This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/1-Av5slqVQGl13SrEfsDMUE9C8xw.roa File: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (raw, json) Hash identifier: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0= Subject key identifier: F8:0B:F9:B2:5A:95:40:69:75:DD:2A:C4:7E:C0:CC:50:4F:42:F3:1C Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED51258E810102E4383576A857CC0 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/1-Av5slqVQGl13SrEfsDMUE9C8xw.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215419 IP address blocks: 5.56.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d5:12:58:e8:10:10:2e:43:83:57:6a:85:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f80bf9b25a95406975dd2ac47ec0cc504f42f31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:33:7a:0c:df:33:5c:30:1e:b1:aa:77:af: b5:bc:dd:98:72:3b:e5:61:c0:40:bf:58:ff:ba:05: fe:01:e1:92:28:4c:19:a4:c6:a2:3c:65:fb:d4:c1: d7:64:98:f6:69:c4:36:73:7a:af:0e:16:a2:eb:a5: 18:38:42:dd:89:a4:a1:42:a0:3b:b7:59:9b:e9:57: 2a:4c:f6:cf:55:8e:73:aa:3d:2f:22:7b:0d:3d:8e: ec:77:89:bb:38:56:44:16:80:2c:9e:86:78:75:7a: 90:1c:7c:76:07:e2:71:44:47:6d:74:ca:2f:6d:f0: 1f:25:95:3b:f0:14:23:fb:cf:9c:74:ce:1d:92:62: d6:6f:0f:2f:e2:eb:e9:38:cd:30:9e:36:c1:80:04: 30:f5:ae:16:13:ff:5e:1b:08:ab:ed:13:8a:74:22: 41:e3:9c:6f:bb:d2:3f:e7:2d:ba:6f:6b:17:cc:b8: 22:32:0b:63:22:f8:34:23:b1:57:62:9e:2c:00:f7: 70:75:4b:f1:72:34:9a:b5:fc:cd:12:62:8a:90:a5: 55:32:0f:b4:0f:a3:2e:06:f1:5c:c8:27:92:92:96: 93:f4:b8:c9:50:a3:b6:a3:e5:db:c1:8f:9d:6b:32: eb:94:7d:ca:fc:2f:4b:57:c1:7b:f3:6b:ad:0b:1d: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:F9:B2:5A:95:40:69:75:DD:2A:C4:7E:C0:CC:50:4F:42:F3:1C X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/1-Av5slqVQGl13SrEfsDMUE9C8xw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.133.0/24 Signature Algorithm: sha256WithRSAEncryption e3:31:a3:f9:0e:d3:4e:ed:1b:15:84:27:1a:a0:20:96:a1:4f: e7:62:b9:da:f7:b3:80:0d:88:89:1c:f7:61:ca:a6:34:80:08: a9:3d:35:d8:ac:e4:d9:a9:53:ea:c2:8c:a6:96:a9:1f:e4:99: 5a:3d:0e:0d:2d:7d:90:20:61:e2:3e:20:fd:5b:e6:04:b8:1b: a1:6d:bc:80:64:5a:69:4a:c8:e1:66:7b:8a:e7:e2:84:f6:9d: 66:0a:35:b3:d0:00:44:92:39:c6:65:ca:eb:f8:52:d7:33:18: 09:5c:4a:27:54:25:18:fd:4a:c7:63:d4:80:ca:6f:7d:e1:82: 2b:c0:9f:53:10:75:a1:86:77:a5:c3:e4:0c:8f:50:cd:bb:10: 8b:f1:e4:92:c6:b5:91:19:7c:d7:e4:c8:aa:cb:32:6c:5f:b3: fa:89:0f:e3:2e:c5:8d:0b:0a:64:74:18:e5:28:ee:86:5a:07: a5:35:d6:28:2b:3c:1b:ea:9d:a5:e4:8c:f4:14:91:4d:79:da: e8:78:f3:d8:08:b5:8d:67:63:9e:e2:c9:a7:bb:c5:2c:65:3d: 35:a7:8c:24:01:9f:35:4a:33:3e:52:c9:ad:79:18:bd:10:d5: 16:9a:95:55:30:9d:00:4d:b9:09:fa:60:a3:54:ba:f0:3f:d4: e8:6f:16:a0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ftUSWOgQEC5Dg1dqhXzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODBiZjliMjVhOTU0MDY5NzVkZDJhYzQ3ZWMwY2M1MDRmNDJmMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kgzegzfM1wwHrGqd6+1vN2Ycjvl YcBAv1j/ugX+AeGSKEwZpMaiPGX71MHXZJj2acQ2c3qvDhai66UYOELdiaShQqA7 t1mb6VcqTPbPVY5zqj0vInsNPY7sd4m7OFZEFoAsnoZ4dXqQHHx2B+JxREdtdMov bfAfJZU78BQj+8+cdM4dkmLWbw8v4uvpOM0wnjbBgAQw9a4WE/9eGwir7ROKdCJB 45xvu9I/5y26b2sXzLgiMgtjIvg0I7FXYp4sAPdwdUvxcjSatfzNEmKKkKVVMg+0 D6MuBvFcyCeSkpaT9LjJUKO2o+XbwY+dazLrlH3K/C9LV8F782utCx38FQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgL+bJalUBpdd0qxH7AzFBPQvMcMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvMS1BdjVzbHFWUUdsMTNTckVmc0RNVUU5Qzh4dy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDcvZjFkNjk3LWJjOGUtNGYxNC04YjM3LWI1M2UzMGUxNDEy YS8xL2tyOWtaTTV1R2FUYy1LTXJKNkx4eS1GVkVGVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAU4hTAN BgkqhkiG9w0BAQsFAAOCAQEA4zGj+Q7TTu0bFYQnGqAglqFP52K52vezgA2IiRz3 YcqmNIAIqT012Kzk2alT6sKMppapH+SZWj0ODS19kCBh4j4g/VvmBLgboW28gGRa aUrI4WZ7iufihPadZgo1s9AARJI5xmXK6/hS1zMYCVxKJ1QlGP1Kx2PUgMpvfeGC K8CfUxB1oYZ3pcPkDI9QzbsQi/Hkksa1kRl81+TIqssybF+z+okP4y7FjQsKZHQY 5SjuhloHpTXWKCs8G+qdpeSM9BSRTXna6Hjz2Ai1jWdjnuLJp7vFLGU9NaeMJAGf NUozPlLJrXkYvRDVFpqVVTCdAE25Cfpgo1S68D/U6G8WoA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:56 2026 by rpki-client