This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/n1H912MLyCMWbqnWgh1EgTol2_Q.roa File: n1H912MLyCMWbqnWgh1EgTol2_Q.roa (raw, json) Hash identifier: IP1WZQL9ohZDL3I4s3fL2saojcPDv7NTf8HPxo/Wqfk= Subject key identifier: 9F:51:FD:D7:63:0B:C8:23:16:6E:A9:D6:82:1D:44:81:3A:25:DB:F4 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019BEB0BB098CD83A1AEEF39ABCD7F239BCE Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/n1H912MLyCMWbqnWgh1EgTol2_Q.roa Signing time: Fri 23 Jan 2026 13:29:30 +0000 ROA not before: Fri 23 Jan 2026 13:29:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 83.147.194.0/24 maxlen: 24 178.253.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:0b:b0:98:cd:83:a1:ae:ef:39:ab:cd:7f:23:9b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 23 13:29:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f51fdd7630bc823166ea9d6821d44813a25dbf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:4e:56:e4:ce:9a:ef:18:6d:8f:79:77:25: 9d:8b:c5:87:4d:4e:76:68:28:37:3c:76:49:2c:f0: 77:d9:65:b4:9f:69:d5:48:6d:45:52:d3:86:3a:0c: 61:5c:ed:4a:75:13:3b:3b:69:9c:04:66:94:b4:b7: 75:4d:7a:bd:2c:5a:df:6b:b2:0a:37:70:70:a7:d9: 38:57:b7:27:80:cd:a3:47:23:ce:00:ae:aa:2c:34: c3:8a:07:63:4b:22:c8:ae:39:fb:65:ec:1c:80:f7: f0:fa:78:4e:27:6f:f9:18:2a:85:82:40:12:7f:0e: e4:fc:75:54:fb:20:e9:cf:23:82:5a:75:9a:a9:71: 8d:65:eb:80:13:f0:6b:4f:79:2b:83:5c:3a:98:88: 0e:0a:fa:c9:67:c3:19:ca:bc:6f:cc:67:aa:14:13: a8:34:ad:52:49:6f:bc:7d:51:ff:22:39:dc:af:b5: 41:a5:ce:5f:8c:24:d8:7d:c2:f2:6e:dc:43:f9:36: f2:5c:c4:e9:bf:1d:3b:f9:6e:31:54:ab:b4:1e:b3: d0:e1:3b:8d:d7:b0:b6:40:9a:38:5f:75:89:f2:51: 09:b3:17:44:ce:37:10:db:6d:89:d0:41:d8:a9:c3: 6e:96:bd:e9:50:7c:ce:11:ae:61:01:3e:8b:18:96: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:51:FD:D7:63:0B:C8:23:16:6E:A9:D6:82:1D:44:81:3A:25:DB:F4 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/n1H912MLyCMWbqnWgh1EgTol2_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.194.0/24 178.253.38.0/23 Signature Algorithm: sha256WithRSAEncryption 49:81:95:cb:a7:ee:c7:47:ef:32:ef:a0:1f:e5:3e:11:a9:cd: 58:01:3a:2d:6e:41:44:74:f5:b8:e0:83:88:4c:e6:1a:8b:8e: 7b:5e:25:d6:28:ef:cd:1a:71:6f:23:60:f1:55:0b:f0:d7:9c: 5a:12:88:48:66:5a:0f:4e:24:00:01:7b:5a:5a:73:59:3f:a9: 3a:6d:45:9c:28:67:d7:f1:ec:2f:17:5e:11:89:97:16:c0:2b: e1:e7:f5:3b:e1:0d:de:85:bf:24:d9:d2:c4:99:29:f0:3b:a7: 95:6c:e7:99:44:a4:27:fa:53:71:bd:80:c2:ef:b8:c2:04:0d: 6d:bb:74:80:e6:07:b3:38:a9:28:3b:e0:99:4b:58:ca:3b:a4: bf:c5:c0:22:e2:53:c7:79:c6:c5:18:d5:f1:3c:37:d5:a2:af: 62:fe:f2:d3:f6:21:6b:4d:e2:24:f9:27:4f:20:0b:96:0f:c0: b6:98:f4:d8:fa:af:bf:7b:a0:da:cb:5c:69:e0:3e:61:1b:00: ba:64:ec:b7:b6:f3:5a:e3:45:82:74:4b:cb:d3:ce:23:4b:67: e8:5b:ff:48:63:5c:f7:ef:f2:f2:bf:cc:35:03:90:19:fa:2e: 4a:b4:49:f8:e0:79:78:0a:96:96:6d:aa:da:36:8f:18:fc:66: 73:83:d9:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvrC7CYzYOhru85q81/I5vOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTIzMTMyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjUxZmRkNzYzMGJjODIzMTY2ZWE5ZDY4MjFkNDQ4MTNhMjVkYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtBOVuTOmu8YbY95dyWdi8WHTU52 aCg3PHZJLPB32WW0n2nVSG1FUtOGOgxhXO1KdRM7O2mcBGaUtLd1TXq9LFrfa7IK N3Bwp9k4V7cngM2jRyPOAK6qLDTDigdjSyLIrjn7ZewcgPfw+nhOJ2/5GCqFgkAS fw7k/HVU+yDpzyOCWnWaqXGNZeuAE/BrT3krg1w6mIgOCvrJZ8MZyrxvzGeqFBOo NK1SSW+8fVH/Ijncr7VBpc5fjCTYfcLybtxD+TbyXMTpvx07+W4xVKu0HrPQ4TuN 17C2QJo4X3WJ8lEJsxdEzjcQ222J0EHYqcNulr3pUHzOEa5hAT6LGJby1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ9R/ddjC8gjFm6p1oIdRIE6Jdv0MB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvbjFIOTEyTUx5Q01XYnFuV2doMUVnVG9sMl9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU5PCAwQB sv0mMA0GCSqGSIb3DQEBCwUAA4IBAQBJgZXLp+7HR+8y76Af5T4Rqc1YATotbkFE dPW44IOITOYai457XiXWKO/NGnFvI2DxVQvw15xaEohIZloPTiQAAXtaWnNZP6k6 bUWcKGfX8ewvF14RiZcWwCvh5/U74Q3ehb8k2dLEmSnwO6eVbOeZRKQn+lNxvYDC 77jCBA1tu3SA5gezOKkoO+CZS1jKO6S/xcAi4lPHecbFGNXxPDfVoq9i/vLT9iFr TeIk+SdPIAuWD8C2mPTY+q+/e6Day1xp4D5hGwC6ZOy3tvNa40WCdEvL084jS2fo W/9IY1z37/Lyv8w1A5AZ+i5KtEn44Hl4CpaWbaraNo8Y/GZzg9nG -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:09 2026 by rpki-client