This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/H1ayDIygYNIOiS92j6cNtqBQm1c.roa File: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (raw, json) Hash identifier: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA= Subject key identifier: 1F:56:B2:0C:8C:A0:60:D2:0E:89:2F:76:8F:A7:0D:B6:A0:50:9B:57 Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809 Certificate serial: 019B78355B3A9B54FF2F9A0798BDF71A02E7 Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/H1ayDIygYNIOiS92j6cNtqBQm1c.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 193.150.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5b:3a:9b:54:ff:2f:9a:07:98:bd:f7:1a:02:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f56b20c8ca060d20e892f768fa70db6a0509b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:3c:96:4f:d8:09:09:60:a8:f6:a8:e7:12: ed:c5:b9:b2:ee:b5:bf:45:d4:7d:6a:f6:ad:94:e3: 0b:67:8b:9d:c3:4d:9e:c6:63:74:a5:4a:24:94:25: d4:3e:eb:74:a6:a3:8f:99:81:61:48:a3:8e:ea:7d: f6:99:41:90:49:14:b0:e9:93:15:70:6f:5a:d1:51: 27:5c:64:7b:c3:59:0a:1f:ce:07:a2:d9:97:05:6e: af:33:52:c2:49:34:0b:66:43:a4:33:7e:f3:44:02: e1:1c:d8:78:4e:1f:42:85:b0:bb:bc:66:1d:41:08: 8c:bb:19:3e:1c:67:41:23:f6:f0:9b:48:ee:d3:60: 5d:52:8c:21:40:e4:07:1f:47:5e:75:6b:cc:ad:f0: 8a:ac:b2:3e:c7:16:45:ae:c6:02:2a:23:6f:49:75: 41:62:33:17:5c:76:1e:5c:32:ac:f4:f4:f9:df:c6: b2:b0:e9:a1:78:eb:fa:29:29:99:20:50:5b:b2:43: c3:05:4e:68:3e:c5:16:bb:00:52:53:5b:81:d1:c1: 80:c6:f2:1e:b4:a5:81:78:d7:3a:0e:d6:e3:b0:f8: 33:e7:3d:39:44:79:e1:ae:64:f8:8a:21:e9:65:b3: ba:3f:9c:59:04:91:40:8e:5d:8f:23:62:96:a1:f1: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:56:B2:0C:8C:A0:60:D2:0E:89:2F:76:8F:A7:0D:B6:A0:50:9B:57 X509v3 Authority Key Identifier: keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/H1ayDIygYNIOiS92j6cNtqBQm1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.169.0/24 Signature Algorithm: sha256WithRSAEncryption 06:eb:94:6d:3a:a2:e6:86:15:cd:17:5f:6b:be:dc:3c:74:67: 80:43:dd:55:47:01:03:17:aa:f6:b0:d9:a0:62:a7:4d:5a:31: dd:14:ab:05:32:c6:95:06:6f:d6:39:75:57:b3:11:4c:1f:a3: 6e:42:8d:ba:c7:b1:7e:f3:24:8a:6d:7f:62:ee:57:a4:51:fe: 80:df:c9:d8:5e:ad:26:00:a7:ef:42:4b:1b:b7:af:a8:89:fc: ec:b0:16:fa:9d:63:c3:76:e8:86:29:60:5f:32:b4:9f:ae:d2: 85:fb:9b:ff:16:81:9f:7f:7b:ef:fa:a7:d7:49:f2:b4:f0:a8: fc:c8:22:0a:f9:6c:c4:f4:db:17:3c:c8:26:b2:70:8c:5d:65: 5d:f8:c0:85:f5:4e:bb:e6:34:da:39:17:b8:c8:eb:44:b8:58: b5:74:84:de:1c:59:fc:d4:2d:1a:0f:4c:18:c5:35:0b:b7:3d: 5c:f3:11:ad:46:cc:35:c2:9e:35:72:4d:04:47:99:04:d8:79: fd:1e:38:85:36:2e:5c:70:05:91:08:9c:0d:4d:1a:49:48:a6: 7a:08:2e:13:e7:e4:e0:c8:82:df:e7:8d:3b:41:11:8f:5c:37: 4f:23:50:29:92:73:a9:02:34:9f:4e:87:b2:23:14:cc:c4:da: 86:c9:0e:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVs6m1T/L5oHmL33GgLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx Mjc4MDkwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjU2YjIwYzhjYTA2MGQyMGU4OTJmNzY4ZmE3MGRiNmEwNTA5YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ08lk/YCQlgqPao5xLtxbmy7rW/ RdR9avatlOMLZ4udw02exmN0pUoklCXUPut0pqOPmYFhSKOO6n32mUGQSRSw6ZMV cG9a0VEnXGR7w1kKH84HotmXBW6vM1LCSTQLZkOkM37zRALhHNh4Th9ChbC7vGYd QQiMuxk+HGdBI/bwm0ju02BdUowhQOQHH0dedWvMrfCKrLI+xxZFrsYCKiNvSXVB YjMXXHYeXDKs9PT538aysOmheOv6KSmZIFBbskPDBU5oPsUWuwBSU1uB0cGAxvIe tKWBeNc6DtbjsPgz5z05RHnhrmT4iiHpZbO6P5xZBJFAjl2PI2KWofEZHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9WsgyMoGDSDokvdo+nDbagUJtXMB8GA1UdIwQY MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt MDUwOGEyYmI0N2FjLzEvSDFheURJeWdZTklPaVM5Mmo2Y050cUJRbTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZapMA0G CSqGSIb3DQEBCwUAA4IBAQAG65RtOqLmhhXNF19rvtw8dGeAQ91VRwEDF6r2sNmg YqdNWjHdFKsFMsaVBm/WOXVXsxFMH6NuQo26x7F+8ySKbX9i7lekUf6A38nYXq0m AKfvQksbt6+oifzssBb6nWPDduiGKWBfMrSfrtKF+5v/FoGff3vv+qfXSfK08Kj8 yCIK+WzE9NsXPMgmsnCMXWVd+MCF9U675jTaORe4yOtEuFi1dITeHFn81C0aD0wY xTULtz1c8xGtRsw1wp41ck0ER5kE2Hn9HjiFNi5ccAWRCJwNTRpJSKZ6CC4T5+Tg yILf5407QRGPXDdPI1ApknOpAjSfToeyIxTMxNqGyQ5M -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:58 2026 by rpki-client