This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/s1pXuGWW8y0eMDg2PLAPlJOS44g.roa File: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (raw, json) Hash identifier: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA= Subject key identifier: B3:5A:57:B8:65:96:F3:2D:1E:30:38:36:3C:B0:0F:94:93:92:E3:88 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B8CB20DA504A140503C21AE3955A7F409 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/s1pXuGWW8y0eMDg2PLAPlJOS44g.roa Signing time: Mon 05 Jan 2026 05:47:17 +0000 ROA not before: Mon 05 Jan 2026 05:47:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51026 IP address blocks: 5.56.132.0/24 maxlen: 24 79.143.84.0/24 maxlen: 24 87.236.209.0/24 maxlen: 24 87.236.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8c:b2:0d:a5:04:a1:40:50:3c:21:ae:39:55:a7:f4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 5 05:47:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b35a57b86596f32d1e3038363cb00f949392e388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:c2:ba:07:c4:9b:09:7c:1c:f4:4f:2e:d1: 4e:2d:12:cf:af:58:f8:e3:94:9f:1d:1b:00:47:11: 7a:9e:35:da:25:49:9b:3e:dc:e5:d4:be:38:bc:83: c6:8d:a6:f1:34:a2:f8:6d:f7:6e:3d:73:02:30:b2: 91:b9:75:3f:ee:e8:db:24:15:a0:a9:b7:1f:b2:45: be:ff:46:60:c1:eb:38:90:f3:00:bd:53:65:8e:c1: 74:d9:45:b2:0f:bd:a8:d9:17:d5:cb:aa:30:3d:ad: fd:c2:2b:1b:8a:4a:ae:ad:73:7b:4f:a0:82:1d:d6: 0b:a2:d2:29:d8:e8:fe:e3:ae:0f:51:30:ca:14:ab: 6d:b6:1c:99:a1:2a:5a:86:86:44:50:d6:54:2b:47: 80:c3:3b:26:c7:07:e8:fd:f5:b3:b7:06:6c:26:66: 99:26:3c:79:9d:fe:15:5c:5b:7b:01:fb:e2:02:b6: 36:d2:57:c5:c9:f8:30:34:89:d5:34:87:28:cf:e3: 9b:fd:73:67:5a:30:61:e8:c2:1a:03:f3:1b:07:c2: e7:01:a4:ae:79:ef:ec:c3:a7:82:4c:c6:b7:d9:3d: cb:89:73:53:0c:76:1c:17:36:b4:99:4d:6e:97:32: 10:af:3a:fa:46:bc:2c:cd:1d:14:b3:97:f6:b5:42: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5A:57:B8:65:96:F3:2D:1E:30:38:36:3C:B0:0F:94:93:92:E3:88 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/s1pXuGWW8y0eMDg2PLAPlJOS44g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.132.0/24 79.143.84.0/24 87.236.209.0/24 87.236.212.0/24 Signature Algorithm: sha256WithRSAEncryption d6:03:8f:e4:7e:33:d8:37:ef:b3:3b:77:bd:cc:86:db:f7:c7: 23:5b:38:b7:ef:d7:b1:ac:4a:a0:e6:fb:c3:49:d3:64:85:f2: fd:17:82:5c:09:17:5b:69:d1:91:43:ab:25:83:6e:60:ad:af: 0a:3d:83:89:83:e7:7b:39:dd:d1:d2:b4:8d:46:eb:cf:4b:98: c2:08:75:71:81:ad:94:2c:65:0b:a3:e8:8d:a6:6c:ba:37:61: 24:22:09:74:57:3d:59:32:02:9c:54:5c:ae:4c:53:6c:50:86: 49:2b:9c:f2:6d:d4:fd:c8:ba:cd:e9:a0:b5:20:de:c4:6f:88: 36:61:67:70:d8:ec:aa:b3:e3:14:02:e6:1b:43:59:99:89:92: 64:f8:9e:9a:da:98:76:34:8b:24:65:40:0d:8a:c3:6b:d8:61: dc:56:67:83:2e:0d:35:0b:3d:d1:5a:23:23:f8:47:ea:24:43: 97:97:41:64:ad:c6:13:24:ec:79:d2:1b:b9:83:ad:9e:aa:dc: d4:80:68:fd:80:7a:a3:74:05:3f:2f:21:08:e8:69:e5:1a:1c: 2f:e9:f1:f7:0b:b1:d4:3f:dd:74:96:32:47:e3:e7:cf:52:72: 1f:e8:6c:70:29:72:5c:62:2b:f4:86:96:3f:4a:73:83:09:8f: 0a:b5:20:f9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuMsg2lBKFAUDwhrjlVp/QJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTA1MDU0NzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzVhNTdiODY1OTZmMzJkMWUzMDM4MzYzY2IwMGY5NDkzOTJlMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrPCugfEmwl8HPRPLtFOLRLPr1j4 45SfHRsARxF6njXaJUmbPtzl1L44vIPGjabxNKL4bfduPXMCMLKRuXU/7ujbJBWg qbcfskW+/0Zgwes4kPMAvVNljsF02UWyD72o2RfVy6owPa39wisbikqurXN7T6CC HdYLotIp2Oj+464PUTDKFKttthyZoSpahoZEUNZUK0eAwzsmxwfo/fWztwZsJmaZ Jjx5nf4VXFt7AfviArY20lfFyfgwNInVNIcoz+Ob/XNnWjBh6MIaA/MbB8LnAaSu ee/sw6eCTMa32T3LiXNTDHYcFza0mU1ulzIQrzr6RrwszR0Us5f2tUIWUwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLNaV7hllvMtHjA4NjywD5STkuOIMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvczFwWHVHV1c4eTBlTURnMlBMQVBsSk9TNDRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABTiEAwQA T49UAwQAV+zRAwQAV+zUMA0GCSqGSIb3DQEBCwUAA4IBAQDWA4/kfjPYN++zO3e9 zIbb98cjWzi379exrEqg5vvDSdNkhfL9F4JcCRdbadGRQ6slg25gra8KPYOJg+d7 Od3R0rSNRuvPS5jCCHVxga2ULGULo+iNpmy6N2EkIgl0Vz1ZMgKcVFyuTFNsUIZJ K5zybdT9yLrN6aC1IN7Eb4g2YWdw2Oyqs+MUAuYbQ1mZiZJk+J6a2ph2NIskZUAN isNr2GHcVmeDLg01Cz3RWiMj+EfqJEOXl0FkrcYTJOx50hu5g62eqtzUgGj9gHqj dAU/LyEI6GnlGhwv6fH3C7HUP910ljJH4+fPUnIf6GxwKXJcYiv0hpY/SnODCY8K tSD5 -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:25 2026 by rpki-client