This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1Yk3wLsSFqIceQz9okyZeYwSmUU.roa File: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (raw, json) Hash identifier: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps= Subject key identifier: D5:89:37:C0:BB:12:16:A2:1C:79:0C:FD:A2:4C:99:79:8C:12:99:45 Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019B7F13981C36EC8A2D33681A5F5E472825 Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1Yk3wLsSFqIceQz9okyZeYwSmUU.roa Signing time: Fri 02 Jan 2026 14:19:09 +0000 ROA not before: Fri 02 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60992 IP address blocks: 83.96.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:98:1c:36:ec:8a:2d:33:68:1a:5f:5e:47:28:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Jan 2 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d58937c0bb1216a21c790cfda24c99798c129945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e1:3a:f1:11:77:3c:58:c2:c4:51:13:cb:05: db:5a:48:44:af:d5:0a:b7:d2:29:98:0b:71:9a:ac: 82:2d:4b:36:b0:93:25:a8:f5:7d:bc:11:2d:93:f3: bc:de:74:36:9b:2a:5a:4e:69:a2:5b:8d:4b:b4:a1: d8:c7:43:d5:9f:bb:bb:99:8c:4d:54:1a:0f:a1:81: 5d:58:08:52:66:bf:db:96:f0:e2:7b:8c:bd:ac:26: b0:d8:bf:76:31:5d:68:fd:3f:38:b1:f4:cd:82:09: f0:b7:1c:f3:fc:21:62:3f:b8:c9:4a:88:46:f5:0a: 5f:d6:7e:73:02:60:25:71:74:53:cd:04:ad:ac:1f: 54:e4:96:87:d6:72:3f:df:cd:9c:89:c3:36:ba:f3: 59:34:af:2f:2a:0c:ea:29:34:a4:c3:94:9c:67:91: af:4e:b4:c0:2b:21:a2:79:26:69:6e:2a:38:fa:36: 2e:2b:89:6c:12:eb:e4:3a:76:36:f3:bf:73:57:d0: de:83:f8:81:20:15:fd:0c:39:95:1b:cb:a7:e0:3d: 37:47:e7:69:85:d3:de:99:0a:21:34:3c:5f:2a:18: dc:9c:fa:5e:ac:8c:77:69:99:af:17:e9:ff:e7:e3: 3e:4c:1c:35:ad:c5:12:28:c1:5c:16:18:5d:9f:b4: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:89:37:C0:BB:12:16:A2:1C:79:0C:FD:A2:4C:99:79:8C:12:99:45 X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1Yk3wLsSFqIceQz9okyZeYwSmUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.96.29.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:6d:26:55:26:bc:7c:66:59:f5:2b:8b:76:68:02:6e:44:e7: f0:36:44:f9:cf:90:de:15:d0:4a:a1:6b:cc:06:b5:f0:08:f4: eb:ed:d4:94:50:3e:86:8a:2c:b3:93:96:1b:1e:4e:16:3a:dc: 52:3a:9f:4d:fb:0b:c1:f7:6f:10:5c:0a:94:b2:ba:1f:4c:bb: fd:e2:85:de:0c:c7:65:dc:15:aa:ba:38:25:ea:c8:c5:d9:f1: 6e:3b:4e:a3:5b:ca:ed:e9:e1:5b:1c:c0:be:03:aa:70:b9:ee: 03:27:5d:b9:5c:a2:87:d0:db:49:b9:a4:de:a1:f0:93:db:40: cb:0c:97:7a:0d:2d:75:c9:6f:40:bd:e5:8c:d2:c6:5d:6e:18: 4a:fe:80:cd:80:a1:a2:9d:26:83:01:3d:4f:16:26:ee:bb:48: ad:8b:9d:bf:a4:59:23:a8:5c:35:8e:1f:d2:c2:1e:dd:62:9e: fb:c7:34:38:f0:32:73:6a:ce:72:ea:7e:4d:3e:b5:3a:ee:32: 42:d7:fc:6b:18:bc:21:31:e0:9b:3f:30:aa:25:f8:c9:ba:91: 25:5f:89:10:06:df:9d:0c:41:03:71:a0:25:11:c1:2f:fc:83: 8c:9c:d6:cd:70:71:f6:4b:ef:77:3f:c7:07:b9:4d:91:c6:05: fd:8e:b0:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E5gcNuyKLTNoGl9eRyglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjYwMTAyMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTg5MzdjMGJiMTIxNmEyMWM3OTBjZmRhMjRjOTk3OThjMTI5OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OE68RF3PFjCxFETywXbWkhEr9UK t9IpmAtxmqyCLUs2sJMlqPV9vBEtk/O83nQ2mypaTmmiW41LtKHYx0PVn7u7mYxN VBoPoYFdWAhSZr/blvDie4y9rCaw2L92MV1o/T84sfTNggnwtxzz/CFiP7jJSohG 9Qpf1n5zAmAlcXRTzQStrB9U5JaH1nI/382cicM2uvNZNK8vKgzqKTSkw5ScZ5Gv TrTAKyGieSZpbio4+jYuK4lsEuvkOnY2879zV9Deg/iBIBX9DDmVG8un4D03R+dp hdPemQohNDxfKhjcnPperIx3aZmvF+n/5+M+TBw1rcUSKMFcFhhdn7QiSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWJN8C7EhaiHHkM/aJMmXmMEplFMB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvMVlrM3dMc1NGcUljZVF6OW9reVplWXdTbVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2AdMA0G CSqGSIb3DQEBCwUAA4IBAQCbbSZVJrx8Zln1K4t2aAJuROfwNkT5z5DeFdBKoWvM BrXwCPTr7dSUUD6Giiyzk5YbHk4WOtxSOp9N+wvB928QXAqUsrofTLv94oXeDMdl 3BWqujgl6sjF2fFuO06jW8rt6eFbHMC+A6pwue4DJ125XKKH0NtJuaTeofCT20DL DJd6DS11yW9AveWM0sZdbhhK/oDNgKGinSaDAT1PFibuu0iti52/pFkjqFw1jh/S wh7dYp77xzQ48DJzas5y6n5NPrU67jJC1/xrGLwhMeCbPzCqJfjJupElX4kQBt+d DEEDcaAlEcEv/IOMnNbNcHH2S+93P8cHuU2RxgX9jrBv -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:34 2026 by rpki-client