This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa File: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (raw, json) Hash identifier: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA= Subject key identifier: D5:92:33:ED:83:77:F3:EA:A1:58:84:69:F6:F1:0C:69:45:68:E1:02 Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Certificate serial: 019B7EA43EF4152D8BD042F364FAFE041777 Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa Signing time: Fri 02 Jan 2026 12:17:31 +0000 ROA not before: Fri 02 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.91.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:3e:f4:15:2d:8b:d0:42:f3:64:fa:fe:04:17:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Validity Not Before: Jan 2 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d59233ed8377f3eaa1588469f6f10c694568e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:ca:6f:cf:c7:a2:f7:1c:c9:82:8c:a8:27: d0:b0:08:7e:9e:41:32:8f:03:0d:3b:d2:6f:97:f2: e4:d7:90:61:0a:36:14:3f:bb:10:8f:69:4f:c1:e2: 57:e4:52:c5:da:a6:a5:6c:84:ee:47:1d:1c:a0:fc: 52:e9:64:25:22:01:6d:d1:aa:a6:3f:a0:1a:f8:32: 7a:b4:12:5a:62:65:ab:f3:36:89:72:a6:15:e4:c3: 77:2d:9b:61:8e:7d:4c:b7:b0:02:9c:ec:a6:d1:0a: 5a:1f:7d:7d:f5:aa:31:eb:a9:0f:71:72:d5:16:4e: 46:1b:1d:7d:64:56:8a:b7:5b:76:d0:58:a4:4a:87: 0c:bc:92:4f:30:e6:54:66:cf:0b:7e:20:91:b4:1b: d1:99:4d:10:4c:a6:38:06:05:8e:89:97:31:21:55: 92:1c:5c:21:31:c3:d4:cc:96:62:8f:08:75:57:13: 43:3a:a3:54:dd:ae:d9:49:ab:e6:ab:2a:f9:64:9d: db:dd:09:8b:bb:69:30:6b:e3:fa:a6:dc:e1:d9:09: eb:29:ce:57:fd:62:5d:dd:8f:49:17:17:02:87:22: 9a:54:1e:dd:f7:04:87:67:20:1c:31:a1:d2:91:91: 75:ff:45:ea:ae:ff:59:5c:e7:7b:43:25:9a:14:28: 09:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:92:33:ED:83:77:F3:EA:A1:58:84:69:F6:F1:0C:69:45:68:E1:02 X509v3 Authority Key Identifier: keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.79.0/24 Signature Algorithm: sha256WithRSAEncryption b5:e3:0a:59:38:9a:a1:92:ee:c5:3f:24:08:fb:9e:72:64:55: 35:5a:e8:75:df:44:08:ef:aa:d0:27:ad:96:77:e2:da:f6:4f: db:de:55:c6:fb:80:ab:2f:bf:43:cd:92:75:1a:2e:42:d7:99: 04:a7:09:cd:0d:8c:4e:41:a9:bb:00:0f:89:1f:f7:a4:36:d2: 0c:5f:82:21:8a:9f:8a:63:10:10:24:2b:5c:9e:19:1d:8e:39: 48:f9:51:99:d4:e0:92:fe:99:dd:f7:12:d9:cb:94:52:25:f2: c5:7d:85:a6:ef:0a:65:d1:a5:39:36:01:2e:8a:5a:b5:a4:8e: a9:70:b7:92:e1:43:38:08:3b:9b:da:22:28:37:44:32:98:91: 3a:9b:70:58:96:d3:35:7b:26:74:57:47:e3:a7:e8:8d:f1:19: bb:85:0b:80:41:c7:88:c9:98:8c:4b:00:68:39:b2:18:d5:be: 37:e7:ca:07:2d:3a:5c:30:26:26:69:cc:20:b0:e6:49:df:53: b7:e4:0f:72:12:9c:3e:89:fb:df:da:61:cf:d5:fa:1c:f7:f3: 36:8b:a7:6f:b0:6d:06:2d:63:8f:00:7f:00:ce:8a:65:3b:e0: 4c:a3:af:cb:74:88:8e:88:26:52:24:7b:cd:82:b5:6d:c6:af: a6:c9:cd:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pD70FS2L0ELzZPr+BBd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWM1NGJlMWRhN2U3MzhlM2M5NmZmYjQxZjFlYTM5MDBh NjdiZTgwHhcNMjYwMTAyMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTkyMzNlZDgzNzdmM2VhYTE1ODg0NjlmNmYxMGM2OTQ1NjhlMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc7Kb8/HovccyYKMqCfQsAh+nkEy jwMNO9Jvl/Lk15BhCjYUP7sQj2lPweJX5FLF2qalbITuRx0coPxS6WQlIgFt0aqm P6Aa+DJ6tBJaYmWr8zaJcqYV5MN3LZthjn1Mt7ACnOym0QpaH3199aox66kPcXLV Fk5GGx19ZFaKt1t20FikSocMvJJPMOZUZs8LfiCRtBvRmU0QTKY4BgWOiZcxIVWS HFwhMcPUzJZijwh1VxNDOqNU3a7ZSavmqyr5ZJ3b3QmLu2kwa+P6ptzh2QnrKc5X /WJd3Y9JFxcChyKaVB7d9wSHZyAcMaHSkZF1/0Xqrv9ZXOd7QyWaFCgJkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWSM+2Dd/PqoViEafbxDGlFaOECMB8GA1UdIwQY MBaAFEKcVL4dp+c448lv+0Hx6jkApnvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEt M2Q4NTg0Y2Y1M2ZlLzEvMVpJejdZTjM4LXFoV0lScDl2RU1hVVZvNFFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEtM2Q4NTg0Y2Y1M2Zl LzEvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVtPMA0G CSqGSIb3DQEBCwUAA4IBAQC14wpZOJqhku7FPyQI+55yZFU1Wuh130QI76rQJ62W d+La9k/b3lXG+4CrL79DzZJ1Gi5C15kEpwnNDYxOQam7AA+JH/ekNtIMX4Ihip+K YxAQJCtcnhkdjjlI+VGZ1OCS/pnd9xLZy5RSJfLFfYWm7wpl0aU5NgEuilq1pI6p cLeS4UM4CDub2iIoN0QymJE6m3BYltM1eyZ0V0fjp+iN8Rm7hQuAQceIyZiMSwBo ObIY1b4358oHLTpcMCYmacwgsOZJ31O35A9yEpw+ifvf2mHP1foc9/M2i6dvsG0G LWOPAH8AzoplO+BMo6/LdIiOiCZSJHvNgrVtxq+myc1n -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:09 2026 by rpki-client