This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1yiNZ3bdxn4MOtJi041pe8JWLbA.roa File: 1yiNZ3bdxn4MOtJi041pe8JWLbA.roa (raw, json) Hash identifier: 7hwSmjL7/kM+EciytWVj6/QldmNislOzousKO91ai7I= Subject key identifier: D7:28:8D:67:76:DD:C6:7E:0C:3A:D2:62:D3:8D:69:7B:C2:56:2D:B0 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14AFF2DF3C5D16A66F4AC5377802FF Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1yiNZ3bdxn4MOtJi041pe8JWLbA.roa Signing time: Fri 02 Jan 2026 14:20:20 +0000 ROA not before: Fri 02 Jan 2026 14:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36040 IP address blocks: 194.122.80.0/22 maxlen: 22 2001:680:4004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:af:f2:df:3c:5d:16:a6:6f:4a:c5:37:78:02:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7288d6776ddc67e0c3ad262d38d697bc2562db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f6:b0:1c:70:ce:0b:e9:46:e8:eb:c0:7e:15: c5:64:cc:e8:a6:27:e0:26:70:d5:a7:a4:c6:27:d7: ae:67:73:39:eb:3d:6a:aa:81:70:34:12:8b:cf:20: f7:b8:36:33:be:6c:e4:16:75:19:0a:ca:18:1b:70: 42:e4:83:a3:53:4c:f3:24:0b:d2:79:19:6e:73:ae: cc:85:9f:77:a0:a9:f7:b8:a7:a2:65:be:09:e6:4f: d5:73:dd:8e:2f:ee:13:2d:f6:ad:ad:1f:89:78:16: 73:86:d6:03:bf:a0:2f:f2:81:32:f9:a5:71:38:fb: 3a:68:9e:cf:18:17:87:4e:67:14:83:df:c3:66:b5: 3f:38:76:a7:42:23:f0:2d:b4:e0:18:e9:a3:dc:20: 31:30:7b:6e:87:1d:6d:14:4e:30:17:ac:4b:f3:f3: 37:3c:93:82:63:50:46:fe:7e:91:37:73:6c:14:8c: f1:4b:2e:7b:b6:a3:1b:6c:e0:8e:40:08:10:a9:d5: 52:bb:5b:6f:ba:f9:6b:2c:28:9f:31:4c:a6:dc:e8: 38:30:99:f2:3d:f0:ee:88:ef:6c:e5:5d:87:24:aa: d5:42:db:46:f4:5e:4d:67:c2:a9:72:c5:f3:54:f2: 46:59:b0:3d:e3:40:5c:d7:6c:06:2a:9e:e5:70:ee: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:28:8D:67:76:DD:C6:7E:0C:3A:D2:62:D3:8D:69:7B:C2:56:2D:B0 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1yiNZ3bdxn4MOtJi041pe8JWLbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.122.80.0/22 IPv6: 2001:680:4004::/48 Signature Algorithm: sha256WithRSAEncryption 22:61:9c:b0:b4:b7:2c:23:b5:bc:ab:ff:ef:d6:05:ce:74:a5: d5:ac:62:ee:36:a1:b4:49:e6:b5:e5:1c:1d:9b:54:c3:fc:49: fa:33:b2:c3:2d:86:8f:e3:a2:90:47:ee:44:f8:e3:5e:ee:87: 18:34:b0:91:c9:f1:34:4e:8b:bb:b8:76:66:6d:7f:ba:93:22: 6c:81:21:43:40:42:b7:da:6c:18:61:10:fb:57:40:5f:d6:35: f9:e7:0e:46:6c:1a:13:31:d0:41:b3:71:5c:31:19:b6:cd:ef: b7:0d:1f:1f:9b:c5:42:ce:af:ad:78:3e:d2:59:d7:ae:9d:8c: 42:8e:b7:52:26:74:19:9b:df:37:9f:e6:cb:e3:fb:b6:45:23: e3:5c:e3:a3:41:09:4d:4d:3f:b0:46:66:c3:96:c7:62:6a:2a: 79:39:ae:84:1a:f2:9f:5e:71:80:8a:3c:66:3a:a9:cb:10:7f: a3:45:3c:59:bf:94:72:33:13:23:3d:d5:f7:ee:fc:ab:56:fa: db:1c:fb:e9:8e:4c:d3:8b:f6:1d:08:64:09:71:2e:65:8d:85: a9:7c:e0:68:69:6c:fa:b5:d2:fa:11:49:91:21:9d:ff:51:11: f4:2c:e9:a9:81:52:bc:9f:c3:dc:e5:3c:be:4b:ed:1b:23:95: fe:86:8d:e8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FK/y3zxdFqZvSsU3eAL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzI4OGQ2Nzc2ZGRjNjdlMGMzYWQyNjJkMzhkNjk3YmMyNTYyZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/awHHDOC+lG6OvAfhXFZMzopifg JnDVp6TGJ9euZ3M56z1qqoFwNBKLzyD3uDYzvmzkFnUZCsoYG3BC5IOjU0zzJAvS eRluc67MhZ93oKn3uKeiZb4J5k/Vc92OL+4TLfatrR+JeBZzhtYDv6Av8oEy+aVx OPs6aJ7PGBeHTmcUg9/DZrU/OHanQiPwLbTgGOmj3CAxMHtuhx1tFE4wF6xL8/M3 PJOCY1BG/n6RN3NsFIzxSy57tqMbbOCOQAgQqdVSu1tvuvlrLCifMUym3Og4MJny PfDuiO9s5V2HJKrVQttG9F5NZ8KpcsXzVPJGWbA940Bc12wGKp7lcO51pwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNcojWd23cZ+DDrSYtONaXvCVi2wMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvMXlpTlozYmR4bjRNT3RKaTA0MXBlOEpXTGJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwnpQMA8E AgACMAkDBwAgAQaAQAQwDQYJKoZIhvcNAQELBQADggEBACJhnLC0tywjtbyr/+/W Bc50pdWsYu42obRJ5rXlHB2bVMP8SfozssMtho/jopBH7kT4417uhxg0sJHJ8TRO i7u4dmZtf7qTImyBIUNAQrfabBhhEPtXQF/WNfnnDkZsGhMx0EGzcVwxGbbN77cN Hx+bxULOr614PtJZ166djEKOt1ImdBmb3zef5svj+7ZFI+Nc46NBCU1NP7BGZsOW x2JqKnk5roQa8p9ecYCKPGY6qcsQf6NFPFm/lHIzEyM91ffu/KtW+tsc++mOTNOL 9h0IZAlxLmWNhal84GhpbPq10voRSZEhnf9REfQs6amBUryfw9zlPL5L7Rsjlf6G jeg= -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:56 2026 by rpki-client