This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-oGEqahOFkNkQIRe_6IUZEcES3M.roa File: 1-oGEqahOFkNkQIRe_6IUZEcES3M.roa (raw, json) Hash identifier: MYJXd+XG0CeXetoUYxUZS4E3V5LgJZv3JuaGKGF3UM8= Subject key identifier: FA:81:84:A9:A8:4E:16:43:64:40:84:5E:FF:A2:14:64:47:04:4B:73 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78344EF862D2CDF1C88DCFB88085AACC Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-oGEqahOFkNkQIRe_6IUZEcES3M.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47553 IP address blocks: 194.104.145.0/24 maxlen: 24 194.114.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4e:f8:62:d2:cd:f1:c8:8d:cf:b8:80:85:aa:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8184a9a84e16436440845effa2146447044b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:2f:69:dc:98:ca:de:db:dd:0c:00:4a:17: 2e:7c:35:30:15:82:08:96:95:b7:0f:8f:6b:85:ea: 6d:cd:9e:ce:60:0b:91:e0:ac:d7:4d:ee:d1:94:26: 15:f1:e1:9c:43:91:8e:5c:45:26:09:69:6a:1c:f5: fb:05:07:87:d4:58:67:f1:8d:ce:85:df:04:1f:03: 35:32:a2:38:e6:41:63:9c:8f:27:81:5a:cf:cd:79: 58:c8:f7:8f:22:f3:1f:8b:7c:78:ff:9a:d0:86:2d: b2:52:98:f7:e9:97:3a:04:48:76:f9:50:59:d6:ba: a1:33:fd:0a:d4:69:f9:ac:43:b7:ae:8d:4a:f1:26: b3:89:2b:04:1f:34:52:df:49:52:e0:f7:18:13:27: 2b:a7:76:2d:9f:b9:fb:1b:2c:4a:d1:99:99:ed:34: 0b:e4:de:d6:c7:e0:ce:10:06:ee:77:ad:75:e9:97: d2:25:3d:ed:1f:0d:9c:e5:36:35:1c:80:b6:ec:57: c5:e3:e2:b2:00:47:37:28:22:67:99:19:d8:23:12: a0:11:50:a1:a6:53:80:ab:99:7d:a0:e1:68:4a:47: 77:fb:cc:13:76:4d:8f:c5:7d:d5:9a:c7:7b:8b:9c: 4c:a3:a4:2c:39:ce:c7:9a:9e:a3:77:2e:e0:81:94: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:81:84:A9:A8:4E:16:43:64:40:84:5E:FF:A2:14:64:47:04:4B:73 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-oGEqahOFkNkQIRe_6IUZEcES3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.145.0/24 194.114.137.0/24 Signature Algorithm: sha256WithRSAEncryption 51:88:2b:76:bc:ec:cb:8b:17:38:96:35:2d:47:73:1b:3d:9a: 36:07:ab:38:12:3c:f4:f4:84:d3:4c:ed:b0:dd:05:50:dd:32: a4:43:ea:b9:b9:1a:d9:c7:f5:0b:88:5d:89:6c:e2:5c:5e:49: 44:b8:2a:84:3f:03:e9:ef:20:d4:66:21:be:3a:83:13:17:29: 7f:78:bf:4c:ad:82:1c:68:7b:bb:60:e5:5b:96:f9:5a:cb:f9: e3:86:b8:93:ac:24:a3:b3:ea:71:55:a3:ae:a6:33:20:04:7e: b8:ef:d8:9e:81:29:57:a0:6d:83:ca:58:52:92:02:fc:20:d7: 54:fe:61:c6:2c:ac:8c:8e:85:23:8f:c5:5c:de:a8:b8:98:b1: d3:77:15:5e:e8:13:d3:3a:67:ed:8b:da:77:7e:4c:08:1a:b2: bc:aa:2d:fc:7a:fb:08:f9:a9:65:89:5c:30:f2:86:80:7f:ee: bf:fe:ca:cb:a1:18:29:05:0a:20:32:cd:e0:8d:ee:cf:70:ab: 50:3c:78:c5:db:1d:aa:23:bd:8f:bb:c6:ab:8c:5e:b4:13:b8: 44:d5:c2:d2:03:79:4b:90:f3:bf:61:c9:00:19:c4:10:24:65: 92:2b:d4:93:47:5d:66:77:9e:97:54:81:6e:e1:3c:42:a3:e6: b2:d1:1b:bf -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt4NE74YtLN8ciNz7iAharMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTgxODRhOWE4NGUxNjQzNjQ0MDg0NWVmZmEyMTQ2NDQ3MDQ0YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA4vadyYyt7b3QwAShcufDUwFYII lpW3D49rheptzZ7OYAuR4KzXTe7RlCYV8eGcQ5GOXEUmCWlqHPX7BQeH1Fhn8Y3O hd8EHwM1MqI45kFjnI8ngVrPzXlYyPePIvMfi3x4/5rQhi2yUpj36Zc6BEh2+VBZ 1rqhM/0K1Gn5rEO3ro1K8SaziSsEHzRS30lS4PcYEycrp3Ytn7n7GyxK0ZmZ7TQL 5N7Wx+DOEAbud6116ZfSJT3tHw2c5TY1HIC27FfF4+KyAEc3KCJnmRnYIxKgEVCh plOAq5l9oOFoSkd3+8wTdk2PxX3Vmsd7i5xMo6QsOc7Hmp6jdy7ggZSeswIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPqBhKmoThZDZECEXv+iFGRHBEtzMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvMS1vR0VxYWhPRmtOa1FJUmVfNklVWkVjRVMzTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRl MS8xL3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMJokQME AMJyiTANBgkqhkiG9w0BAQsFAAOCAQEAUYgrdrzsy4sXOJY1LUdzGz2aNgerOBI8 9PSE00ztsN0FUN0ypEPqubka2cf1C4hdiWziXF5JRLgqhD8D6e8g1GYhvjqDExcp f3i/TK2CHGh7u2DlW5b5Wsv544a4k6wko7PqcVWjrqYzIAR+uO/YnoEpV6Btg8pY UpIC/CDXVP5hxiysjI6FI4/FXN6ouJix03cVXugT0zpn7Yvad35MCBqyvKot/Hr7 CPmpZYlcMPKGgH/uv/7Ky6EYKQUKIDLN4I3uz3CrUDx4xdsdqiO9j7vGq4xetBO4 RNXC0gN5S5Dzv2HJABnEECRlkivUk0ddZneel1SBbuE8QqPmstEbvw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:49 2026 by rpki-client