This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-uQLKpFxByWWNkpAaGrfRMNhk5U.roa File: 1-uQLKpFxByWWNkpAaGrfRMNhk5U.roa (raw, json) Hash identifier: p/b958G2ZQDvuW1F9YtnHGZoLBDh5TLRQbdmphevQ+E= Subject key identifier: FA:E4:0B:2A:91:71:07:25:96:36:4A:40:68:6A:DF:44:C3:61:93:95 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783495E88D92804EE7B8B8B043DAA1EB Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-uQLKpFxByWWNkpAaGrfRMNhk5U.roa Signing time: Thu 01 Jan 2026 06:17:50 +0000 ROA not before: Thu 01 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211927 IP address blocks: 194.14.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:95:e8:8d:92:80:4e:e7:b8:b8:b0:43:da:a1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae40b2a9171072596364a40686adf44c3619395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:bf:d7:42:47:07:ad:57:6f:2e:d4:19:37: 50:14:77:2d:79:12:5f:6d:37:42:9f:6e:44:95:bf: 56:a6:55:01:d8:17:49:af:fa:4d:a7:08:28:ee:1e: 05:65:e1:61:f9:e1:77:7b:1f:eb:64:0e:93:fd:c4: ba:c7:73:c5:3d:9d:97:d0:93:06:7b:62:ea:3c:be: c7:e8:65:07:f9:8a:64:f3:ce:85:13:22:48:3c:d1: 97:60:4c:44:a2:fc:17:c9:2e:0f:e7:8a:14:76:15: 03:78:c1:58:c6:56:03:6f:bc:dd:9a:11:9c:d8:51: 44:e2:42:98:3b:7f:23:e8:5c:50:ad:81:b3:03:48: 0a:df:fd:52:32:34:64:e0:6b:e8:2e:32:27:7b:76: b9:d6:8f:2b:b7:22:b9:aa:23:3f:63:c6:be:a3:d4: a1:79:e7:35:23:1a:47:e8:52:d6:28:96:32:98:31: f9:d4:cd:a6:04:1a:44:a4:ec:d5:14:85:0e:44:85: 84:bd:f6:c9:7c:d3:dd:67:44:9e:fa:15:1f:75:a6: 83:77:f1:ee:d2:74:3a:a7:be:b3:41:e0:ee:d2:ea: af:10:6b:dc:bc:e1:85:28:ae:74:72:b3:35:54:75: 84:06:91:2c:2e:98:9e:46:6d:c5:6d:ba:c8:eb:f2: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:0B:2A:91:71:07:25:96:36:4A:40:68:6A:DF:44:C3:61:93:95 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-uQLKpFxByWWNkpAaGrfRMNhk5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.47.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:11:56:2d:0c:92:c1:5a:b6:9a:0e:08:82:86:71:66:35:84: 1e:0b:49:d8:d0:17:b7:98:58:93:d3:ed:65:d9:19:d5:d8:04: a2:d6:2f:24:51:bb:0a:37:f9:40:df:f3:2f:2c:fd:d7:1d:82: e2:6f:e4:63:5e:74:1c:40:58:57:63:f1:6b:b4:d2:e4:9c:7b: b5:61:ac:78:86:ef:53:f0:5b:93:e0:87:f6:d2:a3:ee:5e:e1: 61:1e:6e:f7:77:44:5b:cf:5b:aa:e9:02:b4:21:67:f7:80:9f: fb:76:2d:b6:43:f8:d0:d8:84:03:87:ae:c1:aa:84:e5:12:56: 8f:4b:1c:a8:65:82:2e:e1:79:ba:d7:61:12:a0:7e:87:81:b5: 7a:50:65:7e:af:94:68:ac:61:92:01:ad:40:8c:de:63:60:0f: 5f:ff:13:95:ec:a4:c4:f5:b7:06:e6:53:ac:65:a9:68:40:27: 77:0f:b9:79:04:5a:9f:5f:a6:76:20:39:9a:38:ae:8e:c3:8b: 3f:f4:15:c3:e4:69:d0:e7:60:23:af:14:e8:de:af:c8:63:4b: 81:fe:0c:b8:46:67:96:c0:f4:28:da:7b:3a:91:0b:8a:89:eb: 0b:56:8f:ca:6d:39:5f:f9:63:c3:a8:60:53:e5:7a:b1:a1:7a: 40:cb:6e:64 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NJXojZKATue4uLBD2qHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWU0MGIyYTkxNzEwNzI1OTYzNjRhNDA2ODZhZGY0NGMzNjE5Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3+/10JHB61Xby7UGTdQFHcteRJf bTdCn25Elb9WplUB2BdJr/pNpwgo7h4FZeFh+eF3ex/rZA6T/cS6x3PFPZ2X0JMG e2LqPL7H6GUH+Ypk886FEyJIPNGXYExEovwXyS4P54oUdhUDeMFYxlYDb7zdmhGc 2FFE4kKYO38j6FxQrYGzA0gK3/1SMjRk4GvoLjIne3a51o8rtyK5qiM/Y8a+o9Sh eec1IxpH6FLWKJYymDH51M2mBBpEpOzVFIUORIWEvfbJfNPdZ0Se+hUfdaaDd/Hu 0nQ6p76zQeDu0uqvEGvcvOGFKK50crM1VHWEBpEsLpieRm3FbbrI6/Jy8QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPrkCyqRcQclljZKQGhq30TDYZOVMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvMS11UUxLcEZ4QnlXV05rcEFhR3JmUk1OaGs1VS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMy Ni8xL0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIOLzAN BgkqhkiG9w0BAQsFAAOCAQEAThFWLQySwVq2mg4IgoZxZjWEHgtJ2NAXt5hYk9Pt ZdkZ1dgEotYvJFG7Cjf5QN/zLyz91x2C4m/kY150HEBYV2Pxa7TS5Jx7tWGseIbv U/Bbk+CH9tKj7l7hYR5u93dEW89bqukCtCFn94Cf+3YttkP40NiEA4euwaqE5RJW j0scqGWCLuF5utdhEqB+h4G1elBlfq+UaKxhkgGtQIzeY2APX/8TleykxPW3BuZT rGWpaEAndw+5eQRan1+mdiA5mjiujsOLP/QVw+Rp0OdgI68U6N6vyGNLgf4MuEZn lsD0KNp7OpELionrC1aPym05X/ljw6hgU+V6saF6QMtuZA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:36 2026 by rpki-client