This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/sjaWnKgR4KYE3FWVCkt54BFY5xg.roa File: sjaWnKgR4KYE3FWVCkt54BFY5xg.roa (raw, json) Hash identifier: t4iNpEa0vYTkAVMK8ULQMcGfGbwYLAkd2hEnZ0oiqB4= Subject key identifier: B2:36:96:9C:A8:11:E0:A6:04:DC:55:95:0A:4B:79:E0:11:58:E7:18 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75630B9202144993E36B2BF54C742 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/sjaWnKgR4KYE3FWVCkt54BFY5xg.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8443 IP address blocks: 91.147.36.0/22 maxlen: 22 93.177.0.0/18 maxlen: 18 95.159.128.0/18 maxlen: 18 95.159.174.0/23 maxlen: 23 95.159.182.0/23 maxlen: 23 195.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:56:30:b9:20:21:44:99:3e:36:b2:bf:54:c7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b236969ca811e0a604dc55950a4b79e01158e718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:88:dd:f9:07:53:6a:50:9f:ec:a3:7f:59: a0:e6:15:78:60:1f:8a:b8:e9:ae:ba:1a:ff:ae:5b: 2a:eb:df:58:4e:cf:1b:e0:a8:2d:b0:19:a4:8d:87: cd:22:33:52:07:2d:e1:15:de:f7:75:6c:a3:f3:2e: 13:65:f9:35:31:a9:23:98:ca:6c:0b:f5:85:25:23: c1:84:7a:66:99:8f:6b:8c:3e:ac:06:20:f3:c4:86: 43:15:a8:c7:b2:1b:54:14:ce:5b:c0:cf:50:c0:2c: d6:8d:b7:d2:49:34:c4:ed:9a:84:3a:fb:eb:50:fa: 15:41:8e:a0:7a:d2:96:18:72:ef:45:cb:a6:bc:00: aa:af:bb:d4:f7:c1:4b:a0:fc:d1:cf:8b:57:7f:99: ad:f6:dc:d0:c9:70:fb:b8:2b:93:1d:f2:05:79:63: b7:53:a2:d8:9c:d5:fd:99:d3:9e:6a:83:e1:c8:67: 47:e5:43:be:fc:92:df:e0:80:35:2f:f1:43:67:87: 55:5c:01:92:29:53:bb:ab:10:b4:61:21:32:66:11: f5:9c:95:c9:58:6b:c3:da:8e:00:2c:d8:d1:85:6f: 81:4d:ed:d5:14:3f:9f:bd:28:d0:b7:db:c6:f4:c7: 66:7f:aa:58:11:b5:c1:e6:38:4e:e2:c7:2f:c0:b5: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:96:9C:A8:11:E0:A6:04:DC:55:95:0A:4B:79:E0:11:58:E7:18 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/sjaWnKgR4KYE3FWVCkt54BFY5xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.147.36.0/22 93.177.0.0/18 95.159.128.0/18 195.72.224.0/19 Signature Algorithm: sha256WithRSAEncryption 09:8f:76:1f:59:d9:35:ea:db:41:42:a1:28:79:a2:31:7d:6f: ae:dc:3a:af:82:14:6b:22:b1:d3:e6:a5:bf:3f:5a:78:61:d0: 6c:ac:b0:de:2f:da:b2:81:ca:56:ea:68:b0:e9:e5:d4:87:d7: 6c:15:5a:b6:f0:65:b0:c4:a7:41:a3:37:5d:a7:86:e9:f7:d6: a6:53:5e:cc:ba:7a:83:f8:54:b9:d8:e9:a1:93:f4:c1:c7:37: 3d:0f:12:4a:90:44:1b:b8:07:09:59:b6:6a:04:a5:77:5b:eb: ca:be:2e:11:25:cf:f5:8d:25:45:2d:22:47:a0:a3:59:e7:80: e9:08:94:3f:e7:58:7e:d3:4a:6f:bb:5e:57:e4:cf:90:79:8f: 4b:80:e8:e1:04:d7:44:99:9f:79:b9:09:4f:3c:15:f0:b9:5f: 94:11:e5:be:ad:04:41:15:29:b8:dd:a5:d6:61:d1:07:e4:d0: 52:55:7d:65:d8:4f:49:a2:28:b1:4c:e5:93:d1:56:ea:27:e1: 90:c0:83:bb:ec:d1:71:aa:a7:44:6a:9a:95:ff:e3:63:29:9d: 68:88:77:99:c7:4b:c7:c8:0d:c3:63:42:c1:14:a5:c2:0b:d3: 2d:b3:2c:a6:9f:d7:94:66:21:90:a5:d2:1f:7d:a7:a7:cb:fd: 41:22:81:59 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+p1YwuSAhRJk+NrK/VMdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjM2OTY5Y2E4MTFlMGE2MDRkYzU1OTUwYTRiNzllMDExNThlNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3OI3fkHU2pQn+yjf1mg5hV4YB+K uOmuuhr/rlsq699YTs8b4KgtsBmkjYfNIjNSBy3hFd73dWyj8y4TZfk1MakjmMps C/WFJSPBhHpmmY9rjD6sBiDzxIZDFajHshtUFM5bwM9QwCzWjbfSSTTE7ZqEOvvr UPoVQY6getKWGHLvRcumvACqr7vU98FLoPzRz4tXf5mt9tzQyXD7uCuTHfIFeWO3 U6LYnNX9mdOeaoPhyGdH5UO+/JLf4IA1L/FDZ4dVXAGSKVO7qxC0YSEyZhH1nJXJ WGvD2o4ALNjRhW+BTe3VFD+fvSjQt9vG9Mdmf6pYEbXB5jhO4scvwLU5UQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLI2lpyoEeCmBNxVlQpLeeARWOcYMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvc2phV25LZ1I0S1lFM0ZXVkNrdDU0QkZZNXhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW5MkAwQG XbEAAwQGX5+AAwQFw0jgMA0GCSqGSIb3DQEBCwUAA4IBAQAJj3YfWdk16ttBQqEo eaIxfW+u3DqvghRrIrHT5qW/P1p4YdBsrLDeL9qygcpW6miw6eXUh9dsFVq28GWw xKdBozddp4bp99amU17MunqD+FS52Omhk/TBxzc9DxJKkEQbuAcJWbZqBKV3W+vK vi4RJc/1jSVFLSJHoKNZ54DpCJQ/51h+00pvu15X5M+QeY9LgOjhBNdEmZ95uQlP PBXwuV+UEeW+rQRBFSm43aXWYdEH5NBSVX1l2E9JoiixTOWT0VbqJ+GQwIO77NFx qqdEapqV/+NjKZ1oiHeZx0vHyA3DY0LBFKXCC9Mtsyymn9eUZiGQpdIffaeny/1B IoFZ -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:21 2026 by rpki-client