This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/1g5Vvv96ighDkSqXd-c3m0Fystw.roa File: 1g5Vvv96ighDkSqXd-c3m0Fystw.roa (raw, json) Hash identifier: vG+feQkpTWab4/oRvuuesxoi31NwjEJhw9SKZVjbK2M= Subject key identifier: D6:0E:55:BE:FF:7A:8A:08:43:91:2A:97:77:E7:37:9B:41:72:B2:DC Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019B78A30180F5C467D2207FECA442FA74C7 Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/1g5Vvv96ighDkSqXd-c3m0Fystw.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 132.64.0.0/16 maxlen: 16 132.65.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:01:80:f5:c4:67:d2:20:7f:ec:a4:42:fa:74:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d60e55beff7a8a0843912a9777e7379b4172b2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:a0:b0:39:ea:9a:0d:df:d2:78:0e:4e:71: 3f:6d:ff:ec:bd:9e:9d:87:30:fc:39:36:8b:b8:a9: 6b:6e:23:1a:eb:a1:01:7b:d5:89:01:c9:3c:88:9c: 7d:5d:53:d1:fd:0f:2d:5a:ed:91:2d:24:00:d4:b9: c5:dd:7b:fc:c4:e9:52:2c:86:7d:3d:37:8c:68:93: db:8f:b6:e2:9f:6e:3f:9f:a8:ff:91:da:b0:89:76: 8f:f2:79:cf:00:1c:cd:c7:49:bb:a6:03:b9:90:e1: 7e:98:00:90:dd:27:69:a2:2f:9a:db:dc:04:72:32: 72:24:0f:fd:df:5a:68:13:4d:5c:07:09:9b:ce:32: 40:6f:e3:29:ab:e2:0d:38:cd:60:37:7f:c0:4e:f5: d5:a3:17:af:02:66:ca:9d:5c:c3:17:56:37:25:97: d0:81:96:42:3e:d1:fd:10:a0:d0:9f:7b:20:5d:29: d8:e1:da:4c:35:cc:e1:6f:59:ef:e3:64:7a:fb:ca: 3b:ab:77:0c:f3:fa:ca:d2:ee:d9:bd:df:37:16:e8: c6:2f:6f:c1:00:b7:fd:26:60:00:76:02:e6:ab:96: 79:38:52:09:95:7f:82:6c:e2:fa:3b:c7:b9:30:51: 42:eb:75:01:41:6d:a3:9a:71:c1:a8:a0:3f:95:41: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0E:55:BE:FF:7A:8A:08:43:91:2A:97:77:E7:37:9B:41:72:B2:DC X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/1g5Vvv96ighDkSqXd-c3m0Fystw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.64.0.0/15 Signature Algorithm: sha256WithRSAEncryption 52:f8:aa:7b:b6:6f:ff:d5:47:b2:46:73:cc:bd:e3:1e:5b:71: f2:90:e5:94:ad:e6:c7:e4:e0:45:a7:51:02:19:52:e7:60:6e: 08:77:a0:a8:8c:f9:db:50:cf:bd:02:9b:ba:19:4f:75:d9:8c: 12:41:ca:45:c3:d9:8b:9e:64:98:05:b1:6f:6d:32:76:ba:62: 05:e8:37:d7:a7:b3:50:bb:a3:db:82:8d:ca:0a:4c:7d:a7:7e: 63:31:8c:e1:87:ef:c9:97:01:85:b5:15:81:bc:2a:2a:e4:71: 40:49:02:b7:e0:42:69:5e:b0:66:f0:4e:a4:85:e3:02:a7:6f: fb:0c:a5:4b:f7:1b:bc:c7:65:56:64:f9:12:68:bb:d1:fa:60: bc:00:8d:f1:da:e7:34:37:00:2a:00:6a:49:22:36:2f:34:36: 01:64:1d:3e:dd:1e:d8:42:ce:42:14:a1:84:b6:6d:f4:89:88: 7d:8a:ab:c3:88:d3:05:ec:fa:a8:79:0d:b9:71:3b:f3:42:7c: 13:0d:e5:e0:9d:48:50:22:50:70:74:77:a6:1e:42:14:cf:36: 6f:5c:b2:15:b2:83:eb:de:ce:c2:4f:de:03:cb:85:0e:83:1d: 27:9e:f0:84:ce:98:3b:36:77:54:97:44:3e:ce:07:63:c3:25: 6a:54:14:9c -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4owGA9cRn0iB/7KRC+nTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjBlNTViZWZmN2E4YTA4NDM5MTJhOTc3N2U3Mzc5YjQxNzJiMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWCgsDnqmg3f0ngOTnE/bf/svZ6d hzD8OTaLuKlrbiMa66EBe9WJAck8iJx9XVPR/Q8tWu2RLSQA1LnF3Xv8xOlSLIZ9 PTeMaJPbj7bin24/n6j/kdqwiXaP8nnPABzNx0m7pgO5kOF+mACQ3Sdpoi+a29wE cjJyJA/931poE01cBwmbzjJAb+Mpq+INOM1gN3/ATvXVoxevAmbKnVzDF1Y3JZfQ gZZCPtH9EKDQn3sgXSnY4dpMNczhb1nv42R6+8o7q3cM8/rK0u7Zvd83FujGL2/B ALf9JmAAdgLmq5Z5OFIJlX+CbOL6O8e5MFFC63UBQW2jmnHBqKA/lUHS3QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNYOVb7/eooIQ5Eql3fnN5tBcrLcMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvMWc1VnZ2OTZpZ2hEa1NxWGQtYzNtMEZ5c3R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEAwDQYJ KoZIhvcNAQELBQADggEBAFL4qnu2b//VR7JGc8y94x5bcfKQ5ZSt5sfk4EWnUQIZ Uudgbgh3oKiM+dtQz70Cm7oZT3XZjBJBykXD2YueZJgFsW9tMna6YgXoN9ens1C7 o9uCjcoKTH2nfmMxjOGH78mXAYW1FYG8KirkcUBJArfgQmlesGbwTqSF4wKnb/sM pUv3G7zHZVZk+RJou9H6YLwAjfHa5zQ3ACoAakkiNi80NgFkHT7dHthCzkIUoYS2 bfSJiH2Kq8OI0wXs+qh5DblxO/NCfBMN5eCdSFAiUHB0d6YeQhTPNm9cshWyg+ve zsJP3gPLhQ6DHSee8ITOmDs2d1SXRD7OB2PDJWpUFJw= -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:42 2026 by rpki-client