This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/1s9edady0IlLFTjAVGX74BTlTOU.roa File: 1s9edady0IlLFTjAVGX74BTlTOU.roa (raw, json) Hash identifier: UbGcCZaiXwxi+mV6BY8TzVOmDvRo6W4bzSToeQyBxU8= Subject key identifier: D6:CF:5E:75:A7:72:D0:89:4B:15:38:C0:54:65:FB:E0:14:E5:4C:E5 Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e Certificate serial: 019B7F133DA3FA9954993FA3D7652543094F Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/1s9edady0IlLFTjAVGX74BTlTOU.roa Signing time: Fri 02 Jan 2026 14:18:45 +0000 ROA not before: Fri 02 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43473 IP address blocks: 91.195.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:3d:a3:fa:99:54:99:3f:a3:d7:65:25:43:09:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e Validity Not Before: Jan 2 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6cf5e75a772d0894b1538c05465fbe014e54ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:79:a9:67:59:29:ab:d2:99:06:2c:c4:be: fe:16:fc:83:b3:25:d9:2b:c2:61:0e:d1:20:11:7a: 10:80:ec:d1:34:bc:cb:34:82:38:49:d3:f7:2b:cc: 95:bf:e5:7b:01:cd:a1:9d:3d:d4:b4:57:43:4e:82: de:d8:92:73:45:bd:fe:26:26:08:ed:d3:66:1d:23: 59:60:3c:d2:d5:81:01:58:4e:b2:79:66:81:8c:29: 7a:63:bd:9f:f0:fb:24:f9:5f:cc:4e:62:a1:2e:c9: 92:3e:a8:18:17:66:cf:9f:f3:1d:b0:22:ce:b0:9f: 0d:66:3c:b7:1e:df:0d:96:ce:12:fb:49:56:85:3b: 1c:15:3a:3b:5c:04:f4:3c:88:2d:36:14:3d:be:0f: ad:fa:e9:7a:80:40:e9:be:d0:7a:41:ca:75:43:52: db:c3:49:cd:92:2e:cd:69:b1:28:39:cf:6a:94:5d: 0c:2c:98:14:5e:fb:c5:0f:30:35:08:0f:01:f9:ef: 98:96:95:2d:08:0b:6c:9a:1a:87:9d:28:d2:33:33: 48:93:10:fb:dc:61:f6:3d:8c:5b:fd:15:77:53:1e: b2:f3:73:3c:f3:26:d0:5a:13:8b:51:24:c9:2f:66: 4e:c3:93:a4:9d:5e:51:4f:88:58:ea:87:23:ac:a4: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CF:5E:75:A7:72:D0:89:4B:15:38:C0:54:65:FB:E0:14:E5:4C:E5 X509v3 Authority Key Identifier: keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/1s9edady0IlLFTjAVGX74BTlTOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.14.0/23 Signature Algorithm: sha256WithRSAEncryption 80:40:bb:a1:d4:39:7b:d0:5c:86:32:7c:41:9b:45:de:d0:81: 9a:e0:74:a3:38:ef:03:fd:d0:b1:22:b0:80:49:a0:7a:2b:7e: 1d:1f:87:a3:de:c5:a4:5e:c4:39:34:3d:15:79:e9:6a:ee:5b: 82:0f:26:9a:83:a2:10:19:e7:19:c9:5c:ac:41:26:8e:c7:f2: f2:2e:49:76:22:3a:28:2a:39:8a:df:82:cc:9b:e1:83:0c:b5: cc:86:de:d8:18:d7:a0:67:5c:51:51:79:fc:d2:f2:d7:fa:df: 68:54:a6:38:77:a0:ce:a0:4e:6d:85:51:5d:68:f6:b8:f9:cc: d7:a9:fe:ec:9b:6d:80:7a:84:6a:65:c9:ea:f9:00:7e:52:49: ab:a3:90:74:93:24:f1:53:bc:6b:8b:c2:7c:f9:1b:d6:76:15: 82:00:81:83:04:98:db:1f:8c:34:2f:04:9c:7d:f7:d5:ff:1f: 06:16:cf:73:51:c2:ac:d5:47:53:83:0d:77:a0:d6:4f:e5:5b: 5b:a7:34:f9:f0:24:44:2c:03:b1:56:eb:bd:0c:aa:c9:1b:58: 30:a6:6c:9e:a2:b2:35:0d:b4:b7:e8:d3:ab:13:a3:5f:ab:46: 92:d0:a9:3e:64:b7:42:a6:36:84:24:49:0b:68:69:78:af:78: 03:23:60:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Ez2j+plUmT+j12UlQwlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YjFkZTc0NDNlYWYxOGNlYjA2ODg4ZDdlZjkzYTU2MzVh NGFlMWUwHhcNMjYwMTAyMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmNmNWU3NWE3NzJkMDg5NGIxNTM4YzA1NDY1ZmJlMDE0ZTU0Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLB5qWdZKavSmQYsxL7+FvyDsyXZ K8JhDtEgEXoQgOzRNLzLNII4SdP3K8yVv+V7Ac2hnT3UtFdDToLe2JJzRb3+JiYI 7dNmHSNZYDzS1YEBWE6yeWaBjCl6Y72f8Psk+V/MTmKhLsmSPqgYF2bPn/MdsCLO sJ8NZjy3Ht8Nls4S+0lWhTscFTo7XAT0PIgtNhQ9vg+t+ul6gEDpvtB6Qcp1Q1Lb w0nNki7NabEoOc9qlF0MLJgUXvvFDzA1CA8B+e+YlpUtCAtsmhqHnSjSMzNIkxD7 3GH2PYxb/RV3Ux6y83M88ybQWhOLUSTJL2ZOw5OknV5RT4hY6ocjrKQ1lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbPXnWnctCJSxU4wFRl++AU5UzlMB8GA1UdIwQY MBaAFOWx3nRD6vGM6waIjX75OlY1pK4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODQ4MzgtMGUzYi00NmJhLTg1OTUt ZDhmNmFiODNiNTMzLzEvMXM5ZWRhZHkwSWxMRlRqQVZHWDc0QlRsVE9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODQ4MzgtMGUzYi00NmJhLTg1OTUtZDhmNmFiODNiNTMz LzEvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8MOMA0G CSqGSIb3DQEBCwUAA4IBAQCAQLuh1Dl70FyGMnxBm0Xe0IGa4HSjOO8D/dCxIrCA SaB6K34dH4ej3sWkXsQ5ND0Veelq7luCDyaag6IQGecZyVysQSaOx/LyLkl2Ijoo KjmK34LMm+GDDLXMht7YGNegZ1xRUXn80vLX+t9oVKY4d6DOoE5thVFdaPa4+czX qf7sm22AeoRqZcnq+QB+Ukmro5B0kyTxU7xri8J8+RvWdhWCAIGDBJjbH4w0LwSc fffV/x8GFs9zUcKs1UdTgw13oNZP5VtbpzT58CRELAOxVuu9DKrJG1gwpmyeorI1 DbS36NOrE6Nfq0aS0Kk+ZLdCpjaEJEkLaGl4r3gDI2AF -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:11 2026 by rpki-client