This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1YwxvX8gyqCOEysmt0qqybMCHNk.roa File: 1YwxvX8gyqCOEysmt0qqybMCHNk.roa (raw, json) Hash identifier: 7FYwyB2+5ONzIUgMmr62DZ1GVH8LQaI+zbpkQWQzE00= Subject key identifier: D5:8C:31:BD:7F:20:CA:A0:8E:13:2B:26:B7:4A:AA:C9:B3:02:1C:D9 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A321B69E01F052F9094291D952FF6F Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1YwxvX8gyqCOEysmt0qqybMCHNk.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56755 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:21:b6:9e:01:f0:52:f9:09:42:91:d9:52:ff:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d58c31bd7f20caa08e132b26b74aaac9b3021cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:e8:9b:5f:3d:55:0a:59:90:d2:73:34:36: 7e:9e:d4:64:e7:1b:7a:66:09:57:91:07:9a:84:06: 67:0f:37:ab:17:c3:23:a0:29:95:ca:92:f7:3e:63: b4:59:be:bf:52:63:4b:63:5e:22:5e:a9:94:4f:e3: b8:f1:d4:56:fb:d2:dc:2b:40:98:69:1e:2e:26:0b: 5c:ab:fc:b9:95:b0:31:be:f9:23:9e:c0:d4:3e:51: 58:bf:d3:7f:bb:49:75:44:a0:bc:3a:0a:82:0c:dd: 1b:63:36:23:e5:14:ce:e5:d1:ac:cb:79:a6:d5:96: 70:7f:7c:c8:dc:9d:aa:15:d0:d4:80:a8:50:6b:dd: ec:2e:c8:73:9f:86:9c:6d:b7:e8:1a:15:bb:a2:39: a0:89:6b:ec:4c:ed:23:42:26:c5:8f:22:37:38:4e: 4b:09:27:dc:1d:f7:ca:c3:76:2e:7a:3a:26:8f:7e: aa:32:e2:75:d5:b1:83:bb:71:aa:a6:63:eb:e1:cf: 4d:bc:00:6c:5a:05:f7:ec:ff:51:5b:fb:ea:a6:15: a9:ca:ae:9d:e9:7c:7d:75:67:70:39:f6:7f:37:4b: 5e:7a:f3:c9:27:f9:0d:6a:08:f1:b4:02:4f:ef:75: 92:69:d9:56:9d:97:cb:38:54:e4:dc:08:1d:ad:a0: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8C:31:BD:7F:20:CA:A0:8E:13:2B:26:B7:4A:AA:C9:B3:02:1C:D9 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1YwxvX8gyqCOEysmt0qqybMCHNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 Signature Algorithm: sha256WithRSAEncryption 67:05:5b:a9:6a:2a:2c:79:44:a6:15:06:31:73:f8:2e:71:a7: 28:2d:27:9a:47:16:33:3f:8f:96:c9:3f:7c:2b:5a:3f:9e:1c: 04:af:1d:ad:90:b4:97:28:05:52:2e:fe:d8:46:16:ab:4d:1e: ea:15:c7:ec:b2:b0:f6:6d:69:b4:30:aa:0e:d2:fc:01:dd:e1: 14:9d:e6:1e:58:f4:84:1b:a4:25:93:50:bc:5d:fd:a1:24:fb: 52:47:74:d3:b3:23:bf:f8:1d:6b:9d:56:d7:51:77:ee:ce:6b: a2:e1:bc:0f:45:1c:18:e8:ac:72:66:75:d4:e8:27:aa:b1:9b: dc:fb:f4:b3:0e:e9:90:f1:ce:46:97:7f:5a:be:94:ad:1e:ca: aa:28:a0:94:36:9c:6c:4d:3e:44:ba:fd:ca:b2:e1:8b:33:fb: 7c:7f:8b:3c:5d:d9:01:5c:06:3c:a6:b1:a5:b6:a1:71:27:48: 96:52:ca:12:49:d2:1b:f6:ae:6c:ed:09:0d:e7:17:14:06:e1: 08:75:04:60:9a:6c:76:a5:f8:f0:bc:1e:6a:d8:4b:74:76:8b: ce:6a:91:70:9e:69:3e:f9:c7:1f:be:4a:d7:0d:d5:19:db:48: d2:99:71:e0:e6:0d:cc:46:74:fa:c0:cd:25:52:f7:c3:b9:34: a6:e7:bc:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oyG2ngHwUvkJQpHZUv9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNThjMzFiZDdmMjBjYWEwOGUxMzJiMjZiNzRhYWFjOWIzMDIxY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWvom189VQpZkNJzNDZ+ntRk5xt6 ZglXkQeahAZnDzerF8MjoCmVypL3PmO0Wb6/UmNLY14iXqmUT+O48dRW+9LcK0CY aR4uJgtcq/y5lbAxvvkjnsDUPlFYv9N/u0l1RKC8OgqCDN0bYzYj5RTO5dGsy3mm 1ZZwf3zI3J2qFdDUgKhQa93sLshzn4acbbfoGhW7ojmgiWvsTO0jQibFjyI3OE5L CSfcHffKw3Yuejomj36qMuJ11bGDu3GqpmPr4c9NvABsWgX37P9RW/vqphWpyq6d 6Xx9dWdwOfZ/N0teevPJJ/kNagjxtAJP73WSadlWnZfLOFTk3AgdraDghwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNWMMb1/IMqgjhMrJrdKqsmzAhzZMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvMVl3eHZYOGd5cUNPRXlzbXQwcXF5Yk1DSE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAbc3BMA0E AgACMAcDBQAqAfsBMA0GCSqGSIb3DQEBCwUAA4IBAQBnBVupaioseUSmFQYxc/gu cacoLSeaRxYzP4+WyT98K1o/nhwErx2tkLSXKAVSLv7YRharTR7qFcfssrD2bWm0 MKoO0vwB3eEUneYeWPSEG6Qlk1C8Xf2hJPtSR3TTsyO/+B1rnVbXUXfuzmui4bwP RRwY6KxyZnXU6CeqsZvc+/SzDumQ8c5Gl39avpStHsqqKKCUNpxsTT5Euv3KsuGL M/t8f4s8XdkBXAY8prGltqFxJ0iWUsoSSdIb9q5s7QkN5xcUBuEIdQRgmmx2pfjw vB5q2Et0dovOapFwnmk++ccfvkrXDdUZ20jSmXHg5g3MRnT6wM0lUvfDuTSm57wp -----END CERTIFICATE-----Generated at Mon Jan 19 14:41:15 2026 by rpki-client