This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/1ygXWl56xqWdwn4TflC3PtLjSqY.roa File: 1ygXWl56xqWdwn4TflC3PtLjSqY.roa (raw, json) Hash identifier: wDz5snBxEXcvrvGiZ9XQ0363TdLN4FN6tQlUAGosd4Y= Subject key identifier: D7:28:17:5A:5E:7A:C6:A5:9D:C2:7E:13:7E:50:B7:3E:D2:E3:4A:A6 Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Certificate serial: 019B7EA564770A51CDDB3A7BEAD544DC56AE Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/1ygXWl56xqWdwn4TflC3PtLjSqY.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59721 IP address blocks: 94.126.112.0/24 maxlen: 24 94.126.113.0/24 maxlen: 24 195.80.158.0/24 maxlen: 24 2a13:1c0::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:64:77:0a:51:cd:db:3a:7b:ea:d5:44:dc:56:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d728175a5e7ac6a59dc27e137e50b73ed2e34aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:3b:bc:bd:34:5d:44:06:f4:37:5b:80:89: 39:55:1f:1a:b9:4c:6e:2a:26:75:f3:0a:1a:fd:6e: cb:3f:59:e5:39:c1:64:8d:4f:7a:ba:7e:cf:51:dd: af:49:5f:55:39:ab:a3:9e:2d:d1:19:5e:18:b1:41: 8d:11:97:22:a6:fc:2f:9a:e7:b1:6f:f9:d6:75:e8: 84:68:b2:a9:2b:9e:1c:08:d9:93:6a:bb:35:59:d3: 90:8b:2b:1a:a1:e6:ea:49:24:1c:54:85:ad:60:6b: 1b:28:cd:23:15:69:1b:0a:b5:51:5c:0b:c4:b1:82: 99:39:7d:65:7c:a6:86:c0:98:b9:4a:11:46:49:54: 97:9c:93:33:27:10:e4:9d:ca:25:ab:72:8f:31:54: c3:e9:df:ff:51:8b:7b:21:b7:89:07:2a:49:45:36: fa:02:44:d7:89:9e:99:5a:dc:6a:cd:b1:86:d7:db: db:ce:de:55:45:8b:9d:01:12:43:9f:d5:a5:d0:0d: 4d:ac:a1:e7:b1:d6:4d:c4:b4:02:82:a6:61:ab:f9: 30:ef:c2:b6:a0:2d:c2:cc:51:40:e6:e8:fd:90:c7: ba:59:7d:b8:32:53:ae:bd:91:08:1e:f2:c2:17:aa: 43:1f:71:f9:8c:c2:0c:83:1a:a3:84:65:90:12:fb: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:28:17:5A:5E:7A:C6:A5:9D:C2:7E:13:7E:50:B7:3E:D2:E3:4A:A6 X509v3 Authority Key Identifier: keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/1ygXWl56xqWdwn4TflC3PtLjSqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.126.112.0/23 195.80.158.0/24 IPv6: 2a13:1c0::/64 Signature Algorithm: sha256WithRSAEncryption 8b:3f:5f:36:11:6b:d6:b1:db:50:04:11:6b:1c:45:a7:56:25: 9d:bb:d9:a8:29:9f:95:50:9c:09:27:e8:fd:7a:13:c8:c1:bc: e7:ca:a7:68:9c:d3:6a:80:64:8e:58:69:47:ad:8a:52:c0:57: 49:8f:eb:dc:98:eb:f1:ea:21:23:25:8c:86:76:a6:97:1c:2e: e0:ff:0b:dd:31:dc:65:c9:ae:f5:88:fd:fb:27:52:33:41:2b: bb:9a:26:d8:cd:55:29:6c:23:e1:c4:5d:8c:fc:19:e5:89:ed: 81:5b:6f:7a:94:91:39:2a:08:75:aa:db:df:c5:63:a4:1e:d2: 53:3a:8f:21:08:52:5c:98:4c:8f:cc:80:f2:0f:f1:fb:a6:5c: 19:a3:52:97:3c:76:3e:5b:b4:ed:9d:5f:e2:71:ee:67:b8:09: 45:48:e8:6d:6b:3e:af:da:6c:1f:ba:57:3c:e1:0b:83:53:2f: 6d:2d:3e:85:5d:5b:90:24:a1:92:67:db:f1:93:85:b6:94:7f: 0a:12:90:d3:3a:5b:47:9c:4b:17:f8:f7:b5:f5:c4:9e:02:b4: 93:16:48:77:fc:cb:c9:8c:91:8d:14:8f:01:a2:f9:bb:d3:99: 40:df:13:27:0d:35:be:f6:fe:04:fd:66:22:56:9f:62:40:b8: 41:ef:6b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+pWR3ClHN2zp76tVE3FauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5 NTZjYWEwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzI4MTc1YTVlN2FjNmE1OWRjMjdlMTM3ZTUwYjczZWQyZTM0YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1E7vL00XUQG9DdbgIk5VR8auUxu KiZ18woa/W7LP1nlOcFkjU96un7PUd2vSV9VOaujni3RGV4YsUGNEZcipvwvmuex b/nWdeiEaLKpK54cCNmTars1WdOQiysaoebqSSQcVIWtYGsbKM0jFWkbCrVRXAvE sYKZOX1lfKaGwJi5ShFGSVSXnJMzJxDkncolq3KPMVTD6d//UYt7IbeJBypJRTb6 AkTXiZ6ZWtxqzbGG19vbzt5VRYudARJDn9Wl0A1NrKHnsdZNxLQCgqZhq/kw78K2 oC3CzFFA5uj9kMe6WX24MlOuvZEIHvLCF6pDH3H5jMIMgxqjhGWQEvultQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcoF1peesalncJ+E35Qtz7S40qmMB8GA1UdIwQY MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt NTE2ZWFjNDY5MDUzLzEvMXlnWFdsNTZ4cVdkd240VGZsQzNQdExqU3FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzASBAIAATAMAwQBXn5wAwQA w1CeMBEEAgACMAsDCQAqEwHAAAAAADANBgkqhkiG9w0BAQsFAAOCAQEAiz9fNhFr 1rHbUAQRaxxFp1YlnbvZqCmflVCcCSfo/XoTyMG858qnaJzTaoBkjlhpR62KUsBX SY/r3Jjr8eohIyWMhnamlxwu4P8L3THcZcmu9Yj9+ydSM0Eru5om2M1VKWwj4cRd jPwZ5YntgVtvepSROSoIdarb38VjpB7SUzqPIQhSXJhMj8yA8g/x+6ZcGaNSlzx2 Plu07Z1f4nHuZ7gJRUjobWs+r9psH7pXPOELg1MvbS0+hV1bkCShkmfb8ZOFtpR/ ChKQ0zpbR5xLF/j3tfXEngK0kxZId/zLyYyRjRSPAaL5u9OZQN8TJw01vvb+BP1m IlafYkC4Qe9rnA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:26 2026 by rpki-client