: 88:e8:62:7e:ca:cd:2b:8e:b7:e0:96:16:33:60:92:63:22:9f: 75:b2:4e:20 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZshrf6ZJGJYyc1og5rgdg+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTQyMjQ3NmUxYWU1ZWEwZDU4ZTRmOGZkZjkxZjA1ZjEw MmZlZmIwHhcNMjUxMjE1MTEwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODI3YzA0MGY5Yzc2ZDg2MDIxMjgyYjFiYTEyMmRiMjQ5NjMwODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xZZ0gD68DcdX8gwYR1j1Y6/bgqD nXqU2+c0MjSIsup5Zb7KLT4G+s87FpfHkU/0zhabrJIXwKS5dJG5+h1HzpPLhaCl TQ/hVGkNhfuSUIu37HfnjRcqtTcwAY10sj02TLRPa+DkKPqMuhu1hjNBIJ/ZcjLY QBQcC4A63PN4b3mZv3LR7ssixDeR9z3rG963IJ2FzSxvmG4PCe/7YQxAoZcBPBpK etc6VfinQ0tlGuz5KSsgvBdPhg3/l1QEMGuVsYaR3Bm0mMwW3QLjzic9rR6FeL5d W6oLGveUCqlBcU6roqgQxc4fJx6jNpfruxqob7A/jCkqihox7oimLbBTHQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgnwED5x22GAhKCsboSLbJJYwh7MB8GA1UdIwQY MBaAFLaUIkduGuXqDVjk+P35HwXxAv77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYt NjY1MTZmZmNlNzUwLzEvMS1DZkFRUG5IYllZQ0VvS3h1aEl0c2tsakNIcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDgvZTQ5YWZlLTE1YWUtNDg1YS1hZjc2LTY2NTE2ZmZjZTc1 MC8xL3RwUWlSMjRhNWVvTldPVDRfZmtmQmZFQ192cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIAODAN BgkqhkiG9w0BAQsFAAOCAQEAh9p48+uGwrk+eiTOCiUgVKMQhMyAykRzAlVNwXah C7IKbgs1j22gdMfCvuZ6Sc/YY3Bc4vPs8LYZFewl587PsRoDJrqsXJnuWksTd2Vp U27aZLvd66NcANNIhcYGWehWv9f/nuOe3sgQiTbz9xKQm2owFVz1MZ2vf+mtxyLP Kv3H0UkW+EhDrNBJKDECqaO20AdMlq7dz/yl+qWJ4z328wxuNxRL145zcySO+M+d OC7xGxkvAQN/3o8zUR21IwsSCrz7wDtKx0IvlHx5b6OttUApqeMgmf5V0eMVaKAv YIG16sYgypMqDAw1iOhifsrNK4634JYWM2CSYyKfdbJOIA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:02:05 2025 by rpki-client