This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa File: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (raw, json) Hash identifier: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc= Subject key identifier: F9:2C:6F:6F:1F:82:83:C5:38:3F:EA:BC:DB:82:59:E4:7D:58:3B:A1 Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019B7A5B93BECE8C6C486842502ECAB36BB5 Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56440 IP address blocks: 91.224.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:93:be:ce:8c:6c:48:68:42:50:2e:ca:b3:6b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f92c6f6f1f8283c5383feabcdb8259e47d583ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:fd:28:f2:f9:65:57:b4:26:1a:e1:82:6b: 7d:47:41:53:9e:31:3f:d4:46:60:a0:7d:32:9c:64: dd:93:bb:64:25:22:c2:c4:d6:e2:9e:dc:4e:c3:c7: 7e:2c:73:33:3a:e7:ee:2e:ed:4b:c4:c3:b1:56:c2: 67:cc:c5:b8:f2:b6:b9:a5:57:ca:0d:d2:7f:b9:e6: 90:a0:53:aa:89:50:24:26:90:73:e1:49:9f:d8:b9: 7a:3c:b0:c5:19:73:2a:0a:eb:1e:58:8a:6d:d7:39: 7a:7b:e3:23:87:ca:17:58:66:8a:31:f9:4c:bb:9f: 7b:d6:ad:51:65:85:b3:e4:a0:44:da:6d:e2:8c:b0: 83:e5:93:8f:0d:ff:97:9b:1b:9c:15:f2:21:26:ea: f8:10:df:ef:6e:b9:bc:3e:2d:94:00:15:38:ce:14: 8f:95:6d:8c:bc:0e:23:16:67:7d:a0:ff:14:50:62: 97:51:b6:86:91:4a:3a:7c:7a:7c:b9:8b:a3:d8:29: 80:95:1f:0b:35:ec:95:b6:89:ab:14:cd:22:4e:01: 5b:ad:19:b3:76:bd:7c:26:bf:29:ea:52:37:46:ba: 7c:98:a6:f7:f6:7f:e8:1d:bf:0c:61:c6:56:d9:62: 03:3f:bb:d8:57:2f:06:07:76:bf:00:3b:12:d1:3f: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2C:6F:6F:1F:82:83:C5:38:3F:EA:BC:DB:82:59:E4:7D:58:3B:A1 X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.158.0/23 Signature Algorithm: sha256WithRSAEncryption 68:2c:90:1e:31:01:f4:d3:82:95:2d:9c:f1:07:66:2a:0c:5e: ff:f2:3e:c1:aa:68:0b:ac:b9:73:8d:f9:30:15:f7:36:57:03: 35:2a:83:69:9c:b6:2d:8f:6f:fb:39:af:31:a7:7f:ff:e9:c4: 50:73:2b:27:d4:94:3d:d2:a3:5a:67:de:8d:27:12:f8:c6:23: fc:a0:81:c4:9d:91:f0:c0:19:00:1c:87:d8:e9:9e:56:11:9c: 31:99:7d:19:c9:e5:eb:4d:e5:4c:43:4d:f6:9e:cb:ee:c4:be: 8c:6f:92:32:e7:d9:9f:bb:e6:76:d8:69:4b:7a:e7:8f:63:fd: 3c:a9:7c:e8:d5:31:2e:6d:65:ca:ff:a5:f3:f1:ae:2a:6b:b8: c7:f1:48:36:1a:45:cd:c9:a4:d0:1b:84:e0:fd:7a:a6:34:94: a4:5f:3d:56:45:74:8a:60:02:99:34:6b:1b:a9:6e:a2:9c:a1: ae:03:c8:50:ce:20:2d:c0:14:1a:76:95:11:5d:1f:bf:51:e5: 82:f6:fc:ba:fd:20:67:e8:95:07:48:3f:4f:2e:ca:09:8c:62: 85:07:f2:4f:2a:a6:14:99:38:6e:e9:a2:7a:d5:0a:6a:27:88: 55:ed:c1:c8:34:0b:af:95:00:e5:71:ac:35:18:44:25:8a:12: 4d:1d:bf:87 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6W5O+zoxsSGhCUC7Ks2u1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTJjNmY2ZjFmODI4M2M1MzgzZmVhYmNkYjgyNTllNDdkNTgzYmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSD9KPL5ZVe0Jhrhgmt9R0FTnjE/ 1EZgoH0ynGTdk7tkJSLCxNbintxOw8d+LHMzOufuLu1LxMOxVsJnzMW48ra5pVfK DdJ/ueaQoFOqiVAkJpBz4Umf2Ll6PLDFGXMqCuseWIpt1zl6e+Mjh8oXWGaKMflM u5971q1RZYWz5KBE2m3ijLCD5ZOPDf+XmxucFfIhJur4EN/vbrm8Pi2UABU4zhSP lW2MvA4jFmd9oP8UUGKXUbaGkUo6fHp8uYuj2CmAlR8LNeyVtomrFM0iTgFbrRmz dr18Jr8p6lI3Rrp8mKb39n/oHb8MYcZW2WIDP7vYVy8GB3a/ADsS0T9txwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPksb28fgoPFOD/qvNuCWeR9WDuhMB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEvMS1TeHZieC1DZzhVNFAtcTgyNEpaNUgxWU82RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjUvNDFhZjJkLWYzZGUtNDVkNS05NDFjLWM0M2FjNDI5ZTUz Zi8xL2tHSUdPTW9kZzFaUTRJM2M4MlB4QjRtMU1GYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvgnjAN BgkqhkiG9w0BAQsFAAOCAQEAaCyQHjEB9NOClS2c8QdmKgxe//I+wapoC6y5c435 MBX3NlcDNSqDaZy2LY9v+zmvMad//+nEUHMrJ9SUPdKjWmfejScS+MYj/KCBxJ2R 8MAZAByH2OmeVhGcMZl9Gcnl603lTENN9p7L7sS+jG+SMufZn7vmdthpS3rnj2P9 PKl86NUxLm1lyv+l8/GuKmu4x/FINhpFzcmk0BuE4P16pjSUpF89VkV0imACmTRr G6luopyhrgPIUM4gLcAUGnaVEV0fv1Hlgvb8uv0gZ+iVB0g/Ty7KCYxihQfyTyqm FJk4bumietUKaieIVe3ByDQLr5UA5XGsNRhEJYoSTR2/hw== -----END CERTIFICATE-----Generated at Thu Jan 22 04:16:03 2026 by rpki-client