This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/1-GMAx4cV6wCGu8QajPhkplgNOC0.roa File: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (raw, json) Hash identifier: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds= Subject key identifier: F8:63:00:C7:87:15:EB:00:86:BB:C4:1A:8C:F8:64:A6:58:0D:38:2D Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Certificate serial: 019B7910C9C8BBE20B7FD04D2BE57C6EBFC1 Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/1-GMAx4cV6wCGu8QajPhkplgNOC0.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210695 IP address blocks: 195.137.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c9:c8:bb:e2:0b:7f:d0:4d:2b:e5:7c:6e:bf:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f86300c78715eb0086bbc41a8cf864a6580d382d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:94:14:b5:92:09:a9:3c:7f:e1:7c:60:2c: 6b:53:9a:d5:19:d9:2a:fb:41:04:08:5c:e6:a0:3a: 1e:df:c6:ca:18:05:98:25:c4:91:40:b3:88:7b:5a: 3e:38:9f:fc:5a:6c:4d:6f:b3:03:c1:a4:e0:7f:cc: 1c:f9:d4:bc:1c:a4:19:a9:fa:de:26:56:17:0d:2a: d9:bc:87:d7:3d:f5:b6:42:42:af:70:9b:f9:79:f2: ce:aa:d5:ed:07:c9:28:fb:55:c8:54:47:e3:40:85: 4e:e0:89:3f:dd:f0:56:f5:8f:85:8b:c1:ac:e6:e3: 2c:a8:89:d6:85:9b:87:7e:f1:fa:8d:63:8e:31:36: 36:f5:13:7d:60:05:22:58:c9:c5:5a:1a:11:b9:3d: b0:8d:c7:4e:81:eb:4a:c4:bd:c4:c0:d4:2d:fa:b7: 34:78:85:9d:5f:5b:89:e0:0f:aa:2a:fd:13:3a:22: b4:60:c2:a5:c3:ef:22:68:fd:39:17:cc:6e:b9:1e: 8a:3a:71:b6:bb:81:f9:86:22:a6:52:10:07:b7:22: 63:93:ba:ad:d6:ba:5b:99:d2:7a:6f:b8:46:82:fd: f4:b4:be:13:91:ee:9d:06:1e:0d:ec:8d:a1:63:2c: ba:36:0d:44:dd:38:4e:c5:9a:72:d9:4d:42:33:18: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:63:00:C7:87:15:EB:00:86:BB:C4:1A:8C:F8:64:A6:58:0D:38:2D X509v3 Authority Key Identifier: keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/1-GMAx4cV6wCGu8QajPhkplgNOC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.167.0/24 Signature Algorithm: sha256WithRSAEncryption 50:8a:a0:8f:15:bc:a7:50:a8:4b:36:99:5a:d1:7d:98:4f:61: 7a:00:ab:ec:36:7d:32:98:33:0c:76:de:c6:75:6f:fa:29:89: 12:34:f1:29:18:0c:21:0d:34:86:97:c6:43:e2:17:e9:fd:40: c7:ec:56:8d:71:18:cc:42:01:f8:f0:38:f4:3a:62:a7:00:04: 35:04:8a:fa:73:a2:e2:e2:be:c9:bf:2c:89:61:36:3e:e3:64: a5:07:43:e1:83:1c:01:90:db:cd:bd:af:14:07:f7:08:4e:7e: c5:31:c4:cf:d5:29:d5:2f:2c:2b:97:02:54:16:28:56:bb:08: b5:b4:7c:57:aa:fa:9b:ba:16:08:6e:78:9f:47:be:1c:3b:1d: 8c:23:8a:37:8f:e9:3a:1e:c1:05:f1:95:53:0b:05:01:3e:d6: 6d:42:9d:f7:29:58:39:bb:41:fc:eb:74:37:5b:57:d9:6e:3d: 81:c9:4b:16:fd:fd:ba:20:4d:c8:6b:68:16:ab:86:35:52:85: 85:d7:14:f0:87:1f:04:30:f5:57:16:2e:f6:c6:da:8d:e4:52: 26:d1:f5:49:ed:87:20:42:30:a9:c8:9b:03:ec:4c:97:c4:78: c1:71:ae:8b:02:2d:ba:89:40:b5:70:6a:89:d2:0a:63:49:24: 98:24:3a:e2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EMnIu+ILf9BNK+V8br/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk OGFlM2YwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODYzMDBjNzg3MTVlYjAwODZiYmM0MWE4Y2Y4NjRhNjU4MGQzODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQCUFLWSCak8f+F8YCxrU5rVGdkq +0EECFzmoDoe38bKGAWYJcSRQLOIe1o+OJ/8WmxNb7MDwaTgf8wc+dS8HKQZqfre JlYXDSrZvIfXPfW2QkKvcJv5efLOqtXtB8ko+1XIVEfjQIVO4Ik/3fBW9Y+Fi8Gs 5uMsqInWhZuHfvH6jWOOMTY29RN9YAUiWMnFWhoRuT2wjcdOgetKxL3EwNQt+rc0 eIWdX1uJ4A+qKv0TOiK0YMKlw+8iaP05F8xuuR6KOnG2u4H5hiKmUhAHtyJjk7qt 1rpbmdJ6b7hGgv30tL4Tke6dBh4N7I2hYyy6Ng1E3ThOxZpy2U1CMxjXrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhjAMeHFesAhrvEGoz4ZKZYDTgtMB8GA1UdIwQY MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt ZjM3MWY5OGE3NTNiLzEvMS1HTUF4NGNWNndDR3U4UWFqUGhrcGxnTk9DMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTYvMjM5OWQyLThlMjQtNDhmMi1iZTg4LWYzNzFmOThhNzUz Yi8xL0VyRm5TNzhORVk4bFZQZ01yOVB2R3puWXJqOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOJpzAN BgkqhkiG9w0BAQsFAAOCAQEAUIqgjxW8p1CoSzaZWtF9mE9hegCr7DZ9MpgzDHbe xnVv+imJEjTxKRgMIQ00hpfGQ+IX6f1Ax+xWjXEYzEIB+PA49DpipwAENQSK+nOi 4uK+yb8siWE2PuNkpQdD4YMcAZDbzb2vFAf3CE5+xTHEz9Up1S8sK5cCVBYoVrsI tbR8V6r6m7oWCG54n0e+HDsdjCOKN4/pOh7BBfGVUwsFAT7WbUKd9ylYObtB/Ot0 N1tX2W49gclLFv39uiBNyGtoFquGNVKFhdcU8IcfBDD1VxYu9sbajeRSJtH1Se2H IEIwqcibA+xMl8R4wXGuiwItuolAtXBqidIKY0kkmCQ64g== -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:49 2026 by rpki-client