This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa File: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (raw, json) Hash identifier: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo= Subject key identifier: D5:1B:B3:B0:EA:22:3D:38:2A:B2:E4:B3:CC:05:3D:61:DA:43:FF:11 Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c Certificate serial: 019B797E6EC51959BB6BC5FA10C04AC0A601 Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2777 IP address blocks: 164.18.96.0/21 maxlen: 21 2a07:b982:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6e:c5:19:59:bb:6b:c5:fa:10:c0:4a:c0:a6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597a01de87e011803f890ae17749020f995f140c Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51bb3b0ea223d382ab2e4b3cc053d61da43ff11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6a:5d:fa:6e:02:ed:f1:48:1a:9e:2c:63:ec: 8f:eb:40:91:c3:23:7f:da:fd:88:aa:d2:0c:5a:7d: 95:94:11:af:8c:83:0c:f3:55:25:0a:45:e0:af:af: b3:bc:49:c3:27:f7:1b:20:fb:48:eb:df:6d:4e:5c: a8:3f:66:68:e5:a9:d8:00:ee:4f:3b:d6:c4:21:a8: 6a:5e:ce:9e:21:9d:95:3b:db:ba:99:fd:fe:98:16: 1d:b7:3d:b5:a2:dc:e8:e2:b0:b0:77:db:f9:be:74: 4e:94:f8:46:99:db:3b:f3:dc:59:43:05:28:77:01: b8:9d:40:35:e4:e4:af:5e:cd:90:6e:0e:58:7d:eb: 4f:5a:ad:ae:2c:c8:b7:13:4e:e2:fd:80:9e:e0:26: 0d:a7:bc:5a:69:42:dc:e1:6e:16:ef:9a:84:56:58: 39:1c:ff:13:b2:0d:42:4f:ff:ef:2c:0e:eb:34:ae: 6b:6d:45:4e:84:81:5e:70:0b:33:3b:d6:58:be:95: f8:be:d8:86:e9:50:ef:3a:e0:00:e8:d4:f8:06:08: 7a:b6:c6:f8:a5:0a:17:d1:34:81:09:45:bc:1b:b2: c6:57:ad:f2:ad:b2:85:5e:47:04:c0:65:58:bd:6f: 01:52:15:0c:4a:55:36:44:91:a5:22:31:86:ed:2b: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1B:B3:B0:EA:22:3D:38:2A:B2:E4:B3:CC:05:3D:61:DA:43:FF:11 X509v3 Authority Key Identifier: keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.18.96.0/21 IPv6: 2a07:b982:c000::/48 Signature Algorithm: sha256WithRSAEncryption 92:42:47:bb:4d:39:a4:ba:47:d2:74:2b:c1:f9:94:c5:34:5a: 2f:c1:87:1f:69:aa:84:82:c3:31:cd:74:23:c2:2b:db:1b:33: 78:91:15:4c:56:e8:02:9f:df:62:01:6f:55:45:3f:bb:e3:8b: ac:e1:a4:a3:e1:b9:ab:93:6b:27:ad:e6:22:59:d2:d4:ab:db: 4d:7b:36:27:7c:84:b7:f8:50:10:39:af:3f:cd:9f:e6:5a:aa: 73:5d:89:7a:fa:9d:34:99:29:a7:98:07:99:8a:5e:ec:b3:a4: 40:e7:36:05:38:40:68:fe:bd:c0:59:a3:0e:c0:b0:dc:d3:ae: 59:3a:d6:61:ca:c7:c8:23:07:49:6c:62:5b:1f:65:6b:a5:4d: cd:34:83:2b:8d:90:77:50:7e:54:16:b0:a7:a9:7b:80:49:8a: d5:37:61:4b:e3:91:23:c0:38:17:78:b8:1b:98:cd:19:a6:be: e0:43:86:61:93:8c:9f:a1:67:91:d7:be:55:83:19:00:d3:0c: ba:a6:45:cc:e2:1a:b5:2c:ef:d0:f0:dd:00:c1:92:89:a8:6e: f3:14:f1:83:1f:a2:2e:b7:a8:65:e2:37:85:d8:4a:0e:9a:45: a4:80:75:e0:25:7a:59:7f:26:3f:15:d5:f5:98:32:a1:d0:34: 79:99:d1:cb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fm7FGVm7a8X6EMBKwKYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1 ZjE0MGMwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTFiYjNiMGVhMjIzZDM4MmFiMmU0YjNjYzA1M2Q2MWRhNDNmZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmpd+m4C7fFIGp4sY+yP60CRwyN/ 2v2IqtIMWn2VlBGvjIMM81UlCkXgr6+zvEnDJ/cbIPtI699tTlyoP2Zo5anYAO5P O9bEIahqXs6eIZ2VO9u6mf3+mBYdtz21otzo4rCwd9v5vnROlPhGmds789xZQwUo dwG4nUA15OSvXs2Qbg5YfetPWq2uLMi3E07i/YCe4CYNp7xaaULc4W4W75qEVlg5 HP8Tsg1CT//vLA7rNK5rbUVOhIFecAszO9ZYvpX4vtiG6VDvOuAA6NT4Bgh6tsb4 pQoX0TSBCUW8G7LGV63yrbKFXkcEwGVYvW8BUhUMSlU2RJGlIjGG7SswEQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNUbs7DqIj04KrLks8wFPWHaQ/8RMB8GA1UdIwQY MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt NzM1MzNkZTA5OWMzLzEvMVJ1enNPb2lQVGdxc3VTenpBVTlZZHBEX3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDpBJgMA8E AgACMAkDBwAqB7mCwAAwDQYJKoZIhvcNAQELBQADggEBAJJCR7tNOaS6R9J0K8H5 lMU0Wi/Bhx9pqoSCwzHNdCPCK9sbM3iRFUxW6AKf32IBb1VFP7vji6zhpKPhuauT ayet5iJZ0tSr2017Nid8hLf4UBA5rz/Nn+ZaqnNdiXr6nTSZKaeYB5mKXuyzpEDn NgU4QGj+vcBZow7AsNzTrlk61mHKx8gjB0lsYlsfZWulTc00gyuNkHdQflQWsKep e4BJitU3YUvjkSPAOBd4uBuYzRmmvuBDhmGTjJ+hZ5HXvlWDGQDTDLqmRcziGrUs 79Dw3QDBkomobvMU8YMfoi63qGXiN4XYSg6aRaSAdeAlell/Jj8V1fWYMqHQNHmZ 0cs= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:18 2026 by rpki-client