This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-mBWr_gjV_KttifTobMjzi1luXU.roa File: 1-mBWr_gjV_KttifTobMjzi1luXU.roa (raw, json) Hash identifier: FiozQ6F2osmdHY/N/fd4i1R5GUXHYmjhE93dKcl2e5w= Subject key identifier: FA:60:56:AF:F8:23:57:F2:AD:B6:27:D3:A1:B3:23:CE:2D:65:B9:75 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791139D6D129A9AE024DC68F656713B2 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-mBWr_gjV_KttifTobMjzi1luXU.roa Signing time: Thu 01 Jan 2026 10:18:50 +0000 ROA not before: Thu 01 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 104.249.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:39:d6:d1:29:a9:ae:02:4d:c6:8f:65:67:13:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa6056aff82357f2adb627d3a1b323ce2d65b975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:b9:34:48:1f:e5:88:f2:49:f4:d0:fd:96: 3c:4f:d4:3e:66:ea:41:de:bc:8e:23:c4:a0:e0:cf: fa:72:af:9a:39:bf:da:b7:60:7f:d5:07:c6:d0:d4: c1:90:54:4b:b8:c0:59:91:58:84:7a:6b:06:9a:fa: f3:29:7d:b5:ce:a5:2e:c3:04:d8:db:a6:2b:8f:33: 06:d4:90:da:fa:97:fd:5f:45:46:ac:95:bd:47:40: 71:f3:81:55:ec:12:e3:3c:79:c5:ac:fa:94:82:ff: 63:4c:84:46:e5:8f:98:44:ed:08:cd:58:97:97:1b: 56:68:7a:63:d8:1d:1a:31:dc:1a:49:59:f0:6b:dc: 92:25:82:08:24:d6:04:bb:9a:f4:1e:2c:97:89:46: cc:bc:c7:45:d3:80:00:7f:f1:86:e6:19:20:44:d5: 5b:83:df:61:0c:fc:7e:d2:74:c5:fb:bf:cf:bb:4e: 70:c0:a7:e9:0e:df:1a:de:e8:5d:82:8a:72:66:91: 36:21:2c:f1:30:91:35:0c:07:e0:b7:af:97:52:a1: cb:47:91:40:15:8e:84:0e:fd:25:41:5d:01:53:ff: 5a:dd:ba:a4:e4:3d:99:fb:08:6a:b6:73:af:d6:65: ec:69:50:61:a9:4a:25:09:7e:de:7b:56:7b:d0:9e: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:60:56:AF:F8:23:57:F2:AD:B6:27:D3:A1:B3:23:CE:2D:65:B9:75 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-mBWr_gjV_KttifTobMjzi1luXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.249.56.0/22 Signature Algorithm: sha256WithRSAEncryption 84:2b:f0:24:d1:06:51:ea:58:8d:29:60:3e:69:94:7f:4f:28: c6:37:18:94:b8:1b:bc:79:ad:84:9c:88:48:e5:b2:7e:ee:d6: 4c:4a:2e:cb:aa:94:ec:94:22:d5:f2:46:58:c1:6d:1a:ae:02: 29:6a:77:f4:81:3f:00:4e:42:6e:0f:ea:da:5b:29:4d:07:1f: 7a:c6:7e:95:70:21:b9:82:65:fc:20:87:06:7c:68:0c:4c:d6: f2:ce:57:94:0f:f3:6f:8f:5f:a2:2b:e5:46:30:10:eb:23:08: 2b:ba:39:4a:28:ca:44:dc:3f:ea:66:1c:a6:75:cc:8a:0b:91: 73:d2:5e:9a:a6:77:9c:fc:d8:8c:9b:32:0e:bf:6c:ed:60:fc: ea:ca:a0:8a:03:38:06:cf:cb:7d:4d:da:6b:72:bb:a5:80:d1: 4f:1d:d2:6e:df:f2:80:14:78:68:91:68:63:d8:df:bf:47:84: 35:e0:1f:73:b0:04:d2:f6:3f:b0:04:8c:75:ff:be:8e:08:94: 43:e6:5a:a4:04:3b:a4:c9:ee:66:bb:4c:88:0d:88:24:08:a6: c5:1f:d2:45:71:7a:9c:7d:3c:3e:84:ef:d0:df:6b:e9:aa:5d: 0a:de:b3:5d:07:00:2d:f0:96:cc:5a:08:d1:ac:bc:93:8d:c7: 1c:55:25:60 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ETnW0SmprgJNxo9lZxOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTYwNTZhZmY4MjM1N2YyYWRiNjI3ZDNhMWIzMjNjZTJkNjViOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocK5NEgf5YjySfTQ/ZY8T9Q+ZupB 3ryOI8Sg4M/6cq+aOb/at2B/1QfG0NTBkFRLuMBZkViEemsGmvrzKX21zqUuwwTY 26YrjzMG1JDa+pf9X0VGrJW9R0Bx84FV7BLjPHnFrPqUgv9jTIRG5Y+YRO0IzViX lxtWaHpj2B0aMdwaSVnwa9ySJYIIJNYEu5r0HiyXiUbMvMdF04AAf/GG5hkgRNVb g99hDPx+0nTF+7/Pu05wwKfpDt8a3uhdgopyZpE2ISzxMJE1DAfgt6+XUqHLR5FA FY6EDv0lQV0BU/9a3bqk5D2Z+whqtnOv1mXsaVBhqUolCX7ee1Z70J7XuQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPpgVq/4I1fyrbYn06GzI84tZbl1MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMS1tQldyX2dqVl9LdHRpZlRvYk1qemkxbHVYVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWEvZmRkNjMzLWM2NTgtNDljNS05ZThmLWZiMDc5NTVmM2Fh YS8xL1lGZ2VaejJBOTBkSk5ySVROLXI4d2IzRGhlay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmj5ODAN BgkqhkiG9w0BAQsFAAOCAQEAhCvwJNEGUepYjSlgPmmUf08oxjcYlLgbvHmthJyI SOWyfu7WTEouy6qU7JQi1fJGWMFtGq4CKWp39IE/AE5Cbg/q2lspTQcfesZ+lXAh uYJl/CCHBnxoDEzW8s5XlA/zb49foivlRjAQ6yMIK7o5SijKRNw/6mYcpnXMiguR c9JemqZ3nPzYjJsyDr9s7WD86sqgigM4Bs/LfU3aa3K7pYDRTx3Sbt/ygBR4aJFo Y9jfv0eENeAfc7AE0vY/sASMdf++jgiUQ+ZapAQ7pMnuZrtMiA2IJAimxR/SRXF6 nH08PoTv0N9r6apdCt6zXQcALfCWzFoI0ay8k43HHFUlYA== -----END CERTIFICATE-----Generated at Fri Jan 2 02:41:11 2026 by rpki-client