This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/r1lm5qDj8jPS_HediYhAeiovCQ0.roa File: r1lm5qDj8jPS_HediYhAeiovCQ0.roa (raw, json) Hash identifier: Q31lY2NlT1+bF9MZR6DBQascJwHV9TGjTGSBlFqXjNI= Subject key identifier: AF:59:66:E6:A0:E3:F2:33:D2:FC:77:9D:89:88:40:7A:2A:2F:09:0D Certificate issuer: /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d Certificate serial: 019B7E390A45EDC78F3F240D46F44A6B7ED0 Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/r1lm5qDj8jPS_HediYhAeiovCQ0.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210125 IP address blocks: 79.174.24.0/22 maxlen: 24 79.174.24.0/24 maxlen: 24 79.174.25.0/24 maxlen: 24 79.174.26.0/24 maxlen: 24 2a0d:ab40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0a:45:ed:c7:8f:3f:24:0d:46:f4:4a:6b:7e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af5966e6a0e3f233d2fc779d8988407a2a2f090d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:5d:4c:47:fd:8b:5c:ca:6a:2a:1b:94:6b: b0:15:6a:71:a1:7f:89:6c:52:7e:3c:1e:e4:7e:ee: a6:35:dc:0a:e4:ef:82:fc:d9:5a:ae:5d:c7:c7:f2: c6:f7:1f:98:e1:48:85:e5:f7:cb:e6:ca:c3:03:6f: 65:bd:0e:83:fa:5a:b9:67:99:d0:06:00:25:a4:6a: d1:c8:c0:d5:ce:40:4c:a2:eb:38:f6:ca:1b:2e:68: 46:e1:0f:82:8a:54:e0:19:c3:0a:cb:99:63:cd:b2: ad:13:01:6d:7a:69:0d:d7:e2:7f:2f:95:ee:8b:e7: 2c:6d:03:3c:ef:30:9e:00:19:e4:3f:4c:d0:6d:ce: 80:eb:56:da:de:f9:1b:4b:d6:f0:00:67:1a:9a:2e: 0b:7a:d3:5f:59:08:d2:ce:02:7b:37:39:8d:1a:58: dd:3d:3e:52:47:c7:d4:15:41:0f:44:f6:85:91:00: 03:6f:67:0b:f1:56:36:9f:c6:b2:31:45:7f:28:ab: d9:83:b3:d8:9a:d7:ea:6d:c2:ec:65:a1:75:9f:9b: 82:00:3d:4f:c6:1d:f9:de:4b:53:83:da:71:83:3a: 9a:9b:46:ca:6a:e9:f1:2d:c6:52:8a:a8:46:72:cf: bc:11:fd:e2:72:91:f8:ac:a9:bb:1b:de:a6:30:76: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:59:66:E6:A0:E3:F2:33:D2:FC:77:9D:89:88:40:7A:2A:2F:09:0D X509v3 Authority Key Identifier: keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/r1lm5qDj8jPS_HediYhAeiovCQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.174.24.0/22 IPv6: 2a0d:ab40::/32 Signature Algorithm: sha256WithRSAEncryption 05:bd:e2:f7:78:0d:40:3b:1f:46:48:8e:2c:b9:4b:53:43:39: 90:f4:a1:bc:40:6f:e1:74:14:de:db:b6:9b:0e:66:ca:5f:27: 76:e5:86:e2:cb:e2:35:ce:e3:35:ac:63:6c:58:7e:9d:04:cb: 66:64:a6:b8:21:b7:0e:f1:2b:66:fd:dc:99:8e:2d:f9:d4:c3: cd:c0:cf:72:ba:bf:79:04:a8:ce:7a:69:e9:87:a8:ac:d4:71: ac:b7:36:9a:0f:30:80:dc:44:f5:28:4a:16:38:6f:bf:cf:67: f1:84:76:81:b6:a1:27:3f:c9:88:f9:6d:01:2a:ee:40:32:e3: ff:89:fa:46:38:2c:c9:4e:1d:91:7d:c6:00:97:f7:9e:c2:f5: 95:b3:73:4a:27:4e:84:fe:34:e8:a9:64:28:78:94:17:81:17: d6:29:19:b1:b7:95:97:85:d7:49:66:a3:cf:a8:1d:d7:ac:f7: 70:80:68:6e:87:01:ae:bd:6e:c9:f3:5b:3d:c6:a5:d5:6b:ff: c0:df:e2:bc:51:f1:b9:0d:21:65:11:cd:5c:30:6e:e1:9f:f5: ba:48:bc:d3:29:36:3a:bd:27:9d:20:1d:76:3b:99:cc:c0:9d: 5f:64:8c:ec:66:78:d7:c6:8c:8d:78:72:8f:e0:4f:52:20:da: f7:1a:40:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OQpF7cePPyQNRvRKa37QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDM0MzdlZTljNWE4Yzg0ZjhkMzQ4M2RjNWUwZmE0YmE4 OWNjM2QwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjU5NjZlNmEwZTNmMjMzZDJmYzc3OWQ4OTg4NDA3YTJhMmYwOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uxdTEf9i1zKaioblGuwFWpxoX+J bFJ+PB7kfu6mNdwK5O+C/Nlarl3Hx/LG9x+Y4UiF5ffL5srDA29lvQ6D+lq5Z5nQ BgAlpGrRyMDVzkBMous49sobLmhG4Q+CilTgGcMKy5ljzbKtEwFtemkN1+J/L5Xu i+csbQM87zCeABnkP0zQbc6A61ba3vkbS9bwAGcami4LetNfWQjSzgJ7NzmNGljd PT5SR8fUFUEPRPaFkQADb2cL8VY2n8ayMUV/KKvZg7PYmtfqbcLsZaF1n5uCAD1P xh353ktTg9pxgzqam0bKaunxLcZSiqhGcs+8Ef3icpH4rKm7G96mMHaBwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK9ZZuag4/Iz0vx3nYmIQHoqLwkNMB8GA1UdIwQY MBaAFFVDQ37pxajIT400g9xeD6S6icw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYjI1MjQtZmM3Yi00ZWNmLWE4MTMt NGE1ZjkyZTViZGUyLzEvcjFsbTVxRGo4alBTX0hlZGlZaEFlaW92Q1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wYjI1MjQtZmM3Yi00ZWNmLWE4MTMtNGE1ZjkyZTViZGUy LzEvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCT64YMA0E AgACMAcDBQAqDatAMA0GCSqGSIb3DQEBCwUAA4IBAQAFveL3eA1AOx9GSI4suUtT QzmQ9KG8QG/hdBTe27abDmbKXyd25Ybiy+I1zuM1rGNsWH6dBMtmZKa4IbcO8Stm /dyZji351MPNwM9yur95BKjOemnph6is1HGstzaaDzCA3ET1KEoWOG+/z2fxhHaB tqEnP8mI+W0BKu5AMuP/ifpGOCzJTh2RfcYAl/eewvWVs3NKJ06E/jToqWQoeJQX gRfWKRmxt5WXhddJZqPPqB3XrPdwgGhuhwGuvW7J81s9xqXVa//A3+K8UfG5DSFl Ec1cMG7hn/W6SLzTKTY6vSedIB12O5nMwJ1fZIzsZnjXxoyNeHKP4E9SINr3GkA5 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:17 2026 by rpki-client