This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-2pZvryUL199VhDsA9f5P27aCPA.roa File: 1-2pZvryUL199VhDsA9f5P27aCPA.roa (raw, json) Hash identifier: FGkVhAPSJYMA6MbGwxMfe6PH3NdLLv3lzi017/rvj9M= Subject key identifier: FB:6A:59:BE:BC:94:2F:5F:7D:56:10:EC:03:D7:F9:3F:6E:DA:08:F0 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791071846EDE03334D3F3C512FDB599C Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-2pZvryUL199VhDsA9f5P27aCPA.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56971 IP address blocks: 5.144.179.0/24 maxlen: 24 5.178.96.0/24 maxlen: 24 103.136.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:71:84:6e:de:03:33:4d:3f:3c:51:2f:db:59:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb6a59bebc942f5f7d5610ec03d7f93f6eda08f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:a9:ef:bd:b9:fa:f1:60:ef:0e:8c:d9:4c: 09:1c:0c:42:98:29:b6:eb:cc:c4:d5:fe:54:04:42: 60:a8:19:06:b8:52:e5:c4:58:d3:58:e8:99:ab:2a: 9f:7a:2c:70:2d:bc:66:e6:a5:c7:e7:16:01:ca:fd: f2:90:7b:7b:49:25:00:2a:6d:7a:8e:ce:fa:4c:52: 99:71:5e:1c:40:fb:80:75:8d:87:ed:44:bd:db:a0: 22:65:22:f1:10:f3:2e:0d:df:18:7a:7a:17:6b:1d: 3d:b1:d6:fd:6c:a4:72:7d:10:0e:e1:e1:25:cd:be: 91:1e:15:ca:c7:69:66:a7:9c:f2:76:fa:1e:ad:60: f1:9e:a1:e6:a2:57:9f:e3:a6:44:78:9e:97:2b:48: a9:fe:59:7e:52:92:52:60:54:f2:6c:68:26:cd:9c: c5:c4:61:45:d0:53:49:5a:df:9e:b5:aa:88:1f:c3: 09:b9:a7:d3:af:c9:a8:62:f0:da:c5:2e:18:33:8a: d9:99:43:3f:a5:88:13:46:f1:b8:7d:6e:d1:00:86: 69:79:90:ff:a5:a3:a4:32:39:dd:9b:24:9f:c1:8f: 57:9d:ee:7d:f1:36:e5:ee:06:ec:c5:8c:12:ed:dc: df:32:2d:cc:1f:d6:ce:43:3c:60:9e:5d:1d:01:e4: 3a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6A:59:BE:BC:94:2F:5F:7D:56:10:EC:03:D7:F9:3F:6E:DA:08:F0 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-2pZvryUL199VhDsA9f5P27aCPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.179.0/24 5.178.96.0/24 103.136.69.0/24 Signature Algorithm: sha256WithRSAEncryption 64:40:43:cb:72:3f:f3:40:b0:13:db:f4:c3:9f:4e:6e:a4:34: a6:75:24:f0:06:e9:5b:16:26:c5:4d:6d:36:0a:d3:52:0f:5a: 02:1f:fd:93:56:b6:67:aa:3f:97:ef:8d:b4:b3:a5:09:f1:d3: 3d:26:72:18:69:68:ca:0d:84:a7:85:97:a5:10:2e:43:48:c6: db:78:d1:05:c0:90:02:81:7b:7f:bb:ce:0b:cf:ea:0a:16:f6: b5:73:ce:a7:8a:e1:aa:80:e0:e0:e3:f5:ba:33:2b:22:25:ea: db:a6:83:3b:b5:59:ac:16:7c:6b:aa:b4:f6:80:87:3b:c0:6d: 2e:aa:25:62:56:17:0b:0a:02:db:0d:ae:b8:b9:b5:02:7c:5a: bb:b5:b4:9b:7f:52:02:f6:bb:7a:b5:47:81:16:3a:de:20:a3: bf:1a:e3:2f:96:9b:6a:34:1d:db:66:63:76:35:f1:8d:36:f9: 32:df:7c:74:98:c0:8e:fa:b9:84:44:ec:ca:ad:f6:77:9e:dc: 8e:39:6e:e4:01:e6:c3:7c:fe:85:c4:6f:43:b5:72:9f:2d:3e: c3:95:22:58:1a:5a:00:cc:1a:bc:33:4d:06:3a:ff:ef:83:8e: ea:38:b4:2b:52:15:9d:02:fa:90:70:3a:bc:35:c8:4f:2e:2d: 22:2d:22:35 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt5EHGEbt4DM00/PFEv21mcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjZhNTliZWJjOTQyZjVmN2Q1NjEwZWMwM2Q3ZjkzZjZlZGEwOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppup7725+vFg7w6M2UwJHAxCmCm2 68zE1f5UBEJgqBkGuFLlxFjTWOiZqyqfeixwLbxm5qXH5xYByv3ykHt7SSUAKm16 js76TFKZcV4cQPuAdY2H7US926AiZSLxEPMuDd8YenoXax09sdb9bKRyfRAO4eEl zb6RHhXKx2lmp5zydvoerWDxnqHmolef46ZEeJ6XK0ip/ll+UpJSYFTybGgmzZzF xGFF0FNJWt+etaqIH8MJuafTr8moYvDaxS4YM4rZmUM/pYgTRvG4fW7RAIZpeZD/ paOkMjndmySfwY9Xne598Tbl7gbsxYwS7dzfMi3MH9bOQzxgnl0dAeQ6nQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPtqWb68lC9ffVYQ7APX+T9u2gjwMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvMS0ycFp2cnlVTDE5OVZoRHNBOWY1UDI3YUNQQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvODlmMDcxLTU2MzEtNDVkYi1hN2U1LWNkNjE1MjI2MWM2 Zi8xL0V4aUJjeW8tSkZxVm04WjU0RVdNT2ZpVDVHcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAAWQswME AAWyYAMEAGeIRTANBgkqhkiG9w0BAQsFAAOCAQEAZEBDy3I/80CwE9v0w59ObqQ0 pnUk8AbpWxYmxU1tNgrTUg9aAh/9k1a2Z6o/l++NtLOlCfHTPSZyGGloyg2Ep4WX pRAuQ0jG23jRBcCQAoF7f7vOC8/qChb2tXPOp4rhqoDg4OP1ujMrIiXq26aDO7VZ rBZ8a6q09oCHO8BtLqolYlYXCwoC2w2uuLm1Anxau7W0m39SAva7erVHgRY63iCj vxrjL5abajQd22ZjdjXxjTb5Mt98dJjAjvq5hETsyq32d57cjjlu5AHmw3z+hcRv Q7Vyny0+w5UiWBpaAMwavDNNBjr/74OO6ji0K1IVnQL6kHA6vDXITy4tIi0iNQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:29 2026 by rpki-client