This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u1xhQmsYMD7FuoMyimFZRSEp69w.roa File: u1xhQmsYMD7FuoMyimFZRSEp69w.roa (raw, json) Hash identifier: Kl3NxbR684OLHS70CAW/GfoMGX9UyTvUNKoPMm0ySo4= Subject key identifier: BB:5C:61:42:6B:18:30:3E:C5:BA:83:32:8A:61:59:45:21:29:EB:DC Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106E00DF315960E1315DC13F1196B9 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u1xhQmsYMD7FuoMyimFZRSEp69w.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213143 IP address blocks: 77.92.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6e:00:df:31:59:60:e1:31:5d:c1:3f:11:96:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb5c61426b18303ec5ba83328a6159452129ebdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:38:2b:69:b3:5b:2e:7f:07:a6:fa:52:59: 3c:a5:9e:dd:21:6a:4f:03:35:c2:11:df:ea:da:b4: af:ed:9a:b0:ab:b7:4c:0e:90:36:c5:87:a0:b7:b5: ed:7a:0c:5c:b2:41:7b:b8:57:04:58:46:3b:70:8d: 81:17:f9:ac:0f:45:5f:0c:4f:8c:fb:8b:f3:a2:84: 54:f4:b6:3c:b1:37:c5:fc:93:82:2b:19:8b:92:09: 03:26:19:f6:6d:ef:7a:a0:ae:c0:23:c4:0f:91:58: 11:dc:f9:02:99:21:1a:72:8c:8e:8b:52:1d:2a:b2: c9:bb:8f:03:b8:7d:eb:ba:f5:8a:1b:b6:94:16:47: 41:58:ec:42:f7:f9:d6:d7:1a:3e:1f:58:f6:39:9b: 97:99:82:2d:12:16:8b:8e:0b:cc:d5:1a:8a:f1:84: 8a:06:be:00:a9:15:af:a6:9c:d1:bd:c1:01:df:7f: 09:0b:9c:cf:ba:d9:1e:49:81:55:e8:5a:a0:0c:fe: af:1b:0c:10:d3:9d:c8:18:03:bb:93:57:5a:30:7f: 6d:0b:48:c9:1f:83:93:cd:d7:a2:77:28:48:8a:8e: 97:02:b8:66:1a:4b:7c:93:a0:16:43:79:b9:77:c4: f6:1a:67:64:7b:e1:37:88:0d:0b:e5:46:a6:76:bd: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5C:61:42:6B:18:30:3E:C5:BA:83:32:8A:61:59:45:21:29:EB:DC X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u1xhQmsYMD7FuoMyimFZRSEp69w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:5a:ee:84:5b:dc:13:28:f3:f3:4c:0c:2b:b2:c6:e0:12:2b: ac:92:39:07:19:ae:c7:cd:03:7e:ca:52:05:27:00:df:4d:5a: c8:d5:ed:61:87:da:06:63:21:f0:cb:04:ea:3e:34:ec:f4:81: 76:c6:7c:8c:a7:e7:fa:1e:12:cb:81:b2:ad:9e:78:e9:1d:e9: 8b:69:c6:4e:59:a7:98:87:19:ae:3a:e7:a6:00:5f:c2:c4:3b: 4a:65:b0:43:ec:e6:b1:55:86:9b:28:26:59:79:c6:b4:49:42: cb:94:5d:9a:f0:de:4d:12:91:d6:12:2f:d1:7e:36:71:58:32: dd:a8:ef:25:b5:b2:53:91:04:ef:ad:7c:1f:67:00:1d:4f:60: ec:42:6b:21:d1:03:06:0f:83:e0:24:3d:8b:ae:a5:e0:4a:50: b7:e1:8e:0f:50:67:c5:12:cc:bf:96:a0:a5:d9:64:f3:e9:e3: 43:a3:b3:a5:55:76:1c:02:8f:cc:74:23:f6:3d:9d:be:43:e4: e1:7a:93:74:3c:f3:05:2c:e2:07:21:18:2f:c8:86:39:c1:bd: ac:4b:14:64:95:8b:45:c5:06:3f:86:05:28:31:81:3b:e7:69: c2:3c:ec:b5:10:9e:03:d2:89:26:1b:65:c5:f7:fc:3b:ce:48: 31:36:dc:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG4A3zFZYOExXcE/EZa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjVjNjE0MjZiMTgzMDNlYzViYTgzMzI4YTYxNTk0NTIxMjllYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEo4K2mzWy5/B6b6Ulk8pZ7dIWpP AzXCEd/q2rSv7Zqwq7dMDpA2xYegt7XtegxcskF7uFcEWEY7cI2BF/msD0VfDE+M +4vzooRU9LY8sTfF/JOCKxmLkgkDJhn2be96oK7AI8QPkVgR3PkCmSEacoyOi1Id KrLJu48DuH3ruvWKG7aUFkdBWOxC9/nW1xo+H1j2OZuXmYItEhaLjgvM1RqK8YSK Br4AqRWvppzRvcEB338JC5zPutkeSYFV6FqgDP6vGwwQ053IGAO7k1daMH9tC0jJ H4OTzdeidyhIio6XArhmGkt8k6AWQ3m5d8T2Gmdke+E3iA0L5Uamdr3osQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtcYUJrGDA+xbqDMophWUUhKevcMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvdTF4aFFtc1lNRDdGdW9NeWltRlpSU0VwNjl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyDMA0G CSqGSIb3DQEBCwUAA4IBAQA+Wu6EW9wTKPPzTAwrssbgEiuskjkHGa7HzQN+ylIF JwDfTVrI1e1hh9oGYyHwywTqPjTs9IF2xnyMp+f6HhLLgbKtnnjpHemLacZOWaeY hxmuOuemAF/CxDtKZbBD7OaxVYabKCZZeca0SULLlF2a8N5NEpHWEi/RfjZxWDLd qO8ltbJTkQTvrXwfZwAdT2DsQmsh0QMGD4PgJD2LrqXgSlC34Y4PUGfFEsy/lqCl 2WTz6eNDo7OlVXYcAo/MdCP2PZ2+Q+ThepN0PPMFLOIHIRgvyIY5wb2sSxRklYtF xQY/hgUoMYE752nCPOy1EJ4D0okmG2XF9/w7zkgxNtz3 -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:56 2026 by rpki-client