This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/r1Lm-dX1qz59WOfpWgSU33XPmSM.roa File: r1Lm-dX1qz59WOfpWgSU33XPmSM.roa (raw, json) Hash identifier: 6oVzYKTRmw48EXPMuELo04geZt6gGCfSZv5bRmChJw8= Subject key identifier: AF:52:E6:F9:D5:F5:AB:3E:7D:58:E7:E9:5A:04:94:DF:75:CF:99:23 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C807E150FC2B9F813005CFF4C019F93 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/r1Lm-dX1qz59WOfpWgSU33XPmSM.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199429 IP address blocks: 178.157.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7e:15:0f:c2:b9:f8:13:00:5c:ff:4c:01:9f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af52e6f9d5f5ab3e7d58e7e95a0494df75cf9923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:cc:ab:b5:7d:ac:82:29:83:55:2c:e0:15: 1c:19:eb:2e:44:42:bc:57:fa:81:0a:f4:a1:3e:74: e9:7d:c3:6b:c6:c3:86:b3:a6:5c:50:14:85:9c:92: f7:43:87:ab:51:c6:a6:3a:89:ac:16:2c:07:05:ae: 46:91:f2:ab:a7:70:0b:65:51:32:1c:d4:9f:d1:40: 33:26:d0:ce:33:af:ff:0b:c8:94:c4:e2:93:a4:70: 81:a1:5b:8c:bf:3f:16:17:f5:11:b8:06:41:81:b3: be:70:fa:49:d8:e1:d6:00:55:eb:85:79:fe:ad:ee: a6:85:63:49:39:e5:2b:e4:96:11:7d:9d:5a:5e:c2: 2c:0c:2b:9b:2d:2d:23:3e:e8:e7:68:70:1d:f8:a8: 26:80:89:b8:55:ab:97:34:ad:9e:c9:e2:0c:a7:f4: 27:41:fd:00:a5:59:a2:29:44:20:11:0c:bf:3c:27: 20:6c:9d:13:57:9b:69:66:8a:95:ec:1f:a2:01:a1: ea:b5:0b:2b:b5:c6:94:65:aa:cc:4e:70:0d:37:03: 72:e2:e6:25:f0:4a:df:8d:6b:3e:41:6d:d0:fc:fd: 4a:9d:6a:c8:00:05:67:25:a8:99:44:9b:79:03:ab: 16:0a:56:55:4c:10:aa:cb:14:89:67:7f:18:44:dd: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:E6:F9:D5:F5:AB:3E:7D:58:E7:E9:5A:04:94:DF:75:CF:99:23 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/r1Lm-dX1qz59WOfpWgSU33XPmSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.157.77.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:8a:f3:87:93:fa:df:7e:97:ce:d9:b8:7d:9e:af:3d:e9:fe: fa:a3:80:66:39:7e:3b:c4:67:47:0b:58:c2:46:c5:52:52:01: 4a:ed:e4:1f:eb:dc:61:d4:27:ee:b7:55:ec:bb:18:49:3d:81: 2b:88:07:6d:4d:f4:f8:e2:ff:f3:fa:30:ca:3f:b8:3d:fd:af: 5d:19:25:ae:bf:7b:af:5c:7e:61:66:a5:89:80:59:b3:6b:aa: d3:19:b0:81:80:37:bb:fa:af:52:90:bc:dd:4e:6d:62:62:c0: dc:e6:cc:6d:ee:2b:5f:92:1d:c5:6c:ae:92:f7:82:81:00:fc: 6a:56:19:93:75:6c:28:c4:ba:5b:13:61:8f:9d:0c:a1:ef:39: 47:34:d8:7e:ec:d1:0e:df:86:56:96:17:ae:24:84:52:14:ed: 29:fb:6d:e9:07:62:08:23:da:aa:1d:d1:f1:03:2a:17:ea:fb: d0:23:2f:3a:66:8d:54:28:f6:66:83:ab:2a:8d:85:2f:0a:c9: 02:31:8f:06:81:74:10:a9:bd:89:8f:67:7a:0b:20:a4:61:42: c6:95:3c:dd:9c:36:e4:37:f4:8b:50:c8:58:25:2e:76:d1:7d: fd:cf:a3:e7:74:85:01:05:92:f7:96:67:56:8a:8c:25:b7:a1: 3f:3e:39:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH4VD8K5+BMAXP9MAZ+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjUyZTZmOWQ1ZjVhYjNlN2Q1OGU3ZTk1YTA0OTRkZjc1Y2Y5OTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj/Mq7V9rIIpg1Us4BUcGesuREK8 V/qBCvShPnTpfcNrxsOGs6ZcUBSFnJL3Q4erUcamOomsFiwHBa5GkfKrp3ALZVEy HNSf0UAzJtDOM6//C8iUxOKTpHCBoVuMvz8WF/URuAZBgbO+cPpJ2OHWAFXrhXn+ re6mhWNJOeUr5JYRfZ1aXsIsDCubLS0jPujnaHAd+KgmgIm4VauXNK2eyeIMp/Qn Qf0ApVmiKUQgEQy/PCcgbJ0TV5tpZoqV7B+iAaHqtQsrtcaUZarMTnANNwNy4uYl 8ErfjWs+QW3Q/P1KnWrIAAVnJaiZRJt5A6sWClZVTBCqyxSJZ38YRN1yeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9S5vnV9as+fVjn6VoElN91z5kjMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvcjFMbS1kWDFxejU5V09mcFdnU1UzM1hQbVNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsp1NMA0G CSqGSIb3DQEBCwUAA4IBAQAOivOHk/rffpfO2bh9nq896f76o4BmOX47xGdHC1jC RsVSUgFK7eQf69xh1Cfut1XsuxhJPYEriAdtTfT44v/z+jDKP7g9/a9dGSWuv3uv XH5hZqWJgFmza6rTGbCBgDe7+q9SkLzdTm1iYsDc5sxt7itfkh3FbK6S94KBAPxq VhmTdWwoxLpbE2GPnQyh7zlHNNh+7NEO34ZWlheuJIRSFO0p+23pB2III9qqHdHx AyoX6vvQIy86Zo1UKPZmg6sqjYUvCskCMY8GgXQQqb2Jj2d6CyCkYULGlTzdnDbk N/SLUMhYJS520X39z6PndIUBBZL3lmdWiowlt6E/Pjlu -----END CERTIFICATE-----Generated at Mon Jan 19 20:35:02 2026 by rpki-client