This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa File: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (raw, json) Hash identifier: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU= Subject key identifier: F9:89:C6:F3:6F:A3:F8:5A:E3:A2:E1:39:1F:86:61:3F:82:5D:F6:85 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B7F823A2377A57D0ECD7EDD7667C43407 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa Signing time: Fri 02 Jan 2026 16:19:59 +0000 ROA not before: Fri 02 Jan 2026 16:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6693 IP address blocks: 92.87.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3a:23:77:a5:7d:0e:cd:7e:dd:76:67:c4:34:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 2 16:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f989c6f36fa3f85ae3a2e1391f86613f825df685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:63:7c:60:bc:03:6b:68:a7:ce:5a:0f:f7: 47:f3:9c:73:7a:07:0e:d5:74:96:66:16:82:f7:e8: a3:e3:72:1a:67:63:5d:c0:7d:c8:6a:06:28:11:8a: 2b:6d:3e:27:c3:f1:e7:84:c1:62:98:11:5e:f6:c6: dd:8b:70:56:99:11:32:a5:87:53:dc:0a:dc:fb:6d: 17:40:50:b6:cb:bb:21:a6:a2:f7:59:0b:60:6b:39: f6:31:99:95:5a:69:a1:05:21:d3:21:99:37:44:2a: 33:fe:6b:6a:21:c7:0f:13:63:d5:d3:fb:a9:cf:44: 3d:95:2b:24:c3:6e:08:15:b9:7f:f5:f9:cf:67:39: 8e:c7:17:d9:13:a3:bd:46:7f:d3:a8:f2:cc:b4:68: 21:3f:e7:2b:06:44:14:4d:7c:97:42:ca:dd:f8:be: 7c:75:08:7e:e9:df:0a:00:5a:e7:ff:f4:f2:b0:55: bd:d9:a1:13:36:4d:38:65:12:f3:47:1d:a8:3e:b6: ca:65:31:8f:34:85:18:8b:4d:b1:1f:8a:ec:a7:24: 7c:f8:66:0f:55:39:cf:76:06:ee:7f:c8:59:95:8a: e3:c2:3c:a1:1e:df:de:89:a2:fb:04:4e:1c:2b:7b: 3e:13:17:b8:1a:3f:f3:1a:4b:52:4d:38:21:c7:ba: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:89:C6:F3:6F:A3:F8:5A:E3:A2:E1:39:1F:86:61:3F:82:5D:F6:85 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.87.204.0/24 Signature Algorithm: sha256WithRSAEncryption 67:1d:ed:7a:20:a9:18:a6:c0:fd:8c:05:0a:2b:71:c8:e3:17: 03:3c:35:69:c1:7f:1c:af:31:8e:54:49:56:ae:37:47:76:e2: 48:9d:61:20:6f:03:7a:5e:1a:93:22:c6:9a:86:b8:bb:37:93: 23:98:87:1e:37:df:06:fa:ff:da:5d:99:ce:50:e7:db:c2:20: 85:cb:64:93:e1:60:a8:0d:97:24:b9:07:4c:22:f7:c2:15:10: b9:5a:45:75:1b:fa:63:a9:77:3a:ef:f1:aa:74:a2:9c:2a:ba: 66:12:64:b3:fb:7b:b1:9f:dd:87:3c:f0:fc:9e:ff:fe:79:a8: 92:7d:cb:6f:fb:b5:4a:14:77:bf:ec:2d:93:b2:50:ef:62:b5: 22:3c:3d:be:2f:49:64:4b:cd:e6:cd:93:d3:56:b2:bf:42:b4: 40:63:c0:8e:1a:a5:d4:dc:f1:b8:05:32:35:15:1d:43:b6:ee: da:4d:88:c7:6f:a5:19:b8:16:78:32:3c:c5:54:27:63:f5:4e: 41:a9:f7:19:fe:61:e8:b5:4f:5d:2a:a2:a0:39:99:80:d8:05: 05:e8:ad:0e:4a:d0:34:4d:28:08:ba:95:43:29:32:d7:ab:98: 7c:d2:55:a8:2d:96:9e:c6:00:cc:a7:34:aa:e3:a6:35:7a:7c: b0:a5:65:ce -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/gjojd6V9Ds1+3XZnxDQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTAyMTYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTg5YzZmMzZmYTNmODVhZTNhMmUxMzkxZjg2NjEzZjgyNWRmNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVVjfGC8A2top85aD/dH85xzegcO 1XSWZhaC9+ij43IaZ2NdwH3IagYoEYorbT4nw/HnhMFimBFe9sbdi3BWmREypYdT 3Arc+20XQFC2y7shpqL3WQtgazn2MZmVWmmhBSHTIZk3RCoz/mtqIccPE2PV0/up z0Q9lSskw24IFbl/9fnPZzmOxxfZE6O9Rn/TqPLMtGghP+crBkQUTXyXQsrd+L58 dQh+6d8KAFrn//TysFW92aETNk04ZRLzRx2oPrbKZTGPNIUYi02xH4rspyR8+GYP VTnPdgbuf8hZlYrjwjyhHt/eiaL7BE4cK3s+Exe4Gj/zGktSTTghx7oDPwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmJxvNvo/ha46LhOR+GYT+CXfaFMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvMS1Zbkc4Mi1qLUZyam91RTVINFpoUDRKZDlvVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmMvNWNiNDU0LTdiZWUtNGU1ZC1iMjk1LTk0MjQ4MmY4ZDJl YS8xL1ZDbHRJOTcweUZJY1pIM0dpc3M4RWo5aEhZay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFxXzDAN BgkqhkiG9w0BAQsFAAOCAQEAZx3teiCpGKbA/YwFCitxyOMXAzw1acF/HK8xjlRJ Vq43R3biSJ1hIG8Del4akyLGmoa4uzeTI5iHHjffBvr/2l2ZzlDn28Ighctkk+Fg qA2XJLkHTCL3whUQuVpFdRv6Y6l3Ou/xqnSinCq6ZhJks/t7sZ/dhzzw/J7//nmo kn3Lb/u1ShR3v+wtk7JQ72K1Ijw9vi9JZEvN5s2T01ayv0K0QGPAjhql1NzxuAUy NRUdQ7bu2k2Ix2+lGbgWeDI8xVQnY/VOQan3Gf5h6LVPXSqioDmZgNgFBeitDkrQ NE0oCLqVQyky16uYfNJVqC2WnsYAzKc0quOmNXp8sKVlzg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:47 2026 by rpki-client