This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/lISEedj5Gkre55GwsZjKu8moowA.roa File: lISEedj5Gkre55GwsZjKu8moowA.roa (raw, json) Hash identifier: S+Yq3Z38Og7alrPrHO1nngmVCOUzwCqJwWrOwsktrtM= Subject key identifier: 94:84:84:79:D8:F9:1A:4A:DE:E7:91:B0:B1:98:CA:BB:C9:A8:A3:00 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B79109341819D5AE5A1EE8605E0E4EAE2 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/lISEedj5Gkre55GwsZjKu8moowA.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 719 IP address blocks: 192.58.49.0/24 maxlen: 24 192.103.87.0/24 maxlen: 24 192.103.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:93:41:81:9d:5a:e5:a1:ee:86:05:e0:e4:ea:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94848479d8f91a4adee791b0b198cabbc9a8a300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:59:74:be:3a:43:1b:df:a0:70:e8:0b:51:2c: e2:5d:bd:30:f3:78:9f:9b:f9:48:cb:73:a3:f2:97: 93:ac:0f:83:d4:8d:50:18:ec:19:c2:58:e0:28:21: b6:82:ed:e9:9c:a4:61:7b:94:53:9b:96:78:bd:b0: 2a:92:74:00:00:ac:90:5a:47:d2:8e:db:9f:9f:f0: eb:24:08:71:76:92:81:56:e8:fb:b6:64:f7:b0:2d: e2:96:d3:ee:90:06:5f:3e:97:f7:0a:5a:4d:3a:8d: 65:78:9b:69:a6:24:03:3a:ed:f6:d4:71:0d:b8:c3: 93:08:eb:02:a1:d5:0f:8f:c5:15:a5:8d:ea:63:e0: 63:d4:1f:82:12:49:25:11:38:a2:3f:9f:57:85:c2: ea:31:42:82:95:f7:8f:04:5f:b3:8f:23:63:bf:a4: 50:77:92:06:4d:e2:0d:43:ac:ad:f1:e6:2f:28:a6: 2c:94:c0:08:d7:8b:ab:56:f8:1f:db:00:77:48:7b: d6:4d:6c:c9:6d:fb:0c:45:db:57:79:0c:bb:30:3a: 7a:0c:b5:7b:60:05:58:4e:b2:d1:0d:1e:fe:03:dc: 65:9c:10:ac:ef:49:0a:68:42:6c:83:0c:5e:37:61: f3:20:7c:9b:17:09:82:82:8c:1b:1c:2f:d4:3f:1a: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:84:84:79:D8:F9:1A:4A:DE:E7:91:B0:B1:98:CA:BB:C9:A8:A3:00 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/lISEedj5Gkre55GwsZjKu8moowA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.58.49.0/24 192.103.87.0/24 192.103.90.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:30:d1:49:c8:b7:bd:1a:3d:3d:92:74:c2:03:6c:84:75:7c: f2:5a:28:57:0c:81:e7:c0:3f:ba:84:14:c4:36:4f:58:8a:e1: c6:fd:33:26:39:50:2e:82:76:58:3f:fb:17:a3:62:6b:2c:13: 95:48:fe:00:cd:a2:b9:5d:3b:69:f4:a6:ba:5b:f9:d2:2f:cc: 05:4f:94:e8:81:42:d7:0e:7b:24:4e:57:7e:1e:4d:82:6e:8a: 2d:df:b2:07:55:89:b5:76:e0:5a:48:f5:b1:24:00:92:1c:7e: 1a:d8:57:75:26:8c:6d:de:a8:39:a1:2e:e2:bc:6b:47:86:33: 5a:95:38:a0:93:8f:88:29:5c:30:16:fb:66:4b:5c:56:9b:3b: 20:7a:1c:2e:92:51:be:e7:5c:28:b7:77:c5:ac:b1:5a:a4:80: da:85:9c:df:5c:d7:b1:68:ff:17:ec:8a:aa:73:3c:72:fd:b0: 8c:70:b2:c5:eb:ab:9c:77:93:0b:7b:19:f2:5f:93:d1:63:0c: cb:79:50:d8:80:52:b5:8a:95:89:f3:ce:f5:3e:52:0e:31:7d: 2e:02:de:8c:bb:12:64:ee:e0:23:bb:8b:39:c5:30:bd:31:9f: 99:68:91:dd:58:c8:7f:a6:85:c5:be:1c:15:2c:3d:78:87:33: 00:07:ed:65 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EJNBgZ1a5aHuhgXg5OriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDg0ODQ3OWQ4ZjkxYTRhZGVlNzkxYjBiMTk4Y2FiYmM5YThhMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Fl0vjpDG9+gcOgLUSziXb0w83if m/lIy3Oj8peTrA+D1I1QGOwZwljgKCG2gu3pnKRhe5RTm5Z4vbAqknQAAKyQWkfS jtufn/DrJAhxdpKBVuj7tmT3sC3iltPukAZfPpf3ClpNOo1leJtppiQDOu321HEN uMOTCOsCodUPj8UVpY3qY+Bj1B+CEkklETiiP59XhcLqMUKClfePBF+zjyNjv6RQ d5IGTeINQ6yt8eYvKKYslMAI14urVvgf2wB3SHvWTWzJbfsMRdtXeQy7MDp6DLV7 YAVYTrLRDR7+A9xlnBCs70kKaEJsgwxeN2HzIHybFwmCgowbHC/UPxpk/wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJSEhHnY+RpK3ueRsLGYyrvJqKMAMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbElTRWVkajVHa3JlNTVHd3Naakt1OG1vb3dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwDoxAwQA wGdXAwQAwGdaMA0GCSqGSIb3DQEBCwUAA4IBAQAPMNFJyLe9Gj09knTCA2yEdXzy WihXDIHnwD+6hBTENk9YiuHG/TMmOVAugnZYP/sXo2JrLBOVSP4AzaK5XTtp9Ka6 W/nSL8wFT5TogULXDnskTld+Hk2Cboot37IHVYm1duBaSPWxJACSHH4a2Fd1Joxt 3qg5oS7ivGtHhjNalTigk4+IKVwwFvtmS1xWmzsgehwuklG+51wot3fFrLFapIDa hZzfXNexaP8X7Iqqczxy/bCMcLLF66ucd5MLexnyX5PRYwzLeVDYgFK1ipWJ8871 PlIOMX0uAt6MuxJk7uAju4s5xTC9MZ+ZaJHdWMh/poXFvhwVLD14hzMAB+1l -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:43 2026 by rpki-client