This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/_1ONv99BnnmudSRYd6dRqlyZIis.roa File: _1ONv99BnnmudSRYd6dRqlyZIis.roa (raw, json) Hash identifier: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs= Subject key identifier: FF:53:8D:BF:DF:41:9E:79:AE:75:24:58:77:A7:51:AA:5C:99:22:2B Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041 Certificate serial: 019B77592C1D42037C12D9884F82BA12755B Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/_1ONv99BnnmudSRYd6dRqlyZIis.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34769 IP address blocks: 85.94.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2c:1d:42:03:7c:12:d9:88:4f:82:ba:12:75:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff538dbfdf419e79ae75245877a751aa5c99222b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:ea:cf:f5:65:08:89:c7:1c:c6:24:a8:dd: c7:7a:6c:6d:05:b9:d4:f9:8f:0d:31:af:10:df:92: e1:0c:5f:cb:47:00:b3:c6:26:45:b8:ec:84:59:1a: e4:58:12:a8:64:d5:df:3c:5d:b7:12:f2:95:fa:22: b2:57:f4:0a:3c:e5:4e:f2:45:e2:aa:b2:bb:21:d1: 97:f3:c9:87:57:d2:9a:71:f2:ca:49:e9:13:91:bc: 6a:e0:ae:68:e3:d7:e2:9b:8a:86:33:82:05:27:82: 2b:fe:2e:47:ed:e3:93:aa:d3:61:5e:82:90:60:18: 31:38:0e:3b:b9:36:f8:ee:ba:c9:4c:04:2c:69:cf: 94:54:85:da:ca:a7:b3:07:90:ec:4f:d1:23:a8:0e: 43:ae:26:80:a0:21:db:25:7d:32:3b:e5:bb:1a:03: 96:2a:8b:35:b2:f7:68:12:34:e5:a9:d3:90:99:4c: 0d:88:c6:b3:2d:21:f8:8e:83:73:dd:5d:0f:34:1f: 42:69:f8:b9:fb:33:b0:6e:00:5f:e3:5d:f8:3f:84: 05:c0:91:62:52:0f:78:f6:8d:32:fc:32:7a:e6:1f: 0a:6c:f7:46:31:1c:c2:02:08:82:b5:4f:b7:5a:89: 7e:28:0a:ac:af:a7:0a:9e:6b:2e:bb:bf:cb:c5:53: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:53:8D:BF:DF:41:9E:79:AE:75:24:58:77:A7:51:AA:5C:99:22:2B X509v3 Authority Key Identifier: keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/_1ONv99BnnmudSRYd6dRqlyZIis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.94.224.0/24 Signature Algorithm: sha256WithRSAEncryption ab:46:8b:41:8b:a6:f4:90:32:ef:26:5c:37:90:d5:20:7a:ac: 0a:3d:36:25:5d:de:b0:4b:f1:e5:c6:f3:14:5a:a3:81:8b:b7: 8a:1a:0a:13:0e:f8:e8:86:8d:6e:48:ae:0f:fe:8e:18:62:ef: 38:bb:fd:6e:f4:41:ea:2f:dc:a8:68:39:a5:c7:d2:08:48:1b: 3f:01:c3:b9:c6:aa:25:bd:91:c0:19:3f:9e:93:c6:7a:d2:72: 7f:ce:f1:66:70:01:75:a3:2f:c9:60:e3:51:fc:a4:01:0e:3f: e3:aa:1c:ae:20:4b:62:01:6d:af:de:4c:d6:e0:d5:56:1b:91: 0d:b6:82:01:e6:94:b6:29:60:86:92:0a:5f:3a:f7:ac:a8:e5: a7:cc:9d:f9:41:64:d7:25:94:f2:4b:31:f6:5e:bd:28:97:97: dc:9e:b4:55:57:f9:47:85:cf:d3:0a:91:13:23:c0:d1:c5:02: ae:ae:4a:d3:1e:34:fd:19:13:44:93:68:5b:74:fe:79:15:28: 80:c7:20:62:b4:95:a9:01:1d:d4:c1:82:fa:30:67:c2:07:b2: ac:09:27:fa:ba:be:c8:93:db:86:5b:ce:0a:a6:48:65:f6:16: a6:26:ae:d1:39:76:bc:1e:08:e2:8b:a7:e1:14:f4:9e:4f:30: 48:72:9b:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSwdQgN8EtmIT4K6EnVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2E1MWRhMjA1MzA0NGY5NjI2MmY2MzdkMGM5Y2MwNWQ3 MzAwNDEwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjUzOGRiZmRmNDE5ZTc5YWU3NTI0NTg3N2E3NTFhYTVjOTkyMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh7qz/VlCInHHMYkqN3HemxtBbnU +Y8NMa8Q35LhDF/LRwCzxiZFuOyEWRrkWBKoZNXfPF23EvKV+iKyV/QKPOVO8kXi qrK7IdGX88mHV9KacfLKSekTkbxq4K5o49fim4qGM4IFJ4Ir/i5H7eOTqtNhXoKQ YBgxOA47uTb47rrJTAQsac+UVIXayqezB5DsT9EjqA5DriaAoCHbJX0yO+W7GgOW Kos1svdoEjTlqdOQmUwNiMazLSH4joNz3V0PNB9Cafi5+zOwbgBf4134P4QFwJFi Ug949o0y/DJ65h8KbPdGMRzCAgiCtU+3Wol+KAqsr6cKnmsuu7/LxVOH9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9Tjb/fQZ55rnUkWHenUapcmSIrMB8GA1UdIwQY MBaAFLk6UdogUwRPliYvY30MnMBdcwBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGIt YTEyYjNjM2FlODhmLzEvXzFPTnY5OUJubm11ZFNSWWQ2ZFJxbHlaSWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGItYTEyYjNjM2FlODhm LzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV7gMA0G CSqGSIb3DQEBCwUAA4IBAQCrRotBi6b0kDLvJlw3kNUgeqwKPTYlXd6wS/HlxvMU WqOBi7eKGgoTDvjoho1uSK4P/o4YYu84u/1u9EHqL9yoaDmlx9IISBs/AcO5xqol vZHAGT+ek8Z60nJ/zvFmcAF1oy/JYONR/KQBDj/jqhyuIEtiAW2v3kzW4NVWG5EN toIB5pS2KWCGkgpfOvesqOWnzJ35QWTXJZTySzH2Xr0ol5fcnrRVV/lHhc/TCpET I8DRxQKurkrTHjT9GRNEk2hbdP55FSiAxyBitJWpAR3UwYL6MGfCB7KsCSf6ur7I k9uGW84Kpkhl9hamJq7ROXa8Hgjii6fhFPSeTzBIcpsD -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:14 2026 by rpki-client