This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa File: s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa (raw, json) Hash identifier: UbNWOkKqq7RPWPwsnO7EB9cjjZaqtck3tiM3zDy2/V8= Subject key identifier: B3:5C:3E:03:42:50:EF:E1:8F:DB:64:2C:F5:33:0F:F9:80:B6:F7:E8 Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45 Certificate serial: 019B7BA51D6442B669D01D6C1003DA2DC1CA Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50884 IP address blocks: 89.35.27.0/24 maxlen: 24 89.36.37.0/24 maxlen: 24 89.36.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1d:64:42:b6:69:d0:1d:6c:10:03:da:2d:c1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b35c3e034250efe18fdb642cf5330ff980b6f7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:2d:86:66:7a:89:a6:14:e7:ca:a9:70:30: a4:e2:e2:91:69:b0:c8:43:fb:e7:63:b1:5f:6f:88: 52:4c:01:80:40:d1:d3:fb:94:7d:11:e8:6f:7a:41: e7:84:52:45:c2:c5:4e:ab:e0:bf:e9:38:7e:6a:95: 6e:25:b2:e1:d4:7e:c7:f7:15:69:82:3b:66:38:5c: ba:25:d2:e0:e6:29:9a:2d:39:3c:ac:3e:96:d7:f0: fb:05:99:9c:eb:d4:f6:6c:fe:76:13:75:b8:a2:e8: 51:02:bd:d5:b4:ea:e2:e9:0b:e6:f2:1e:57:47:9e: 9c:4a:3c:82:96:11:e6:90:73:95:32:55:68:67:aa: da:f4:85:32:86:31:e8:84:70:53:3b:57:01:d2:da: ff:ee:61:3e:17:af:7b:0a:bb:93:9f:17:01:0c:1f: 64:5f:25:ab:24:0d:91:b3:0b:1c:2e:24:31:b3:2e: 8e:6d:ba:80:56:e7:6f:06:db:2e:83:e3:d5:2e:9a: 05:44:e2:78:60:80:2d:5e:31:c7:00:f2:18:92:8e: 6b:c6:16:ee:c7:50:b3:3a:75:14:26:39:b3:44:15: e6:62:bc:8b:04:0b:51:34:93:08:f8:45:9f:27:75: 69:34:db:15:18:96:39:82:e6:82:f2:92:10:96:3b: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:3E:03:42:50:EF:E1:8F:DB:64:2C:F5:33:0F:F9:80:B6:F7:E8 X509v3 Authority Key Identifier: keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.27.0/24 89.36.37.0/24 89.36.72.0/24 Signature Algorithm: sha256WithRSAEncryption 06:55:e0:d9:6e:31:82:15:a9:55:4b:01:6c:11:d2:ec:53:87: 6e:62:6f:74:0a:a5:91:24:52:3f:50:f7:03:55:a4:10:56:34: ae:39:54:e5:81:55:6b:46:bf:58:ee:2c:f7:68:7c:b3:35:6f: 30:5b:31:9c:d0:08:44:e9:49:8b:1e:7a:05:4d:20:06:f8:4d: 5d:ac:71:f3:eb:69:ee:1c:4b:0f:69:0a:ed:8b:54:9a:b4:5b: 61:ca:4e:be:52:35:d1:0e:2f:c9:13:da:54:71:ea:f1:83:43: 86:92:9d:b9:0f:ac:c2:97:54:9a:4c:78:81:21:b6:0f:dc:1d: 71:ef:2e:6d:1f:f0:68:b0:69:fa:8f:2b:b3:a1:7a:88:cb:a8: 0c:62:f4:8a:3f:a3:9b:91:bb:2d:8f:bc:4d:63:16:43:32:a2: de:49:40:c9:8b:5a:91:60:4f:c0:41:c6:92:38:1b:f6:35:5b: 8f:59:f7:82:8f:3f:74:d3:a8:37:53:0b:d5:d3:dd:3b:e4:17: b4:cc:f2:96:85:2d:c6:7a:a8:c0:0b:cb:7b:7c:76:2e:06:18: 2c:e8:58:75:5e:cc:a7:de:24:11:b0:d9:31:b4:a5:92:24:af: 2e:8f:4e:37:d7:44:bc:78:7a:70:28:a3:66:e8:c8:66:3a:61: 02:a7:ee:5b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pR1kQrZp0B1sEAPaLcHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjkwZmQ2MmJjYzBmZTkyOWRhZTUzMDM2ZmM1NWU1MTFj NTRiNDUwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzVjM2UwMzQyNTBlZmUxOGZkYjY0MmNmNTMzMGZmOTgwYjZmN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgEthmZ6iaYU58qpcDCk4uKRabDI Q/vnY7Ffb4hSTAGAQNHT+5R9EehvekHnhFJFwsVOq+C/6Th+apVuJbLh1H7H9xVp gjtmOFy6JdLg5imaLTk8rD6W1/D7BZmc69T2bP52E3W4ouhRAr3VtOri6Qvm8h5X R56cSjyClhHmkHOVMlVoZ6ra9IUyhjHohHBTO1cB0tr/7mE+F697CruTnxcBDB9k XyWrJA2RswscLiQxsy6ObbqAVudvBtsug+PVLpoFROJ4YIAtXjHHAPIYko5rxhbu x1CzOnUUJjmzRBXmYryLBAtRNJMI+EWfJ3VpNNsVGJY5guaC8pIQljsEWwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLNcPgNCUO/hj9tkLPUzD/mAtvfoMB8GA1UdIwQY MBaAFFy5D9YrzA/pKdrlMDb8VeURxUtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUt OTUxMzVkYWY1MTQ3LzEvczF3LUEwSlE3LUdQMjJRczlUTVAtWUMyOS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUtOTUxMzVkYWY1MTQ3 LzEvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSMbAwQA WSQlAwQAWSRIMA0GCSqGSIb3DQEBCwUAA4IBAQAGVeDZbjGCFalVSwFsEdLsU4du Ym90CqWRJFI/UPcDVaQQVjSuOVTlgVVrRr9Y7iz3aHyzNW8wWzGc0AhE6UmLHnoF TSAG+E1drHHz62nuHEsPaQrti1SatFthyk6+UjXRDi/JE9pUcerxg0OGkp25D6zC l1SaTHiBIbYP3B1x7y5tH/BosGn6jyuzoXqIy6gMYvSKP6Obkbstj7xNYxZDMqLe SUDJi1qRYE/AQcaSOBv2NVuPWfeCjz9006g3UwvV09075Be0zPKWhS3GeqjAC8t7 fHYuBhgs6Fh1Xsyn3iQRsNkxtKWSJK8uj04310S8eHpwKKNm6MhmOmECp+5b -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:23 2026 by rpki-client