This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa File: 1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa (raw, json) Hash identifier: SGIsX6Mvd8sx49+iI/8SLNHNRb2rZpZ8MC5HnpSmZVU= Subject key identifier: F9:DE:64:C7:9A:A1:B1:D7:17:4D:0E:8B:7D:D1:3D:B0:8A:9B:D5:EB Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7CA2A59B25689A293BC6205DCC61 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 45.93.224.0/24 maxlen: 24 45.93.225.0/24 maxlen: 24 45.93.226.0/24 maxlen: 24 89.190.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7c:a2:a5:9b:25:68:9a:29:3b:c6:20:5d:cc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9de64c79aa1b1d7174d0e8b7dd13db08a9bd5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:96:17:55:74:84:c5:6b:56:47:57:de:87: 26:21:4a:09:fa:3a:34:6c:cd:51:09:4d:d5:50:df: 24:42:0f:56:bc:ef:fd:1b:a9:31:dd:e5:b8:cf:25: be:35:e2:fb:17:24:89:41:ae:0e:81:ce:ab:56:e4: 7b:f5:53:50:70:9d:de:c9:2b:70:c3:2e:8e:be:f5: cc:b6:68:85:88:0d:8e:d4:8b:5a:56:a3:23:62:e7: ff:68:74:88:d4:8b:58:83:6e:c6:e5:25:5f:11:1e: da:80:ee:87:26:af:95:0c:71:2f:bd:22:75:85:88: a1:f9:5d:22:8f:87:e1:be:23:8c:70:07:8c:40:68: 00:13:fe:60:7d:8c:aa:c9:86:f0:53:e9:f7:07:11: 8b:41:90:c8:ce:89:f0:4b:bf:15:b2:d0:43:86:64: 86:3f:b7:d2:0e:b3:a1:ed:2d:4a:aa:4c:a3:d9:bd: bb:6e:e8:15:d2:ff:bc:ae:30:75:e6:fc:02:2f:e7: f3:ed:fc:4a:3b:3e:24:51:6e:5d:0d:53:8c:ff:3e: 9c:03:c6:cc:75:ca:f9:e8:69:bf:55:cb:5a:28:14: 8c:d3:d7:3a:3b:87:21:ae:b9:3f:59:bf:b1:5b:76: 02:d8:33:cc:84:b6:59:9f:05:cc:51:63:5c:6b:87: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DE:64:C7:9A:A1:B1:D7:17:4D:0E:8B:7D:D1:3D:B0:8A:9B:D5:EB X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1-d5kx5qhsdcXTQ6LfdE9sIqb1es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.224.0-45.93.226.255 89.190.150.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:b7:75:ec:f6:a8:cf:93:ed:23:ce:bf:a0:dc:14:b6:aa:cb: db:5b:e5:72:7d:60:0d:8f:9b:5f:38:76:a1:4b:e8:cf:2a:6e: 1d:56:56:15:53:f9:ba:95:c5:30:cb:9f:5f:d4:69:06:0a:f6: fb:e6:54:0f:f5:34:54:37:a8:ca:ca:7b:e5:f3:93:06:2d:f4: f4:c8:dd:f4:3a:24:5b:32:9a:a7:94:ff:a5:da:05:dd:95:c3: 61:0b:49:87:f5:af:f7:e4:63:e4:b9:5c:eb:5a:50:fe:e2:41: cf:e3:ec:d4:51:6f:2d:68:97:60:11:d5:36:8b:e9:4e:6c:db: 2d:5b:42:21:56:ea:3e:b2:ac:f1:bd:d5:a2:5d:87:55:1b:75: 8c:e0:86:62:b2:5b:44:30:3b:19:47:57:8e:af:e5:8b:27:22: 20:ca:c8:fd:0d:a2:fc:6b:d4:e6:3b:e1:11:e8:98:12:96:4b: 3f:19:c7:d4:0c:b7:2c:b4:28:9c:19:08:41:f9:82:49:ae:33: 0a:36:a9:65:e9:b1:94:ed:58:ab:94:39:15:99:4d:82:84:d3: 38:28:a3:49:86:7c:c8:41:f3:75:f5:1c:a5:b0:19:8e:c0:d1: 9f:04:8b:6d:bc:af:fe:8a:24:f2:cb:4d:26:b7:2e:50:c5:f7: ac:20:38:2f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f3yipZslaJopO8YgXcxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWRlNjRjNzlhYTFiMWQ3MTc0ZDBlOGI3ZGQxM2RiMDhhOWJkNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJiWF1V0hMVrVkdX3ocmIUoJ+jo0 bM1RCU3VUN8kQg9WvO/9G6kx3eW4zyW+NeL7FySJQa4Ogc6rVuR79VNQcJ3eyStw wy6OvvXMtmiFiA2O1ItaVqMjYuf/aHSI1ItYg27G5SVfER7agO6HJq+VDHEvvSJ1 hYih+V0ij4fhviOMcAeMQGgAE/5gfYyqyYbwU+n3BxGLQZDIzonwS78VstBDhmSG P7fSDrOh7S1Kqkyj2b27bugV0v+8rjB15vwCL+fz7fxKOz4kUW5dDVOM/z6cA8bM dcr56Gm/VctaKBSM09c6O4chrrk/Wb+xW3YC2DPMhLZZnwXMUWNca4f9TwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPneZMeaobHXF00Oi33RPbCKm9XrMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvMS1kNWt4NXFoc2RjWFRRNkxmZEU5c0lxYjFlcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWIvOTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRk My8xL2duWURxVHZLTWJBWTlSSDIxTEMzVkc2V00ySS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQFLV3g AwQALV3iAwQAWb6WMA0GCSqGSIb3DQEBCwUAA4IBAQB/t3Xs9qjPk+0jzr+g3BS2 qsvbW+VyfWANj5tfOHahS+jPKm4dVlYVU/m6lcUwy59f1GkGCvb75lQP9TRUN6jK ynvl85MGLfT0yN30OiRbMpqnlP+l2gXdlcNhC0mH9a/35GPkuVzrWlD+4kHP4+zU UW8taJdgEdU2i+lObNstW0IhVuo+sqzxvdWiXYdVG3WM4IZisltEMDsZR1eOr+WL JyIgysj9DaL8a9TmO+ER6JgSlks/GcfUDLcstCicGQhB+YJJrjMKNqll6bGU7Vir lDkVmU2ChNM4KKNJhnzIQfN19RylsBmOwNGfBIttvK/+iiTyy00mty5QxfesIDgv -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:07 2026 by rpki-client