This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa File: 1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa (raw, json) Hash identifier: sllzVYP/WiMPElY3BFy/EfBmKfiCPi4PRAGGrxfDP7g= Subject key identifier: FA:4C:49:56:B6:64:51:B7:25:32:9E:A4:4A:9B:DF:35:91:2D:D5:53 Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019B7BA378E2FB1C0218C1EC8859CA5DE13F Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa Signing time: Thu 01 Jan 2026 22:17:49 +0000 ROA not before: Thu 01 Jan 2026 22:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210318 IP address blocks: 82.146.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:78:e2:fb:1c:02:18:c1:ec:88:59:ca:5d:e1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa4c4956b66451b725329ea44a9bdf35912dd553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:3a:ee:9d:56:4a:96:c6:65:17:38:e1:cf: fd:b2:55:fa:56:99:c1:5c:98:5a:39:bc:af:a0:b4: 76:67:bd:c7:70:5e:c7:ea:74:48:7b:15:10:58:c8: 76:ab:3c:fe:fb:f3:fc:65:fe:7a:9c:a8:e1:a0:c1: 7f:32:b4:fe:41:9b:08:76:38:f2:a1:1a:b7:cb:a9: 6b:97:05:5a:54:49:e5:43:f1:5e:9a:06:1e:a3:1d: 93:fd:0a:6a:74:b9:3b:0a:0a:29:f0:74:b9:e3:c5: 61:3d:de:c7:da:39:a9:cc:2b:ce:89:ba:f3:71:c0: b6:f7:ed:6e:6d:57:b3:29:6a:bc:90:51:6a:20:58: ba:c5:61:fc:82:26:5e:27:17:02:c6:a8:1b:ce:01: f3:f3:b9:49:99:b7:1f:ef:e2:90:7f:bd:d2:73:75: e5:59:41:2d:b1:b4:62:0a:61:fb:8d:a9:45:19:16: b7:46:09:40:f9:6b:5d:71:ba:cd:42:95:92:b9:89: 91:ba:b0:6d:bf:3e:eb:56:dc:96:a7:95:b4:58:ea: df:4a:ed:e0:7b:d7:60:d0:67:05:f6:c6:c3:2c:3a: 49:96:cf:69:4a:f7:5e:c9:16:00:2b:48:35:d2:12: 66:b1:b2:89:ac:be:4a:96:54:57:f1:cc:d6:88:24: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:49:56:B6:64:51:B7:25:32:9E:A4:4A:9B:DF:35:91:2D:D5:53 X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.186.0/24 Signature Algorithm: sha256WithRSAEncryption c7:01:3c:8c:50:6b:c6:88:91:df:fc:09:7e:56:e2:b3:00:59: 6e:5e:27:c7:18:33:40:d7:3a:f9:07:f6:f2:38:c3:ed:08:dc: 95:64:1e:76:e0:81:f9:07:bc:8a:f0:14:aa:a8:c8:83:80:a2: ff:03:26:69:89:41:cb:80:1b:1d:c5:55:d0:7e:1b:4e:ea:82: a4:4f:1b:c3:38:61:52:9e:f9:62:8b:2e:9c:c7:3d:a9:cc:65: f2:6c:5e:ab:cc:4e:ec:1b:20:87:79:3c:2f:65:dd:65:27:8b: 8b:fa:1e:ba:ba:a3:12:21:59:0c:82:02:56:c9:9e:c5:b8:ab: 07:68:36:df:0b:58:85:04:1b:f4:8a:9b:10:66:93:bd:5d:f2: 1d:19:02:83:26:fc:2f:09:a1:7b:16:8e:0b:09:c2:f0:36:27: f4:f6:ae:32:4e:63:c9:6d:42:7f:d6:1f:09:de:7b:71:d0:ae: 86:6d:f8:27:c1:a7:05:e3:3c:89:10:4e:28:0e:ee:e0:84:f2: 63:2d:f9:fc:3e:2f:2f:ba:68:c8:aa:c9:17:b4:9e:91:71:ac: ea:0c:33:9a:fd:63:59:49:c1:49:d8:c2:01:5b:c1:ff:88:9b: c2:3d:b7:6c:3a:2c:3a:91:36:f0:15:7a:7e:a6:a2:65:e3:16: d3:20:c5:46 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7o3ji+xwCGMHsiFnKXeE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTRjNDk1NmI2NjQ1MWI3MjUzMjllYTQ0YTliZGYzNTkxMmRkNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPw67p1WSpbGZRc44c/9slX6VpnB XJhaObyvoLR2Z73HcF7H6nRIexUQWMh2qzz++/P8Zf56nKjhoMF/MrT+QZsIdjjy oRq3y6lrlwVaVEnlQ/FemgYeox2T/QpqdLk7Cgop8HS548VhPd7H2jmpzCvOibrz ccC29+1ubVezKWq8kFFqIFi6xWH8giZeJxcCxqgbzgHz87lJmbcf7+KQf73Sc3Xl WUEtsbRiCmH7jalFGRa3RglA+WtdcbrNQpWSuYmRurBtvz7rVtyWp5W0WOrfSu3g e9dg0GcF9sbDLDpJls9pSvdeyRYAK0g10hJmsbKJrL5KllRX8czWiCTCqwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPpMSVa2ZFG3JTKepEqb3zWRLdVTMB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvMS1reEpWclprVWJjbE1wNmtTcHZmTlpFdDFWTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvMTZiMDJjLTgzM2EtNDhmMC1iYTU2LWFkNmYwYmY4ODQz OC8xL0VzaUpsa3MxdFJ1bzVlWjVvVnNab3g4VE5YZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFKSujAN BgkqhkiG9w0BAQsFAAOCAQEAxwE8jFBrxoiR3/wJflbiswBZbl4nxxgzQNc6+Qf2 8jjD7QjclWQeduCB+Qe8ivAUqqjIg4Ci/wMmaYlBy4AbHcVV0H4bTuqCpE8bwzhh Up75YosunMc9qcxl8mxeq8xO7Bsgh3k8L2XdZSeLi/oeurqjEiFZDIICVsmexbir B2g23wtYhQQb9IqbEGaTvV3yHRkCgyb8LwmhexaOCwnC8DYn9PauMk5jyW1Cf9Yf Cd57cdCuhm34J8GnBeM8iRBOKA7u4ITyYy35/D4vL7poyKrJF7SekXGs6gwzmv1j WUnBSdjCAVvB/4ibwj23bDosOpE28BV6fqaiZeMW0yDFRg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:48 2026 by rpki-client