This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/re1kMr4ZO4EcntSxzQLItfZHji4.roa File: re1kMr4ZO4EcntSxzQLItfZHji4.roa (raw, json) Hash identifier: pb/ZpVFwMQItfSjJxD0Eukfy73dUuFN63jAongafzPs= Subject key identifier: AD:ED:64:32:BE:19:3B:81:1C:9E:D4:B1:CD:02:C8:B5:F6:47:8E:2E Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397 Certificate serial: 019B797F0F04E18BD6E1876F465B281BE9EB Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/re1kMr4ZO4EcntSxzQLItfZHji4.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25070 IP address blocks: 88.135.188.0/22 maxlen: 22 88.135.188.0/24 maxlen: 24 91.201.152.0/22 maxlen: 22 109.197.33.0/24 maxlen: 24 109.197.34.0/24 maxlen: 24 109.197.38.0/24 maxlen: 24 195.200.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0f:04:e1:8b:d6:e1:87:6f:46:5b:28:1b:e9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397 Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aded6432be193b811c9ed4b1cd02c8b5f6478e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:a7:16:8d:2d:ca:15:2c:61:7b:b5:a5:76: d9:b3:0d:44:7c:65:a9:d9:54:3e:f3:67:d4:21:1f: 5c:ff:3f:64:b3:bc:c0:00:7c:e2:14:9a:30:ff:1a: 08:41:ca:c3:fb:87:9e:06:19:ac:04:95:89:b1:3c: 61:e1:4f:df:2f:0e:ab:90:ed:aa:98:86:72:63:39: eb:f9:4a:fe:eb:98:c2:4c:7e:d5:e3:0a:e9:a4:54: e9:d8:ab:7b:18:6b:09:34:e0:0b:d3:e9:26:22:08: b5:40:50:b0:a8:ff:d1:90:1a:07:a2:01:f6:df:e8: 76:23:3d:e8:7e:00:f7:cd:3f:4c:29:59:70:62:5d: e7:64:f7:33:2a:73:b9:29:60:82:84:c5:31:33:62: 8a:5a:06:98:be:d4:f4:3e:56:3b:66:f8:3b:fa:1e: a8:8a:b3:35:2f:23:87:c3:f0:27:9a:00:e5:cf:59: 73:c4:08:37:1d:97:45:ee:23:f4:c1:89:76:3a:19: a4:0a:9d:d4:c1:1d:17:af:35:a5:b9:76:00:5f:3d: 2f:3a:fb:0f:47:89:46:34:59:37:1d:e8:9e:1e:6e: 68:33:5a:86:99:85:3d:ce:18:c1:6a:ad:32:4f:c7: 66:71:96:9e:96:13:d0:bc:b0:69:78:ad:ec:2b:89: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:ED:64:32:BE:19:3B:81:1C:9E:D4:B1:CD:02:C8:B5:F6:47:8E:2E X509v3 Authority Key Identifier: keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/re1kMr4ZO4EcntSxzQLItfZHji4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.188.0/22 91.201.152.0/22 109.197.33.0-109.197.34.255 109.197.38.0/24 195.200.206.0/24 Signature Algorithm: sha256WithRSAEncryption 64:58:e7:2a:71:72:ff:65:09:ec:cb:9d:b5:57:87:42:f5:6a: 3b:a5:13:03:3e:5d:a4:c1:1b:13:f8:67:9c:fa:6b:60:2c:b7: 89:44:79:d7:f5:c9:31:7a:d6:2e:13:01:82:73:54:24:f9:20: 53:b6:d0:53:01:a8:99:b5:d2:57:25:6b:5b:d5:93:0b:cb:09: 64:2e:c3:b5:41:63:2a:b1:9a:b1:5f:43:e9:12:81:b4:ec:f7: e3:55:6d:3b:ab:b8:f8:e8:98:e5:ce:84:dd:b5:86:d0:f4:bd: 9b:14:26:0f:60:f5:d8:fa:30:f5:76:fb:32:1a:d1:f3:bb:00: 92:b3:fb:ff:0c:82:ca:1d:e3:28:1f:22:b7:d1:33:63:91:b7: 48:87:fb:94:03:32:a9:81:80:0a:fe:3e:1b:79:76:24:22:c2: 6e:10:6d:f9:76:c8:a4:96:40:43:8b:95:f7:5f:48:a7:52:6b: d9:d6:1d:23:46:e4:3f:b0:8e:7e:b5:04:16:11:73:de:de:7a: 7c:b9:0a:65:21:cb:9b:80:ff:54:53:e5:85:e0:23:77:2c:43: 9b:be:7f:d9:db:4d:20:ed:c0:83:79:cf:0f:a5:18:0e:35:16: b4:6c:4d:7e:0b:32:57:fc:89:a7:75:ef:1a:f1:35:52:f7:3e: ab:33:b9:f0 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt5fw8E4YvW4YdvRlsoG+nrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj OTgzOTcwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGVkNjQzMmJlMTkzYjgxMWM5ZWQ0YjFjZDAyYzhiNWY2NDc4ZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyGnFo0tyhUsYXu1pXbZsw1EfGWp 2VQ+82fUIR9c/z9ks7zAAHziFJow/xoIQcrD+4eeBhmsBJWJsTxh4U/fLw6rkO2q mIZyYznr+Ur+65jCTH7V4wrppFTp2Kt7GGsJNOAL0+kmIgi1QFCwqP/RkBoHogH2 3+h2Iz3ofgD3zT9MKVlwYl3nZPczKnO5KWCChMUxM2KKWgaYvtT0PlY7Zvg7+h6o irM1LyOHw/AnmgDlz1lzxAg3HZdF7iP0wYl2OhmkCp3UwR0XrzWluXYAXz0vOvsP R4lGNFk3HeieHm5oM1qGmYU9zhjBaq0yT8dmcZaelhPQvLBpeK3sK4m9AQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFK3tZDK+GTuBHJ7Usc0CyLX2R44uMB8GA1UdIwQY MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt YzFlOTc0YmVkMTJlLzEvcmUxa01yNFpPNEVjbnRTeHpRTEl0ZlpIamk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCWIe8AwQC W8mYMAwDBABtxSEDBABtxSIDBABtxSYDBADDyM4wDQYJKoZIhvcNAQELBQADggEB AGRY5ypxcv9lCezLnbVXh0L1ajulEwM+XaTBGxP4Z5z6a2Ast4lEedf1yTF61i4T AYJzVCT5IFO20FMBqJm10lcla1vVkwvLCWQuw7VBYyqxmrFfQ+kSgbTs9+NVbTur uPjomOXOhN21htD0vZsUJg9g9dj6MPV2+zIa0fO7AJKz+/8Mgsod4ygfIrfRM2OR t0iH+5QDMqmBgAr+Pht5diQiwm4Qbfl2yKSWQEOLlfdfSKdSa9nWHSNG5D+wjn61 BBYRc97eeny5CmUhy5uA/1RT5YXgI3csQ5u+f9nbTSDtwIN5zw+lGA41FrRsTX4L Mlf8iad17xrxNVL3PqszufA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:22 2026 by rpki-client