This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa File: 1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa (raw, json) Hash identifier: aw9rHGkSfZiIUgRqcbBY40U13wLpn52XPqFkofANffo= Subject key identifier: D4:2B:08:6D:86:E8:15:F5:E9:BB:DB:34:BD:60:CC:45:A5:7A:33:3F Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Certificate serial: 019B7759495FCA60D0DD487D59C05A34F5B2 Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2117 IP address blocks: 134.171.0.0/18 maxlen: 18 134.171.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:49:5f:ca:60:d0:dd:48:7d:59:c0:5a:34:f5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d42b086d86e815f5e9bbdb34bd60cc45a57a333f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:38:73:ad:a6:3d:96:18:c4:a7:ce:cb:f1:80: ce:ec:61:c8:4a:9f:d4:a6:37:7c:e8:cc:c5:1e:c8: 8d:da:f4:a7:d7:8e:35:d5:e9:0a:7d:b9:ba:02:ca: 30:9f:ef:70:af:fa:ba:d2:6d:35:bb:8f:61:10:73: 03:15:b9:cb:12:a7:0d:02:67:53:64:19:d6:89:0a: cf:b8:3e:58:0b:6b:36:c0:96:ed:8f:43:9b:eb:db: b2:71:65:32:7a:23:91:0f:0e:30:fe:a2:d7:d5:b0: 16:e5:3a:5f:9a:92:08:1a:ba:53:aa:ff:08:0a:16: 34:dc:19:33:76:6b:8f:c4:f0:e2:e0:19:44:d9:92: da:9d:8c:87:aa:f4:37:5f:41:2f:15:f8:c2:38:84: 06:e1:0f:0b:7b:c2:f1:60:ee:e5:64:75:10:a0:2e: 92:ad:79:f1:d6:4d:50:04:9d:aa:ff:a0:69:e0:73: aa:05:45:57:a7:51:55:b2:b2:b3:06:29:63:f1:71: 17:3e:b9:f4:54:27:b7:41:ce:03:08:b8:99:02:a1: ae:08:03:c9:84:f0:5e:72:28:41:b9:8e:14:ab:f4: 12:26:5e:c9:2e:09:9f:ce:66:4a:19:06:aa:de:f3: 58:01:f6:21:e6:03:ba:7b:5a:ae:6d:12:ac:ef:be: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2B:08:6D:86:E8:15:F5:E9:BB:DB:34:BD:60:CC:45:A5:7A:33:3F X509v3 Authority Key Identifier: keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.171.0.0-134.171.79.255 Signature Algorithm: sha256WithRSAEncryption a7:6b:a3:c1:91:b8:4a:8d:6d:af:da:f5:2e:12:eb:1f:92:f2: 1e:57:5a:f9:33:66:c0:a2:e0:2f:3e:66:61:84:17:eb:53:83: 09:72:75:15:5b:b0:b7:60:cd:83:60:c2:79:92:55:e5:a5:88: 4c:13:87:a1:d9:f5:3c:65:91:4c:89:70:f5:b6:0f:01:7c:4b: 64:06:a0:02:31:a5:e6:4c:b9:60:92:5c:cd:f1:ed:ac:fc:a9: fd:de:6e:72:eb:45:b4:d6:9c:75:f1:6a:7a:91:87:53:75:57: f1:47:cc:88:54:84:76:90:58:e4:0d:2c:82:2d:a0:6a:2f:cf: 12:94:1d:8f:f7:a9:f7:7d:88:97:ae:44:6e:d2:11:85:65:d6: c9:d0:b1:c0:da:cc:6f:ff:31:7f:29:01:8f:45:49:47:c7:9e: 00:c5:5a:6a:97:de:55:12:5c:a6:8d:5b:0d:36:71:55:c8:19: 7e:8c:58:39:93:92:aa:12:ca:44:71:d4:8b:64:5c:0e:cb:2e: e2:87:e8:df:81:18:36:d2:c9:f4:63:88:f6:3b:ae:8a:d1:b7: 00:c7:de:d0:d0:9a:b7:80:92:56:ca:3f:05:99:0d:ab:26:40: 99:9a:21:5f:49:e8:8c:27:14:2d:0f:93:85:26:f9:ac:94:52: f4:e1:72:0b -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt3WUlfymDQ3Uh9WcBaNPWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOWY3ZGM1MDk1YWJkYjQ0NWQxODk4NTdkMzEwMWE4YWVl MjlkZmEwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDJiMDg2ZDg2ZTgxNWY1ZTliYmRiMzRiZDYwY2M0NWE1N2EzMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zhzraY9lhjEp87L8YDO7GHISp/U pjd86MzFHsiN2vSn14411ekKfbm6Asown+9wr/q60m01u49hEHMDFbnLEqcNAmdT ZBnWiQrPuD5YC2s2wJbtj0Ob69uycWUyeiORDw4w/qLX1bAW5TpfmpIIGrpTqv8I ChY03BkzdmuPxPDi4BlE2ZLanYyHqvQ3X0EvFfjCOIQG4Q8Le8LxYO7lZHUQoC6S rXnx1k1QBJ2q/6Bp4HOqBUVXp1FVsrKzBilj8XEXPrn0VCe3Qc4DCLiZAqGuCAPJ hPBecihBuY4Uq/QSJl7JLgmfzmZKGQaq3vNYAfYh5gO6e1qubRKs775ahQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFNQrCG2G6BX16bvbNL1gzEWlejM/MB8GA1UdIwQY MBaAFP2ffcUJWr20RdGJhX0xAaiu4p36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmIt MjIyOWNkODNmM2U1LzEvMUNzSWJZYm9GZlhwdTlzMHZXRE1SYVY2TXo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmItMjIyOWNkODNmM2U1 LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwCGqwME BIarQDANBgkqhkiG9w0BAQsFAAOCAQEAp2ujwZG4So1tr9r1LhLrH5LyHlda+TNm wKLgLz5mYYQX61ODCXJ1FVuwt2DNg2DCeZJV5aWITBOHodn1PGWRTIlw9bYPAXxL ZAagAjGl5ky5YJJczfHtrPyp/d5ucutFtNacdfFqepGHU3VX8UfMiFSEdpBY5A0s gi2gai/PEpQdj/ep932Il65EbtIRhWXWydCxwNrMb/8xfykBj0VJR8eeAMVaapfe VRJcpo1bDTZxVcgZfoxYOZOSqhLKRHHUi2RcDssu4ofo34EYNtLJ9GOI9juuitG3 AMfe0NCat4CSVso/BZkNqyZAmZohX0nojCcULQ+ThSb5rJRS9OFyCw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:38 2026 by rpki-client