This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/1-1889f_-iRQYnH3-fqXrOkR2ikE.roa File: 1-1889f_-iRQYnH3-fqXrOkR2ikE.roa (raw, json) Hash identifier: /z9uTfpjXRCmTc6GwPli+bHZeS9FVw3t6IXyn4g2iag= Subject key identifier: FB:5F:3C:F5:FF:FE:89:14:18:9C:7D:FE:7E:A5:EB:3A:44:76:8A:41 Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Certificate serial: 019B77C68CC960BF2C39CE389CE98E629841 Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/1-1889f_-iRQYnH3-fqXrOkR2ikE.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206941 IP address blocks: 193.164.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8c:c9:60:bf:2c:39:ce:38:9c:e9:8e:62:98:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb5f3cf5fffe8914189c7dfe7ea5eb3a44768a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:27:b0:10:54:f1:c8:ba:15:52:4c:0e:a2: fa:fa:5a:9f:ef:70:7e:89:d0:23:c1:54:e5:1d:b3: f9:b8:17:c7:9d:ae:f4:0d:51:54:a9:e5:6b:01:4c: 95:ae:86:0c:04:01:33:56:e7:88:fe:8a:2e:c8:92: 72:d8:d4:a3:80:ba:5d:72:62:1f:89:97:58:cd:5d: 22:c7:e8:c4:db:d2:aa:16:e9:d5:a1:17:85:c6:fb: c3:03:ee:15:e1:94:54:c9:24:6d:a4:a2:ac:8c:9a: c6:aa:be:f2:ba:6d:5b:75:28:91:3f:13:2d:04:9b: 97:6a:2a:6c:e1:06:df:cf:e8:d3:a4:a1:0e:36:a3: c9:b3:82:9e:b8:da:51:c8:bc:d5:85:96:17:c0:86: ec:4c:a0:38:47:47:49:a5:92:37:d4:9d:cb:9c:0b: 21:18:02:b1:bc:b5:65:3b:08:58:a1:cf:d3:2b:5f: 11:1c:2b:63:cf:b3:68:e6:09:55:c1:55:e8:c1:17: 51:33:c1:92:87:b8:59:05:ca:e3:2e:3f:33:32:59: 2d:00:a6:4a:d9:c1:8c:9b:f3:15:01:6a:16:43:d7: 0d:52:14:b2:fe:42:7a:5c:c7:b8:04:3c:9d:b6:5f: 7f:00:03:e3:4e:6c:23:6d:62:98:4a:6e:f4:f4:9f: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5F:3C:F5:FF:FE:89:14:18:9C:7D:FE:7E:A5:EB:3A:44:76:8A:41 X509v3 Authority Key Identifier: keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/1-1889f_-iRQYnH3-fqXrOkR2ikE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.90.0/24 Signature Algorithm: sha256WithRSAEncryption 25:a7:5b:6d:f3:b6:5d:98:3d:a1:d6:0e:bc:06:bf:6a:3a:36: a4:66:b5:e8:a7:5d:eb:2d:20:a3:21:df:82:29:76:fb:b2:06: 28:b0:d1:db:8c:4c:0b:f2:f2:6d:4e:8c:e3:a6:f8:6e:c9:26: ce:c5:99:fa:26:86:ae:9a:bc:2b:68:82:5d:17:ac:c6:54:d2: d1:99:fe:4d:9f:77:66:81:6e:0e:81:60:5f:53:81:82:a7:03: 82:1e:3e:5a:62:df:fd:f8:c5:10:9e:c0:9c:70:6a:62:6d:10: 2a:ae:eb:8a:fa:81:04:5c:40:6a:73:54:ce:ef:a5:87:7f:2c: 4a:09:2a:c7:c4:4f:19:97:fa:c2:89:6f:96:b0:9d:72:02:4d: e5:78:28:eb:9d:ca:59:69:ad:83:a8:96:62:ab:99:00:27:66: c9:6d:bd:14:4d:11:9a:0d:a5:4d:58:bd:eb:b5:ec:f5:45:71: 5c:ab:a4:28:97:2c:37:ce:e5:ad:e5:9f:a9:e7:f7:9d:a0:f8: d9:6f:9e:ad:ba:33:46:87:fb:5d:69:c3:91:9a:8e:d3:1f:97: 25:5a:20:f9:a4:20:a0:a2:9f:ca:ac:48:9f:0c:c1:34:01:5d: a5:37:32:9f:1f:7e:a2:13:cc:ac:ed:26:b3:c6:fb:04:82:f3: ed:ba:6d:a6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xozJYL8sOc44nOmOYphBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4 YjJkZTcwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjVmM2NmNWZmZmU4OTE0MTg5YzdkZmU3ZWE1ZWIzYTQ0NzY4YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvUnsBBU8ci6FVJMDqL6+lqf73B+ idAjwVTlHbP5uBfHna70DVFUqeVrAUyVroYMBAEzVueI/oouyJJy2NSjgLpdcmIf iZdYzV0ix+jE29KqFunVoReFxvvDA+4V4ZRUySRtpKKsjJrGqr7yum1bdSiRPxMt BJuXaips4Qbfz+jTpKEONqPJs4KeuNpRyLzVhZYXwIbsTKA4R0dJpZI31J3LnAsh GAKxvLVlOwhYoc/TK18RHCtjz7No5glVwVXowRdRM8GSh7hZBcrjLj8zMlktAKZK 2cGMm/MVAWoWQ9cNUhSy/kJ6XMe4BDydtl9/AAPjTmwjbWKYSm709J/HRwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtfPPX//okUGJx9/n6l6zpEdopBMB8GA1UdIwQY MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt NGQ3MzczMGY3ZDMyLzEvMS0xODg5Zl8taVJRWW5IMy1mcVhyT2tSMmlrRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDcvMTFkYzcxLTgxNzAtNDViNS04YzViLTRkNzM3MzBmN2Qz Mi8xL0lXbU1ITnhtM0NoZEQ0QjJLY1JpWWFpTExlYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGkWjAN BgkqhkiG9w0BAQsFAAOCAQEAJadbbfO2XZg9odYOvAa/ajo2pGa16Kdd6y0goyHf gil2+7IGKLDR24xMC/LybU6M46b4bskmzsWZ+iaGrpq8K2iCXResxlTS0Zn+TZ93 ZoFuDoFgX1OBgqcDgh4+WmLf/fjFEJ7AnHBqYm0QKq7rivqBBFxAanNUzu+lh38s Sgkqx8RPGZf6wolvlrCdcgJN5Xgo653KWWmtg6iWYquZACdmyW29FE0Rmg2lTVi9 67Xs9UVxXKukKJcsN87lreWfqef3naD42W+erbozRof7XWnDkZqO0x+XJVog+aQg oKKfyqxInwzBNAFdpTcynx9+ohPMrO0ms8b7BILz7bptpg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:09 2026 by rpki-client