This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-5mFxU8h56byMhZM8-Je6kvCy7s.roa File: 1-5mFxU8h56byMhZM8-Je6kvCy7s.roa (raw, json) Hash identifier: kQt3rvWDYNcHsj3Vp1AA9zRf/xV6fpa7HA53GXImia0= Subject key identifier: FB:99:85:C5:4F:21:E7:A6:F2:32:16:4C:F3:E2:5E:EA:4B:C2:CB:BB Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F2A380AACE57F9883278BA521900 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-5mFxU8h56byMhZM8-Je6kvCy7s.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202533 IP address blocks: 146.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f2:a3:80:aa:ce:57:f9:88:32:78:ba:52:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb9985c54f21e7a6f232164cf3e25eea4bc2cbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:da:eb:05:bd:a6:88:a2:5b:b9:48:06:e3: 73:1a:c7:f0:8e:f4:94:41:3f:b5:70:97:4e:27:d4: 15:3d:be:7e:dc:30:b0:6d:46:4f:22:39:e0:a8:2f: 3e:55:a2:be:d5:d3:3c:b3:88:f5:26:40:00:64:66: 91:09:da:1f:b5:df:90:95:4c:28:9e:6e:da:71:1e: 77:a3:08:dc:6c:38:bf:19:a1:3d:ee:61:10:9e:9d: 1e:82:df:27:cc:12:cc:a9:80:75:5f:bd:91:70:08: 77:bd:5e:0e:cb:b3:35:16:e9:b1:68:11:6f:09:b3: 11:65:61:d2:29:fe:86:18:85:21:b1:2d:46:c1:d9: 75:76:2a:e9:25:f2:55:bd:2b:8a:a3:99:42:a6:d7: b7:b0:5e:d0:d7:cf:d6:bf:4d:e0:9c:3c:17:09:ff: 56:fa:17:43:e3:ee:3b:7a:b8:70:2f:2e:11:b9:de: 05:b5:db:5a:4f:93:19:1f:a4:bf:5b:4a:e5:7e:8f: 31:68:55:f2:40:72:48:e6:de:3a:6e:fe:cb:47:df: fc:bd:b5:0b:e3:e2:94:4e:e4:2e:6b:4b:63:ec:e8: a9:4f:e9:51:7d:0e:1d:af:5a:aa:5b:da:25:2c:bf: ae:e0:20:b5:b2:8d:4f:39:3d:3e:c0:df:7e:4f:f0: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:99:85:C5:4F:21:E7:A6:F2:32:16:4C:F3:E2:5E:EA:4B:C2:CB:BB X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-5mFxU8h56byMhZM8-Je6kvCy7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.20.0/24 Signature Algorithm: sha256WithRSAEncryption 36:42:ad:8b:45:b9:aa:79:0c:af:73:5a:ff:70:9a:8a:30:e6: e7:5b:13:a9:69:c0:76:2e:18:08:43:13:90:22:c1:7d:56:66: 8d:94:9d:ae:1a:29:f4:0b:4d:56:59:ef:4b:a3:b4:bc:a4:27: c6:18:bb:6a:a7:f1:00:75:3e:14:8c:f7:24:b6:c0:8b:c7:32: f3:28:09:df:35:d2:60:e3:b4:c2:33:ed:51:74:9c:93:a9:5d: 97:8a:1d:99:3a:44:91:8b:c3:aa:c4:af:ad:dd:84:c7:c8:48: 35:50:55:25:8d:22:d3:dc:08:5c:f8:f1:14:1b:ff:84:7c:14: 29:1a:47:cb:6b:d5:dd:19:c2:a7:60:c8:6f:6b:ae:13:ad:5c: 43:33:64:7a:4f:5a:fd:7d:e3:61:2a:ea:36:a7:69:4d:fa:60: 3b:7d:fd:9c:1b:a7:d9:11:fb:6e:a5:ac:10:65:7a:50:a0:2f: 69:68:75:ae:9d:81:c9:f4:02:8d:46:29:9d:c3:79:76:1a:01: 18:70:c7:09:14:7f:49:08:f2:f5:88:c9:fc:3f:92:59:fe:b5: b1:4e:ec:b9:fb:51:e7:d1:67:0f:87:f2:97:9a:44:4f:26:92: 9a:b7:22:e0:31:17:bc:d7:0e:2e:74:97:cd:64:7e:3a:a7:39: 36:5f:4b:91 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hPKjgKrOV/mIMni6UhkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjk5ODVjNTRmMjFlN2E2ZjIzMjE2NGNmM2UyNWVlYTRiYzJjYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCza6wW9poiiW7lIBuNzGsfwjvSU QT+1cJdOJ9QVPb5+3DCwbUZPIjngqC8+VaK+1dM8s4j1JkAAZGaRCdoftd+QlUwo nm7acR53owjcbDi/GaE97mEQnp0egt8nzBLMqYB1X72RcAh3vV4Oy7M1FumxaBFv CbMRZWHSKf6GGIUhsS1Gwdl1dirpJfJVvSuKo5lCpte3sF7Q18/Wv03gnDwXCf9W +hdD4+47erhwLy4Rud4FtdtaT5MZH6S/W0rlfo8xaFXyQHJI5t46bv7LR9/8vbUL 4+KUTuQua0tj7OipT+lRfQ4dr1qqW9olLL+u4CC1so1POT0+wN9+T/Cm5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuZhcVPIeem8jIWTPPiXupLwsu7MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMS01bUZ4VThoNTZieU1oWk04LUplNmt2Q3k3cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJl ZC8xL2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJJ4FDAN BgkqhkiG9w0BAQsFAAOCAQEANkKti0W5qnkMr3Na/3CaijDm51sTqWnAdi4YCEMT kCLBfVZmjZSdrhop9AtNVlnvS6O0vKQnxhi7aqfxAHU+FIz3JLbAi8cy8ygJ3zXS YOO0wjPtUXSck6ldl4odmTpEkYvDqsSvrd2Ex8hINVBVJY0i09wIXPjxFBv/hHwU KRpHy2vV3RnCp2DIb2uuE61cQzNkek9a/X3jYSrqNqdpTfpgO339nBun2RH7bqWs EGV6UKAvaWh1rp2ByfQCjUYpncN5dhoBGHDHCRR/SQjy9YjJ/D+SWf61sU7suftR 59FnD4fyl5pETyaSmrci4DEXvNcOLnSXzWR+Oqc5Nl9LkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:54 2026 by rpki-client