This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1p24e4_xnCRiG8MIistc15VowrI.roa File: 1p24e4_xnCRiG8MIistc15VowrI.roa (raw, json) Hash identifier: VnVP9pYukjZRX2qF6kkl0NQ/5BX9gnfFczG7434pxE4= Subject key identifier: D6:9D:B8:7B:8F:F1:9C:24:62:1B:C3:08:8A:CB:5C:D7:95:68:C2:B2 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D0967E0524A3BD0441DD8A9F034AD Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1p24e4_xnCRiG8MIistc15VowrI.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201549 IP address blocks: 85.219.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:09:67:e0:52:4a:3b:d0:44:1d:d8:a9:f0:34:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d69db87b8ff19c24621bc3088acb5cd79568c2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:37:5e:26:4f:90:d0:90:46:b0:cc:fa:f9: 39:f2:85:99:d2:95:7a:42:cf:c3:bf:93:b7:ba:f5: 92:26:2a:c1:e1:0f:8f:34:13:18:1a:a2:7b:00:f9: aa:c7:11:93:53:98:89:ba:b6:54:8f:5b:49:43:62: 1d:fe:b7:d9:fb:f7:05:c4:67:35:c2:53:19:78:bd: 06:e7:97:6a:1a:b7:be:e7:8a:ee:cf:62:27:2e:75: 6b:3b:0d:93:be:15:6f:78:1c:64:90:28:34:54:a6: 89:31:c0:83:62:1c:3f:c0:ad:87:ce:8a:a8:eb:15: 6f:f7:a4:d7:15:a7:0c:d9:35:b4:ae:7c:3e:8f:17: f1:b9:41:63:d0:a8:06:f1:32:f9:6a:40:f6:83:1e: 4c:ae:dd:8b:87:b7:b1:b4:5c:9c:bf:61:ac:fc:1c: ab:12:c4:58:e8:b5:fa:21:3d:54:ec:7d:e2:c3:9d: aa:60:f4:2b:b0:fa:0e:ec:8f:2c:c6:08:e7:1a:25: 91:4b:11:70:8d:b0:4e:bf:a9:27:04:a3:79:44:1d: e6:02:ff:e3:6c:2d:16:92:2d:f0:5c:45:72:f4:c2: b7:9d:f1:41:75:b3:97:ca:57:0d:9f:72:23:88:88: 97:63:e0:d8:68:85:90:b0:5a:5d:6a:44:b7:86:99: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9D:B8:7B:8F:F1:9C:24:62:1B:C3:08:8A:CB:5C:D7:95:68:C2:B2 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/1p24e4_xnCRiG8MIistc15VowrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.219.148.0/24 Signature Algorithm: sha256WithRSAEncryption 79:32:d1:55:d7:8c:bd:97:2c:0a:c1:f1:c5:d1:ea:ec:ad:cc: a0:54:fd:77:6e:c7:7b:9c:37:85:13:54:fc:b4:93:93:51:76: 61:35:45:df:08:da:82:3c:96:80:0f:18:19:f4:6f:bc:1b:c6: ba:eb:75:2b:e6:4e:c6:e8:45:9d:21:53:61:a1:3a:b2:7a:c4: c1:b7:53:43:0b:46:e4:0e:03:25:18:cf:8e:30:73:f2:0a:3c: b5:47:c6:c2:cc:6f:f7:79:07:c6:bb:d3:10:cf:7e:36:bb:50: ec:91:01:81:31:5e:26:43:1c:1e:27:92:cc:77:ad:92:33:ad: 4d:6e:73:23:16:6a:df:24:8a:30:c5:25:0b:18:1f:90:81:98: b6:3e:b6:3f:17:5a:68:c9:f7:10:46:cd:19:b6:18:6b:a4:23: 26:e9:0b:91:c5:9d:12:e6:0b:36:43:16:2d:ab:e7:97:8d:7b: e6:7e:da:85:6f:06:36:bc:2d:9e:58:8d:68:27:68:f5:22:d9: f8:bf:88:7f:99:d8:8b:5c:97:2d:61:1d:03:41:5e:73:74:72: da:47:6a:31:1a:51:bb:1a:ed:6a:62:74:50:ef:b0:bf:86:dc: e5:ce:5f:14:61:0d:41:94:eb:17:cc:87:19:49:9b:79:2e:17: 9a:95:69:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQln4FJKO9BEHdip8DStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjlkYjg3YjhmZjE5YzI0NjIxYmMzMDg4YWNiNWNkNzk1NjhjMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqg3XiZPkNCQRrDM+vk58oWZ0pV6 Qs/Dv5O3uvWSJirB4Q+PNBMYGqJ7APmqxxGTU5iJurZUj1tJQ2Id/rfZ+/cFxGc1 wlMZeL0G55dqGre+54ruz2InLnVrOw2TvhVveBxkkCg0VKaJMcCDYhw/wK2Hzoqo 6xVv96TXFacM2TW0rnw+jxfxuUFj0KgG8TL5akD2gx5Mrt2Lh7extFycv2Gs/Byr EsRY6LX6IT1U7H3iw52qYPQrsPoO7I8sxgjnGiWRSxFwjbBOv6knBKN5RB3mAv/j bC0Wki3wXEVy9MK3nfFBdbOXylcNn3IjiIiXY+DYaIWQsFpdakS3hpn9UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaduHuP8ZwkYhvDCIrLXNeVaMKyMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvMXAyNGU0X3huQ1JpRzhNSWlzdGMxNVZvd3JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVduUMA0G CSqGSIb3DQEBCwUAA4IBAQB5MtFV14y9lywKwfHF0ersrcygVP13bsd7nDeFE1T8 tJOTUXZhNUXfCNqCPJaADxgZ9G+8G8a663Ur5k7G6EWdIVNhoTqyesTBt1NDC0bk DgMlGM+OMHPyCjy1R8bCzG/3eQfGu9MQz342u1DskQGBMV4mQxweJ5LMd62SM61N bnMjFmrfJIowxSULGB+QgZi2PrY/F1poyfcQRs0ZthhrpCMm6QuRxZ0S5gs2QxYt q+eXjXvmftqFbwY2vC2eWI1oJ2j1Itn4v4h/mdiLXJctYR0DQV5zdHLaR2oxGlG7 Gu1qYnRQ77C/htzlzl8UYQ1BlOsXzIcZSZt5LhealWm5 -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:40 2026 by rpki-client