This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/jI-hqwxak8Tg6ancnuy3V90l4fQ.roa File: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (raw, json) Hash identifier: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4= Subject key identifier: 8C:8F:A1:AB:0C:5A:93:C4:E0:E9:A9:DC:9E:EC:B7:57:DD:25:E1:F4 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F697EA7F5C93C2AF7F2853AFD187 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/jI-hqwxak8Tg6ancnuy3V90l4fQ.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274010 IP address blocks: 158.172.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f6:97:ea:7f:5c:93:c2:af:7f:28:53:af:d1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8fa1ab0c5a93c4e0e9a9dc9eecb757dd25e1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:f0:27:16:35:8d:c4:ef:e7:c0:bc:80:41: cc:c4:ff:04:3d:3d:64:03:eb:95:b7:54:84:8d:cd: df:25:f4:7a:9b:7d:5c:1d:84:dc:e4:73:65:e7:47: 16:1e:e3:97:41:e1:fd:b3:fa:c2:92:5b:b7:bc:e3: 07:a7:43:e3:56:f2:eb:45:d5:7d:1a:3a:63:d4:62: 14:a6:02:37:ff:e1:82:02:e0:62:59:41:2f:1a:6e: a6:4e:12:4c:c5:28:e3:8e:0b:ee:0c:29:40:e4:f9: 5a:7d:1a:28:f4:21:77:7f:32:c6:66:89:8b:3b:5b: 83:37:a5:db:67:b8:85:41:e2:02:64:35:b6:86:46: 8a:8c:3d:ae:b2:23:c3:72:ed:19:37:59:43:a3:a9: 4b:41:7f:1d:be:c7:00:fb:95:c6:d0:32:e0:57:c5: a8:a7:f2:f8:65:5a:41:ff:b3:a9:ea:a7:67:7e:bc: 50:88:0b:49:36:c0:ee:7c:74:46:30:7b:a4:63:f9: 95:e9:81:84:84:b9:f4:14:5f:00:f3:1b:3f:ec:7c: 9b:e9:fc:ee:d3:a9:65:ca:8f:87:87:7f:e2:28:bc: a4:a2:4a:7f:7d:d3:67:20:b1:71:80:a8:27:0b:e5: 9b:ff:88:7d:f7:16:63:3f:87:d7:e2:cb:d9:ea:25: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8F:A1:AB:0C:5A:93:C4:E0:E9:A9:DC:9E:EC:B7:57:DD:25:E1:F4 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/jI-hqwxak8Tg6ancnuy3V90l4fQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.220.0/23 Signature Algorithm: sha256WithRSAEncryption b5:63:ad:26:fd:b9:09:cc:c1:a3:2e:aa:58:0b:7d:b1:6b:2a: 7c:9e:a1:81:42:14:35:b7:48:c6:40:c3:77:c5:8e:43:ba:b9: c0:5a:fc:12:62:63:14:99:e3:96:ef:96:6e:6b:75:89:8c:12: e7:5d:f5:64:73:50:71:47:bf:ce:ca:e3:10:de:64:f6:6d:3b: 98:f3:b1:c0:88:88:ef:66:0b:0b:5a:31:11:1c:b5:51:23:61: a5:f6:3e:a1:4f:85:0f:b6:31:29:6b:87:27:01:d9:88:fb:a3: ee:e2:5f:48:95:55:fe:e7:99:f2:db:b1:b7:de:83:a8:27:9e: a5:67:ea:0b:ed:ae:a7:1e:03:3c:ce:95:a4:6b:03:6b:48:a9: 11:04:cb:0d:6e:61:8e:33:fb:31:a8:e4:fe:ea:0b:e4:f1:7b: 05:4f:f0:f9:0b:2f:b7:22:61:3e:58:1f:76:1a:ae:d0:c6:16: 10:2f:9d:75:ec:6b:47:b5:77:b8:f0:0e:02:76:67:6f:64:20: 16:99:3c:3d:cd:00:6a:64:aa:1a:02:8c:77:48:9c:08:53:55: 5e:f7:bb:41:4d:e8:a3:1c:e4:d2:b9:8b:84:19:59:a4:b9:c3: 77:53:1b:82:5d:04:4d:8b:c5:21:25:79:48:31:28:d1:0a:62: 52:f0:c3:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPaX6n9ck8KvfyhTr9GHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzhmYTFhYjBjNWE5M2M0ZTBlOWE5ZGM5ZWVjYjc1N2RkMjVlMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RzwJxY1jcTv58C8gEHMxP8EPT1k A+uVt1SEjc3fJfR6m31cHYTc5HNl50cWHuOXQeH9s/rCklu3vOMHp0PjVvLrRdV9 Gjpj1GIUpgI3/+GCAuBiWUEvGm6mThJMxSjjjgvuDClA5PlafRoo9CF3fzLGZomL O1uDN6XbZ7iFQeICZDW2hkaKjD2usiPDcu0ZN1lDo6lLQX8dvscA+5XG0DLgV8Wo p/L4ZVpB/7Op6qdnfrxQiAtJNsDufHRGMHukY/mV6YGEhLn0FF8A8xs/7Hyb6fzu 06llyo+Hh3/iKLykokp/fdNnILFxgKgnC+Wb/4h99xZjP4fX4svZ6iV/jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyPoasMWpPE4Omp3J7st1fdJeH0MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvakktaHF3eGFrOFRnNmFuY251eTNWOTBsNGZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnqzcMA0G CSqGSIb3DQEBCwUAA4IBAQC1Y60m/bkJzMGjLqpYC32xayp8nqGBQhQ1t0jGQMN3 xY5DurnAWvwSYmMUmeOW75Zua3WJjBLnXfVkc1BxR7/OyuMQ3mT2bTuY87HAiIjv ZgsLWjERHLVRI2Gl9j6hT4UPtjEpa4cnAdmI+6Pu4l9IlVX+55ny27G33oOoJ56l Z+oL7a6nHgM8zpWkawNrSKkRBMsNbmGOM/sxqOT+6gvk8XsFT/D5Cy+3ImE+WB92 Gq7QxhYQL5117GtHtXe48A4CdmdvZCAWmTw9zQBqZKoaAox3SJwIU1Ve97tBTeij HOTSuYuEGVmkucN3UxuCXQRNi8UhJXlIMSjRCmJS8MNa -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:42 2026 by rpki-client