This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa File: pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa (raw, json) Hash identifier: D/Y20asoDdfvVkjnqNGrkzhvFsfQ4TTpIhrzqfdNsXw= Subject key identifier: A5:2A:F5:62:9C:7E:D8:D8:47:50:DD:84:50:C6:3E:F9:1A:2C:AE:7C Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019B7BA31A7F977BEED2463D42B3F96B3ED9 Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39650 IP address blocks: 109.162.250.0/24 maxlen: 24 109.162.251.0/24 maxlen: 24 109.162.252.0/24 maxlen: 24 109.162.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1a:7f:97:7b:ee:d2:46:3d:42:b3:f9:6b:3e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a52af5629c7ed8d84750dd8450c63ef91a2cae7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:76:7e:c9:72:b4:ad:02:f8:07:af:8f:1c: 52:0a:b6:41:29:37:85:41:dd:9a:f6:aa:f6:95:7c: 23:ef:94:46:92:d9:f0:af:f2:95:76:1d:8e:93:8d: b7:37:5c:35:be:8e:98:17:90:64:e5:b2:d7:df:5e: f0:c3:16:11:38:69:4a:e4:9c:09:8f:60:aa:92:44: 02:87:e9:e1:5d:24:11:89:90:e1:82:79:9e:3e:c1: 36:92:fa:2a:43:39:94:32:33:c7:be:14:49:55:c4: 8f:7b:1c:76:4c:32:ad:bf:ad:fe:01:81:37:e3:9c: 42:5f:a3:25:70:8b:c8:80:7a:2c:17:69:87:7a:c5: 40:f1:cd:71:ad:7f:8d:ac:8d:81:b2:dc:77:5c:27: b5:f7:79:30:e5:ba:02:ad:60:b9:62:0d:13:84:99: 69:6e:a4:1a:17:0b:52:13:9b:4e:2e:a7:6b:cb:2d: 0a:c6:6d:ce:4f:e7:dc:09:25:96:5b:ba:8f:48:16: 8d:23:d4:90:f2:e5:6a:21:33:f7:f3:04:b9:c2:a5: 09:b3:50:b4:81:fd:a9:ef:ce:92:73:3f:4b:ad:bd: 7c:c4:27:d2:c3:d9:5c:b1:8c:b2:f7:ff:e8:73:67: 23:23:15:5a:1a:2a:2b:9b:bb:b1:39:d5:58:e2:93: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:F5:62:9C:7E:D8:D8:47:50:DD:84:50:C6:3E:F9:1A:2C:AE:7C X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/pSr1Ypx-2NhHUN2EUMY--Rosrnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.162.250.0-109.162.253.255 Signature Algorithm: sha256WithRSAEncryption 93:3e:e3:cf:1c:8f:90:01:68:fd:1a:2d:bf:ba:10:1a:b4:ef: ac:62:f0:b4:7c:9f:09:66:e2:7d:20:a4:5b:e7:68:86:44:99: 86:6c:93:4c:88:2e:07:46:fc:b3:03:11:17:23:92:23:5d:c8: 0f:92:e2:40:d1:b6:0b:85:f1:ed:6b:52:19:7a:e5:32:da:58: 20:81:8f:c7:bb:5a:fa:63:f5:6c:a8:13:b1:fd:32:70:73:f7: 4b:cd:54:28:43:35:e0:a4:92:3f:26:a2:b2:ca:f3:72:f2:54: 08:36:38:78:3e:61:d0:53:28:2b:8b:dc:08:24:85:17:a8:ae: 1a:5c:0b:a6:c4:71:79:44:1b:04:a0:3d:b6:2b:f1:ab:26:8f: bc:9f:c8:69:77:0d:dc:44:2f:74:37:15:59:21:48:f0:b4:5b: d9:be:d7:ef:eb:a3:84:0e:8a:2e:da:96:79:aa:6f:54:bd:30: 1d:e1:d3:2d:a7:4f:72:84:ea:5a:71:03:a4:05:5c:c6:1c:0b: 31:35:60:b2:41:f8:ce:e0:6f:e6:df:1e:ce:cd:fc:b8:ad:36: 77:57:8a:a1:1d:7b:07:40:1e:a4:36:3b:df:8a:db:e2:54:a9: f6:46:e1:d1:70:df:be:72:80:ce:f3:28:b9:72:d9:c2:c2:74: bc:7a:cd:83 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7oxp/l3vu0kY9QrP5az7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTJhZjU2MjljN2VkOGQ4NDc1MGRkODQ1MGM2M2VmOTFhMmNhZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLV2fslytK0C+AevjxxSCrZBKTeF Qd2a9qr2lXwj75RGktnwr/KVdh2Ok423N1w1vo6YF5Bk5bLX317wwxYROGlK5JwJ j2CqkkQCh+nhXSQRiZDhgnmePsE2kvoqQzmUMjPHvhRJVcSPexx2TDKtv63+AYE3 45xCX6MlcIvIgHosF2mHesVA8c1xrX+NrI2Bstx3XCe193kw5boCrWC5Yg0ThJlp bqQaFwtSE5tOLqdryy0Kxm3OT+fcCSWWW7qPSBaNI9SQ8uVqITP38wS5wqUJs1C0 gf2p786Scz9Lrb18xCfSw9lcsYyy9//oc2cjIxVaGiorm7uxOdVY4pPQ7wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKUq9WKcftjYR1DdhFDGPvkaLK58MB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvcFNyMVlweC0yTmhIVU4yRVVNWS0tUm9zcm53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFtovoD BAFtovwwDQYJKoZIhvcNAQELBQADggEBAJM+488cj5ABaP0aLb+6EBq076xi8LR8 nwlm4n0gpFvnaIZEmYZsk0yILgdG/LMDERcjkiNdyA+S4kDRtguF8e1rUhl65TLa WCCBj8e7Wvpj9WyoE7H9MnBz90vNVChDNeCkkj8morLK83LyVAg2OHg+YdBTKCuL 3AgkhReorhpcC6bEcXlEGwSgPbYr8asmj7yfyGl3DdxEL3Q3FVkhSPC0W9m+1+/r o4QOii7alnmqb1S9MB3h0y2nT3KE6lpxA6QFXMYcCzE1YLJB+M7gb+bfHs7N/Lit NndXiqEdewdAHqQ2O9+K2+JUqfZG4dFw375ygM7zKLly2cLCdLx6zYM= -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:09 2026 by rpki-client