This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa File: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (raw, json) Hash identifier: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4= Subject key identifier: FA:59:84:3F:A6:EF:4A:0E:F6:C9:FF:C6:51:E0:F8:31:22:8D:5A:19 Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f Certificate serial: 019B78A374E3EB000FB56DFFE9B818499955 Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29480 IP address blocks: 195.149.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:74:e3:eb:00:0f:b5:6d:ff:e9:b8:18:49:99:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa59843fa6ef4a0ef6c9ffc651e0f831228d5a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:e2:6a:6a:ce:7e:b8:ea:9a:42:a8:f3:74: 3e:8e:54:d9:5f:20:9a:d7:69:15:a0:81:46:d6:3d: 39:e7:3f:df:05:b2:a0:24:05:e9:46:cd:2b:d2:ce: 99:c7:92:7e:74:47:db:9b:8a:ba:0a:57:11:a0:88: c1:77:21:53:47:39:9e:eb:5c:d2:15:1f:ed:52:ed: 28:9a:8e:6b:03:97:ca:bf:d8:e1:5c:01:0c:e4:35: 03:4d:6c:0d:c1:1a:92:a2:ee:38:28:49:be:76:df: b0:a5:ca:7e:d5:d6:b1:d7:f4:61:b7:90:1f:ee:79: e1:d9:60:80:9f:6d:35:28:74:88:fd:39:01:38:2d: a9:fd:91:b7:b7:36:02:ec:6d:fc:0b:ca:6e:e8:7a: 12:dc:fd:68:46:2e:49:e0:89:c2:19:c7:fc:a7:88: ea:d9:88:30:a9:32:70:0a:5c:42:80:6c:de:8c:6a: ad:83:01:e3:5e:fb:69:35:b7:35:86:d2:02:d1:47: 85:64:2c:12:1c:30:84:15:28:d2:41:e3:49:55:f3: bb:39:81:5e:e8:2c:2a:bf:2d:28:65:87:4e:5d:24: 5d:7d:3c:05:b2:2f:46:9d:49:30:a0:ef:90:ee:70: 8c:b9:c4:bb:f1:3a:50:2a:79:8e:c0:3d:4a:af:e1: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:59:84:3F:A6:EF:4A:0E:F6:C9:FF:C6:51:E0:F8:31:22:8D:5A:19 X509v3 Authority Key Identifier: keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.126.0/24 Signature Algorithm: sha256WithRSAEncryption 39:7e:10:68:80:b1:2b:2c:76:ca:51:22:8f:d5:83:b9:32:02: cd:6d:cc:b2:79:31:8a:26:84:d2:47:df:c0:ab:0a:2d:88:42: 65:b0:71:0c:e7:f5:23:07:80:9f:52:38:89:06:4a:38:9e:64: 95:02:4d:2a:14:fb:73:48:db:74:95:8a:88:78:a7:26:fd:13: 21:48:68:d6:60:91:49:e8:42:d6:93:6f:ad:a0:b6:36:25:c5: 28:5d:11:9d:83:64:a5:be:2f:50:1b:5e:0a:e3:a9:12:7c:eb: e9:7e:42:a9:fd:c2:5d:6f:85:ee:ed:d8:de:e8:7c:98:48:ca: 9a:e1:67:db:6a:27:ce:54:9c:93:26:3c:85:00:7b:c4:0d:d5: 84:68:34:dd:4e:a6:66:55:82:a6:c8:51:f8:e9:4d:de:bb:c4: d2:80:b9:80:81:93:e0:95:62:4c:ba:98:da:59:f1:b2:54:82: 07:f2:32:45:83:29:69:47:42:6c:90:cf:6a:f0:62:20:c8:56: 6b:9f:45:eb:fd:25:6c:c1:29:41:f9:66:30:37:e7:d1:d3:44: d3:8c:de:7e:ae:f8:65:22:11:91:df:4c:76:b2:e0:d8:05:e0: f7:f7:c5:45:f1:8a:ea:ae:1b:88:3b:ac:d9:1b:12:2d:64:dc: b4:dd:c1:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o3Tj6wAPtW3/6bgYSZlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx OWE4OGYwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTU5ODQzZmE2ZWY0YTBlZjZjOWZmYzY1MWUwZjgzMTIyOGQ1YTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YTiamrOfrjqmkKo83Q+jlTZXyCa 12kVoIFG1j055z/fBbKgJAXpRs0r0s6Zx5J+dEfbm4q6ClcRoIjBdyFTRzme61zS FR/tUu0omo5rA5fKv9jhXAEM5DUDTWwNwRqSou44KEm+dt+wpcp+1dax1/Rht5Af 7nnh2WCAn201KHSI/TkBOC2p/ZG3tzYC7G38C8pu6HoS3P1oRi5J4InCGcf8p4jq 2YgwqTJwClxCgGzejGqtgwHjXvtpNbc1htIC0UeFZCwSHDCEFSjSQeNJVfO7OYFe 6Cwqvy0oZYdOXSRdfTwFsi9GnUkwoO+Q7nCMucS78TpQKnmOwD1Kr+FbNwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPpZhD+m70oO9sn/xlHg+DEijVoZMB8GA1UdIwQY MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt ZjhhNDY5ZDRlMmIyLzEvMS1sbUVQNmJ2U2c3MnlmX0dVZUQ0TVNLTldoay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjcvN2ZiMzgxLWZjNDQtNDRmNi1hMzg1LWY4YTQ2OWQ0ZTJi Mi8xL0lhY1hOaE1KMHBPVFVjbll1aUZ6MjRNWnFJOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOVfjAN BgkqhkiG9w0BAQsFAAOCAQEAOX4QaICxKyx2ylEij9WDuTICzW3MsnkxiiaE0kff wKsKLYhCZbBxDOf1IweAn1I4iQZKOJ5klQJNKhT7c0jbdJWKiHinJv0TIUho1mCR SehC1pNvraC2NiXFKF0RnYNkpb4vUBteCuOpEnzr6X5Cqf3CXW+F7u3Y3uh8mEjK muFn22onzlSckyY8hQB7xA3VhGg03U6mZlWCpshR+OlN3rvE0oC5gIGT4JViTLqY 2lnxslSCB/IyRYMpaUdCbJDPavBiIMhWa59F6/0lbMEpQflmMDfn0dNE04zefq74 ZSIRkd9MdrLg2AXg9/fFRfGK6q4biDus2RsSLWTctN3BTg== -----END CERTIFICATE-----Generated at Sat Jan 3 12:48:43 2026 by rpki-client