This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa File: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (raw, json) Hash identifier: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE= Subject key identifier: 94:4D:4A:C5:FF:4F:26:24:B3:B5:93:6B:CF:0C:01:3C:05:58:51:C5 Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Certificate serial: 019B79EC93FD79B91DBC07A68B50C9C793C1 Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa Signing time: Thu 01 Jan 2026 14:18:26 +0000 ROA not before: Thu 01 Jan 2026 14:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39122 IP address blocks: 64.255.40.0/24 maxlen: 24 69.5.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:93:fd:79:b9:1d:bc:07:a6:8b:50:c9:c7:93:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Validity Not Before: Jan 1 14:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=944d4ac5ff4f2624b3b5936bcf0c013c055851c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:c5:70:d9:60:9d:e2:c0:ca:a7:2c:65:38: 21:b0:a5:44:44:e7:3e:7c:95:61:ac:8d:9e:db:93: 45:a4:5c:9e:49:35:2f:76:d7:cf:e9:c6:2a:5b:c0: 7a:32:7f:6f:3f:68:74:1d:fd:33:ee:e2:b3:22:c7: b3:d9:e5:3d:92:46:72:73:f1:41:5b:b4:66:d6:74: ae:44:ec:7d:ad:ea:e7:06:65:4a:5a:2b:7a:50:a1: eb:22:c2:1c:de:66:76:7a:c2:7a:f7:13:e9:8f:e7: 09:22:30:23:ea:4d:f7:d1:d0:e7:b6:ec:5f:23:6e: 25:5d:a3:f1:9a:48:43:e2:c8:53:7d:71:bc:76:07: cd:c7:40:5d:c8:d2:e3:0b:9f:af:15:ec:54:38:0e: c0:16:b3:3c:ee:fc:a7:d6:a1:fb:31:1d:1d:cb:69: dd:84:aa:f1:ad:3b:a5:1c:cb:a5:8d:37:b9:43:55: cf:21:50:ce:7e:3c:ce:77:af:55:ae:20:25:7d:37: 9d:a2:80:fb:55:38:ed:3d:fc:3e:86:03:2a:86:64: 5a:69:65:d6:c5:34:a0:28:03:5d:99:1f:3d:4c:4d: 0a:19:f5:cf:cd:e3:b1:a9:96:55:5b:ec:5f:5b:7d: e1:b1:95:33:60:3d:c0:fb:ac:d4:37:76:82:17:c9: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4D:4A:C5:FF:4F:26:24:B3:B5:93:6B:CF:0C:01:3C:05:58:51:C5 X509v3 Authority Key Identifier: keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.255.40.0/24 69.5.186.0/24 Signature Algorithm: sha256WithRSAEncryption aa:64:23:e2:bd:9f:38:b5:8f:79:b4:1d:08:16:39:fd:0b:8b: e6:12:ec:66:0a:6b:09:2d:d8:2a:83:e5:0d:99:7d:49:40:73: 1b:72:e3:db:49:20:7c:a0:68:ae:9c:80:a7:b1:4b:44:27:a2: 48:64:5a:63:ca:03:d5:72:65:56:60:83:50:41:62:04:b1:36: 2a:b4:cc:1c:d9:55:c9:e0:9f:7a:f3:97:03:36:40:46:32:99: 34:68:28:c4:ab:c8:99:1a:91:e7:fe:e9:f6:37:4b:97:92:0a: 7c:a6:90:6c:e2:27:f9:d3:93:1c:df:66:7c:cf:70:ba:d7:a1: b8:e2:05:81:f9:44:5c:28:d8:5d:ff:ab:91:73:0e:bf:a3:e6: 59:ac:82:27:b3:a3:d5:db:ea:32:ca:55:69:e8:c3:8c:27:8b: 5d:f1:5e:d9:aa:47:75:3a:ca:00:2b:8d:f9:83:e4:91:75:e2: dc:05:d3:f1:01:f4:9d:80:15:0b:97:c2:83:ac:f8:21:c2:54: 7a:f9:3a:2d:f9:36:96:e5:08:51:55:33:35:39:f8:20:89:c4: b4:11:35:f0:66:3d:f0:8d:7b:74:1d:f1:e3:93:3e:8b:7f:78: 5a:eb:ff:73:1e:69:92:76:00:17:2c:32:4f:30:ca:66:ee:94: 23:b3:da:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57JP9ebkdvAemi1DJx5PBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI3YjcxOTU0ZWRmZmNhMzU4NGM4NWZhMDhmYjEyMjQy ZmVjZDUwHhcNMjYwMTAxMTQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDRkNGFjNWZmNGYyNjI0YjNiNTkzNmJjZjBjMDEzYzA1NTg1MWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10rFcNlgneLAyqcsZTghsKVEROc+ fJVhrI2e25NFpFyeSTUvdtfP6cYqW8B6Mn9vP2h0Hf0z7uKzIsez2eU9kkZyc/FB W7Rm1nSuROx9rernBmVKWit6UKHrIsIc3mZ2esJ69xPpj+cJIjAj6k330dDntuxf I24lXaPxmkhD4shTfXG8dgfNx0BdyNLjC5+vFexUOA7AFrM87vyn1qH7MR0dy2nd hKrxrTulHMuljTe5Q1XPIVDOfjzOd69VriAlfTedooD7VTjtPfw+hgMqhmRaaWXW xTSgKANdmR89TE0KGfXPzeOxqZZVW+xfW33hsZUzYD3A+6zUN3aCF8n1vwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJRNSsX/TyYks7WTa88MATwFWFHFMB8GA1UdIwQY MBaAFKHre3GVTt/8o1hMhfoI+xIkL+zVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMt MGVkMTdhNjk4MDBmLzEvbEUxS3hmOVBKaVN6dFpOcnp3d0JQQVZZVWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMtMGVkMTdhNjk4MDBm LzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQP8oAwQA RQW6MA0GCSqGSIb3DQEBCwUAA4IBAQCqZCPivZ84tY95tB0IFjn9C4vmEuxmCmsJ Ldgqg+UNmX1JQHMbcuPbSSB8oGiunICnsUtEJ6JIZFpjygPVcmVWYINQQWIEsTYq tMwc2VXJ4J9685cDNkBGMpk0aCjEq8iZGpHn/un2N0uXkgp8ppBs4if505Mc32Z8 z3C616G44gWB+URcKNhd/6uRcw6/o+ZZrIIns6PV2+oyylVp6MOMJ4td8V7Zqkd1 OsoAK435g+SRdeLcBdPxAfSdgBULl8KDrPghwlR6+Tot+TaW5QhRVTM1OfggicS0 ETXwZj3wjXt0HfHjkz6Lf3ha6/9zHmmSdgAXLDJPMMpm7pQjs9oL -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:11 2026 by rpki-client