This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/1avUJiFsNY3nLQNObBHeiCUjQ1w.roa File: 1avUJiFsNY3nLQNObBHeiCUjQ1w.roa (raw, json) Hash identifier: vp9JZlPKB90FOJI/qfqItkdrj8jNpEIMMm5ayvns90M= Subject key identifier: D5:AB:D4:26:21:6C:35:8D:E7:2D:03:4E:6C:11:DE:88:25:23:43:5C Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3 Certificate serial: 019B7A59E81A4E29BF0201D8DF77FA42E4D2 Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/1avUJiFsNY3nLQNObBHeiCUjQ1w.roa Signing time: Thu 01 Jan 2026 16:17:50 +0000 ROA not before: Thu 01 Jan 2026 16:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214673 IP address blocks: 92.62.118.0/24 maxlen: 24 178.251.232.0/24 maxlen: 24 193.143.69.0/24 maxlen: 24 2a11:4880::/32 maxlen: 32 2a11:4881::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:e8:1a:4e:29:bf:02:01:d8:df:77:fa:42:e4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3 Validity Not Before: Jan 1 16:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5abd426216c358de72d034e6c11de882523435c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:fd:d1:ef:df:47:b1:86:3a:fe:fd:dc:e4: d1:d3:e7:c6:3e:3e:17:62:ec:d4:60:74:56:5e:5d: c3:4c:bb:aa:fd:fd:40:95:9a:7f:07:3d:6a:1d:01: 2e:55:c8:ab:76:f3:69:d4:68:f7:1c:85:2b:18:1d: 9d:b5:53:7d:ed:4f:f5:41:f3:1a:94:04:cb:06:3f: 58:f3:a1:b0:1a:3f:25:67:0d:42:35:c7:8a:5c:3c: 8e:74:b1:3a:62:17:63:f4:fa:dc:2c:c9:45:ae:43: 46:05:c2:62:97:9e:b2:df:36:25:92:d0:3f:1d:1b: d8:f6:f6:2c:6e:6f:3f:80:a5:e6:83:fc:fd:39:f4: 45:83:73:99:fe:60:1a:54:7e:4f:88:60:3e:14:10: ac:7c:79:d0:fb:fd:83:c2:fa:bd:d6:af:4b:09:72: ac:62:cd:ca:ea:a0:eb:f0:d4:3a:5e:af:c4:b6:83: 1c:c1:83:b2:66:72:5b:a7:66:d5:ce:6c:63:aa:c9: f5:ec:73:fd:56:f9:93:bf:76:14:9b:56:ab:17:6e: 19:24:5a:df:93:0a:5a:66:29:e8:cf:42:c0:66:d4: 9e:2c:50:47:c2:5e:50:76:36:a4:87:4e:fe:45:e6: 9f:05:26:16:17:93:b0:64:1e:04:e8:00:88:54:08: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:D4:26:21:6C:35:8D:E7:2D:03:4E:6C:11:DE:88:25:23:43:5C X509v3 Authority Key Identifier: keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/1avUJiFsNY3nLQNObBHeiCUjQ1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.118.0/24 178.251.232.0/24 193.143.69.0/24 IPv6: 2a11:4880::/31 Signature Algorithm: sha256WithRSAEncryption bc:d1:40:fd:5b:fd:14:b6:e7:22:05:91:e1:08:1a:3e:6a:36: e1:64:b3:d5:d2:b6:49:37:f2:60:fa:c6:c5:0e:71:03:7f:60: b7:80:4b:15:5f:f1:95:18:3b:ef:97:7a:06:c3:93:28:22:52: d5:c8:be:55:ff:07:18:24:ad:b0:a3:ed:57:11:a0:9f:8e:73: 01:0e:a8:46:47:4d:c7:c6:87:b1:db:b5:cc:a4:a6:8d:72:da: a1:e8:8b:92:dd:e0:99:c0:bd:3a:b5:24:8d:cc:80:61:11:63: 37:00:75:44:72:fa:b2:2c:b9:e9:67:b9:83:eb:d1:29:7b:6f: b5:44:64:c3:ae:93:be:e7:4b:88:78:2f:66:2e:84:94:04:5b: 5e:d7:c9:ed:ce:e8:61:89:4a:9b:c9:34:1f:32:dc:70:16:dc: 8d:ec:fb:69:19:d7:b5:43:a0:21:74:b0:6f:c2:2f:2b:3f:ed: e5:cc:dd:54:3f:be:3a:9c:6b:53:b8:e3:c3:c7:80:bb:75:f9: 93:72:82:3d:89:49:11:ce:df:be:d1:be:d3:a1:73:ca:09:da: a7:cf:9a:9f:fe:e6:00:0d:6a:bc:2f:a9:f8:54:b3:24:eb:19: 9d:88:f9:9a:e6:68:4b:6c:59:68:6d:47:bd:41:3b:1a:74:28: e6:43:84:76 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WegaTim/AgHY33f6QuTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm Nzk3ZTMwHhcNMjYwMTAxMTYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWFiZDQyNjIxNmMzNThkZTcyZDAzNGU2YzExZGU4ODI1MjM0MzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK/90e/fR7GGOv793OTR0+fGPj4X YuzUYHRWXl3DTLuq/f1AlZp/Bz1qHQEuVcirdvNp1Gj3HIUrGB2dtVN97U/1QfMa lATLBj9Y86GwGj8lZw1CNceKXDyOdLE6Yhdj9PrcLMlFrkNGBcJil56y3zYlktA/ HRvY9vYsbm8/gKXmg/z9OfRFg3OZ/mAaVH5PiGA+FBCsfHnQ+/2Dwvq91q9LCXKs Ys3K6qDr8NQ6Xq/EtoMcwYOyZnJbp2bVzmxjqsn17HP9VvmTv3YUm1arF24ZJFrf kwpaZinoz0LAZtSeLFBHwl5Qdjakh07+ReafBSYWF5OwZB4E6ACIVAiDQQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNWr1CYhbDWN5y0DTmwR3oglI0NcMB8GA1UdIwQY MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt ZjkyOTE1YTk2OGJjLzEvMWF2VUppRnNOWTNuTFFOT2JCSGVpQ1VqUTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAXD52AwQA svvoAwQAwY9FMA0EAgACMAcDBQEqEUiAMA0GCSqGSIb3DQEBCwUAA4IBAQC80UD9 W/0UtuciBZHhCBo+ajbhZLPV0rZJN/Jg+sbFDnEDf2C3gEsVX/GVGDvvl3oGw5Mo IlLVyL5V/wcYJK2wo+1XEaCfjnMBDqhGR03Hxoex27XMpKaNctqh6IuS3eCZwL06 tSSNzIBhEWM3AHVEcvqyLLnpZ7mD69Epe2+1RGTDrpO+50uIeC9mLoSUBFte18nt zuhhiUqbyTQfMtxwFtyN7PtpGde1Q6AhdLBvwi8rP+3lzN1UP746nGtTuOPDx4C7 dfmTcoI9iUkRzt++0b7ToXPKCdqnz5qf/uYADWq8L6n4VLMk6xmdiPma5mhLbFlo bUe9QTsadCjmQ4R2 -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:52 2026 by rpki-client