This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa File: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (raw, json) Hash identifier: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I= Subject key identifier: 8D:9D:5B:25:21:2C:EE:82:31:A9:3B:23:D1:7A:F9:09:15:2E:C9:53 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135CD84B2C4EFFA79D6C993E742F99 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39527 IP address blocks: 93.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5c:d8:4b:2c:4e:ff:a7:9d:6c:99:3e:74:2f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d9d5b25212cee8231a93b23d17af909152ec953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:63:3a:0f:b1:a8:31:b6:d8:eb:32:b6:4d: d8:9c:44:23:ad:9b:7c:c6:bc:62:de:c2:3d:85:dd: 2a:a7:8c:1b:c7:a1:2a:2a:44:79:e8:1e:97:6a:87: 72:f5:2a:be:f4:aa:cf:8e:90:b7:f0:ed:da:40:81: 1d:0c:94:5c:81:2c:49:a5:df:1e:39:c5:22:77:5b: e6:df:8e:91:02:a0:43:dc:5b:45:66:5e:b8:ad:07: 01:4e:6a:75:6c:c5:24:3e:a7:c0:86:d5:c6:49:99: 05:f1:73:ba:1f:35:3a:ba:20:c2:b3:90:c8:32:c0: 93:27:47:6d:37:05:6c:cd:c7:d1:e4:31:da:2a:0c: 3d:d0:a5:c8:ad:62:af:7d:9a:7d:92:f2:74:92:55: 54:25:cf:d3:6f:ad:8a:1b:9c:31:5d:b0:23:45:a4: b8:f9:3c:60:1f:fe:38:67:e2:13:8c:40:52:24:1a: 1a:ab:e0:23:5c:62:f8:36:69:ec:f4:68:bd:ba:f6: ed:c2:a9:5c:2d:5d:fe:04:ed:47:35:3a:15:c4:06: bf:b5:04:1e:95:ab:3b:eb:dd:f1:0b:a7:ab:f8:58: 4f:62:c2:4c:e3:48:0c:fe:0f:12:7c:07:75:2c:ff: e8:a8:04:e8:1d:ae:77:5f:41:d5:12:4b:a4:ce:d8: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9D:5B:25:21:2C:EE:82:31:A9:3B:23:D1:7A:F9:09:15:2E:C9:53 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.128.0/24 Signature Algorithm: sha256WithRSAEncryption 65:cb:5a:1e:15:83:fa:e8:85:aa:bd:26:ee:ed:83:f4:53:71: 96:bc:d5:fd:b3:3b:ad:86:a2:1d:b2:55:cc:a7:b1:f0:59:07: 2e:b4:ce:b3:a7:8a:e0:5e:a9:81:6e:52:5d:b4:20:4f:81:8d: 73:b1:a2:dd:43:94:42:a1:58:bc:4b:8b:04:a4:4e:2b:8b:fe: af:2d:c8:7f:34:09:bf:5e:f8:8d:18:b6:32:92:32:ea:06:76: 9f:0d:6d:1c:5d:83:d9:80:1c:99:13:f9:40:ad:75:89:f3:7f: 1e:24:7e:94:1e:47:6c:08:d2:16:96:0a:b9:99:a4:5e:e8:12: f2:d3:3f:33:6b:b2:08:aa:16:ea:67:67:ef:d9:ba:0a:d9:e6: 73:ba:51:c8:e3:fd:12:23:2b:a1:b8:84:ae:54:9a:74:87:e1: e4:85:cd:6e:1b:82:3e:64:b0:0b:f4:a1:61:0d:f6:bb:3c:af: 05:fa:75:5c:4a:d9:db:01:3a:b8:6f:8f:15:9f:5b:fe:c7:a3: 2e:12:b3:f0:3e:93:b3:10:56:65:51:a8:f0:aa:c2:a3:e1:8d: 1c:51:a2:3b:c1:0e:5a:b6:1f:c5:8a:ed:fc:b7:0e:e5:83:87: ff:a6:55:b5:91:44:5c:ae:bf:6c:bb:9f:15:e5:e8:54:3e:c5: 12:92:9a:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1zYSyxO/6edbJk+dC+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDlkNWIyNTIxMmNlZTgyMzFhOTNiMjNkMTdhZjkwOTE1MmVjOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL1jOg+xqDG22Osytk3YnEQjrZt8 xrxi3sI9hd0qp4wbx6EqKkR56B6Xaody9Sq+9KrPjpC38O3aQIEdDJRcgSxJpd8e OcUid1vm346RAqBD3FtFZl64rQcBTmp1bMUkPqfAhtXGSZkF8XO6HzU6uiDCs5DI MsCTJ0dtNwVszcfR5DHaKgw90KXIrWKvfZp9kvJ0klVUJc/Tb62KG5wxXbAjRaS4 +TxgH/44Z+ITjEBSJBoaq+AjXGL4Nmns9Gi9uvbtwqlcLV3+BO1HNToVxAa/tQQe las7693xC6er+FhPYsJM40gM/g8SfAd1LP/oqAToHa53X0HVEkukztg56QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2dWyUhLO6CMak7I9F6+QkVLslTMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvaloxYkpTRXM3b0l4cVRzajBYcjVDUlV1eVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXGAMA0G CSqGSIb3DQEBCwUAA4IBAQBly1oeFYP66IWqvSbu7YP0U3GWvNX9szuthqIdslXM p7HwWQcutM6zp4rgXqmBblJdtCBPgY1zsaLdQ5RCoVi8S4sEpE4ri/6vLch/NAm/ XviNGLYykjLqBnafDW0cXYPZgByZE/lArXWJ838eJH6UHkdsCNIWlgq5maRe6BLy 0z8za7IIqhbqZ2fv2boK2eZzulHI4/0SIyuhuISuVJp0h+Hkhc1uG4I+ZLAL9KFh Dfa7PK8F+nVcStnbATq4b48Vn1v+x6MuErPwPpOzEFZlUajwqsKj4Y0cUaI7wQ5a th/Fiu38tw7lg4f/plW1kURcrr9su58V5ehUPsUSkprS -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:54 2026 by rpki-client