This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-ceQIhZuLQQYzZ-brwoEiitP1JQ.roa File: 1-ceQIhZuLQQYzZ-brwoEiitP1JQ.roa (raw, json) Hash identifier: 4/vqOYJ09YMQjZi0CjvBP78YVEnT9L3ZWTemjU+X7Bc= Subject key identifier: F9:C7:90:22:16:6E:2D:04:18:CD:9F:9B:AF:0A:04:8A:2B:4F:D4:94 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F849A8FE704B4537F69A08ACB6324F5 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-ceQIhZuLQQYzZ-brwoEiitP1JQ.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41177 IP address blocks: 146.120.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9a:8f:e7:04:b4:53:7f:69:a0:8a:cb:63:24:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c79022166e2d0418cd9f9baf0a048a2b4fd494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:38:21:21:c0:70:79:65:fc:11:d6:fe:cd: 2e:46:35:c3:e4:86:6c:ee:6d:5c:68:67:ed:b1:5e: a6:95:dc:98:d1:83:f0:a6:f1:7b:ef:6a:d0:6e:3b: e0:3f:15:26:c0:28:37:ad:a0:f4:18:0f:00:cc:4b: 4e:40:db:8a:2a:0e:5c:6a:f9:9e:6c:f3:c7:45:07: 44:ec:ec:70:df:4e:ff:2d:ee:cb:c8:0c:80:7a:71: 19:3d:e4:08:a8:ed:e2:87:c5:5e:3d:89:38:85:f6: 81:03:c9:c4:bd:ce:56:22:37:00:10:33:b8:5c:aa: 07:c9:20:13:f6:dd:7c:3e:94:ca:b8:30:02:24:e9: 75:2b:17:3c:33:6c:e0:54:ec:64:db:33:21:8d:e5: 84:ba:1c:6a:87:2a:0d:e8:07:3f:00:17:ef:04:19: 51:24:91:a3:b1:8e:60:e4:68:90:2a:eb:16:bc:2d: 33:4c:98:df:38:3e:b7:d1:52:91:8e:e3:fc:76:4f: d2:6f:09:3a:13:94:5f:3e:51:f2:a3:eb:9d:fa:c8: aa:e4:44:09:33:ff:3a:07:ea:08:c5:db:3a:6c:cc: 33:b6:1d:db:80:4b:68:9b:3c:76:9f:ae:c6:57:fb: 7f:66:4a:d4:23:0a:da:9a:ad:14:41:a9:39:4c:bc: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C7:90:22:16:6E:2D:04:18:CD:9F:9B:AF:0A:04:8A:2B:4F:D4:94 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-ceQIhZuLQQYzZ-brwoEiitP1JQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.102.0/23 Signature Algorithm: sha256WithRSAEncryption 30:b4:26:3d:2e:2f:43:2a:c2:9b:bc:08:17:c7:aa:48:68:84: d0:a7:58:10:e2:b4:6d:bf:ca:bd:28:8b:9a:cb:e0:f6:2f:93: fa:fe:b1:dc:08:14:7a:37:93:f2:7a:4c:66:62:dd:71:e4:ed: 54:2a:5e:25:64:8b:4e:5d:92:3d:8b:29:f3:d9:8c:ce:ff:e5: a9:9b:44:27:c5:8d:06:68:2f:71:66:de:92:2b:cc:30:2f:0e: 0a:94:ac:17:d2:b5:cb:8a:97:b4:b4:94:3f:d6:b8:c1:d9:57: 89:a7:92:05:90:15:75:f4:77:4f:33:8b:16:9b:0d:15:e8:80: 08:bd:36:ee:4a:25:6a:3e:4b:21:bd:84:09:c4:b1:38:b8:62: 3e:72:56:04:a0:5a:e6:19:51:eb:26:ca:5b:78:d7:26:1e:6d: d8:51:cb:56:52:5b:c5:99:0b:37:7e:27:ff:dd:3f:dc:7f:05: 07:e2:bd:58:b0:41:af:84:c9:6b:74:25:11:45:55:2d:11:bc: ae:e0:3b:1f:9f:dd:a1:5e:4c:62:5c:c4:67:23:0d:c9:ea:6b: 58:13:3c:2d:c0:d6:66:21:49:f7:d3:dc:51:95:6c:8b:73:14: 0a:9f:b8:d1:b0:99:f3:9a:87:df:d1:19:ec:16:8c:76:9f:a9: 63:84:fc:c7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hJqP5wS0U39poIrLYyT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWM3OTAyMjE2NmUyZDA0MThjZDlmOWJhZjBhMDQ4YTJiNGZkNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX04ISHAcHll/BHW/s0uRjXD5IZs 7m1caGftsV6mldyY0YPwpvF772rQbjvgPxUmwCg3raD0GA8AzEtOQNuKKg5cavme bPPHRQdE7Oxw307/Le7LyAyAenEZPeQIqO3ih8VePYk4hfaBA8nEvc5WIjcAEDO4 XKoHySAT9t18PpTKuDACJOl1Kxc8M2zgVOxk2zMhjeWEuhxqhyoN6Ac/ABfvBBlR JJGjsY5g5GiQKusWvC0zTJjfOD630VKRjuP8dk/Sbwk6E5RfPlHyo+ud+siq5EQJ M/86B+oIxds6bMwzth3bgEtomzx2n67GV/t/ZkrUIwramq0UQak5TLySkQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnHkCIWbi0EGM2fm68KBIorT9SUMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMS1jZVFJaFp1TFFRWXpaLWJyd29FaWl0UDFKUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJl ZC8xL2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZJ4ZjAN BgkqhkiG9w0BAQsFAAOCAQEAMLQmPS4vQyrCm7wIF8eqSGiE0KdYEOK0bb/KvSiL msvg9i+T+v6x3AgUejeT8npMZmLdceTtVCpeJWSLTl2SPYsp89mMzv/lqZtEJ8WN BmgvcWbekivMMC8OCpSsF9K1y4qXtLSUP9a4wdlXiaeSBZAVdfR3TzOLFpsNFeiA CL027kolaj5LIb2ECcSxOLhiPnJWBKBa5hlR6ybKW3jXJh5t2FHLVlJbxZkLN34n /90/3H8FB+K9WLBBr4TJa3QlEUVVLRG8ruA7H5/doV5MYlzEZyMNyeprWBM8LcDW ZiFJ99PcUZVsi3MUCp+40bCZ85qH39EZ7BaMdp+pY4T8xw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:40 2026 by rpki-client