This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1fNLWLc3qsJ9A4zvZKJ0Bn0hrQI.roa File: 1fNLWLc3qsJ9A4zvZKJ0Bn0hrQI.roa (raw, json) Hash identifier: 1aBnlsEbmFOYBJAUPJmEXT4sRHHv4UoAec/JcQ2XffI= Subject key identifier: D5:F3:4B:58:B7:37:AA:C2:7D:03:8C:EF:64:A2:74:06:7D:21:AD:02 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB72030BFFF551BCBBA63A0F8EE2BB Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1fNLWLc3qsJ9A4zvZKJ0Bn0hrQI.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60287 IP address blocks: 5.42.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:72:03:0b:ff:f5:51:bc:bb:a6:3a:0f:8e:e2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f34b58b737aac27d038cef64a274067d21ad02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7a:fb:28:5b:7e:6d:2c:45:73:ce:6c:c7:42: 26:53:6d:b7:bd:ad:c3:cf:04:b4:cf:f6:69:16:c9: aa:47:61:af:ae:ff:a9:0f:5e:b8:58:80:5d:be:7b: dd:ed:ac:07:f7:93:18:73:1c:94:6c:19:c4:36:bd: 3a:40:d3:c1:fc:cf:de:7f:43:ea:84:b4:40:bf:0c: 74:95:fd:93:42:a6:c6:ee:99:b9:75:8d:10:ee:3b: b6:6e:0e:57:43:8e:3b:52:26:bc:4d:5d:e4:22:09: 4d:78:8a:17:e0:b0:2d:45:bd:7b:62:e1:bb:4b:33: 25:8a:8a:39:82:93:95:c9:22:88:89:53:17:a7:d6: 85:af:e6:67:a6:8d:55:14:2d:a6:f3:e0:22:72:02: a7:61:06:00:cc:6c:2c:39:c1:2e:bc:2f:63:5f:6f: 90:5a:34:b9:2f:84:fc:83:53:37:de:af:88:e1:4c: d0:99:01:19:ed:8a:07:92:e7:c4:b1:6a:f7:2f:84: fc:27:ea:b4:bb:4c:c1:28:80:a9:13:cf:c9:df:ad: ab:34:59:f0:3a:c7:33:a6:c1:7b:f2:74:e7:d1:8b: 34:8e:31:90:fc:10:16:ba:1b:27:c2:8c:40:83:e2: d4:d3:f8:62:48:bb:b5:3a:ca:f9:57:b7:4e:e0:0c: 75:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F3:4B:58:B7:37:AA:C2:7D:03:8C:EF:64:A2:74:06:7D:21:AD:02 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1fNLWLc3qsJ9A4zvZKJ0Bn0hrQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.214.0/24 Signature Algorithm: sha256WithRSAEncryption 44:40:02:b1:aa:f5:df:c1:aa:7c:20:a0:7d:bf:3c:d7:5f:a7: 9a:a8:e4:3d:8d:e9:39:67:50:12:40:9a:7a:8a:e3:15:50:94: c5:4d:05:6d:9d:1a:e2:82:8e:81:ce:fa:95:c6:c3:58:04:aa: fe:cb:9b:ad:3a:37:d0:5d:65:d3:86:8d:a4:22:a2:21:6b:eb: f9:f2:d9:89:68:59:84:5c:f4:30:42:a9:99:33:10:17:d8:5e: de:63:11:04:2e:6a:96:06:88:5b:f5:73:9d:14:c7:ef:1b:96: d5:e4:1d:d9:86:c9:23:b3:6d:0f:db:b4:54:ab:4a:a1:0d:12: 2b:31:39:86:de:a1:09:84:2f:9d:0a:88:08:cf:1a:79:c4:25: 21:5c:71:a6:04:64:b3:88:7e:bf:d3:31:a1:40:c4:d7:f9:56: d9:01:6d:aa:c5:f4:70:78:40:39:cd:c6:a7:ba:c7:c1:eb:5c: 98:9e:e8:05:b4:6a:bf:11:d8:71:42:82:52:7b:ce:2c:63:0e: 86:f3:3b:9d:90:e2:c2:f3:67:39:d4:66:21:10:01:af:e6:bd: 9d:7c:98:44:4b:5d:4f:f9:ef:b4:e2:74:28:08:0d:a1:65:d4: 72:fe:51:27:14:1a:eb:80:7a:55:83:f1:c9:d1:b0:89:45:4a: 39:43:98:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3IDC//1Uby7pjoPjuK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWYzNGI1OGI3MzdhYWMyN2QwMzhjZWY2NGEyNzQwNjdkMjFhZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Xr7KFt+bSxFc85sx0ImU223va3D zwS0z/ZpFsmqR2Gvrv+pD164WIBdvnvd7awH95MYcxyUbBnENr06QNPB/M/ef0Pq hLRAvwx0lf2TQqbG7pm5dY0Q7ju2bg5XQ447Uia8TV3kIglNeIoX4LAtRb17YuG7 SzMlioo5gpOVySKIiVMXp9aFr+Znpo1VFC2m8+AicgKnYQYAzGwsOcEuvC9jX2+Q WjS5L4T8g1M33q+I4UzQmQEZ7YoHkufEsWr3L4T8J+q0u0zBKICpE8/J362rNFnw OsczpsF78nTn0Ys0jjGQ/BAWuhsnwoxAg+LU0/hiSLu1Osr5V7dO4Ax1fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNXzS1i3N6rCfQOM72SidAZ9Ia0CMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvMWZOTFdMYzNxc0o5QTR6dlpLSjBCbjBoclFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrWMA0G CSqGSIb3DQEBCwUAA4IBAQBEQAKxqvXfwap8IKB9vzzXX6eaqOQ9jek5Z1ASQJp6 iuMVUJTFTQVtnRrigo6BzvqVxsNYBKr+y5utOjfQXWXTho2kIqIha+v58tmJaFmE XPQwQqmZMxAX2F7eYxEELmqWBohb9XOdFMfvG5bV5B3Zhskjs20P27RUq0qhDRIr MTmG3qEJhC+dCogIzxp5xCUhXHGmBGSziH6/0zGhQMTX+VbZAW2qxfRweEA5zcan usfB61yYnugFtGq/EdhxQoJSe84sYw6G8zudkOLC82c51GYhEAGv5r2dfJhES11P +e+04nQoCA2hZdRy/lEnFBrrgHpVg/HJ0bCJRUo5Q5jP -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client