This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa File: 1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa (raw, json) Hash identifier: +sShATexn1CpGL3qVUaN2Cdv5TDMeXUkKBe7OdFbvpU= Subject key identifier: F9:25:39:4D:B8:00:1D:1F:0C:81:A9:18:2D:A6:23:8D:41:50:7F:C7 Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Certificate serial: 019B79ED2E7957F36C8C369B8EB0AB464A1D Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60793 IP address blocks: 79.99.194.192/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2e:79:57:f3:6c:8c:36:9b:8e:b0:ab:46:4a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f925394db8001d1f0c81a9182da6238d41507fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:ed:3a:4d:e1:45:20:9c:28:aa:d6:26:be: 68:21:d9:5c:cd:18:6d:3d:9c:0f:5b:57:72:41:72: f1:2a:a5:4e:d4:d5:ea:41:87:2e:da:52:f6:c7:ff: 56:e0:07:a5:75:ae:11:68:8b:3b:b4:a0:45:13:8b: 1d:fc:ce:78:d3:f7:31:5a:29:4c:aa:e4:99:77:87: 44:ff:b7:b3:48:6f:85:d4:52:d4:a4:e6:eb:9b:e7: e8:c6:27:c7:64:67:bd:57:4e:52:4f:eb:2c:dd:a9: 2a:03:44:63:1e:0d:2a:12:9d:98:70:b4:9c:c5:42: 7b:53:59:b3:12:55:f1:49:5e:39:ff:62:43:dd:2a: 16:a7:04:88:5f:f0:b3:a6:76:73:4a:a1:e7:cc:a6: 7d:84:6a:d7:f7:e2:4d:ac:90:92:09:a3:b1:1d:bd: 83:ef:8a:f3:01:a8:32:c5:fd:c2:11:52:52:b7:48: 4f:5b:d4:79:84:6d:c6:d6:c2:e1:d9:64:79:57:1b: 99:c1:8b:c2:24:28:1c:ce:be:8f:22:b7:af:69:7d: 25:fc:7f:2f:52:30:54:6c:15:c9:2b:05:ab:e2:ab: 9d:0d:5b:91:4e:5f:6d:2e:29:3c:32:7e:c9:d8:c4: 0c:34:b1:86:70:26:d8:a9:57:49:b2:97:c4:ea:dd: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:25:39:4D:B8:00:1D:1F:0C:81:A9:18:2D:A6:23:8D:41:50:7F:C7 X509v3 Authority Key Identifier: keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.99.194.192/29 Signature Algorithm: sha256WithRSAEncryption 5a:66:97:bd:4f:b3:86:3d:57:81:a2:62:1d:86:cd:61:a9:14: 8a:5f:9c:71:83:40:62:38:0d:67:8a:7a:d6:d8:5a:f2:60:24: 1d:6c:c5:4f:f6:bf:f1:1f:f4:7a:19:b8:ce:7a:9b:f8:e5:98: 25:6b:16:90:8e:42:e2:0c:ca:84:19:ca:be:58:de:0d:5b:17: b4:32:85:12:49:6b:32:69:86:73:28:5f:f0:8e:f6:73:40:40: e0:a0:5c:a1:f9:ae:08:73:ca:51:ef:8e:93:47:e1:fb:a6:07: 71:d6:f9:a9:68:3b:fe:3a:17:4b:c7:72:23:df:de:9c:25:95: 81:1d:40:db:0b:5c:af:69:bb:07:d2:e2:4d:d3:66:e3:c3:da: 2c:af:1d:dd:1c:48:ec:a4:8e:b1:31:57:eb:73:f7:11:94:68: 5c:a7:60:0a:45:5b:b8:5f:ce:61:51:96:c1:31:0a:48:b5:1a: db:03:48:80:d8:43:83:ba:3e:ee:94:42:e6:2f:1d:4f:68:16: 5d:6e:48:8d:18:f9:bd:b4:69:ec:ac:d1:8b:af:c5:b8:3c:34: 84:72:da:14:cf:c8:20:4f:2c:1f:3e:7d:b5:55:87:c4:6c:e6: 41:08:61:1e:a5:29:f8:0c:8e:00:c1:ab:70:f3:3b:87:24:e4: e4:e5:f7:a9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57S55V/NsjDabjrCrRkodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTA0MTU1ZWUzYWNmZTNmZWE4YmJmZWU4NmU5N2M1OGM4 OTkxZjQwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTI1Mzk0ZGI4MDAxZDFmMGM4MWE5MTgyZGE2MjM4ZDQxNTA3ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/XtOk3hRSCcKKrWJr5oIdlczRht PZwPW1dyQXLxKqVO1NXqQYcu2lL2x/9W4Aelda4RaIs7tKBFE4sd/M540/cxWilM quSZd4dE/7ezSG+F1FLUpObrm+foxifHZGe9V05ST+ss3akqA0RjHg0qEp2YcLSc xUJ7U1mzElXxSV45/2JD3SoWpwSIX/CzpnZzSqHnzKZ9hGrX9+JNrJCSCaOxHb2D 74rzAagyxf3CEVJSt0hPW9R5hG3G1sLh2WR5VxuZwYvCJCgczr6PIrevaX0l/H8v UjBUbBXJKwWr4qudDVuRTl9tLik8Mn7J2MQMNLGGcCbYqVdJspfE6t1B9QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPklOU24AB0fDIGpGC2mI41BUH/HMB8GA1UdIwQY MBaAFN+QQVXuOs/j/qi7/uhul8WMiZH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQt NjQ2N2Y0NGI0M2JmLzEvMS1TVTVUYmdBSFI4TWdha1lMYVlqalVGUWY4Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2EvNDQyZTE3LTQxOTgtNDM1Yi05NmY0LTY0NjdmNDRiNDNi Zi8xLzM1QkJWZTQ2ei1QLXFMdi02RzZYeFl5SmtmUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFA09jwsAw DQYJKoZIhvcNAQELBQADggEBAFpml71Ps4Y9V4GiYh2GzWGpFIpfnHGDQGI4DWeK etbYWvJgJB1sxU/2v/Ef9HoZuM56m/jlmCVrFpCOQuIMyoQZyr5Y3g1bF7QyhRJJ azJphnMoX/CO9nNAQOCgXKH5rghzylHvjpNH4fumB3HW+aloO/46F0vHciPf3pwl lYEdQNsLXK9puwfS4k3TZuPD2iyvHd0cSOykjrExV+tz9xGUaFynYApFW7hfzmFR lsExCki1GtsDSIDYQ4O6Pu6UQuYvHU9oFl1uSI0Y+b20aeys0Yuvxbg8NIRy2hTP yCBPLB8+fbVVh8Rs5kEIYR6lKfgMjgDBq3DzO4ck5OTl96k= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:08 2026 by rpki-client