This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ld67joj9v_zM9_tZso1t8wGiMSM.roa File: ld67joj9v_zM9_tZso1t8wGiMSM.roa (raw, json) Hash identifier: xvopnCuUdWmVK8QrNOdd4mAsv5Icpn4OWN9IOiXh0x0= Subject key identifier: 95:DE:BB:8E:88:FD:BF:FC:CC:F7:FB:59:B2:8D:6D:F3:01:A2:31:23 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B3659CF90F09D3E36E2EBE7BFE7A6E1 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ld67joj9v_zM9_tZso1t8wGiMSM.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 144.56.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:59:cf:90:f0:9d:3e:36:e2:eb:e7:bf:e7:a6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95debb8e88fdbffcccf7fb59b28d6df301a23123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:fc:21:c6:60:37:1b:08:01:ba:7b:13:84: 7d:4f:50:12:c1:31:32:6d:37:0e:68:01:06:df:a6: 96:23:5c:ff:f3:e1:ad:76:fe:5a:05:35:6f:24:96: 16:33:20:e7:48:15:c7:4b:66:e1:b8:01:18:53:a8: 08:fe:3f:75:a4:50:f0:6d:6d:85:17:3c:d5:d5:72: b3:8f:ad:c6:93:c3:93:83:97:93:fa:84:0e:3f:af: 22:3d:62:24:3b:8e:53:9b:10:3f:12:95:7e:b8:f0: 8f:94:18:19:7a:24:f6:65:88:3a:5b:b3:44:b3:85: a9:ab:1f:2e:4a:a1:48:d4:8d:e6:0c:c8:4a:c6:27: 79:9d:3a:34:60:6f:fb:df:56:3a:83:8c:be:cf:bf: 4b:cd:37:42:03:95:0b:07:c5:67:df:dd:19:88:2c: e1:e5:bd:b1:bb:83:66:7b:03:73:28:d2:1c:7f:17: 17:ed:f1:b9:5d:6b:92:77:bc:32:c0:bc:d9:d6:64: 8e:1d:83:dc:2b:24:01:58:62:fd:04:5d:59:a1:17: 1b:f3:1c:91:8c:6a:6e:f3:46:8b:de:81:56:fb:65: 25:3d:b0:32:ec:fd:81:7c:93:cc:d3:f0:ce:2b:ba: 6a:e2:76:87:40:85:99:b8:d4:f5:7b:ac:df:e1:50: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DE:BB:8E:88:FD:BF:FC:CC:F7:FB:59:B2:8D:6D:F3:01:A2:31:23 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ld67joj9v_zM9_tZso1t8wGiMSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.39.0/24 Signature Algorithm: sha256WithRSAEncryption a0:d9:0b:e8:df:b4:34:fc:67:cd:ba:b3:06:8b:53:82:6a:17: bd:1b:a4:d5:c3:bc:95:1d:86:43:fb:f4:7a:67:33:19:2b:6a: 13:3f:4a:98:be:c1:45:96:ef:67:ef:43:fe:d3:0f:84:a2:7b: 70:a9:b3:95:bb:b7:27:72:cf:78:52:c5:c6:81:4a:fc:47:c1: 57:0d:57:e8:8b:32:af:75:4f:3c:5d:09:84:8a:6f:1d:60:18: cd:1c:fa:38:a4:ab:74:12:f0:6d:c1:10:59:7b:36:3d:d8:b5: 30:d7:76:ae:b9:da:eb:24:57:aa:40:d2:6f:e9:16:05:eb:60: dc:2b:e7:d4:5d:dc:e0:36:8b:87:46:da:8f:69:f1:be:b7:c6: 68:bf:ac:b7:13:65:82:1b:0d:bb:7e:7e:f1:88:d7:77:99:77: 3f:75:66:42:04:02:93:58:2b:c2:7e:35:29:39:9f:8e:9f:ef: fc:ec:96:da:f2:10:eb:6f:0c:2c:2d:c4:69:d3:85:f8:61:45: 1c:9c:4f:6d:6b:07:ae:28:57:30:f5:9d:11:4f:b6:10:12:cf: ae:1b:a5:4d:15:a6:c7:8b:1c:b5:dd:c0:d4:a5:2f:2a:e3:c3: ea:64:35:44:6e:0c:39:bd:02:eb:62:68:ca:ce:14:06:65:4d: f5:82:82:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlnPkPCdPjbi6+e/56bhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWRlYmI4ZTg4ZmRiZmZjY2NmN2ZiNTliMjhkNmRmMzAxYTIzMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR78IcZgNxsIAbp7E4R9T1ASwTEy bTcOaAEG36aWI1z/8+Gtdv5aBTVvJJYWMyDnSBXHS2bhuAEYU6gI/j91pFDwbW2F FzzV1XKzj63Gk8OTg5eT+oQOP68iPWIkO45TmxA/EpV+uPCPlBgZeiT2ZYg6W7NE s4Wpqx8uSqFI1I3mDMhKxid5nTo0YG/731Y6g4y+z79LzTdCA5ULB8Vn390ZiCzh 5b2xu4NmewNzKNIcfxcX7fG5XWuSd7wywLzZ1mSOHYPcKyQBWGL9BF1ZoRcb8xyR jGpu80aL3oFW+2UlPbAy7P2BfJPM0/DOK7pq4naHQIWZuNT1e6zf4VAU8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJXeu46I/b/8zPf7WbKNbfMBojEjMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvbGQ2N2pvajl2X3pNOV90WnNvMXQ4d0dpTVNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgnMA0G CSqGSIb3DQEBCwUAA4IBAQCg2Qvo37Q0/GfNurMGi1OCahe9G6TVw7yVHYZD+/R6 ZzMZK2oTP0qYvsFFlu9n70P+0w+EontwqbOVu7cncs94UsXGgUr8R8FXDVfoizKv dU88XQmEim8dYBjNHPo4pKt0EvBtwRBZezY92LUw13auudrrJFeqQNJv6RYF62Dc K+fUXdzgNouHRtqPafG+t8Zov6y3E2WCGw27fn7xiNd3mXc/dWZCBAKTWCvCfjUp OZ+On+/87Jba8hDrbwwsLcRp04X4YUUcnE9taweuKFcw9Z0RT7YQEs+uG6VNFabH ixy13cDUpS8q48PqZDVEbgw5vQLrYmjKzhQGZU31goKc -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:48 2026 by rpki-client