This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/0a1J_e0o53xfPHzxcGmQ-bhZ0e8.roa File: 0a1J_e0o53xfPHzxcGmQ-bhZ0e8.roa (raw, json) Hash identifier: mHa/5N0geEIVG3Bi7Mu8qzxi2dbQvVIdogUEER3551I= Subject key identifier: D1:AD:49:FD:ED:28:E7:7C:5F:3C:7C:F1:70:69:90:F9:B8:59:D1:EF Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Certificate serial: 019BE575A2DACE3C01D3C385C66132D05774 Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/0a1J_e0o53xfPHzxcGmQ-bhZ0e8.roa Signing time: Thu 22 Jan 2026 11:27:30 +0000 ROA not before: Thu 22 Jan 2026 11:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 155.55.192.0/22 maxlen: 22 2001:678:2a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:75:a2:da:ce:3c:01:d3:c3:85:c6:61:32:d0:57:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Validity Not Before: Jan 22 11:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1ad49fded28e77c5f3c7cf1706990f9b859d1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:36:f1:ec:27:d5:ac:8c:9f:02:aa:e9:08: 6b:78:45:5a:b8:25:50:1d:8a:fa:87:58:a7:1e:57: fc:23:8f:58:03:79:a5:12:ab:25:1e:f1:72:45:7a: 21:69:92:34:f7:b0:fd:79:d8:64:e7:53:6c:a4:60: 21:56:37:59:0b:89:e4:ac:19:95:cb:48:93:84:76: 3d:dc:60:af:31:08:8a:4c:b4:fb:1d:5f:5e:ca:8f: e9:c2:94:5f:76:e4:1b:ff:df:d9:b3:08:e3:6b:59: 70:77:4d:f1:c7:89:a4:03:67:66:a7:4d:3f:d5:c3: 70:33:68:2f:3c:91:21:e0:17:f4:8b:52:f8:63:7c: 8a:84:67:fd:0a:2e:38:a3:f5:7e:3c:c3:36:7f:9f: f9:61:e8:19:7d:82:29:81:83:a5:4a:45:78:60:9e: 50:ff:5b:5b:a0:88:55:23:c9:ec:dd:cb:cf:ad:bf: d7:3a:a0:04:5e:63:d8:66:e6:cd:37:ae:47:04:b5: f4:0e:22:bb:97:57:fe:55:69:92:d4:91:7d:86:0f: 02:b0:fa:50:0b:03:b5:8b:ef:12:c1:14:03:6a:09: 1d:d6:11:73:0e:01:5d:95:ec:ed:c0:2e:5e:34:b8: 6b:bb:53:4a:a9:ad:54:95:ec:f0:f6:69:9f:47:1b: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AD:49:FD:ED:28:E7:7C:5F:3C:7C:F1:70:69:90:F9:B8:59:D1:EF X509v3 Authority Key Identifier: keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/0a1J_e0o53xfPHzxcGmQ-bhZ0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.55.192.0/22 IPv6: 2001:678:2a4::/48 Signature Algorithm: sha256WithRSAEncryption 06:58:66:45:fa:23:3c:df:02:98:78:58:6a:a7:cf:17:fc:ab: 17:8d:d4:63:92:84:14:fc:5f:f3:32:d0:2e:39:76:1e:fe:8f: a8:cd:dd:c5:8f:96:bf:0c:c3:3f:95:5f:6a:15:2c:7c:d6:12: f8:12:a2:5b:0c:ff:62:ab:db:b4:e2:bf:2a:09:87:29:9a:51: 10:32:5b:b9:fe:1c:58:62:cc:e2:87:56:bb:b1:20:e3:92:7d: 94:b5:e8:77:70:07:8e:24:3e:98:f9:4e:85:c4:d5:f7:ad:e9: 59:45:60:3e:ae:97:cd:e1:ce:52:b1:7b:53:6a:35:2c:7c:b3: 10:b0:bd:56:c3:02:e5:bf:36:8a:ef:0f:98:12:66:20:15:c2: de:5b:ee:66:92:be:a2:e2:bd:9a:52:f2:77:3d:12:21:c2:e6: b7:0a:e1:0d:98:16:f0:5c:ec:36:4c:c4:37:97:bc:66:16:10: f0:40:7b:bf:b4:ab:e2:de:6d:03:44:4b:d6:5e:8a:e5:8e:e9: 5f:1d:dd:7e:66:b4:70:f0:8f:48:dd:d4:5e:f6:c5:80:ed:49: cc:d3:ac:ac:1a:98:f1:8d:2e:85:0e:52:69:67:2f:c7:0e:8b: c8:16:78:d9:3b:5a:05:0e:ba:1e:7d:44:93:1e:35:0d:db:6e: 1d:6e:33:8d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZvldaLazjwB08OFxmEy0Fd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDYzMjVlMzQ0MThhNTdjZTU2NmVmYzBjM2U4YjM4YTBl ZmE1ZGIwHhcNMjYwMTIyMTEyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWFkNDlmZGVkMjhlNzdjNWYzYzdjZjE3MDY5OTBmOWI4NTlkMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveU28ewn1ayMnwKq6QhreEVauCVQ HYr6h1inHlf8I49YA3mlEqslHvFyRXohaZI097D9edhk51NspGAhVjdZC4nkrBmV y0iThHY93GCvMQiKTLT7HV9eyo/pwpRfduQb/9/Zswjja1lwd03xx4mkA2dmp00/ 1cNwM2gvPJEh4Bf0i1L4Y3yKhGf9Ci44o/V+PMM2f5/5YegZfYIpgYOlSkV4YJ5Q /1tboIhVI8ns3cvPrb/XOqAEXmPYZubNN65HBLX0DiK7l1f+VWmS1JF9hg8CsPpQ CwO1i+8SwRQDagkd1hFzDgFdleztwC5eNLhru1NKqa1Ulezw9mmfRxvK0QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNGtSf3tKOd8Xzx88XBpkPm4WdHvMB8GA1UdIwQY MBaAFFkGMl40QYpXzlZu/Aw+izig76XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2Yt YjIxN2E2OGNlYWY0LzEvMGExSl9lMG81M3hmUEh6eGNHbVEtYmhaMGU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2YtYjIxN2E2OGNlYWY0 LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCmzfAMA8E AgACMAkDBwAgAQZ4AqQwDQYJKoZIhvcNAQELBQADggEBAAZYZkX6IzzfAph4WGqn zxf8qxeN1GOShBT8X/My0C45dh7+j6jN3cWPlr8Mwz+VX2oVLHzWEvgSolsM/2Kr 27TivyoJhymaURAyW7n+HFhizOKHVruxIOOSfZS16HdwB44kPpj5ToXE1fet6VlF YD6ul83hzlKxe1NqNSx8sxCwvVbDAuW/NorvD5gSZiAVwt5b7maSvqLivZpS8nc9 EiHC5rcK4Q2YFvBc7DZMxDeXvGYWEPBAe7+0q+LebQNES9ZeiuWO6V8d3X5mtHDw j0jd1F72xYDtSczTrKwamPGNLoUOUmlnL8cOi8gWeNk7WgUOuh59RJMeNQ3bbh1u M40= -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:32 2026 by rpki-client