This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1-ZxJKDFY_5zEIrEwX3VUy-JWPSA.roa File: 1-ZxJKDFY_5zEIrEwX3VUy-JWPSA.roa (raw, json) Hash identifier: GNsBEOF1St9pG7LTdw9A6w4OoqaTcb1Ixn98EplE4uQ= Subject key identifier: F9:9C:49:28:31:58:FF:9C:C4:22:B1:30:5F:75:54:CB:E2:56:3D:20 Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719 Certificate serial: 019B797E1C1160FD918C03F646EB11541167 Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1-ZxJKDFY_5zEIrEwX3VUy-JWPSA.roa Signing time: Thu 01 Jan 2026 12:17:46 +0000 ROA not before: Thu 01 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58323 IP address blocks: 91.196.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1c:11:60:fd:91:8c:03:f6:46:eb:11:54:11:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719 Validity Not Before: Jan 1 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f99c49283158ff9cc422b1305f7554cbe2563d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:bf:ce:cd:ae:90:9b:14:bc:b3:88:15:be: 72:49:70:41:09:b3:70:fe:61:4b:00:19:f8:fb:33: 32:21:3d:10:4a:ad:a0:97:c7:7e:a6:1b:98:de:80: 90:bf:83:e2:36:55:4b:95:c1:e9:72:0f:2c:80:47: 09:bf:22:37:5f:96:03:e0:2e:ac:be:4e:aa:d5:16: fc:a8:8c:19:a5:a6:0e:eb:a6:3d:14:44:f4:27:33: bf:d3:97:6e:56:54:ef:8b:45:f0:35:9b:73:eb:ef: da:f4:fb:3a:b2:72:0e:a1:07:58:85:ca:7f:30:2c: 01:93:f0:e6:74:0d:2d:18:95:5b:14:dd:95:99:70: ec:2f:0c:f6:c1:8b:27:e2:0d:7f:55:67:a5:0b:9e: de:dd:94:12:25:40:07:35:78:1f:b0:9f:60:bb:88: 2d:e9:93:6a:c0:e6:03:7a:9e:52:56:76:17:d5:be: 81:d6:e3:c7:52:1d:d4:c4:05:ba:c5:c5:f1:e7:9b: 6f:55:cb:2e:7d:04:b8:2e:5b:a0:da:a4:00:72:19: b7:18:33:8c:8e:31:f2:da:93:6a:54:09:ed:91:e2: 94:14:61:23:34:f9:45:da:13:55:37:17:47:41:c3: 39:93:1e:b6:4a:4e:23:d4:d8:dd:b8:23:c8:59:66: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9C:49:28:31:58:FF:9C:C4:22:B1:30:5F:75:54:CB:E2:56:3D:20 X509v3 Authority Key Identifier: keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1-ZxJKDFY_5zEIrEwX3VUy-JWPSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.155.0/24 Signature Algorithm: sha256WithRSAEncryption ac:ae:3f:77:12:a0:9d:61:d1:96:30:f5:62:b2:f3:3a:33:1a: f1:da:9b:da:99:d2:b5:4b:35:72:6c:7e:51:cd:c4:16:bd:26: 23:af:46:dd:3b:1a:5d:20:e7:c6:33:a5:50:d0:67:b4:31:70: a5:47:19:28:59:c6:ae:32:d0:f8:bb:87:7f:9d:af:11:09:c2: a0:ea:b8:77:17:37:50:4e:d8:11:21:5a:53:4b:22:a7:af:43: 78:7a:4b:18:18:4f:39:ef:0e:d0:f9:74:1f:ca:1f:fe:b7:a1: 4e:46:e7:4a:85:34:ed:f9:fd:2e:bd:b4:c5:86:7d:4f:47:83: 15:4c:c4:9c:f1:80:f2:98:e8:b2:f4:dd:9c:25:3a:ec:2d:1c: c6:56:20:e8:87:46:95:5e:25:e0:9d:85:4f:b7:72:83:49:cb: 30:e9:e6:f4:5e:7e:50:a8:bf:45:bd:11:03:ed:68:ea:cf:7e: 7e:3e:5d:a4:67:51:9c:19:01:ce:39:c1:bc:7e:0a:53:22:3b: d5:38:1a:36:70:eb:21:85:91:83:05:7a:e2:d9:e0:c1:0b:84: 4a:19:42:0c:4c:f9:dc:82:d4:1e:63:53:be:c4:ff:14:76:dc: b1:49:5c:1d:82:05:11:71:eb:ff:6e:60:7a:7e:17:c6:34:bc: 4c:2d:2b:d3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fhwRYP2RjAP2RusRVBFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZWU0MGY0NTg5ZDZhMTFiMjRmN2JiY2MyOWFiOWY5YWU2 ODk3MTkwHhcNMjYwMTAxMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTljNDkyODMxNThmZjljYzQyMmIxMzA1Zjc1NTRjYmUyNTYzZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNa/zs2ukJsUvLOIFb5ySXBBCbNw /mFLABn4+zMyIT0QSq2gl8d+phuY3oCQv4PiNlVLlcHpcg8sgEcJvyI3X5YD4C6s vk6q1Rb8qIwZpaYO66Y9FET0JzO/05duVlTvi0XwNZtz6+/a9Ps6snIOoQdYhcp/ MCwBk/DmdA0tGJVbFN2VmXDsLwz2wYsn4g1/VWelC57e3ZQSJUAHNXgfsJ9gu4gt 6ZNqwOYDep5SVnYX1b6B1uPHUh3UxAW6xcXx55tvVcsufQS4Llug2qQAchm3GDOM jjHy2pNqVAntkeKUFGEjNPlF2hNVNxdHQcM5kx62Sk4j1NjduCPIWWa7iQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmcSSgxWP+cxCKxMF91VMviVj0gMB8GA1UdIwQY MBaAFNXuQPRYnWoRsk97vMKaufmuaJcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMt OWVhMmE2ZmI2YTgxLzEvMS1aeEpLREZZXzV6RUlyRXdYM1ZVeS1KV1BTQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGMvOGMxMzA2LTc4MDUtNDE3ZC1iZTYzLTllYTJhNmZiNmE4 MS8xLzFlNUE5RmlkYWhHeVQzdTh3cHE1LWE1b2x4ay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvEmzAN BgkqhkiG9w0BAQsFAAOCAQEArK4/dxKgnWHRljD1YrLzOjMa8dqb2pnStUs1cmx+ Uc3EFr0mI69G3TsaXSDnxjOlUNBntDFwpUcZKFnGrjLQ+LuHf52vEQnCoOq4dxc3 UE7YESFaU0sip69DeHpLGBhPOe8O0Pl0H8of/rehTkbnSoU07fn9Lr20xYZ9T0eD FUzEnPGA8pjosvTdnCU67C0cxlYg6IdGlV4l4J2FT7dyg0nLMOnm9F5+UKi/Rb0R A+1o6s9+fj5dpGdRnBkBzjnBvH4KUyI71TgaNnDrIYWRgwV64tngwQuEShlCDEz5 3ILUHmNTvsT/FHbcsUlcHYIFEXHr/25gen4XxjS8TC0r0w== -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:12 2026 by rpki-client