This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/vR9E1xSnliRW9Usue4V0ADKHiho.roa File: vR9E1xSnliRW9Usue4V0ADKHiho.roa (raw, json) Hash identifier: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s= Subject key identifier: BD:1F:44:D7:14:A7:96:24:56:F5:4B:2E:7B:85:74:00:32:87:8A:1A Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8A9CE509CF5FA5D791CA1CEE480AA Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/vR9E1xSnliRW9Usue4V0ADKHiho.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199393 IP address blocks: 141.226.241.0/24 maxlen: 24 141.226.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a9:ce:50:9c:f5:fa:5d:79:1c:a1:ce:e4:80:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd1f44d714a7962456f54b2e7b85740032878a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:06:95:0e:07:47:aa:db:dc:94:a7:3f:f4:b8: f9:79:bf:a8:81:49:23:c7:c6:a7:32:9d:4c:08:8c: 8d:a3:a6:9d:56:c6:c6:6c:ae:bf:9d:40:b6:53:9f: 86:c2:fe:d6:92:22:21:95:84:f1:d1:e0:c4:81:ab: f4:ba:82:01:57:0f:90:de:65:e6:1e:8c:f2:a6:84: f4:9b:b8:88:67:f9:aa:3a:d7:99:22:d5:34:1b:61: 9d:81:e1:87:46:7c:7e:f7:bf:2c:39:37:45:8b:15: 4a:37:9c:5c:da:72:9d:05:c6:cd:2c:28:cb:ec:03: c2:fd:51:60:9c:ad:95:01:58:d1:6e:37:59:a7:5b: c5:b7:01:50:61:89:71:74:be:4d:1f:73:1f:f9:30: 59:cd:e2:96:4f:78:4a:10:47:24:c0:c8:de:d9:cd: 46:c0:40:04:63:d8:80:61:bc:c7:1a:2e:58:15:8f: ef:79:a8:95:a6:b0:44:a5:4b:0a:96:92:dc:08:a1: 1b:7e:33:75:c7:bc:83:ef:0c:31:03:ab:66:3a:c1: d1:88:b2:81:cc:05:97:b7:b9:a1:6e:09:45:52:50: 3d:da:8e:6f:b8:cb:bc:77:ce:99:84:cf:c9:ac:04: 19:53:f7:7d:b0:f4:ed:95:e5:6b:bf:69:c0:f1:10: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1F:44:D7:14:A7:96:24:56:F5:4B:2E:7B:85:74:00:32:87:8A:1A X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/vR9E1xSnliRW9Usue4V0ADKHiho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.241.0-141.226.242.255 Signature Algorithm: sha256WithRSAEncryption cb:a3:01:aa:f9:c1:1e:11:93:8b:be:97:45:67:3c:9f:35:e2: d8:fd:39:10:19:ca:18:9a:f2:85:b1:2f:be:e1:4f:e3:bb:fb: f2:a6:3b:23:f0:f1:6d:2f:1f:41:bf:1e:8b:43:76:58:57:02: 86:f5:a8:65:da:4f:0f:e4:b9:8c:d9:a1:60:e4:56:96:0b:bf: 15:64:ae:25:54:16:d4:2f:b0:ce:49:af:85:b6:bb:1f:11:9f: a5:3c:9a:a4:25:6e:17:42:91:3d:70:1f:81:1c:18:55:31:b4: 7a:24:ea:61:f5:3c:cd:fa:fe:57:6b:c5:48:61:64:50:c2:54: 60:13:49:32:ef:3f:1c:95:23:58:a1:26:97:c5:00:df:38:40: c4:9b:33:3e:eb:5e:8d:34:05:44:da:ad:89:da:69:f2:2b:c9: 6f:85:42:37:dc:2a:01:77:91:27:4e:2c:2e:d5:8f:56:95:b2: 7f:dc:65:2b:e2:30:6b:a2:41:ef:f3:5f:66:31:9d:82:e7:dc: 53:ed:56:8d:53:fa:a1:21:b2:77:67:57:ea:6b:eb:5e:b2:7c: 22:76:df:13:dd:8f:c5:22:31:41:68:25:f3:2d:25:e3:49:73: 38:dc:5f:3d:0b:fa:df:cb:5a:03:ee:9e:49:a7:21:b7:a3:f6: 8a:e8:c1:62 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9yKnOUJz1+l15HKHO5ICqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDFmNDRkNzE0YTc5NjI0NTZmNTRiMmU3Yjg1NzQwMDMyODc4YTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AaVDgdHqtvclKc/9Lj5eb+ogUkj x8anMp1MCIyNo6adVsbGbK6/nUC2U5+Gwv7WkiIhlYTx0eDEgav0uoIBVw+Q3mXm HozypoT0m7iIZ/mqOteZItU0G2GdgeGHRnx+978sOTdFixVKN5xc2nKdBcbNLCjL 7APC/VFgnK2VAVjRbjdZp1vFtwFQYYlxdL5NH3Mf+TBZzeKWT3hKEEckwMje2c1G wEAEY9iAYbzHGi5YFY/veaiVprBEpUsKlpLcCKEbfjN1x7yD7wwxA6tmOsHRiLKB zAWXt7mhbglFUlA92o5vuMu8d86ZhM/JrAQZU/d9sPTtleVrv2nA8RCwXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL0fRNcUp5YkVvVLLnuFdAAyh4oaMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvdlI5RTF4U25saVJXOVVzdWU0VjBBREtIaWhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACN4vED BACN4vIwDQYJKoZIhvcNAQELBQADggEBAMujAar5wR4Rk4u+l0VnPJ814tj9ORAZ yhia8oWxL77hT+O7+/KmOyPw8W0vH0G/HotDdlhXAob1qGXaTw/kuYzZoWDkVpYL vxVkriVUFtQvsM5Jr4W2ux8Rn6U8mqQlbhdCkT1wH4EcGFUxtHok6mH1PM36/ldr xUhhZFDCVGATSTLvPxyVI1ihJpfFAN84QMSbMz7rXo00BUTarYnaafIryW+FQjfc KgF3kSdOLC7Vj1aVsn/cZSviMGuiQe/zX2YxnYLn3FPtVo1T+qEhsndnV+pr616y fCJ23xPdj8UiMUFoJfMtJeNJczjcXz0L+t/LWgPunkmnIbej9orowWI= -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:30 2026 by rpki-client