This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/1-l_Tvv8bwfQF7A1LSsvfeyqRDJs.roa File: 1-l_Tvv8bwfQF7A1LSsvfeyqRDJs.roa (raw, json) Hash identifier: LFWWbBQi+75Z1LKfVRLZ5WcspH2mWTQHRkSS/kiDDGA= Subject key identifier: FA:5F:D3:BE:FF:1B:C1:F4:05:EC:0D:4B:4A:CB:DF:7B:2A:91:0C:9B Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 019B797E330D02EA7C4EE65F97343C1FE3DD Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/1-l_Tvv8bwfQF7A1LSsvfeyqRDJs.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34012 IP address blocks: 162.248.199.0/24 maxlen: 24 162.251.33.0/24 maxlen: 24 2a01:40e0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:33:0d:02:ea:7c:4e:e6:5f:97:34:3c:1f:e3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa5fd3beff1bc1f405ec0d4b4acbdf7b2a910c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9a:9f:ec:17:03:c3:e3:40:6c:c1:15:91:19: 3b:6e:30:c4:a5:f6:e1:95:62:c4:2d:28:9f:b1:ad: 2c:73:2d:75:17:ab:18:d1:30:a0:09:37:3c:7f:b6: af:52:dc:40:39:cb:8c:d0:d6:44:08:0c:fb:9b:7e: 62:ab:46:80:9c:23:f5:f8:33:8e:7f:9d:c4:fe:55: 6a:7e:2b:52:25:8e:1a:ad:97:9e:ea:c7:43:d6:60: 57:14:24:d7:ae:f5:5b:aa:7f:4f:d3:32:e1:0c:dd: d1:cb:52:f8:5e:7b:1e:0c:36:ae:58:16:d9:04:96: 0b:01:0c:77:34:ad:99:33:c4:6b:85:96:81:dc:91: ff:ed:85:df:0c:8a:ae:d9:f9:06:0a:35:d4:51:a9: 61:50:e2:8e:9e:3f:8b:7a:c7:37:41:4a:0f:e7:47: 38:1e:ca:03:95:6e:cc:bc:db:f5:b2:e6:3e:ea:2d: cc:ad:cf:84:f3:fa:ee:2d:58:07:85:43:c2:a4:3f: 57:9b:62:10:c2:6d:a5:85:08:91:72:23:32:42:ba: fe:99:66:6e:58:72:1d:03:0d:be:71:66:a7:de:6d: a0:68:99:d9:6a:48:31:1c:ee:dc:11:ea:de:f1:d2: 0b:a9:29:ce:aa:f3:4b:11:c4:8c:76:0d:d6:b2:fc: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5F:D3:BE:FF:1B:C1:F4:05:EC:0D:4B:4A:CB:DF:7B:2A:91:0C:9B X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/1-l_Tvv8bwfQF7A1LSsvfeyqRDJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.248.199.0/24 162.251.33.0/24 IPv6: 2a01:40e0:2::/48 Signature Algorithm: sha256WithRSAEncryption 88:55:8e:28:ac:8f:ca:e6:f8:0e:83:91:88:b9:1c:e4:88:12: 70:fb:5b:9b:3d:1a:cc:a1:a7:5a:0a:d6:bc:c6:63:4d:90:13: 16:95:4a:d9:cf:93:d3:a7:c3:a5:0b:ba:1a:2e:a0:78:c6:79: 9e:0c:17:c5:8f:2f:33:7e:87:95:88:0b:82:a2:56:74:ba:91: d7:33:8d:9b:ee:14:c0:d9:29:c4:3a:77:0c:2d:14:a9:be:48: 46:c7:9b:96:d7:93:78:ad:97:c7:91:49:5c:20:4d:cb:5a:03: fc:1a:82:dc:08:14:39:f7:06:28:c9:4e:d1:17:8d:6e:64:81: 67:9d:e1:1d:52:1a:9a:9c:a8:1e:ae:9f:98:7f:1c:f4:ed:b5: 60:f6:02:61:52:db:7c:c3:91:43:13:14:f8:a0:92:aa:54:70: b8:40:59:ab:47:6a:83:5a:58:44:c0:66:d0:5d:ba:35:38:5c: 23:38:01:8e:10:97:f6:1d:91:29:68:6a:b9:3b:02:d1:6f:d5: 11:6f:93:9a:77:e3:59:83:e4:2c:99:98:b0:3b:2a:82:d6:13: bb:6c:cf:7a:78:ea:fa:07:0f:8d:da:5b:f1:bd:0a:c1:0a:b5: 3b:29:80:c4:93:9e:20:20:64:4a:a0:80:01:4b:b9:15:3b:0d: 01:25:4e:38 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fjMNAup8TuZflzQ8H+PdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTVmZDNiZWZmMWJjMWY0MDVlYzBkNGI0YWNiZGY3YjJhOTEwYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5qf7BcDw+NAbMEVkRk7bjDEpfbh lWLELSifsa0scy11F6sY0TCgCTc8f7avUtxAOcuM0NZECAz7m35iq0aAnCP1+DOO f53E/lVqfitSJY4arZee6sdD1mBXFCTXrvVbqn9P0zLhDN3Ry1L4XnseDDauWBbZ BJYLAQx3NK2ZM8RrhZaB3JH/7YXfDIqu2fkGCjXUUalhUOKOnj+Lesc3QUoP50c4 HsoDlW7MvNv1suY+6i3Mrc+E8/ruLVgHhUPCpD9Xm2IQwm2lhQiRciMyQrr+mWZu WHIdAw2+cWan3m2gaJnZakgxHO7cEere8dILqSnOqvNLEcSMdg3WsvwLTwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPpf077/G8H0BewNS0rL33sqkQybMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvMS1sX1R2djhid2ZRRjdBMUxTc3ZmZXlxUkRKcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTUvYzRlNWEwLTgyMTktNGZmOS04Mjg3LTFmNGJlYTIzZTRj Ny8xL0FXSnZfWUFPcjZNMnZmTkRGQjhEOThPVHcyUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAKL4xwME AKL7ITAPBAIAAjAJAwcAKgFA4AACMA0GCSqGSIb3DQEBCwUAA4IBAQCIVY4orI/K 5vgOg5GIuRzkiBJw+1ubPRrMoadaCta8xmNNkBMWlUrZz5PTp8OlC7oaLqB4xnme DBfFjy8zfoeViAuColZ0upHXM42b7hTA2SnEOncMLRSpvkhGx5uW15N4rZfHkUlc IE3LWgP8GoLcCBQ59wYoyU7RF41uZIFnneEdUhqanKgerp+Yfxz07bVg9gJhUtt8 w5FDExT4oJKqVHC4QFmrR2qDWlhEwGbQXbo1OFwjOAGOEJf2HZEpaGq5OwLRb9UR b5Oad+NZg+QsmZiwOyqC1hO7bM96eOr6Bw+N2lvxvQrBCrU7KYDEk54gIGRKoIAB S7kVOw0BJU44 -----END CERTIFICATE-----Generated at Thu Jan 1 17:28:24 2026 by rpki-client