This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/1-9EYds5QZQE-vovjbt_drwBxnu4.roa File: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (raw, json) Hash identifier: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0= Subject key identifier: FB:D1:18:76:CE:50:65:01:3E:BE:8B:E3:6E:DF:DD:AF:00:71:9E:EE Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f Certificate serial: 019B7B35BBC72CC50D85F9B9B37E43EBDCFC Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/1-9EYds5QZQE-vovjbt_drwBxnu4.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58143 IP address blocks: 5.35.168.0/24 maxlen: 24 5.35.169.0/24 maxlen: 24 5.35.170.0/24 maxlen: 24 5.35.171.0/24 maxlen: 24 5.35.172.0/24 maxlen: 24 5.35.173.0/24 maxlen: 24 5.35.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bb:c7:2c:c5:0d:85:f9:b9:b3:7e:43:eb:dc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd11876ce5065013ebe8be36edfddaf00719eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:70:7c:77:5e:d4:13:26:f0:79:ba:b6:fb: ce:9d:5a:c5:5d:a1:40:df:39:53:ce:09:b4:45:45: 79:af:29:7b:c0:03:24:08:d7:05:67:a0:23:fb:d0: ce:3f:d8:23:3a:e2:06:a3:a2:f6:a1:56:34:71:f7: 59:fc:3b:32:07:22:0d:76:28:1c:33:b7:fb:bb:27: a8:d1:85:e0:da:6e:8e:30:1c:4f:e7:16:ac:8f:a9: 3e:95:6b:30:40:40:36:7a:7a:30:b2:de:5d:55:45: a1:a3:9c:fc:79:b0:e6:e7:c0:2c:a2:f8:71:79:d6: 1c:5c:b4:94:63:01:f9:42:3f:42:b3:08:58:d3:ac: eb:e9:70:46:c3:f6:a0:a2:89:3c:0c:fe:6c:d8:1a: 2e:73:b9:bf:88:18:64:7d:fb:c9:96:89:7e:05:27: a8:e8:80:22:32:47:78:50:44:75:e8:a1:3b:30:2b: 57:92:c3:55:5c:c1:f2:f7:e6:12:92:38:24:40:3e: e4:73:13:8f:ea:42:28:bf:e3:f9:b1:d0:35:5d:2a: a5:76:26:76:96:ec:fb:f9:3b:b9:ff:d0:86:52:da: 30:8a:a2:e1:23:d7:28:ad:42:a5:62:c9:85:77:9d: 19:81:53:23:87:eb:03:4e:9c:55:3a:5e:91:10:f9: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D1:18:76:CE:50:65:01:3E:BE:8B:E3:6E:DF:DD:AF:00:71:9E:EE X509v3 Authority Key Identifier: keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/1-9EYds5QZQE-vovjbt_drwBxnu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.168.0-5.35.174.255 Signature Algorithm: sha256WithRSAEncryption 7e:e3:d1:8b:23:f9:7c:31:e0:0a:b6:a9:85:24:c9:e7:c0:c6: 4e:26:61:b7:42:a1:d8:3c:2e:e7:fa:9a:19:b8:0f:4f:67:93: 07:e1:b0:00:4d:9a:7e:17:9c:9d:9a:2e:d2:d2:5d:46:2c:e6: 98:71:22:8c:95:d5:9a:4e:5c:b1:b0:9e:ab:fa:72:ec:cb:78: 12:e1:34:39:dc:5c:de:72:f9:4c:1a:db:20:65:87:a1:79:13: 64:89:e0:c3:4f:6d:3e:6c:36:e1:bf:dd:be:36:7c:a6:e0:c4: bb:61:46:1a:91:18:72:cf:fd:13:8d:68:00:d0:e3:51:3c:fc: ed:64:0a:27:f1:0e:a1:e3:1c:06:40:f5:a1:65:ed:25:a3:fd: bf:d3:3d:33:7d:9b:84:da:58:c4:cb:e9:41:81:6b:b3:85:7c: 5e:9f:f7:b8:ca:be:f0:27:f8:a1:81:4b:d2:db:d3:6c:7c:19: 36:a1:f4:6d:d4:97:7b:12:f0:59:26:54:d9:a8:74:a6:a4:3a: 01:96:53:73:9a:60:db:dd:3c:a3:fe:c3:a1:f0:09:4d:50:8e: 82:15:f7:0d:79:c5:fc:62:ed:d0:b9:eb:40:fd:da:dd:3d:c4: fa:cf:5a:4f:8c:45:ab:50:2a:e8:12:96:ee:5a:5c:3b:d3:36: da:33:4b:47 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt7NbvHLMUNhfm5s35D69z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh MDhlMWYwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQxMTg3NmNlNTA2NTAxM2ViZThiZTM2ZWRmZGRhZjAwNzE5ZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1lwfHde1BMm8Hm6tvvOnVrFXaFA 3zlTzgm0RUV5ryl7wAMkCNcFZ6Aj+9DOP9gjOuIGo6L2oVY0cfdZ/DsyByINdigc M7f7uyeo0YXg2m6OMBxP5xasj6k+lWswQEA2enowst5dVUWho5z8ebDm58Asovhx edYcXLSUYwH5Qj9CswhY06zr6XBGw/agook8DP5s2Bouc7m/iBhkffvJlol+BSeo 6IAiMkd4UER16KE7MCtXksNVXMHy9+YSkjgkQD7kcxOP6kIov+P5sdA1XSqldiZ2 luz7+Tu5/9CGUtowiqLhI9corUKlYsmFd50ZgVMjh+sDTpxVOl6REPlmswIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPvRGHbOUGUBPr6L427f3a8AcZ7uMB8GA1UdIwQY MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt NDE0OWRlNTI4ODMzLzEvMS05RVlkczVRWlFFLXZvdmpidF9kcndCeG51NC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjcvMjMzOTQ4LWY5YTMtNGI0NC1hNGE5LTQxNDlkZTUyODgz My8xL0E2MWpaU01lMTVPV2xBa2dGSjMzSEFxZ2poOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDBSOo AwQABSOuMA0GCSqGSIb3DQEBCwUAA4IBAQB+49GLI/l8MeAKtqmFJMnnwMZOJmG3 QqHYPC7n+poZuA9PZ5MH4bAATZp+F5ydmi7S0l1GLOaYcSKMldWaTlyxsJ6r+nLs y3gS4TQ53FzecvlMGtsgZYeheRNkieDDT20+bDbhv92+Nnym4MS7YUYakRhyz/0T jWgA0ONRPPztZAon8Q6h4xwGQPWhZe0lo/2/0z0zfZuE2ljEy+lBgWuzhXxen/e4 yr7wJ/ihgUvS29NsfBk2ofRt1Jd7EvBZJlTZqHSmpDoBllNzmmDb3Tyj/sOh8AlN UI6CFfcNecX8Yu3QuetA/drdPcT6z1pPjEWrUCroEpbuWlw70zbaM0tH -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:10 2026 by rpki-client