This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/pSI-y0SCqYBWVInc8M0yLN7ZnhM.roa File: pSI-y0SCqYBWVInc8M0yLN7ZnhM.roa (raw, json) Hash identifier: 3074qQKnytP+H130uNFdcnZrdHZY2zcxKO2AmdzYhJM= Subject key identifier: A5:22:3E:CB:44:82:A9:80:56:54:89:DC:F0:CD:32:2C:DE:D9:9E:13 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA6717FF069B28FAAAE1DE648059D Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/pSI-y0SCqYBWVInc8M0yLN7ZnhM.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 45.156.56.0/23 maxlen: 24 83.147.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a6:71:7f:f0:69:b2:8f:aa:ae:1d:e6:48:05:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5223ecb4482a980565489dcf0cd322cded99e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:a0:c1:7d:f1:f9:8f:0c:a5:7d:a4:e7:ac: 78:1b:48:90:be:e5:f7:56:5d:87:33:ae:fc:d0:c8: 7d:97:72:75:6f:ca:77:1b:de:d3:ea:53:5c:d0:2d: f6:2b:74:52:5e:5a:b9:1d:65:70:4c:58:51:0e:d8: 0d:50:00:ed:72:9f:ff:fb:de:90:b8:cb:0d:16:fc: 66:76:7b:c5:14:70:18:ec:72:49:d1:06:2b:f7:a0: d2:48:f1:fa:b6:d4:4c:3b:56:86:f5:31:be:c5:ac: ec:a0:21:50:3d:ca:74:60:df:e8:a2:c5:c4:70:bf: 40:7c:da:ce:e3:49:b8:31:18:8f:74:4e:3a:12:09: a4:c3:bf:01:9f:ba:16:c4:0e:d5:92:87:a8:2d:58: a2:73:1d:97:61:9c:58:bb:45:73:66:59:a4:8b:8d: 61:89:bb:2e:46:ae:90:50:fd:31:2c:6e:71:c8:e3: f3:22:a6:5e:31:ae:39:d9:7b:8e:ca:c0:38:64:92: 16:76:bd:83:e8:1d:ba:c5:50:69:7e:32:3d:73:a2: bb:2a:7c:08:a5:8d:bd:6e:df:65:29:0e:96:46:2c: bc:cf:46:a5:a0:90:ae:79:87:00:2e:25:d2:35:d3: 1e:76:34:ec:e4:6e:c8:64:53:51:1a:cd:d3:15:fc: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:3E:CB:44:82:A9:80:56:54:89:DC:F0:CD:32:2C:DE:D9:9E:13 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/pSI-y0SCqYBWVInc8M0yLN7ZnhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.56.0/23 83.147.24.0/24 Signature Algorithm: sha256WithRSAEncryption 96:4f:c5:f7:6e:d7:61:82:2e:53:03:3b:a1:05:36:35:e9:23: 00:98:1c:54:c4:23:17:e9:a7:3f:ed:ac:f3:87:9b:4f:ba:a0: c6:76:4a:00:eb:67:0d:8f:4f:0b:d3:0d:62:bb:cb:64:5b:bc: c7:12:d4:09:5f:b4:46:2f:83:84:72:9f:94:cb:c3:d9:16:6b: 81:26:8f:96:23:e6:ab:cf:a7:17:65:63:c6:8f:09:0e:29:28: 0c:99:06:00:e2:5d:f9:aa:cc:e2:4c:ca:8a:c5:a1:00:c6:f4: b8:60:a2:b6:ba:9c:d4:8f:d8:9a:b0:0e:0d:03:5b:56:fb:5a: d1:d6:fb:b2:23:82:5d:33:f9:b4:a9:a2:ce:03:35:7d:7f:af: 9b:46:f8:2a:ec:62:73:4e:2f:1c:bc:37:46:e0:98:3d:f9:82: 9d:62:91:9e:33:be:3b:7f:49:8d:a6:b9:1c:34:60:7b:e9:2a: e0:8d:40:10:97:47:68:a0:8f:64:96:6e:e4:79:37:d7:dc:52: 53:6f:98:9e:be:f6:0f:37:6a:e2:1d:b3:17:c7:a8:2f:48:ac: 07:df:05:6f:53:be:82:9f:8e:94:16:2b:8e:85:30:cf:d6:75: 01:95:86:c2:90:69:5e:f4:9e:ad:12:05:46:93:6f:2a:5a:52: a7:84:bd:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WqZxf/Bpso+qrh3mSAWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTIyM2VjYjQ0ODJhOTgwNTY1NDg5ZGNmMGNkMzIyY2RlZDk5ZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyGgwX3x+Y8MpX2k56x4G0iQvuX3 Vl2HM6780Mh9l3J1b8p3G97T6lNc0C32K3RSXlq5HWVwTFhRDtgNUADtcp//+96Q uMsNFvxmdnvFFHAY7HJJ0QYr96DSSPH6ttRMO1aG9TG+xazsoCFQPcp0YN/oosXE cL9AfNrO40m4MRiPdE46Egmkw78Bn7oWxA7VkoeoLViicx2XYZxYu0VzZlmki41h ibsuRq6QUP0xLG5xyOPzIqZeMa452XuOysA4ZJIWdr2D6B26xVBpfjI9c6K7KnwI pY29bt9lKQ6WRiy8z0aloJCueYcALiXSNdMedjTs5G7IZFNRGs3TFfwQswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKUiPstEgqmAVlSJ3PDNMize2Z4TMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvcFNJLXkwU0NxWUJXVkluYzhNMHlMTjdabmhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZw4AwQA U5MYMA0GCSqGSIb3DQEBCwUAA4IBAQCWT8X3btdhgi5TAzuhBTY16SMAmBxUxCMX 6ac/7azzh5tPuqDGdkoA62cNj08L0w1iu8tkW7zHEtQJX7RGL4OEcp+Uy8PZFmuB Jo+WI+arz6cXZWPGjwkOKSgMmQYA4l35qsziTMqKxaEAxvS4YKK2upzUj9iasA4N A1tW+1rR1vuyI4JdM/m0qaLOAzV9f6+bRvgq7GJzTi8cvDdG4Jg9+YKdYpGeM747 f0mNprkcNGB76SrgjUAQl0dooI9klm7keTfX3FJTb5ievvYPN2riHbMXx6gvSKwH 3wVvU76Cn46UFiuOhTDP1nUBlYbCkGle9J6tEgVGk28qWlKnhL1x -----END CERTIFICATE-----Generated at Fri Jan 2 14:41:00 2026 by rpki-client