This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/AI5iPwrPeQM75vgCBirIJ7ULXR8.roa File: AI5iPwrPeQM75vgCBirIJ7ULXR8.roa (raw, json) Hash identifier: 6BPizRCmHI1yenYS4NwhiHl3z1wmNCdGTc9GKZg1Dkg= Subject key identifier: 00:8E:62:3F:0A:CF:79:03:3B:E6:F8:02:06:2A:C8:27:B5:0B:5D:1F Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa Certificate serial: 019B791132DD2009B898F12272974DD3150A Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/AI5iPwrPeQM75vgCBirIJ7ULXR8.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35508 IP address blocks: 79.142.96.0/23 maxlen: 24 85.112.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:32:dd:20:09:b8:98:f1:22:72:97:4d:d3:15:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=008e623f0acf79033be6f802062ac827b50b5d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:4e:e3:cb:28:b1:8e:8e:a2:e6:ef:1e:49: 90:68:ef:e5:a8:0f:3e:9a:3d:b1:59:74:25:be:da: c2:40:7f:97:d9:f0:83:0c:4e:73:3b:c8:02:f4:0f: 63:2d:0f:69:e5:a5:08:fc:10:1e:19:35:05:78:5f: 34:2d:61:4a:e4:18:dd:b9:32:0c:67:b3:19:1b:22: 58:21:e4:d4:8f:53:5c:83:01:92:09:b6:ce:ea:52: 7f:3a:fd:43:fc:3c:ab:51:5f:10:8e:15:0f:45:0e: da:4c:11:d7:35:47:4e:fe:27:db:bc:e7:fa:3c:23: 57:d2:49:f1:dd:c9:d1:23:6f:d8:be:4e:ef:c1:fd: 88:ea:fb:8c:ad:19:3a:8f:ba:dc:a2:dc:79:74:67: 2c:33:b0:08:47:05:74:b5:27:ce:cb:4e:98:75:1d: 4b:80:91:22:19:d5:6b:04:c3:c2:85:11:1c:ea:a1: ec:7d:94:40:62:b1:91:ea:61:87:af:58:19:b7:3a: 5a:a6:60:46:82:ba:3f:ce:e0:e3:6b:2e:3d:be:cb: 7c:a0:44:e4:ab:1d:98:01:72:67:61:0f:a6:d0:a3: 10:6e:e2:44:28:f4:75:be:17:a8:28:69:c3:7b:94: da:2c:41:e5:1e:8e:03:09:d5:40:c9:c8:51:5c:58: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8E:62:3F:0A:CF:79:03:3B:E6:F8:02:06:2A:C8:27:B5:0B:5D:1F X509v3 Authority Key Identifier: keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/AI5iPwrPeQM75vgCBirIJ7ULXR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.142.96.0/23 85.112.96.0/23 Signature Algorithm: sha256WithRSAEncryption 56:64:5d:ae:b5:6e:6f:51:65:79:90:02:fe:f2:a0:61:e7:06: 12:90:90:6f:41:06:28:ba:af:81:09:32:8b:0a:33:7a:52:89: 04:1c:08:88:5b:75:07:22:89:15:3a:bc:e7:52:be:65:23:cf: 2b:be:41:56:d9:50:af:8a:e3:40:51:09:0b:a4:01:85:ec:69: 71:bb:0c:51:df:21:3e:4e:0d:87:d3:33:bd:09:50:b0:f4:40: 0c:13:ae:98:51:ba:f1:4e:e0:a3:59:1e:a8:6f:60:0b:0a:86: bc:d0:dc:5a:18:de:e3:6c:42:dc:d4:de:43:86:f7:24:f1:59: 6a:e1:df:bf:c3:00:fd:38:de:64:f9:e8:b6:c2:cd:d8:18:de: 38:85:59:c0:06:b1:75:dd:48:3d:52:73:81:c3:0b:dd:e2:32: e6:13:77:38:8a:fa:c4:fd:4d:6a:5e:fb:2c:b0:af:96:5c:4d: 4b:87:5c:7d:19:85:aa:a8:c3:2b:e1:84:5a:c6:62:c8:70:80: 5d:90:66:db:23:32:62:02:b0:8f:bf:bd:83:bf:05:db:22:88: c8:e2:76:bc:9d:39:1d:17:7a:34:79:a5:8b:c5:76:0e:c3:7e: 92:3e:05:8a:2e:65:00:0a:47:d0:a7:90:89:91:8b:d5:69:cd: ec:54:46:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ETLdIAm4mPEicpdN0xUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4 ZTU1YWEwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDhlNjIzZjBhY2Y3OTAzM2JlNmY4MDIwNjJhYzgyN2I1MGI1ZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhJO48sosY6OoubvHkmQaO/lqA8+ mj2xWXQlvtrCQH+X2fCDDE5zO8gC9A9jLQ9p5aUI/BAeGTUFeF80LWFK5BjduTIM Z7MZGyJYIeTUj1NcgwGSCbbO6lJ/Ov1D/DyrUV8QjhUPRQ7aTBHXNUdO/ifbvOf6 PCNX0knx3cnRI2/Yvk7vwf2I6vuMrRk6j7rcotx5dGcsM7AIRwV0tSfOy06YdR1L gJEiGdVrBMPChREc6qHsfZRAYrGR6mGHr1gZtzpapmBGgro/zuDjay49vst8oETk qx2YAXJnYQ+m0KMQbuJEKPR1vheoKGnDe5TaLEHlHo4DCdVAychRXFjVJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFACOYj8Kz3kDO+b4AgYqyCe1C10fMB8GA1UdIwQY MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt MDBkMWU3YTE3MGEyLzEvQUk1aVB3clBlUU03NXZnQ0JpcklKN1VMWFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBT45gAwQB VXBgMA0GCSqGSIb3DQEBCwUAA4IBAQBWZF2utW5vUWV5kAL+8qBh5wYSkJBvQQYo uq+BCTKLCjN6UokEHAiIW3UHIokVOrznUr5lI88rvkFW2VCviuNAUQkLpAGF7Glx uwxR3yE+Tg2H0zO9CVCw9EAME66YUbrxTuCjWR6ob2ALCoa80NxaGN7jbELc1N5D hvck8Vlq4d+/wwD9ON5k+ei2ws3YGN44hVnABrF13Ug9UnOBwwvd4jLmE3c4ivrE /U1qXvsssK+WXE1Lh1x9GYWqqMMr4YRaxmLIcIBdkGbbIzJiArCPv72DvwXbIojI 4na8nTkdF3o0eaWLxXYOw36SPgWKLmUACkfQp5CJkYvVac3sVEZv -----END CERTIFICATE-----Generated at Tue Jan 27 22:00:55 2026 by rpki-client