This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/l1E4OBre5rkDnwWns4RNTN9td_0.roa File: l1E4OBre5rkDnwWns4RNTN9td_0.roa (raw, json) Hash identifier: m7rZxzIS6jYBXFfEZZ7rvjd/kVyrJu8LndSLzgWjvY0= Subject key identifier: 97:51:38:38:1A:DE:E6:B9:03:9F:05:A7:B3:84:4D:4C:DF:6D:77:FD Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd Certificate serial: 019B7CEE07A8A6750AC60550D3D89E1BA1EA Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/l1E4OBre5rkDnwWns4RNTN9td_0.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 193.161.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:07:a8:a6:75:0a:c6:05:50:d3:d8:9e:1b:a1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=975138381adee6b9039f05a7b3844d4cdf6d77fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:96:74:a8:15:f3:80:86:a4:35:c8:32:35: 1b:57:f9:98:ea:90:03:28:1f:f1:3b:19:3f:58:06: e5:b2:ac:d1:7b:49:91:d3:a0:60:74:5e:de:9d:66: 5b:fa:b8:0c:f8:9b:20:79:43:5d:7b:8c:5c:7b:6c: 89:eb:b5:b8:dc:b4:85:f1:7e:cb:1f:a2:a9:8c:19: ac:2c:4b:be:b1:e2:ee:96:9e:38:92:85:dc:60:5c: 0e:03:6a:fc:60:ed:e3:17:d0:35:43:70:22:10:1b: 70:d8:8d:9a:87:ec:c2:16:99:8a:d4:5a:6d:53:ff: 5a:33:b1:a1:16:45:21:19:e0:96:2f:8d:57:d6:52: b7:a6:f5:01:f6:7b:3b:6f:60:4f:4f:3f:dd:75:e2: bf:61:30:96:c7:d6:e2:d5:e9:a8:25:68:bd:a1:2b: b7:d9:77:1b:00:e5:f6:5a:5a:b3:78:09:70:9e:4c: bb:e7:bb:2b:9f:3d:01:b5:f0:01:24:f9:e0:96:ff: b4:8f:4a:ac:49:5c:f6:d3:ba:c4:d5:4e:0d:bd:8f: 59:a2:d5:b2:07:3f:e2:5f:8e:52:25:b7:06:b8:ed: ed:5f:f0:87:8a:d8:b4:23:95:e9:a5:62:4b:53:c4: 42:1f:af:6b:57:d3:ae:94:44:4e:25:69:09:b2:7a: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:51:38:38:1A:DE:E6:B9:03:9F:05:A7:B3:84:4D:4C:DF:6D:77:FD X509v3 Authority Key Identifier: keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/l1E4OBre5rkDnwWns4RNTN9td_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.32.0/19 Signature Algorithm: sha256WithRSAEncryption 68:57:17:b4:6e:dd:25:45:65:ac:55:b4:a0:0b:fb:53:3f:5e: 0c:31:b0:87:aa:96:83:d0:c2:7a:fa:f6:83:4a:95:92:51:73: 88:55:2a:29:ce:d8:89:36:3b:11:26:85:9f:3f:2e:de:cb:e1: 1b:8a:8b:13:bd:f7:16:75:e3:4b:b8:70:ce:4f:5d:df:e6:97: ab:43:b5:f2:43:3d:95:22:e0:a4:e7:4b:8a:b5:7e:e5:51:a7: 5e:4c:ae:0c:cc:d8:c9:16:d2:52:2b:d7:cb:88:00:c1:fc:13: 2c:fe:33:b8:e6:06:dc:52:ac:ec:51:7c:85:ef:af:29:27:1d: e7:49:ad:80:ab:53:af:7d:bd:24:d6:e4:d3:16:a4:3d:4f:90: fb:8b:51:aa:4f:ae:2a:76:12:ae:e4:9c:cd:9f:4a:d4:2d:03: ea:32:53:9f:86:f0:36:40:64:b7:60:58:f0:79:fb:50:9b:7f: 6e:d2:2f:bd:c9:ca:94:2e:7e:e6:f1:f4:64:9d:63:d3:f3:d5: 9c:fa:fa:94:4c:a4:5e:3f:63:4b:d9:fc:51:98:27:d9:7c:a9: 6f:46:6c:39:16:44:f4:d2:45:08:d3:04:9d:0b:ab:30:dc:a3: a3:e2:e2:d7:42:fa:33:ba:46:3c:ca:8c:11:22:c7:dd:3e:e2: 63:19:9c:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87geopnUKxgVQ09ieG6HqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjgwYWMwZTg0ZmMxMmZjNzIyMzdiOGFlZDhlNWVkODVm OGRlYmQwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzUxMzgzODFhZGVlNmI5MDM5ZjA1YTdiMzg0NGQ0Y2RmNmQ3N2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXCWdKgV84CGpDXIMjUbV/mY6pAD KB/xOxk/WAblsqzRe0mR06BgdF7enWZb+rgM+JsgeUNde4xce2yJ67W43LSF8X7L H6KpjBmsLEu+seLulp44koXcYFwOA2r8YO3jF9A1Q3AiEBtw2I2ah+zCFpmK1Fpt U/9aM7GhFkUhGeCWL41X1lK3pvUB9ns7b2BPTz/ddeK/YTCWx9bi1emoJWi9oSu3 2XcbAOX2WlqzeAlwnky757srnz0BtfABJPnglv+0j0qsSVz207rE1U4NvY9ZotWy Bz/iX45SJbcGuO3tX/CHiti0I5XppWJLU8RCH69rV9OulEROJWkJsnpY7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdRODga3ua5A58Fp7OETUzfbXf9MB8GA1UdIwQY MBaAFINoCsDoT8EvxyI3uK7Y5e2F+N69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgt ZmZhY2QyOWZkYTNhLzEvbDFFNE9CcmU1cmtEbndXbnM0Uk5UTjl0ZF8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgtZmZhY2QyOWZkYTNh LzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwaEgMA0G CSqGSIb3DQEBCwUAA4IBAQBoVxe0bt0lRWWsVbSgC/tTP14MMbCHqpaD0MJ6+vaD SpWSUXOIVSopztiJNjsRJoWfPy7ey+EbiosTvfcWdeNLuHDOT13f5perQ7XyQz2V IuCk50uKtX7lUadeTK4MzNjJFtJSK9fLiADB/BMs/jO45gbcUqzsUXyF768pJx3n Sa2Aq1Ovfb0k1uTTFqQ9T5D7i1GqT64qdhKu5JzNn0rULQPqMlOfhvA2QGS3YFjw eftQm39u0i+9ycqULn7m8fRknWPT89Wc+vqUTKReP2NL2fxRmCfZfKlvRmw5FkT0 0kUI0wSdC6sw3KOj4uLXQvozukY8yowRIsfdPuJjGZyG -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:42 2026 by rpki-client