This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-eqhu1uiYE-S1_X3xN1jBRdx2cA.roa File: 1-eqhu1uiYE-S1_X3xN1jBRdx2cA.roa (raw, json) Hash identifier: te1zm3JXl+mfGoh33gfZkrVrv0zKrqTNOHhkVjQLz4w= Subject key identifier: F9:EA:A1:BB:5B:A2:60:4F:92:D7:F5:F7:C4:DD:63:05:17:71:D9:C0 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB8074E7DD9A1DB68183A305C42BF2 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-eqhu1uiYE-S1_X3xN1jBRdx2cA.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209805 IP address blocks: 130.255.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:80:74:e7:dd:9a:1d:b6:81:83:a3:05:c4:2b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9eaa1bb5ba2604f92d7f5f7c4dd63051771d9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:c4:54:73:43:73:ac:d3:68:2f:98:bc:e1: bb:51:3e:ae:f1:88:a2:0a:33:ac:0a:1a:36:d5:de: 31:7d:8d:06:1f:64:18:c3:56:d4:0d:af:d4:1e:a5: 2c:51:10:e3:4f:27:8d:8a:43:c3:07:f5:1a:0c:51: e8:88:48:d0:3a:1a:3b:f1:95:1a:12:a3:d9:af:d6: 1e:21:98:58:d9:4f:89:de:73:8d:72:c4:ae:29:5a: cd:5b:4e:57:9d:3a:b8:a4:09:5b:6d:5f:e9:9c:33: 9f:06:b8:46:d1:80:72:a9:17:2a:dd:48:e0:d1:8c: a7:5c:25:b7:17:44:dc:f9:af:b1:4e:32:4b:7f:f3: 06:25:01:2f:d4:b2:1c:42:48:5b:53:e8:60:cc:14: 1e:5c:1c:20:b1:ea:bb:21:dd:5e:52:be:79:21:4c: 27:ff:63:81:cc:60:bd:d9:f8:9e:aa:8d:44:44:77: c9:15:41:e7:f9:73:36:91:49:01:9c:20:c3:e7:05: b8:83:42:0a:0f:d1:b8:f4:14:72:34:f8:14:e4:9b: e5:41:9b:dc:09:b9:5b:5b:a5:03:1c:f8:d9:77:c7: ec:11:c6:de:94:6c:3d:bc:3e:bb:b9:3a:a7:60:3e: 2b:3c:f7:d0:9d:86:90:de:38:22:42:75:36:2a:6d: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:A1:BB:5B:A2:60:4F:92:D7:F5:F7:C4:DD:63:05:17:71:D9:C0 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-eqhu1uiYE-S1_X3xN1jBRdx2cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.170.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:01:11:33:e5:65:22:72:c4:20:c9:24:d7:69:48:c2:56:d6: 2c:36:1d:cc:d1:32:89:a6:85:99:7c:b8:a7:7d:2d:ef:b8:19: 44:6e:2c:f1:88:47:6d:d6:8e:71:6e:4c:07:c4:78:55:17:52: 2c:be:54:0a:2c:f4:3a:e0:96:e6:50:8e:d9:57:a5:d8:ea:79: ec:31:38:88:dd:30:5d:4e:40:31:bc:fe:77:7e:90:85:fb:ab: 5d:2d:a6:b4:66:a0:83:06:91:f3:91:b0:ee:2c:cd:41:f9:f3: c4:a7:f6:cc:c1:e5:10:3e:69:44:5a:cf:27:a8:97:2a:4e:d7: e6:56:3c:67:d7:30:4f:1b:c6:c8:fc:3b:60:c7:6f:97:e4:8f: 29:e6:06:43:cf:18:46:d5:db:6b:a7:3a:e7:9d:bb:c4:61:3e: 4f:b9:72:fc:32:cd:c0:2b:eb:0b:2d:03:d5:fa:8b:8b:b8:2c: 85:22:39:61:ae:71:27:fc:69:57:6d:3f:63:e4:97:75:c6:08: 1a:23:db:f1:6a:31:6c:f1:b4:6e:c7:07:9b:e2:3b:59:6e:60: 30:04:fb:22:f3:e6:a8:54:4d:73:99:94:ce:85:6e:85:1b:a4: 63:d2:81:c7:2a:9b:19:70:1d:53:3f:2a:48:ea:d5:10:80:6f: ef:13:66:9d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9y4B0592aHbaBg6MFxCvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWVhYTFiYjViYTI2MDRmOTJkN2Y1ZjdjNGRkNjMwNTE3NzFkOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn7EVHNDc6zTaC+YvOG7UT6u8Yii CjOsCho21d4xfY0GH2QYw1bUDa/UHqUsURDjTyeNikPDB/UaDFHoiEjQOho78ZUa EqPZr9YeIZhY2U+J3nONcsSuKVrNW05XnTq4pAlbbV/pnDOfBrhG0YByqRcq3Ujg 0YynXCW3F0Tc+a+xTjJLf/MGJQEv1LIcQkhbU+hgzBQeXBwgseq7Id1eUr55IUwn /2OBzGC92fieqo1ERHfJFUHn+XM2kUkBnCDD5wW4g0IKD9G49BRyNPgU5JvlQZvc CblbW6UDHPjZd8fsEcbelGw9vD67uTqnYD4rPPfQnYaQ3jgiQnU2Km2hCQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnqobtbomBPktf198TdYwUXcdnAMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvMS1lcWh1MXVpWUUtUzFfWDN4TjFqQlJkeDJjQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWIvN2I5MzM2LWU5ZjgtNGUyNy1hZjRiLTIzOWQyZmUzOThi MS8xL0NUTlR3ZnEtaVdyNHVGX25ZQTVHTkphUHpFdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIL/qjAN BgkqhkiG9w0BAQsFAAOCAQEAmgERM+VlInLEIMkk12lIwlbWLDYdzNEyiaaFmXy4 p30t77gZRG4s8YhHbdaOcW5MB8R4VRdSLL5UCiz0OuCW5lCO2Vel2Op57DE4iN0w XU5AMbz+d36QhfurXS2mtGaggwaR85Gw7izNQfnzxKf2zMHlED5pRFrPJ6iXKk7X 5lY8Z9cwTxvGyPw7YMdvl+SPKeYGQ88YRtXba6c65527xGE+T7ly/DLNwCvrCy0D 1fqLi7gshSI5Ya5xJ/xpV20/Y+SXdcYIGiPb8WoxbPG0bscHm+I7WW5gMAT7IvPm qFRNc5mUzoVuhRukY9KBxyqbGXAdUz8qSOrVEIBv7xNmnQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:55 2026 by rpki-client