This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa File: 1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa (raw, json) Hash identifier: 7CWmUvdasbnykf0DjiU7gRJL7RLpAGl2V8qgnv1X5p8= Subject key identifier: D4:8F:FE:E5:58:C2:33:6F:CE:14:7B:26:7D:59:01:24:AA:44:3D:DC Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6 Certificate serial: 019B7AC80304800C86359F95456DE6DFDC9B Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa Signing time: Thu 01 Jan 2026 18:18:06 +0000 ROA not before: Thu 01 Jan 2026 18:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25255 IP address blocks: 151.5.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:03:04:80:0c:86:35:9f:95:45:6d:e6:df:dc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6 Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d48ffee558c2336fce147b267d590124aa443ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:00:a1:2e:16:97:a1:5c:84:30:ba:90:94: cd:8a:2b:56:6c:47:fd:bc:16:93:b9:6b:72:fc:d8: cf:97:07:1e:a2:12:5a:bb:0f:e7:16:ec:34:1c:e2: 52:91:50:59:e9:04:0d:bd:ca:cf:3b:35:77:ee:82: ed:e2:3d:21:fb:ce:2f:25:5c:aa:0e:9d:31:bc:70: 55:6d:2e:a6:9f:c4:0b:64:2e:11:76:dc:c0:5f:12: fc:c2:a0:30:78:fe:64:c7:dc:bf:c6:70:57:44:56: de:3c:6b:92:82:32:ce:95:7d:78:b2:91:8d:f7:ef: 8b:90:05:14:d5:0a:64:ed:55:89:96:bc:b9:2f:98: fd:f1:69:9a:ab:aa:21:57:c1:04:03:b3:86:fe:c4: 0e:9c:4a:82:19:20:4a:ad:22:62:30:16:a5:ea:f6: 05:65:e1:ad:50:2a:fb:f7:b1:2e:1b:98:75:90:21: 5d:9a:57:7e:73:7f:92:8b:03:aa:f9:db:7e:aa:dd: 55:af:d4:63:93:ae:f0:fd:4a:cd:2d:42:ff:e7:78: 4a:2b:49:90:71:86:1c:11:59:68:f0:73:70:f3:c2: c5:83:a7:9f:7e:d2:c7:48:99:24:87:31:68:5e:eb: 9c:48:24:c0:7a:fb:27:79:f3:6f:e4:22:b2:05:b7: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8F:FE:E5:58:C2:33:6F:CE:14:7B:26:7D:59:01:24:AA:44:3D:DC X509v3 Authority Key Identifier: keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.5.92.0/22 Signature Algorithm: sha256WithRSAEncryption 95:4e:df:4f:a4:00:ac:ff:48:11:7d:04:53:ed:f9:8f:93:e7: 65:4e:77:c9:83:02:5d:2b:d3:98:97:3a:c1:b5:21:e2:ef:25: 7d:b1:30:2a:b5:6a:74:b3:2c:e3:62:16:0c:63:a4:f6:f5:ad: ec:24:7a:5f:7f:cf:e9:fe:a9:5e:ad:f6:8c:e8:3e:c1:1c:2b: a8:a0:f6:cb:33:c5:f5:b5:83:c5:08:3b:2e:a5:8c:5d:a2:13: 4a:53:b5:0c:00:b9:0b:0c:1a:5f:e1:88:27:62:bc:1d:d8:fb: 4e:a5:81:d5:54:ab:17:d6:a2:9f:f6:67:21:2a:c6:67:d5:5a: 72:55:68:fe:07:b6:32:ab:0d:00:fc:ba:23:3c:4f:8a:be:21: a1:a3:f1:d0:b0:22:f4:06:01:f0:85:71:3e:a5:74:ff:d6:0d: e9:70:4b:f1:60:4b:ba:4b:9a:c8:c4:ae:97:87:48:2a:70:d0: 0f:37:27:d6:20:54:b1:3f:0f:ee:4b:6b:05:0a:d7:25:60:65: b1:92:84:df:79:44:03:b1:9b:c5:0c:53:a5:36:dc:e2:bf:f5: de:fd:88:e4:57:48:be:7a:52:fe:10:4d:b8:a4:e0:dd:e9:73: 7d:af:ea:d1:88:1d:34:27:aa:d0:93:a0:8c:b4:84:bd:e4:3e: 68:b4:58:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAMEgAyGNZ+VRW3m39ybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1 ODBlZDYwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDhmZmVlNTU4YzIzMzZmY2UxNDdiMjY3ZDU5MDEyNGFhNDQzZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFQAoS4Wl6FchDC6kJTNiitWbEf9 vBaTuWty/NjPlwceohJauw/nFuw0HOJSkVBZ6QQNvcrPOzV37oLt4j0h+84vJVyq Dp0xvHBVbS6mn8QLZC4RdtzAXxL8wqAweP5kx9y/xnBXRFbePGuSgjLOlX14spGN 9++LkAUU1Qpk7VWJlry5L5j98Wmaq6ohV8EEA7OG/sQOnEqCGSBKrSJiMBal6vYF ZeGtUCr797EuG5h1kCFdmld+c3+SiwOq+dt+qt1Vr9Rjk67w/UrNLUL/53hKK0mQ cYYcEVlo8HNw88LFg6efftLHSJkkhzFoXuucSCTAevsnefNv5CKyBbddbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSP/uVYwjNvzhR7Jn1ZASSqRD3cMB8GA1UdIwQY MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt NWMyNzYzNjQ4ZjFjLzEvMUlfLTVWakNNMl9PRkhzbWZWa0JKS3BFUGR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClwVcMA0G CSqGSIb3DQEBCwUAA4IBAQCVTt9PpACs/0gRfQRT7fmPk+dlTnfJgwJdK9OYlzrB tSHi7yV9sTAqtWp0syzjYhYMY6T29a3sJHpff8/p/qlerfaM6D7BHCuooPbLM8X1 tYPFCDsupYxdohNKU7UMALkLDBpf4YgnYrwd2PtOpYHVVKsX1qKf9mchKsZn1Vpy VWj+B7Yyqw0A/LojPE+KviGho/HQsCL0BgHwhXE+pXT/1g3pcEvxYEu6S5rIxK6X h0gqcNAPNyfWIFSxPw/uS2sFCtclYGWxkoTfeUQDsZvFDFOlNtziv/Xe/YjkV0i+ elL+EE24pODd6XN9r+rRiB00J6rQk6CMtIS95D5otFh8 -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:23 2026 by rpki-client