This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa File: 1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa (raw, json) Hash identifier: 9hRMwF9OzYcY4aoj5DqpON+f2xbb5moy11vfbRHpWD8= Subject key identifier: D5:25:F2:37:4C:9F:85:3E:5C:49:D8:BD:0B:D3:49:E3:DA:46:BB:84 Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Certificate serial: 019B7DCA889716F99DC5A1CF7E9E495D7797 Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa Signing time: Fri 02 Jan 2026 08:19:43 +0000 ROA not before: Fri 02 Jan 2026 08:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56449 IP address blocks: 91.225.156.0/24 maxlen: 24 91.225.157.0/24 maxlen: 24 91.225.158.0/24 maxlen: 24 91.225.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:88:97:16:f9:9d:c5:a1:cf:7e:9e:49:5d:77:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d525f2374c9f853e5c49d8bd0bd349e3da46bb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:0a:d2:ab:c8:46:87:c2:11:f8:27:3d:d7: b0:3a:8b:7b:c2:25:ed:87:b2:e1:e3:62:e1:5e:66: 95:39:88:55:4e:b6:c5:f9:72:ee:a4:dd:9c:a8:eb: 3d:9a:01:f3:e2:3a:fc:8e:22:4b:92:34:6c:ef:bb: a8:0b:60:00:8d:c5:da:bf:09:be:9b:8e:90:cc:86: ca:9d:d5:f0:b7:c7:60:73:7d:ba:7c:6f:98:fa:9a: 3b:87:72:be:b0:d2:2f:a2:5d:8d:4d:b1:8f:94:6f: 36:33:6e:a1:73:25:f7:dc:51:73:58:95:1e:ec:d1: bc:c2:73:31:f5:15:a5:42:3d:6d:bb:ee:21:1b:f3: af:19:7e:62:f4:19:5f:ed:81:ca:df:2f:98:8e:dd: 8e:f9:21:56:9e:2f:b4:0e:7e:26:f8:0f:28:31:78: 11:41:9f:c1:a9:a2:5a:03:5c:c2:6b:7d:3c:1b:13: da:4f:64:b7:72:59:1f:82:13:4d:7a:38:c3:73:a1: e3:d3:85:aa:23:4a:d1:3e:c9:02:2f:f6:8a:62:4d: 7a:59:56:8e:0d:7c:cc:6b:de:5c:53:4c:63:f7:a1: 3e:48:67:5b:40:4c:d1:3a:69:73:a8:09:cd:53:ee: 73:49:52:f2:16:01:40:ac:6b:a9:9a:66:85:42:dd: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:25:F2:37:4C:9F:85:3E:5C:49:D8:BD:0B:D3:49:E3:DA:46:BB:84 X509v3 Authority Key Identifier: keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/1SXyN0yfhT5cSdi9C9NJ49pGu4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.156.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:9a:9f:30:f1:a6:26:84:2e:82:b7:78:27:15:96:e9:f2:9b: 3b:38:fb:12:99:fc:6d:64:0a:87:3d:50:fb:6c:34:5f:d3:39: 87:d2:63:fa:3f:2a:50:a4:6f:ce:5c:e0:c6:bf:ce:88:91:dd: 25:bf:f3:ba:16:0a:ee:63:1b:09:4e:9a:a9:f7:af:d4:5c:6b: b5:8a:6e:04:1d:7a:b9:c6:c4:9d:95:17:5c:88:d8:87:5c:58: 54:7c:e9:42:f4:b4:b2:5a:27:3a:46:64:10:af:13:85:48:e0: 3b:4c:28:bd:ad:12:38:71:50:2d:81:df:65:f0:0a:0c:ab:19: cc:68:2d:4a:31:eb:40:62:f4:5d:69:c1:a2:29:6f:bb:be:ce: 06:ef:f1:51:b8:37:f2:42:1c:2b:d9:6e:51:af:a1:17:66:1d: 01:04:c9:4b:cf:66:52:33:7f:e9:9a:9c:c1:ff:10:44:5c:9a: 95:bd:03:99:bb:09:af:ec:3e:21:8d:2e:bd:11:fc:25:5b:13: ef:ed:56:17:86:93:bc:f5:f0:0c:90:2c:7d:c4:37:2a:6c:58: c0:85:b2:90:2a:dc:ab:8b:a8:19:0b:22:e3:8f:d5:e8:ef:ce: e4:de:97:c5:5c:10:c1:dc:66:98:73:f4:92:8d:30:83:9d:01: 0d:7f:4e:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoiXFvmdxaHPfp5JXXeXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWE0YTQyOTVjNjM4ZmRlNzYwZjNjZGE0NzZkOGJmYzI3 MTEyYjIwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTI1ZjIzNzRjOWY4NTNlNWM0OWQ4YmQwYmQzNDllM2RhNDZiYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBgK0qvIRofCEfgnPdewOot7wiXt h7Lh42LhXmaVOYhVTrbF+XLupN2cqOs9mgHz4jr8jiJLkjRs77uoC2AAjcXavwm+ m46QzIbKndXwt8dgc326fG+Y+po7h3K+sNIvol2NTbGPlG82M26hcyX33FFzWJUe 7NG8wnMx9RWlQj1tu+4hG/OvGX5i9Blf7YHK3y+Yjt2O+SFWni+0Dn4m+A8oMXgR QZ/BqaJaA1zCa308GxPaT2S3clkfghNNejjDc6Hj04WqI0rRPskCL/aKYk16WVaO DXzMa95cU0xj96E+SGdbQEzROmlzqAnNU+5zSVLyFgFArGupmmaFQt2NmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUl8jdMn4U+XEnYvQvTSePaRruEMB8GA1UdIwQY MBaAFHeaSkKVxjj952DzzaR22L/CcRKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2Qt NjJjNjdkNGJjNTQ2LzEvMVNYeU4weWZoVDVjU2RpOUM5Tko0OXBHdTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2QtNjJjNjdkNGJjNTQ2 LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+GcMA0G CSqGSIb3DQEBCwUAA4IBAQAPmp8w8aYmhC6Ct3gnFZbp8ps7OPsSmfxtZAqHPVD7 bDRf0zmH0mP6PypQpG/OXODGv86Ikd0lv/O6FgruYxsJTpqp96/UXGu1im4EHXq5 xsSdlRdciNiHXFhUfOlC9LSyWic6RmQQrxOFSOA7TCi9rRI4cVAtgd9l8AoMqxnM aC1KMetAYvRdacGiKW+7vs4G7/FRuDfyQhwr2W5Rr6EXZh0BBMlLz2ZSM3/pmpzB /xBEXJqVvQOZuwmv7D4hjS69EfwlWxPv7VYXhpO89fAMkCx9xDcqbFjAhbKQKtyr i6gZCyLjj9Xo787k3pfFXBDB3GaYc/SSjTCDnQENf04b -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:23 2026 by rpki-client