This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/1iPsYqvE-ccnXaUSDoZeDrNAomM.roa File: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (raw, json) Hash identifier: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI= Subject key identifier: D6:23:EC:62:AB:C4:F9:C7:27:5D:A5:12:0E:86:5E:0E:B3:40:A2:63 Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d Certificate serial: 019B7A5B25666EBDC03CDF28BA231492C91E Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/1iPsYqvE-ccnXaUSDoZeDrNAomM.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397735 IP address blocks: 45.142.248.0/24 maxlen: 24 45.142.249.0/24 maxlen: 24 45.142.250.0/24 maxlen: 24 45.142.251.0/24 maxlen: 24 193.53.2.0/24 maxlen: 24 193.53.5.0/24 maxlen: 24 193.53.7.0/24 maxlen: 24 193.53.12.0/24 maxlen: 24 2a0e:dd40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:25:66:6e:bd:c0:3c:df:28:ba:23:14:92:c9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d623ec62abc4f9c7275da5120e865e0eb340a263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:3d:3b:d4:18:a4:e2:4d:1a:bd:6c:2d:c2: 0a:26:a4:8e:de:a7:33:93:79:d1:a4:1a:e1:d0:d3: 37:f8:8f:a5:a1:54:5d:55:66:5a:bf:d8:0c:0f:cd: 9a:51:da:35:8a:e1:23:c4:93:89:25:01:57:e1:e4: c8:5d:7e:08:6a:bd:94:b6:ce:47:b0:80:88:ee:2c: e2:df:bf:1c:20:a1:14:b8:ed:27:74:71:f6:67:7e: 9f:1c:af:ca:48:24:da:86:d3:13:83:ec:f3:19:61: d3:1c:1e:57:62:9f:9a:83:18:70:1e:f0:21:09:a2: 48:7c:5e:1f:ca:10:84:a3:af:02:43:77:df:3c:b0: 79:ef:26:4d:55:97:76:2b:2a:b2:3c:39:af:c7:84: 99:37:29:bb:31:6d:e7:e1:4e:47:6c:f7:0f:15:b4: 17:d9:75:7b:82:f4:c4:1f:04:c6:4c:2e:5e:08:24: 76:a4:d7:bd:dd:58:f5:27:92:bd:7f:74:43:67:bf: 55:fb:c0:fe:96:6b:89:48:a9:29:ef:dc:d7:12:90: 0a:b4:ba:e5:fc:8d:ff:8f:1d:a9:9f:51:fb:ea:7f: b3:2b:7c:e2:db:60:f5:78:53:35:d1:05:b8:41:05: 07:cc:d3:cd:07:06:45:e6:1e:4c:37:9f:c9:11:85: 6f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:23:EC:62:AB:C4:F9:C7:27:5D:A5:12:0E:86:5E:0E:B3:40:A2:63 X509v3 Authority Key Identifier: keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/1iPsYqvE-ccnXaUSDoZeDrNAomM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.248.0/22 193.53.2.0/24 193.53.5.0/24 193.53.7.0/24 193.53.12.0/24 IPv6: 2a0e:dd40::/32 Signature Algorithm: sha256WithRSAEncryption 35:a0:48:e5:8d:2d:be:b1:67:94:8b:a1:e7:d8:9c:02:98:1e: 45:1e:bb:6c:a5:ed:db:5b:21:60:ec:b1:89:31:11:e1:60:98: 85:02:b4:29:70:ea:41:c5:e9:08:22:28:29:3f:be:d5:fd:4c: 26:29:0a:29:e4:ef:75:48:86:f2:65:61:fa:bd:8c:2e:2f:a0: 7f:ba:b8:e3:7d:77:a7:5e:d3:a0:16:21:4d:ee:c2:a4:90:89: d9:62:7f:78:77:8d:37:81:12:b9:44:6f:4a:aa:d8:5a:e7:71: 6d:54:1b:79:ec:a1:5e:db:18:bb:0f:da:a1:bc:17:77:a9:94: d0:b7:b1:11:64:71:09:ba:dc:30:32:f7:76:78:6f:3b:38:b8: 7e:e1:16:d8:23:80:55:1a:0e:90:5d:37:69:dc:4f:ff:ae:a8: a4:26:ae:58:7e:e7:11:91:82:3e:60:80:4d:0f:4c:4e:c0:40: 13:66:8d:cc:d4:b3:ac:3c:e8:f0:d2:9e:ea:8c:98:9f:03:83: 15:9b:67:26:84:56:4b:f4:6c:ce:e4:45:21:fa:60:9d:7f:c5: d9:79:b7:df:a7:df:3d:18:cf:37:68:38:65:9d:11:af:cb:16: 43:76:71:7e:88:b9:6c:72:4d:2b:53:31:fe:e4:4e:49:6d:1c: ff:70:33:08 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6WyVmbr3APN8ouiMUkskeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl YjgzMmQwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjIzZWM2MmFiYzRmOWM3Mjc1ZGE1MTIwZTg2NWUwZWIzNDBhMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoo9O9QYpOJNGr1sLcIKJqSO3qcz k3nRpBrh0NM3+I+loVRdVWZav9gMD82aUdo1iuEjxJOJJQFX4eTIXX4Iar2Uts5H sICI7izi378cIKEUuO0ndHH2Z36fHK/KSCTahtMTg+zzGWHTHB5XYp+agxhwHvAh CaJIfF4fyhCEo68CQ3ffPLB57yZNVZd2KyqyPDmvx4SZNym7MW3n4U5HbPcPFbQX 2XV7gvTEHwTGTC5eCCR2pNe93Vj1J5K9f3RDZ79V+8D+lmuJSKkp79zXEpAKtLrl /I3/jx2pn1H76n+zK3zi22D1eFM10QW4QQUHzNPNBwZF5h5MN5/JEYVvuwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFNYj7GKrxPnHJ12lEg6GXg6zQKJjMB8GA1UdIwQY MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt ZTZlZTU4MzRjOTk1LzEvMWlQc1lxdkUtY2NuWGFVU0RvWmVEck5Bb21NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1 LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLY74AwQA wTUCAwQAwTUFAwQAwTUHAwQAwTUMMA0EAgACMAcDBQAqDt1AMA0GCSqGSIb3DQEB CwUAA4IBAQA1oEjljS2+sWeUi6Hn2JwCmB5FHrtspe3bWyFg7LGJMRHhYJiFArQp cOpBxekIIigpP77V/UwmKQop5O91SIbyZWH6vYwuL6B/urjjfXenXtOgFiFN7sKk kInZYn94d403gRK5RG9Kqtha53FtVBt57KFe2xi7D9qhvBd3qZTQt7ERZHEJutww Mvd2eG87OLh+4RbYI4BVGg6QXTdp3E//rqikJq5YfucRkYI+YIBND0xOwEATZo3M 1LOsPOjw0p7qjJifA4MVm2cmhFZL9GzO5EUh+mCdf8XZebffp989GM83aDhlnRGv yxZDdnF+iLlsck0rUzH+5E5JbRz/cDMI -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:06 2026 by rpki-client