This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/1eImrMrLwn99tL6hWUH7PV1l9KM.roa File: 1eImrMrLwn99tL6hWUH7PV1l9KM.roa (raw, json) Hash identifier: 5rLdj8XDGdl2PEbYTH8muFitzQHXbsXem0uaX7yA7eQ= Subject key identifier: D5:E2:26:AC:CA:CB:C2:7F:7D:B4:BE:A1:59:41:FB:3D:5D:65:F4:A3 Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019B7F15DCAA4A9CF494FAF8DA867B036BD0 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/1eImrMrLwn99tL6hWUH7PV1l9KM.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210502 IP address blocks: 72.56.56.0/24 maxlen: 24 72.56.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:dc:aa:4a:9c:f4:94:fa:f8:da:86:7b:03:6b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5e226accacbc27f7db4bea15941fb3d5d65f4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:e7:14:6c:e9:28:d1:1d:cf:1d:94:f2:79: 03:07:c8:c0:8a:47:f1:51:5a:9a:d8:b8:22:09:4b: 15:e4:78:ae:39:e7:fc:44:05:87:0f:67:58:28:fb: a7:0b:68:a3:53:6c:89:d2:ca:5e:f6:9b:f3:2b:cc: d5:e6:3d:aa:9c:8d:23:66:2d:f4:79:f2:21:d8:ce: eb:49:ca:d4:07:8b:ce:e5:7a:b3:d8:d5:af:13:be: 6b:cf:b3:da:c3:bf:e3:3a:58:61:af:1b:e7:82:97: be:07:60:43:f6:fc:92:b7:b6:4d:fc:1a:8f:56:61: 44:13:4d:92:af:98:40:fb:40:6c:be:03:36:80:ec: 93:38:ed:3c:04:10:d1:90:b1:7e:72:d9:45:94:f6: 58:6b:d7:2d:cb:2a:a2:4a:77:36:eb:8b:b0:eb:1c: 61:b1:ff:56:9b:e6:bb:3e:cf:a6:21:06:9a:e7:89: 87:a9:31:ca:d1:a6:23:d5:d4:92:d2:a4:35:d1:61: 12:80:11:7d:b2:02:33:8b:20:05:df:48:6c:e1:ba: f7:db:c4:c3:6c:34:3a:38:21:45:12:4b:1e:e4:52: 70:46:32:a7:ce:47:41:20:f5:70:80:07:bb:c1:2c: 07:dd:29:5c:1f:77:cc:a7:47:7a:5f:ab:3e:01:aa: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:26:AC:CA:CB:C2:7F:7D:B4:BE:A1:59:41:FB:3D:5D:65:F4:A3 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/1eImrMrLwn99tL6hWUH7PV1l9KM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.56.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:64:c7:06:cf:b3:02:99:a9:4b:4a:70:1b:66:15:6d:e6:a7: 47:b0:7b:31:36:91:a8:c5:71:d4:8e:ee:35:e8:e7:c7:94:9c: 1b:d0:47:9b:60:05:e0:45:3b:7d:f5:40:27:49:68:db:ea:02: 72:c1:0a:d5:82:91:4f:f2:bc:a8:f7:a7:91:c7:5d:6f:b5:16: 7e:50:94:44:ff:ec:0e:68:24:2a:bb:56:b4:24:4c:09:dd:8d: f4:a8:0a:ba:26:28:00:24:29:65:c8:68:fc:7d:af:5f:dd:42: 6f:1f:de:33:85:97:5c:19:04:ba:eb:97:e0:4c:8d:84:d6:da: f1:2e:06:6c:30:1a:c3:42:b2:9f:b2:d4:eb:cf:d6:b3:64:6a: dd:27:f8:20:40:70:cd:8f:30:b6:69:2e:86:b8:ed:82:7c:17: 9f:af:c1:7d:11:7a:de:69:f6:22:0f:1b:d2:fc:fd:41:fb:15: 87:ae:71:2a:75:9c:93:80:bf:9a:5c:e4:30:81:c6:76:90:ea: 52:df:d3:4a:32:30:dc:b1:6d:3a:f2:ae:99:09:07:bd:7a:a9: 4f:32:f9:b0:1c:6f:e6:22:3c:a4:c0:c4:bb:c7:b0:0f:d1:91: 8e:a5:1c:54:7a:ed:7f:76:51:a8:db:8e:c1:a3:b6:03:69:f7: b1:a9:d5:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdyqSpz0lPr42oZ7A2vQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWUyMjZhY2NhY2JjMjdmN2RiNGJlYTE1OTQxZmIzZDVkNjVmNGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+/nFGzpKNEdzx2U8nkDB8jAikfx UVqa2LgiCUsV5HiuOef8RAWHD2dYKPunC2ijU2yJ0spe9pvzK8zV5j2qnI0jZi30 efIh2M7rScrUB4vO5Xqz2NWvE75rz7Paw7/jOlhhrxvngpe+B2BD9vySt7ZN/BqP VmFEE02Sr5hA+0BsvgM2gOyTOO08BBDRkLF+ctlFlPZYa9ctyyqiSnc264uw6xxh sf9Wm+a7Ps+mIQaa54mHqTHK0aYj1dSS0qQ10WESgBF9sgIziyAF30hs4br328TD bDQ6OCFFEkse5FJwRjKnzkdBIPVwgAe7wSwH3SlcH3fMp0d6X6s+AaoWPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNXiJqzKy8J/fbS+oVlB+z1dZfSjMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvMWVJbXJNckx3bjk5dEw2aFdVSDdQVjFsOUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSDg4MA0G CSqGSIb3DQEBCwUAA4IBAQCfZMcGz7MCmalLSnAbZhVt5qdHsHsxNpGoxXHUju41 6OfHlJwb0EebYAXgRTt99UAnSWjb6gJywQrVgpFP8ryo96eRx11vtRZ+UJRE/+wO aCQqu1a0JEwJ3Y30qAq6JigAJCllyGj8fa9f3UJvH94zhZdcGQS665fgTI2E1trx LgZsMBrDQrKfstTrz9azZGrdJ/ggQHDNjzC2aS6GuO2CfBefr8F9EXreafYiDxvS /P1B+xWHrnEqdZyTgL+aXOQwgcZ2kOpS39NKMjDcsW068q6ZCQe9eqlPMvmwHG/m IjykwMS7x7AP0ZGOpRxUeu1/dlGo247Bo7YDafexqdXo -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:41 2026 by rpki-client