This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa File: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (raw, json) Hash identifier: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI= Subject key identifier: D5:16:A7:08:ED:66:BB:E3:A2:43:48:99:12:D7:70:FB:20:23:91:32 Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Certificate serial: 019B79ECA020F69AFA451C80534D31664CD6 Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201877 IP address blocks: 83.139.194.0/24 maxlen: 24 83.139.200.0/24 maxlen: 24 83.139.209.0/24 maxlen: 24 83.139.210.0/24 maxlen: 24 83.139.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a0:20:f6:9a:fa:45:1c:80:53:4d:31:66:4c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d516a708ed66bbe3a243489912d770fb20239132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:93:44:96:c8:33:8c:41:4d:5f:a9:86:2a:69: d9:55:64:c3:db:31:7f:4e:f8:2a:97:09:26:5d:3b: bb:c0:aa:21:e9:0c:f9:8e:ab:14:65:86:32:d5:97: 38:53:13:97:2d:6e:a3:a5:2a:1f:5d:ce:dc:3c:4e: 55:de:3f:f4:40:20:cb:e9:48:c9:81:d9:8a:9e:69: 7c:91:67:24:94:16:1e:be:03:3d:cd:af:d2:3d:ec: 82:5c:78:82:25:2a:9a:3c:4e:bf:ad:6f:c4:5b:58: 6b:fb:58:9e:a4:bf:9c:1a:44:58:29:bb:30:13:49: 02:00:4f:c9:82:fa:7d:4f:0a:25:f2:0a:b4:a9:a0: 29:fd:af:ab:19:e7:d1:e0:27:07:3f:d6:f2:b9:96: 4f:36:1c:1c:29:51:0a:8d:f3:bc:33:d6:4e:bb:db: 38:b0:70:7a:4e:d4:38:5f:5a:77:2f:28:04:8c:02: 8f:0b:c3:87:f0:b2:47:00:67:ad:8b:01:10:8a:09: 51:6f:71:0d:17:a0:80:69:1f:38:c6:85:bc:9e:e7: 98:bc:2c:88:19:a1:10:ba:f2:bd:b1:f7:a4:8b:90: de:ef:ef:8c:10:b6:8b:86:ac:de:30:23:ab:d3:e5: b2:8d:ba:51:9e:95:90:5d:02:0d:a3:ed:92:31:be: e6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:16:A7:08:ED:66:BB:E3:A2:43:48:99:12:D7:70:FB:20:23:91:32 X509v3 Authority Key Identifier: keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.139.194.0/24 83.139.200.0/24 83.139.209.0-83.139.211.255 Signature Algorithm: sha256WithRSAEncryption 17:f9:2d:17:93:71:95:cb:7c:16:69:7a:79:52:7c:4d:d1:43: 71:d9:a9:bf:8f:8e:ef:5b:a2:43:f9:c7:5b:a7:be:d8:7e:4c: dc:1f:4b:2f:63:8b:e4:43:75:94:50:b0:87:98:a4:b4:c9:62: c4:7b:b9:29:be:6b:09:58:d6:bb:8a:9b:83:10:21:e2:e8:68: f3:b2:a5:d3:f1:e1:4b:38:97:62:b4:03:56:fc:b1:e9:80:66: 58:c8:f9:5d:f0:47:39:ca:55:f3:2b:3c:f0:ba:82:c2:de:9d: 7f:c0:bd:99:4d:95:17:bb:67:17:1f:ba:f0:c0:44:92:8e:f2: 10:05:ca:c0:dd:5c:31:d5:93:9f:d2:93:ef:df:62:0f:7a:dc: 11:ff:42:c4:62:42:8a:3a:0c:1a:80:99:c5:97:62:da:72:69: bc:c1:4b:fb:da:88:aa:eb:14:ca:93:86:b3:ba:39:ca:f1:d6: a5:99:1f:59:cd:a8:82:c6:d8:4f:58:4d:3f:66:52:3a:59:0c: 4c:ad:44:62:54:af:fa:90:43:18:15:70:83:e0:40:ff:21:9a: a5:9d:28:71:fb:30:13:64:0a:0e:ce:75:74:f0:05:98:da:7e: 87:e1:1c:12:87:6f:99:e2:25:f3:da:b3:5a:ab:69:6f:87:62: 11:14:a4:dd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt57KAg9pr6RRyAU00xZkzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj YTM3NzEwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTE2YTcwOGVkNjZiYmUzYTI0MzQ4OTkxMmQ3NzBmYjIwMjM5MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5NElsgzjEFNX6mGKmnZVWTD2zF/ TvgqlwkmXTu7wKoh6Qz5jqsUZYYy1Zc4UxOXLW6jpSofXc7cPE5V3j/0QCDL6UjJ gdmKnml8kWcklBYevgM9za/SPeyCXHiCJSqaPE6/rW/EW1hr+1iepL+cGkRYKbsw E0kCAE/Jgvp9Twol8gq0qaAp/a+rGefR4CcHP9byuZZPNhwcKVEKjfO8M9ZOu9s4 sHB6TtQ4X1p3LygEjAKPC8OH8LJHAGetiwEQiglRb3ENF6CAaR84xoW8nueYvCyI GaEQuvK9sfeki5De7++MELaLhqzeMCOr0+WyjbpRnpWQXQINo+2SMb7m0wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNUWpwjtZrvjokNImRLXcPsgI5EyMB8GA1UdIwQY MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt ZWQ3OTE1NDM2YjI3LzEvMVJhbkNPMW11LU9pUTBpWkV0ZHcteUFqa1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3 LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAU4vCAwQA U4vIMAwDBABTi9EDBAJTi9AwDQYJKoZIhvcNAQELBQADggEBABf5LReTcZXLfBZp enlSfE3RQ3HZqb+Pju9bokP5x1unvth+TNwfSy9ji+RDdZRQsIeYpLTJYsR7uSm+ awlY1ruKm4MQIeLoaPOypdPx4Us4l2K0A1b8semAZljI+V3wRznKVfMrPPC6gsLe nX/AvZlNlRe7ZxcfuvDARJKO8hAFysDdXDHVk5/Sk+/fYg963BH/QsRiQoo6DBqA mcWXYtpyabzBS/vaiKrrFMqThrO6Ocrx1qWZH1nNqILG2E9YTT9mUjpZDEytRGJU r/qQQxgVcIPgQP8hmqWdKHH7MBNkCg7OdXTwBZjafofhHBKHb5niJfPas1qraW+H YhEUpN0= -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:23 2026 by rpki-client