This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/1-Y24DkHX_YS8BQf944IXH_5kays.roa File: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (raw, json) Hash identifier: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo= Subject key identifier: F9:8D:B8:0E:41:D7:FD:84:BC:05:07:FD:E3:82:17:1F:FE:64:6B:2B Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B7C12DB6F510803C1405217486AEB4755 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/1-Y24DkHX_YS8BQf944IXH_5kays.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12085 IP address blocks: 137.174.152.0/21 maxlen: 24 155.204.0.0/22 maxlen: 24 155.204.112.0/21 maxlen: 24 155.204.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:db:6f:51:08:03:c1:40:52:17:48:6a:eb:47:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f98db80e41d7fd84bc0507fde382171ffe646b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:6b:19:a0:62:21:6a:c4:fb:98:66:3f:92: 6d:96:bc:c1:fe:db:b9:ce:39:f0:59:02:da:ed:6f: 2b:76:92:13:9a:e0:6a:86:9d:36:35:b1:ca:e6:4d: 67:14:df:de:8c:87:ef:e6:26:96:b7:eb:3a:03:df: a9:f8:f6:05:89:62:9e:64:f2:f6:e5:63:12:7a:61: 47:e2:00:ad:c5:e4:bf:ca:3f:e4:dc:ad:8c:de:5c: 98:ae:ef:d1:d0:23:52:c7:1a:a8:c6:f1:6f:d7:f7: 19:f2:c2:4e:39:f2:49:ed:03:1c:80:e0:8a:34:50: 89:95:68:15:4f:11:f7:3a:00:f2:ec:3a:04:1b:b5: 55:71:d3:5f:0b:52:9c:7c:bf:28:72:79:b8:29:5b: 9a:92:d2:21:ce:b4:d2:a2:07:31:e3:cf:d4:ad:26: 3a:d1:68:bf:bd:dd:98:97:e3:a8:2d:2b:9e:02:5a: a7:dd:9c:fa:80:8e:9f:ab:46:b4:d3:1a:14:85:bb: c5:a4:42:43:a9:1b:ad:77:36:bd:80:ad:7d:5d:90: 80:0d:62:b8:a2:33:17:b9:78:a9:c3:90:a8:76:df: d5:59:70:34:42:54:b0:32:ea:13:ea:f7:f4:dc:f8: 0c:46:d5:0c:70:dd:a1:0b:d6:c9:88:71:c3:b2:d8: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8D:B8:0E:41:D7:FD:84:BC:05:07:FD:E3:82:17:1F:FE:64:6B:2B X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/1-Y24DkHX_YS8BQf944IXH_5kays.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.174.152.0/21 155.204.0.0/22 155.204.112.0/21 155.204.128.0/21 Signature Algorithm: sha256WithRSAEncryption 63:01:5a:6c:26:47:88:46:38:89:59:c1:07:39:c8:44:40:37: fd:00:b5:f8:08:a6:40:34:a0:ea:12:f9:a4:9b:3a:a6:76:9b: ac:f6:68:33:85:02:a9:db:d4:9a:56:32:f8:f8:76:67:76:88: cc:d6:97:55:64:15:e8:42:e9:74:c9:bd:0c:81:3d:36:0a:f4: 3f:57:f0:c9:ad:6f:f0:8f:61:12:20:e0:e8:c2:68:96:6b:87: 35:3d:f0:d7:41:39:1f:f2:1f:14:55:82:16:0b:1f:fd:e0:5c: 8e:00:b1:d2:37:0b:39:a5:ce:91:cf:e7:31:6a:02:ea:cc:cb: 1d:0f:0f:9c:48:1c:d6:fb:3c:a8:ad:54:f3:ab:e8:12:13:b0: 38:2f:9b:c4:c5:09:07:4b:55:39:62:7d:a9:ee:ea:43:9d:a0: 82:81:a6:2d:85:64:37:6e:3f:b6:28:55:da:b0:65:3a:b1:8f: 95:40:c2:02:0a:d1:6a:c6:35:28:f7:65:ec:2e:28:4b:9c:5f: e9:6c:68:46:30:e2:d7:b2:d8:8d:d8:c8:9b:1b:50:b3:ba:b1: ae:3f:c6:08:7f:db:fd:57:ed:9a:53:7c:68:70:48:80:37:f5: 2b:07:87:af:7f:c4:f6:e8:c6:5d:e4:dd:b9:f9:6f:e0:11:28: b0:65:4e:b9 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt8EttvUQgDwUBSF0hq60dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOThkYjgwZTQxZDdmZDg0YmMwNTA3ZmRlMzgyMTcxZmZlNjQ2YjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVFrGaBiIWrE+5hmP5JtlrzB/tu5 zjnwWQLa7W8rdpITmuBqhp02NbHK5k1nFN/ejIfv5iaWt+s6A9+p+PYFiWKeZPL2 5WMSemFH4gCtxeS/yj/k3K2M3lyYru/R0CNSxxqoxvFv1/cZ8sJOOfJJ7QMcgOCK NFCJlWgVTxH3OgDy7DoEG7VVcdNfC1KcfL8ocnm4KVuaktIhzrTSogcx48/UrSY6 0Wi/vd2Yl+OoLSueAlqn3Zz6gI6fq0a00xoUhbvFpEJDqRutdza9gK19XZCADWK4 ojMXuXipw5Codt/VWXA0QlSwMuoT6vf03PgMRtUMcN2hC9bJiHHDstg2VwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPmNuA5B1/2EvAUH/eOCFx/+ZGsrMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvMS1ZMjREa0hYX1lTOEJRZjk0NElYSF81a2F5cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvZTNmYjdkLWRkNGItNGQ4NS1iMDhlLTU5MWNhZjUzNmVj Yy8xL0lxWFlRRlBpc01NVHJ4NDdwUkFrWnFYM2xuZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEA4mumAME ApvMAAMEA5vMcAMEA5vMgDANBgkqhkiG9w0BAQsFAAOCAQEAYwFabCZHiEY4iVnB BznIREA3/QC1+AimQDSg6hL5pJs6pnabrPZoM4UCqdvUmlYy+Ph2Z3aIzNaXVWQV 6ELpdMm9DIE9Ngr0P1fwya1v8I9hEiDg6MJolmuHNT3w10E5H/IfFFWCFgsf/eBc jgCx0jcLOaXOkc/nMWoC6szLHQ8PnEgc1vs8qK1U86voEhOwOC+bxMUJB0tVOWJ9 qe7qQ52ggoGmLYVkN24/tihV2rBlOrGPlUDCAgrRasY1KPdl7C4oS5xf6WxoRjDi 17LYjdjImxtQs7qxrj/GCH/b/VftmlN8aHBIgDf1KweHr3/E9ujGXeTduflv4BEo sGVOuQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client