This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa File: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (raw, json) Hash identifier: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM= Subject key identifier: 9F:57:D8:BC:CA:00:7C:F2:D0:58:18:0E:B2:37:52:9F:89:79:24:79 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C128AA423FE79FC8FABD6B601B98F57 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208091 IP address blocks: 87.251.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8a:a4:23:fe:79:fc:8f:ab:d6:b6:01:b9:8f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f57d8bcca007cf2d058180eb237529f89792479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:26:3e:1f:0d:84:14:31:5a:fa:d6:54:c7:17: 5f:e8:82:11:ba:bb:97:aa:16:b1:48:31:75:ae:2a: 3f:12:5b:93:20:d3:eb:71:fa:58:73:98:07:65:fe: c9:2b:98:f0:18:af:2b:f5:45:07:57:d4:0f:b8:42: 5e:66:07:fb:d2:80:0c:f2:fc:45:50:06:e6:a6:93: c2:b3:5a:5f:ed:1c:df:62:1a:00:d6:ea:50:f3:e8: 84:55:6f:d0:7f:96:46:0a:9f:59:0a:4c:e9:71:22: d1:aa:e7:d3:ea:53:06:64:75:30:e6:40:aa:c8:92: bd:08:2d:f8:2e:11:70:77:6b:1c:a3:1c:44:d2:09: f5:74:70:24:10:98:6d:f7:f2:66:39:a3:a3:5a:60: 4d:a5:a5:c9:ca:fa:55:c9:00:76:1a:90:d2:1e:c8: 3e:b4:06:44:4e:d7:c3:96:9d:2e:0e:64:8d:55:d1: b6:3d:9f:c5:50:d1:e4:73:fe:a5:47:7e:9d:07:f3: 2f:84:c2:b6:b7:89:f7:4b:d3:bf:bf:85:de:59:66: 87:43:04:54:b7:a8:6a:a6:34:3a:4b:ae:b0:f0:af: c9:21:12:75:54:d8:c8:1a:f6:06:42:10:82:98:29: a3:9d:0a:df:50:4c:46:51:59:09:9d:a9:ca:c2:d4: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:57:D8:BC:CA:00:7C:F2:D0:58:18:0E:B2:37:52:9F:89:79:24:79 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.75.0/24 Signature Algorithm: sha256WithRSAEncryption 42:74:fc:9d:5b:94:a4:fb:85:1c:2c:91:7c:cb:40:71:8c:ca: 0e:73:ce:66:c8:07:b7:6a:f5:f5:be:55:f0:c3:f2:e7:66:c5: 41:00:87:82:5c:08:78:08:27:da:40:63:46:ca:04:bd:02:72: 77:31:cf:f3:7e:5f:22:59:bf:bd:c5:5b:0d:fd:3c:70:aa:0f: b4:18:1c:48:77:72:98:e3:da:dd:dc:ed:73:cb:f0:f1:4a:1c: bb:4e:ca:cc:06:7f:a0:7c:60:5f:06:7d:6f:54:a5:2d:43:32: 6b:e5:43:2a:e8:2d:42:b6:10:32:a1:cb:23:2c:54:50:4c:88: 3f:39:1f:35:6a:a6:23:79:7a:ac:26:30:d3:ee:19:86:b6:17: 04:71:d7:ee:60:1b:17:df:5c:d8:b2:41:31:07:54:ef:04:33: d4:03:be:e6:9d:24:9d:22:28:bf:de:a0:65:cf:be:92:2a:b1: 79:c1:12:2b:79:81:32:a6:db:83:a6:63:4f:31:11:c5:00:00: f8:75:77:da:e3:3e:a2:7d:84:14:18:64:06:63:f4:d5:2d:fc: ea:6f:1f:0c:9a:cb:d6:42:a0:18:60:5f:4a:0a:86:5a:a9:e1: 60:b0:e8:58:3b:68:eb:d9:0f:78:98:26:a4:68:11:75:82:80: 2b:76:e0:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EoqkI/55/I+r1rYBuY9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjU3ZDhiY2NhMDA3Y2YyZDA1ODE4MGViMjM3NTI5Zjg5NzkyNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSY+Hw2EFDFa+tZUxxdf6IIRuruX qhaxSDF1rio/EluTINPrcfpYc5gHZf7JK5jwGK8r9UUHV9QPuEJeZgf70oAM8vxF UAbmppPCs1pf7RzfYhoA1upQ8+iEVW/Qf5ZGCp9ZCkzpcSLRqufT6lMGZHUw5kCq yJK9CC34LhFwd2scoxxE0gn1dHAkEJht9/JmOaOjWmBNpaXJyvpVyQB2GpDSHsg+ tAZETtfDlp0uDmSNVdG2PZ/FUNHkc/6lR36dB/MvhMK2t4n3S9O/v4XeWWaHQwRU t6hqpjQ6S66w8K/JIRJ1VNjIGvYGQhCCmCmjnQrfUExGUVkJnanKwtQgbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9X2LzKAHzy0FgYDrI3Up+JeSR5MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvbjFmWXZNb0FmUExRV0JnT3NqZFNuNGw1SkhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/tLMA0G CSqGSIb3DQEBCwUAA4IBAQBCdPydW5Sk+4UcLJF8y0BxjMoOc85myAe3avX1vlXw w/LnZsVBAIeCXAh4CCfaQGNGygS9AnJ3Mc/zfl8iWb+9xVsN/Txwqg+0GBxId3KY 49rd3O1zy/DxShy7TsrMBn+gfGBfBn1vVKUtQzJr5UMq6C1CthAyocsjLFRQTIg/ OR81aqYjeXqsJjDT7hmGthcEcdfuYBsX31zYskExB1TvBDPUA77mnSSdIii/3qBl z76SKrF5wRIreYEyptuDpmNPMRHFAAD4dXfa4z6ifYQUGGQGY/TVLfzqbx8MmsvW QqAYYF9KCoZaqeFgsOhYO2jr2Q94mCakaBF1goArduBt -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:13 2026 by rpki-client