This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/t1BI9o0fu5dZsx5cOKNWg_1EVU0.roa File: t1BI9o0fu5dZsx5cOKNWg_1EVU0.roa (raw, json) Hash identifier: gLkYe0ayFDVojDNPYqtHF+6Yrh/6vonPub2qN2J89DE= Subject key identifier: B7:50:48:F6:8D:1F:BB:97:59:B3:1E:5C:38:A3:56:83:FD:44:55:4D Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B361074F472E631B7E8E3F2FD5C1BA8 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/t1BI9o0fu5dZsx5cOKNWg_1EVU0.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211252 IP address blocks: 85.92.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:10:74:f4:72:e6:31:b7:e8:e3:f2:fd:5c:1b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b75048f68d1fbb9759b31e5c38a35683fd44554d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:fc:33:25:52:98:11:1a:63:bc:a0:fc:39: e4:be:86:b8:28:3b:42:d3:52:91:e4:ec:aa:c7:a2: 30:ec:4a:cd:bb:66:a6:ba:3e:7d:99:48:34:82:80: 5a:73:7c:2f:bc:f8:4e:d2:23:dd:5b:51:c0:c3:e0: fa:12:b1:ba:c4:74:23:5f:7b:6d:5e:09:be:b6:4d: 03:03:ba:fb:f5:c3:dd:f4:e9:d1:ee:d2:53:d5:d0: d5:63:ee:bf:9f:8d:23:d0:3c:87:be:a0:c1:99:70: 76:92:ca:18:18:dd:f8:a6:4f:85:84:4b:1c:38:0e: 26:db:ff:10:93:48:2c:0a:5f:46:e2:56:de:d5:d7: fc:e5:bf:9f:f4:86:9e:46:b2:6a:9a:fe:02:73:9c: a7:ad:55:90:8f:4d:d5:df:02:24:f2:82:08:36:6a: 0f:35:f0:ba:6b:1f:c3:92:2b:dd:84:70:db:fe:b1: 99:3b:f4:57:57:c8:b8:47:6f:a0:e1:c1:2a:60:11: 1c:b3:2f:72:64:af:5c:39:30:f6:27:3d:f2:c6:11: 9e:41:fd:4c:89:67:b4:3e:e7:90:e5:fa:97:de:4c: ff:ae:f7:66:4f:4e:01:d0:45:e9:50:31:46:57:41: 9f:09:ea:0c:5f:f3:06:74:6c:9f:00:0d:2f:88:8c: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:50:48:F6:8D:1F:BB:97:59:B3:1E:5C:38:A3:56:83:FD:44:55:4D X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/t1BI9o0fu5dZsx5cOKNWg_1EVU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.92.113.0/24 Signature Algorithm: sha256WithRSAEncryption 48:1f:53:d8:68:d3:9c:83:e9:af:48:69:1d:07:a0:12:e0:ab: c6:34:13:a4:c0:b1:99:76:63:c2:d7:0d:21:26:d4:b0:40:10: cb:fd:8f:0d:f4:e8:cf:bc:e7:fa:8e:01:44:d7:47:4c:7c:02: 7d:1e:16:79:64:48:0a:f9:da:4d:97:a6:eb:84:03:bd:aa:d0: 03:f1:a9:69:bb:27:bd:9e:a2:d3:8e:09:47:2e:f3:41:76:81: e8:78:04:cd:9e:31:c8:fd:b4:86:65:31:86:b8:58:37:3f:3d: a9:6e:1e:be:fc:82:ee:14:33:9f:5a:a6:4d:75:01:c8:33:36: 13:7e:d6:64:fa:bc:ba:71:d6:3a:79:54:d8:39:16:ca:0e:fc: c8:2f:d1:5d:5a:73:c9:f4:3e:25:58:a3:63:0e:c8:bd:82:f8: cf:74:30:f3:14:53:b3:0d:41:ee:e7:ec:ee:95:47:97:4c:0c: 92:5c:51:db:14:a5:58:74:1e:e1:bb:46:00:84:ca:42:a4:f4: 66:07:ba:cd:fd:b6:bc:4a:6c:d6:0e:3d:05:68:c8:d2:08:07: 2c:3f:7f:d6:06:c4:be:b5:d3:bf:b7:3f:1a:c8:65:51:6b:05: ce:1c:8e:57:84:84:6a:ce:bf:57:c1:a0:b8:11:9c:e9:85:84: d0:65:ad:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhB09HLmMbfo4/L9XBuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzUwNDhmNjhkMWZiYjk3NTliMzFlNWMzOGEzNTY4M2ZkNDQ1NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHn8MyVSmBEaY7yg/Dnkvoa4KDtC 01KR5Oyqx6Iw7ErNu2amuj59mUg0goBac3wvvPhO0iPdW1HAw+D6ErG6xHQjX3tt Xgm+tk0DA7r79cPd9OnR7tJT1dDVY+6/n40j0DyHvqDBmXB2ksoYGN34pk+FhEsc OA4m2/8Qk0gsCl9G4lbe1df85b+f9IaeRrJqmv4Cc5ynrVWQj03V3wIk8oIINmoP NfC6ax/DkivdhHDb/rGZO/RXV8i4R2+g4cEqYBEcsy9yZK9cOTD2Jz3yxhGeQf1M iWe0PueQ5fqX3kz/rvdmT04B0EXpUDFGV0GfCeoMX/MGdGyfAA0viIy5xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdQSPaNH7uXWbMeXDijVoP9RFVNMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvdDFCSTlvMGZ1NWRac3g1Y09LTldnXzFFVlUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVxxMA0G CSqGSIb3DQEBCwUAA4IBAQBIH1PYaNOcg+mvSGkdB6AS4KvGNBOkwLGZdmPC1w0h JtSwQBDL/Y8N9OjPvOf6jgFE10dMfAJ9HhZ5ZEgK+dpNl6brhAO9qtAD8alpuye9 nqLTjglHLvNBdoHoeATNnjHI/bSGZTGGuFg3Pz2pbh6+/ILuFDOfWqZNdQHIMzYT ftZk+ry6cdY6eVTYORbKDvzIL9FdWnPJ9D4lWKNjDsi9gvjPdDDzFFOzDUHu5+zu lUeXTAySXFHbFKVYdB7hu0YAhMpCpPRmB7rN/ba8SmzWDj0FaMjSCAcsP3/WBsS+ tdO/tz8ayGVRawXOHI5XhIRqzr9XwaC4EZzphYTQZa2h -----END CERTIFICATE-----Generated at Wed Jan 21 09:24:28 2026 by rpki-client