This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa File: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (raw, json) Hash identifier: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ= Subject key identifier: 46:90:B2:D4:95:F1:A3:E6:48:D3:01:7D:7F:3F:9F:5F:82:89:19:94 Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36 Certificate serial: 019B7D5CB9DBDE2EF73EA937519B267B05FF Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 153.109.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b9:db:de:2e:f7:3e:a9:37:51:9b:26:7b:05:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36 Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4690b2d495f1a3e648d3017d7f3f9f5f82891994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:e7:46:24:a7:e0:2d:27:a8:18:43:40:70: 42:50:cc:3e:dd:e4:d4:dd:df:8d:27:bb:46:cb:02: e0:1d:1f:7f:b7:c5:1a:5d:37:0c:be:91:48:c5:53: 0d:5d:38:2d:34:ac:a1:9f:0b:19:0b:f5:78:22:0b: e9:65:70:3c:6f:3b:56:ba:5a:9d:19:52:a3:7c:df: 0a:3d:12:97:89:83:97:69:7e:5a:84:17:e0:7d:8c: 38:04:24:7b:80:1b:48:1e:d3:2e:50:54:38:a2:19: 3c:7a:ab:5b:a7:f9:d1:c5:20:16:1c:9f:b8:96:23: 1e:8c:b7:94:84:8b:a9:89:1b:3e:82:f3:c8:04:2d: 88:69:67:e5:c8:19:06:e1:18:35:7b:ad:fc:26:30: 0c:a5:43:89:10:47:9b:fb:44:37:d1:7f:9b:97:f4: 6a:60:fe:22:96:07:b0:a3:1e:ea:7d:10:87:60:d5: 27:e6:bf:e7:84:6b:8a:3d:af:b6:5a:0b:23:78:21: 9b:49:b9:a0:0f:78:b3:1a:67:01:6e:d6:36:12:2b: 54:dc:62:3c:3e:03:7a:cd:67:90:21:2e:06:15:63: 5f:92:57:65:fa:1d:4f:aa:d9:08:d7:f2:26:38:1d: 62:78:cb:4a:b2:7e:c1:9d:94:43:be:44:d8:97:03: 2f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:90:B2:D4:95:F1:A3:E6:48:D3:01:7D:7F:3F:9F:5F:82:89:19:94 X509v3 Authority Key Identifier: keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.109.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:f4:64:38:e8:3f:7a:da:63:ee:99:7c:a9:6d:98:98:8a:07: 28:ec:28:e8:8e:8d:01:29:dd:a5:da:04:e3:59:56:ba:bb:64: f9:39:d6:97:30:ba:16:3a:09:cc:47:2f:61:e7:bb:db:70:77: d2:bd:dc:f8:05:d7:42:de:de:08:11:2a:f5:26:a3:b8:02:1b: 5c:ac:44:6f:d4:97:40:be:95:92:3b:e3:08:9e:b1:58:cd:8f: 9c:c2:c8:d8:d9:ed:81:8c:8b:c5:cb:d6:78:db:a3:6a:44:42: f5:2a:15:50:17:3f:ac:91:26:4e:b7:12:72:dc:d2:58:7d:e4: 68:b2:a3:1d:56:5c:9b:98:64:4a:bf:95:34:e3:b0:3c:8d:07: eb:d1:56:74:d1:ff:01:4b:a5:db:d4:8a:52:d1:61:8b:0d:7a: c1:6e:03:d3:ef:33:65:07:da:2b:ad:c0:84:37:fc:cc:aa:57: d1:b1:10:86:4a:c7:15:bb:d8:4b:aa:88:91:0f:c6:e5:29:e0: 93:86:ed:1a:9f:d8:99:58:c7:5c:61:f9:57:ad:bf:64:30:82: 4f:4e:d1:aa:2c:2f:97:e3:e7:20:1f:4d:1c:92:02:c5:d1:df: 3a:e5:be:07:47:ad:51:4a:e2:2a:5d:7e:e8:43:30:e3:20:ac: 27:9f:f9:9c -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9XLnb3i73Pqk3UZsmewX/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw ZGRiMzYwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjkwYjJkNDk1ZjFhM2U2NDhkMzAxN2Q3ZjNmOWY1ZjgyODkxOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW3nRiSn4C0nqBhDQHBCUMw+3eTU 3d+NJ7tGywLgHR9/t8UaXTcMvpFIxVMNXTgtNKyhnwsZC/V4IgvpZXA8bztWulqd GVKjfN8KPRKXiYOXaX5ahBfgfYw4BCR7gBtIHtMuUFQ4ohk8eqtbp/nRxSAWHJ+4 liMejLeUhIupiRs+gvPIBC2IaWflyBkG4Rg1e638JjAMpUOJEEeb+0Q30X+bl/Rq YP4ilgewox7qfRCHYNUn5r/nhGuKPa+2WgsjeCGbSbmgD3izGmcBbtY2EitU3GI8 PgN6zWeQIS4GFWNfkldl+h1PqtkI1/ImOB1ieMtKsn7BnZRDvkTYlwMvTwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFEaQstSV8aPmSNMBfX8/n1+CiRmUMB8GA1UdIwQY MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct NDU0YzkzYzA2NWEwLzEvUnBDeTFKWHhvLVpJMHdGOWZ6LWZYNEtKR1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmW0wDQYJ KoZIhvcNAQELBQADggEBADH0ZDjoP3raY+6ZfKltmJiKByjsKOiOjQEp3aXaBONZ Vrq7ZPk51pcwuhY6CcxHL2Hnu9twd9K93PgF10Le3ggRKvUmo7gCG1ysRG/Ul0C+ lZI74wiesVjNj5zCyNjZ7YGMi8XL1njbo2pEQvUqFVAXP6yRJk63EnLc0lh95Giy ox1WXJuYZEq/lTTjsDyNB+vRVnTR/wFLpdvUilLRYYsNesFuA9PvM2UH2iutwIQ3 /MyqV9GxEIZKxxW72EuqiJEPxuUp4JOG7Rqf2JlYx1xh+Vetv2Qwgk9O0aosL5fj 5yAfTRySAsXR3zrlvgdHrVFK4ipdfuhDMOMgrCef+Zw= -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:28 2026 by rpki-client