This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_y9_oZ1j9QVoa3Pm6QWHGmvccL4.roa File: _y9_oZ1j9QVoa3Pm6QWHGmvccL4.roa (raw, json) Hash identifier: 0GxSZz5/AYTFV7FMif3LWKuWNI9TyrkDP3Z8t3AIe88= Subject key identifier: FF:2F:7F:A1:9D:63:F5:05:68:6B:73:E6:E9:05:87:1A:6B:DC:70:BE Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B365A1EE26EC1B29718DBA70871860B Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_y9_oZ1j9QVoa3Pm6QWHGmvccL4.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32043 IP address blocks: 144.56.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5a:1e:e2:6e:c1:b2:97:18:db:a7:08:71:86:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff2f7fa19d63f505686b73e6e905871a6bdc70be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:8f:49:eb:52:41:28:21:f6:d3:0f:c2:e0: fd:04:62:6e:ca:82:9c:71:a7:78:f3:d2:85:5d:9c: 1e:30:38:24:9d:43:ac:ea:46:ba:62:f5:8f:00:a3: 5b:86:f5:42:c6:ac:a0:cd:97:9a:fa:ee:6a:36:19: 95:51:0b:c6:47:8b:e1:9b:74:c6:45:39:55:b8:e5: 5b:9b:da:1e:8b:97:9c:f9:2c:0a:3c:b0:c3:f9:29: f4:52:dc:7c:e3:cb:a2:38:c3:94:e2:79:97:f7:18: 4f:1d:5d:3b:32:2e:14:77:33:c5:64:d2:de:60:58: 07:6b:b0:f3:6b:45:b2:4a:eb:c7:d8:6b:ff:bb:eb: de:02:5d:98:08:93:71:b9:b2:70:4e:61:e6:1c:a2: 0a:a3:6b:50:73:bf:91:85:33:64:0c:32:79:18:9d: a7:98:f8:b7:e2:29:1f:fd:f6:a0:85:5e:98:9d:92: c8:9b:c7:58:cc:8d:cd:a7:00:33:96:37:5f:8a:53: c9:c9:77:58:06:0a:06:9d:44:64:96:c5:e4:37:78: 32:19:c7:f0:8f:0c:d3:84:c1:7b:43:e9:a4:97:46: 85:48:38:41:c6:55:a3:b3:d4:76:de:cc:62:80:a2: 60:94:41:58:45:18:8f:b0:63:6e:37:96:37:73:bd: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2F:7F:A1:9D:63:F5:05:68:6B:73:E6:E9:05:87:1A:6B:DC:70:BE X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_y9_oZ1j9QVoa3Pm6QWHGmvccL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.83.0/24 Signature Algorithm: sha256WithRSAEncryption 10:0a:f3:7d:e4:74:07:41:bb:83:6d:c5:f3:36:4a:c9:0f:81: d0:8e:43:6d:b0:ee:83:e2:0e:9f:e9:f1:22:a0:e1:73:48:13: 37:25:73:8e:e3:fd:f5:3f:80:03:c5:ea:26:74:55:a0:8d:8d: 6c:ff:3b:b3:86:8c:d0:17:52:a3:1a:aa:22:1f:10:c5:04:3b: 78:92:8e:b4:25:72:3b:a4:a2:9f:4f:22:c1:5e:75:2c:3f:3b: 3e:0e:0b:22:10:d1:1e:26:e6:19:45:14:6e:b2:31:d4:65:c0: 1f:36:a8:33:94:be:0a:93:94:93:9d:89:45:b0:38:0c:97:42: b2:40:1d:6c:36:e2:a4:67:bf:69:05:ff:4a:7b:a2:d7:10:7a: 21:40:b4:57:7b:3d:0e:2b:ac:f7:aa:80:c1:6b:08:91:2c:c4: d6:e1:f7:86:22:e7:69:75:fe:de:2e:8a:ce:2c:4f:3f:73:4c: e7:ee:7e:fe:26:8e:c5:cd:75:25:54:80:a7:e1:28:95:7d:ce: a9:e4:c6:8c:9d:95:14:c2:90:82:88:9f:a9:d9:ac:0c:22:9f: 88:18:1e:9b:78:d8:ac:fd:33:a2:4d:b6:43:0d:d9:b7:3a:34: 82:36:a8:2a:5f:0c:b7:8f:39:ff:b2:07:1f:33:04:be:e4:c4: 38:f8:9e:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nloe4m7BspcY26cIcYYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjJmN2ZhMTlkNjNmNTA1Njg2YjczZTZlOTA1ODcxYTZiZGM3MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTqPSetSQSgh9tMPwuD9BGJuyoKc cad489KFXZweMDgknUOs6ka6YvWPAKNbhvVCxqygzZea+u5qNhmVUQvGR4vhm3TG RTlVuOVbm9oei5ec+SwKPLDD+Sn0Utx848uiOMOU4nmX9xhPHV07Mi4UdzPFZNLe YFgHa7Dza0WySuvH2Gv/u+veAl2YCJNxubJwTmHmHKIKo2tQc7+RhTNkDDJ5GJ2n mPi34ikf/faghV6YnZLIm8dYzI3NpwAzljdfilPJyXdYBgoGnURklsXkN3gyGcfw jwzThMF7Q+mkl0aFSDhBxlWjs9R23sxigKJglEFYRRiPsGNuN5Y3c73KMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8vf6GdY/UFaGtz5ukFhxpr3HC+MB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvX3k5X29aMWo5UVZvYTNQbTZRV0hHbXZjY0w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDhTMA0G CSqGSIb3DQEBCwUAA4IBAQAQCvN95HQHQbuDbcXzNkrJD4HQjkNtsO6D4g6f6fEi oOFzSBM3JXOO4/31P4ADxeomdFWgjY1s/zuzhozQF1KjGqoiHxDFBDt4ko60JXI7 pKKfTyLBXnUsPzs+DgsiENEeJuYZRRRusjHUZcAfNqgzlL4Kk5STnYlFsDgMl0Ky QB1sNuKkZ79pBf9Ke6LXEHohQLRXez0OK6z3qoDBawiRLMTW4feGIudpdf7eLorO LE8/c0zn7n7+Jo7FzXUlVICn4SiVfc6p5MaMnZUUwpCCiJ+p2awMIp+IGB6beNis /TOiTbZDDdm3OjSCNqgqXwy3jzn/sgcfMwS+5MQ4+J6c -----END CERTIFICATE-----Generated at Thu Jan 22 23:33:31 2026 by rpki-client