This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/1E19BTK_LA4zeZPYYVdJPpynxg0.roa File: 1E19BTK_LA4zeZPYYVdJPpynxg0.roa (raw, json) Hash identifier: h1F2WE3RncgoMjYiAU0Eq6HKlYFOTGvsztN7HNFFiTg= Subject key identifier: D4:4D:7D:05:32:BF:2C:0E:33:79:93:D8:61:57:49:3E:9C:A7:C6:0D Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e Certificate serial: 019B7B363C56371008DF1F16B5C22A04A54A Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/1E19BTK_LA4zeZPYYVdJPpynxg0.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57167 IP address blocks: 46.254.107.0/24 maxlen: 24 195.14.122.0/24 maxlen: 24 2a11:b100:b100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3c:56:37:10:08:df:1f:16:b5:c2:2a:04:a5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d44d7d0532bf2c0e337993d86157493e9ca7c60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:89:c6:57:f9:c3:6e:6a:5f:dc:50:8e:90: ed:70:16:cd:00:a6:7c:2d:d6:1c:90:eb:d7:0f:1e: d8:62:dc:4a:77:f6:17:0d:98:b3:ce:e8:4c:39:7b: 13:e0:cd:42:5d:0b:9a:d0:c6:3b:a2:0f:ce:12:ba: 8a:46:63:f2:cb:9f:d0:59:1c:1b:6a:38:95:7a:dc: ee:b5:5b:bc:52:6f:7d:da:da:9d:09:0c:c1:97:38: 69:1d:8b:7a:fa:ea:55:6f:4b:a2:47:f9:bc:93:65: 56:ba:34:03:c9:bf:11:e4:da:1f:81:5a:5e:52:a1: 6c:c9:e0:90:b3:f0:51:38:10:47:88:46:a0:f1:6c: 65:45:0b:8b:7f:9f:82:50:ac:9c:e5:ea:4c:9f:89: 68:63:c3:a9:ef:01:51:5b:58:66:20:d6:61:56:7c: 79:05:1f:9c:88:b7:0b:33:ac:c3:d7:49:82:9e:da: 32:50:ca:16:7d:b1:d8:9f:f2:6c:bc:47:a1:ec:99: 5f:04:25:ed:b7:87:95:50:57:6b:87:16:e8:bc:9e: 22:e6:46:01:de:a5:18:94:10:67:72:b6:36:2c:29: 63:de:a9:32:20:4a:89:50:12:c9:19:30:6b:68:5f: bc:89:90:a4:c5:c7:46:52:d3:2e:b6:ac:a4:60:a3: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4D:7D:05:32:BF:2C:0E:33:79:93:D8:61:57:49:3E:9C:A7:C6:0D X509v3 Authority Key Identifier: keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/1E19BTK_LA4zeZPYYVdJPpynxg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.107.0/24 195.14.122.0/24 IPv6: 2a11:b100:b100::/48 Signature Algorithm: sha256WithRSAEncryption 56:5e:c6:41:7f:56:8a:64:d7:b7:4d:6d:52:65:43:4e:f6:f4: 71:fa:d6:56:a7:c6:ed:87:19:f6:c8:2f:bc:7e:03:55:30:45: f6:f3:7e:f4:77:a5:74:1c:7e:fc:83:8b:36:7f:61:c7:15:d9: 97:36:b7:7a:eb:34:e0:f9:2b:de:bd:11:e9:fa:c0:cc:1a:a1: 2d:ce:f5:c5:7b:09:fe:b5:de:ec:85:eb:65:84:f1:c0:6a:ce: 2c:ad:2b:62:76:72:be:ad:d3:3e:9e:63:4e:eb:ce:20:f1:d4: e8:df:e7:65:2d:63:27:bc:c0:14:76:f7:24:96:a6:37:c8:d3: ab:2d:56:34:a4:48:a3:91:be:7b:d0:c8:9b:56:6a:3e:30:0b: 63:32:d3:79:ac:2d:f9:e9:b3:a0:9c:23:f9:3d:c3:9a:f3:6d: 8e:a6:5f:4f:6b:35:f4:bd:20:4f:a3:ca:b9:da:10:d0:b5:0d: 56:23:b7:29:02:67:fd:3d:90:63:9a:a6:47:2e:44:63:50:2e: e8:3e:9b:3b:84:fb:9f:31:4d:30:e6:54:a9:63:4e:dd:7c:99: e7:85:aa:78:a9:f2:c9:9c:5a:d4:6d:c9:68:08:bc:c0:88:c2: 0a:61:9c:b6:11:ad:4b:1d:c7:2b:02:9e:cf:db:af:e3:b1:75: 82:e4:14:85 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7NjxWNxAI3x8WtcIqBKVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTk0NTY4NjE4ODk4YTlmYjcyMGFlMDliZWQwZWQxYmU0 Zjg1N2UwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDRkN2QwNTMyYmYyYzBlMzM3OTkzZDg2MTU3NDkzZTljYTdjNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F6Jxlf5w25qX9xQjpDtcBbNAKZ8 LdYckOvXDx7YYtxKd/YXDZizzuhMOXsT4M1CXQua0MY7og/OErqKRmPyy5/QWRwb ajiVetzutVu8Um992tqdCQzBlzhpHYt6+upVb0uiR/m8k2VWujQDyb8R5NofgVpe UqFsyeCQs/BROBBHiEag8WxlRQuLf5+CUKyc5epMn4loY8Op7wFRW1hmINZhVnx5 BR+ciLcLM6zD10mCntoyUMoWfbHYn/JsvEeh7JlfBCXtt4eVUFdrhxbovJ4i5kYB 3qUYlBBncrY2LClj3qkyIEqJUBLJGTBraF+8iZCkxcdGUtMutqykYKMICwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNRNfQUyvywOM3mT2GFXST6cp8YNMB8GA1UdIwQY MBaAFAdZRWhhiJip+3IK4JvtDtG+T4V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgt MWVjY2JlNjdjNjYxLzEvMUUxOUJUS19MQTR6ZVpQWVlWZEpQcHlueGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgtMWVjY2JlNjdjNjYx LzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALv5rAwQA ww56MA8EAgACMAkDBwAqEbEAsQAwDQYJKoZIhvcNAQELBQADggEBAFZexkF/Vopk 17dNbVJlQ0729HH61lanxu2HGfbIL7x+A1UwRfbzfvR3pXQcfvyDizZ/YccV2Zc2 t3rrNOD5K969Een6wMwaoS3O9cV7Cf613uyF62WE8cBqziytK2J2cr6t0z6eY07r ziDx1Ojf52UtYye8wBR29ySWpjfI06stVjSkSKORvnvQyJtWaj4wC2My03msLfnp s6CcI/k9w5rzbY6mX09rNfS9IE+jyrnaENC1DVYjtykCZ/09kGOapkcuRGNQLug+ mzuE+58xTTDmVKljTt18meeFqnip8smcWtRtyWgIvMCIwgphnLYRrUsdxysCns/b r+OxdYLkFIU= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:39 2026 by rpki-client