This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/1-RxvuJO_jTchUynlUq2UfaQo14s.roa File: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (raw, json) Hash identifier: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE= Subject key identifier: F9:1C:6F:B8:93:BF:8D:37:21:53:29:E5:52:AD:94:7D:A4:28:D7:8B Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B7BA36D001774DBCAD286FBAF857217E9 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/1-RxvuJO_jTchUynlUq2UfaQo14s.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48276 IP address blocks: 176.96.186.0/24 maxlen: 24 176.96.187.0/24 maxlen: 24 176.96.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6d:00:17:74:db:ca:d2:86:fb:af:85:72:17:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f91c6fb893bf8d37215329e552ad947da428d78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:43:4f:48:be:58:7f:81:5c:5b:03:a0:6b: 11:7d:d7:57:b8:63:5b:e0:70:87:8a:b7:2d:54:9f: b4:ee:bd:b5:3c:28:73:85:af:11:77:31:d9:52:be: c3:82:3b:aa:14:cd:90:61:e4:b7:4c:a5:26:9c:11: 9e:00:a5:44:bb:14:6c:55:62:4f:4e:cf:35:b4:a8: f4:44:ac:97:be:ce:30:11:c8:09:c9:d8:f1:eb:21: d7:b2:bf:56:62:a2:b8:5d:dd:a5:d6:bc:5e:2f:f3: 82:1c:31:e4:70:73:de:2e:eb:b9:b1:ee:0e:1f:b2: 35:46:6e:61:7e:de:24:9e:14:82:3b:83:ff:39:92: f9:52:8e:6a:4f:25:24:17:f5:45:ea:87:68:77:c0: ed:5c:cb:18:44:06:31:00:46:c0:15:c9:78:1c:2a: f8:db:59:67:6a:80:c3:bd:b8:22:83:cc:06:c7:b8: 44:d1:58:4c:1c:a8:a7:e2:fe:8e:14:c8:15:f7:a2: ab:53:ad:32:28:9c:97:c0:b4:12:a4:71:b7:9d:e5: 26:42:1e:2d:e6:8e:e9:b4:8e:4c:04:9a:dc:f2:58: 05:36:f5:e3:35:98:f8:f8:4e:93:ca:e3:1b:04:53: 7f:1b:6a:27:f8:11:93:53:73:82:03:39:2e:71:88: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:6F:B8:93:BF:8D:37:21:53:29:E5:52:AD:94:7D:A4:28:D7:8B X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/1-RxvuJO_jTchUynlUq2UfaQo14s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.96.186.0-176.96.188.255 Signature Algorithm: sha256WithRSAEncryption 59:37:65:d0:9e:2e:ed:d5:a8:a5:7a:f7:7e:36:a7:86:b7:36: ac:68:b0:96:53:64:7e:2c:eb:c0:55:45:3f:af:95:97:4a:dd: da:79:cf:bb:90:78:ad:87:e9:37:6b:c1:54:0b:d2:36:cf:d0: e0:d6:5f:ce:19:b0:3f:de:33:3d:0f:01:bb:5e:d2:a3:15:76: 77:22:68:ff:a7:26:2e:20:92:64:0d:9b:b8:62:65:aa:25:86: e4:b9:8b:90:19:9d:00:c7:c6:64:d1:0b:76:e0:4c:92:c4:42: 96:59:5a:86:90:c7:c5:f1:07:cc:71:81:f9:1e:d7:19:aa:91: 91:0f:63:2b:42:c1:86:0f:c8:d2:1d:f9:02:77:b0:fc:6a:ec: 3c:20:e0:24:67:c1:75:e4:18:0a:07:1a:f7:e6:b4:f5:82:bd: 9d:d5:2f:79:39:b8:2b:0f:c9:d0:bb:45:5c:bf:74:d1:6c:c7: d2:46:38:ac:d6:ff:9b:2c:24:d6:38:be:53:5e:dc:45:cd:79: 0c:a3:b7:6d:80:9b:ff:9a:84:81:a1:fc:49:8f:14:fb:b7:40: 4b:11:b0:bc:84:05:4b:72:e2:be:2f:04:74:db:a1:01:d3:f8: ca:c7:3e:0c:28:1e:ac:67:5b:71:82:46:ab:62:68:92:21:ce: ed:8a:64:d2 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt7o20AF3TbytKG+6+FchfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTFjNmZiODkzYmY4ZDM3MjE1MzI5ZTU1MmFkOTQ3ZGE0MjhkNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF5DT0i+WH+BXFsDoGsRfddXuGNb 4HCHirctVJ+07r21PChzha8RdzHZUr7DgjuqFM2QYeS3TKUmnBGeAKVEuxRsVWJP Ts81tKj0RKyXvs4wEcgJydjx6yHXsr9WYqK4Xd2l1rxeL/OCHDHkcHPeLuu5se4O H7I1Rm5hft4knhSCO4P/OZL5Uo5qTyUkF/VF6odod8DtXMsYRAYxAEbAFcl4HCr4 21lnaoDDvbgig8wGx7hE0VhMHKin4v6OFMgV96KrU60yKJyXwLQSpHG3neUmQh4t 5o7ptI5MBJrc8lgFNvXjNZj4+E6TyuMbBFN/G2on+BGTU3OCAzkucYhgwQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPkcb7iTv403IVMp5VKtlH2kKNeLMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvMS1SeHZ1Sk9falRjaFV5bmxVcTJVZmFRbzE0cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvNTJhODhmLWU5YTItNDg1MS05MTQ4LWZlZThmMzc5MDU2 Ny8xL0FWdHRGWmFzQlFHbkdqazBSd1VhWXY4ZDJoWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQBsGC6 AwQAsGC8MA0GCSqGSIb3DQEBCwUAA4IBAQBZN2XQni7t1ailevd+NqeGtzasaLCW U2R+LOvAVUU/r5WXSt3aec+7kHith+k3a8FUC9I2z9Dg1l/OGbA/3jM9DwG7XtKj FXZ3Imj/pyYuIJJkDZu4YmWqJYbkuYuQGZ0Ax8Zk0Qt24EySxEKWWVqGkMfF8QfM cYH5HtcZqpGRD2MrQsGGD8jSHfkCd7D8auw8IOAkZ8F15BgKBxr35rT1gr2d1S95 ObgrD8nQu0Vcv3TRbMfSRjis1v+bLCTWOL5TXtxFzXkMo7dtgJv/moSBofxJjxT7 t0BLEbC8hAVLcuK+LwR026EB0/jKxz4MKB6sZ1txgkarYmiSIc7timTS -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:13 2026 by rpki-client