This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa File: 1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa (raw, json) Hash identifier: u5eV4Uv1MiiJKh19sA1D3lrEkUoskPq0E06VtKGTPQ0= Subject key identifier: F8:50:71:E9:91:F9:07:48:DB:53:F0:27:0C:70:94:35:AC:9C:3B:8B Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791077F932E14AD9CF03E765A1375EB7 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214271 IP address blocks: 5.178.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:77:f9:32:e1:4a:d9:cf:03:e7:65:a1:37:5e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f85071e991f90748db53f0270c709435ac9c3b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:94:69:ff:60:24:27:5e:d6:98:83:2d:94: 74:9a:72:05:3b:8e:f5:41:30:ae:f7:ac:0a:c0:cf: 5f:dd:b0:6f:b0:a5:e5:05:19:2a:5d:2a:fe:f9:d6: e7:ff:30:cc:65:01:46:af:83:b4:d4:0e:35:ca:c8: 6d:27:7b:d3:4b:b1:7a:a5:d6:c7:a9:dd:d0:0d:e4: c7:44:81:29:81:04:c8:48:a2:af:d4:c6:33:65:27: 1b:6c:90:d4:66:99:c9:7d:99:43:46:6c:a0:09:25: 2c:6b:a2:d9:f0:d9:24:14:d6:16:5c:6d:06:a6:00: 3a:19:4c:38:b0:82:36:17:36:06:50:80:33:31:57: 13:be:00:41:db:a5:23:24:5f:e9:1d:f0:fb:24:f6: 7c:23:6b:d0:75:70:ae:3a:e3:68:eb:8d:13:99:7d: 26:9d:59:70:e9:16:7f:7b:8a:20:ea:2b:56:8e:88: 15:41:03:46:05:36:3c:0b:e3:94:c1:2a:51:fd:49: 9a:ca:e4:4c:71:77:a8:0e:53:60:c5:8e:d2:2c:df: 84:2b:73:3c:a9:f8:08:4e:90:d4:0d:4f:5f:70:2c: ee:65:8e:9e:bc:cf:92:f6:37:76:52:76:6e:77:b7: 6c:87:29:e3:e4:bc:ac:7c:46:a4:f4:4a:6d:b7:8f: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:71:E9:91:F9:07:48:DB:53:F0:27:0C:70:94:35:AC:9C:3B:8B X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-FBx6ZH5B0jbU_AnDHCUNaycO4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.102.0/24 Signature Algorithm: sha256WithRSAEncryption a7:cf:8a:cd:ff:98:54:72:57:dc:8c:fe:4f:6e:9c:84:d3:07: 3c:5d:d5:17:e1:11:d7:56:e4:59:2a:9a:31:09:65:0c:79:3d: 11:6d:e5:c0:f3:f9:99:ca:35:8b:67:3f:7a:d8:f2:84:fc:5b: 9e:69:6b:41:ba:8d:cc:31:57:42:c1:fa:85:94:c8:ef:e8:db: b8:70:00:24:9c:f4:fd:74:5f:ec:1b:35:ac:a2:77:96:c1:a3: 1f:fa:b5:29:32:2d:f3:8e:38:6c:e8:04:bc:fc:a8:c0:19:92: 0f:8a:ab:6d:3d:0f:c7:9e:af:f0:58:5a:8b:61:44:d6:5f:fa: 01:79:9b:51:63:99:ed:ed:38:7e:d5:19:86:48:21:37:27:78: 55:1b:c9:62:c7:5b:66:0a:b3:ed:4b:a5:a7:cf:27:95:72:e7: 1e:94:e7:ae:3f:2b:ff:c0:2b:36:68:10:6a:7c:4a:5c:bc:f4: b6:85:15:c6:40:f3:70:d0:d3:6a:a5:aa:c6:cb:4c:cc:4a:d9: 08:68:d0:a9:97:5e:14:e0:b0:3f:ff:8b:05:b5:d3:30:d5:17: 20:8f:e6:cb:fe:44:c1:10:2f:1a:09:f6:47:5e:ee:1b:cd:50: 74:c0:dc:c9:0f:5c:cf:7e:93:84:ec:64:05:c3:6d:a8:78:01: d9:8b:13:7b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EHf5MuFK2c8D52WhN163MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODUwNzFlOTkxZjkwNzQ4ZGI1M2YwMjcwYzcwOTQzNWFjOWMzYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYWUaf9gJCde1piDLZR0mnIFO471 QTCu96wKwM9f3bBvsKXlBRkqXSr++dbn/zDMZQFGr4O01A41yshtJ3vTS7F6pdbH qd3QDeTHRIEpgQTISKKv1MYzZScbbJDUZpnJfZlDRmygCSUsa6LZ8NkkFNYWXG0G pgA6GUw4sII2FzYGUIAzMVcTvgBB26UjJF/pHfD7JPZ8I2vQdXCuOuNo640TmX0m nVlw6RZ/e4og6itWjogVQQNGBTY8C+OUwSpR/UmayuRMcXeoDlNgxY7SLN+EK3M8 qfgITpDUDU9fcCzuZY6evM+S9jd2UnZud7dshynj5LysfEak9Eptt49AxwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhQcemR+QdI21PwJwxwlDWsnDuLMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvMS1GQng2Wkg1QjBqYlVfQW5ESENVTmF5Y080cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvODlmMDcxLTU2MzEtNDVkYi1hN2U1LWNkNjE1MjI2MWM2 Zi8xL0V4aUJjeW8tSkZxVm04WjU0RVdNT2ZpVDVHcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWyZjAN BgkqhkiG9w0BAQsFAAOCAQEAp8+Kzf+YVHJX3Iz+T26chNMHPF3VF+ER11bkWSqa MQllDHk9EW3lwPP5mco1i2c/etjyhPxbnmlrQbqNzDFXQsH6hZTI7+jbuHAAJJz0 /XRf7Bs1rKJ3lsGjH/q1KTIt8444bOgEvPyowBmSD4qrbT0Px56v8Fhai2FE1l/6 AXmbUWOZ7e04ftUZhkghNyd4VRvJYsdbZgqz7Uulp88nlXLnHpTnrj8r/8ArNmgQ anxKXLz0toUVxkDzcNDTaqWqxstMzErZCGjQqZdeFOCwP/+LBbXTMNUXII/my/5E wRAvGgn2R17uG81QdMDcyQ9cz36ThOxkBcNtqHgB2YsTew== -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:38 2026 by rpki-client