This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/1-MPmKwveaNevahCbJELRJOmxcEw.roa File: 1-MPmKwveaNevahCbJELRJOmxcEw.roa (raw, json) Hash identifier: SJAbLycNC0JaVjQXy09rkhGA2yxjxemr+0WDUIZ9wv4= Subject key identifier: F8:C3:E6:2B:0B:DE:68:D7:AF:6A:10:9B:24:42:D1:24:E9:B1:70:4C Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Certificate serial: 019B7DCA473DA58BA1DFE2A1764EDDB963D4 Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/1-MPmKwveaNevahCbJELRJOmxcEw.roa Signing time: Fri 02 Jan 2026 08:19:27 +0000 ROA not before: Fri 02 Jan 2026 08:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.102.184.0/24 maxlen: 24 91.102.185.0/24 maxlen: 24 91.102.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:47:3d:a5:8b:a1:df:e2:a1:76:4e:dd:b9:63:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Validity Not Before: Jan 2 08:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8c3e62b0bde68d7af6a109b2442d124e9b1704c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:5e:cf:2a:bb:0c:8d:77:e0:54:bd:49:25: 3b:7e:9a:e6:f3:c5:2a:c6:7b:9a:23:dd:96:30:cc: 5c:d2:45:68:cf:b9:50:5f:1f:53:58:18:ac:9f:5a: 07:92:35:65:ae:05:eb:fa:bb:a6:71:a4:de:15:7f: a8:40:3d:9b:6b:a7:94:80:38:d7:3d:cb:57:b4:34: 60:d9:c5:9e:e2:34:82:3a:6c:17:3a:b0:20:b0:79: 89:75:b8:bd:55:c4:0c:d6:8e:2b:13:bc:28:c1:69: 4e:76:3f:d0:8f:13:2c:dd:4d:b9:ce:d7:c9:5d:c4: e8:07:99:b9:49:26:3b:c9:5f:7b:5a:16:16:a0:d8: bc:90:c3:84:1f:56:ba:95:fd:f8:78:52:6a:fe:e1: 0e:fa:b8:23:e1:55:97:f3:ac:9d:bb:1d:aa:dc:37: e1:8b:3c:b0:cf:02:4e:60:4d:f9:db:06:77:37:83: bf:d8:bd:a7:96:39:04:75:c3:34:89:e8:44:e1:68: f6:af:5b:78:85:64:92:0e:3a:e8:d4:c9:e1:4d:e5: fd:2d:12:c5:91:d2:f5:64:eb:3d:98:dd:42:2a:71: 04:7c:1d:2c:9e:8e:a5:82:74:ee:39:4f:b1:bd:5b: 95:50:4e:c6:7d:d5:48:f3:d9:cc:28:67:57:fe:9d: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C3:E6:2B:0B:DE:68:D7:AF:6A:10:9B:24:42:D1:24:E9:B1:70:4C X509v3 Authority Key Identifier: keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/1-MPmKwveaNevahCbJELRJOmxcEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.184.0-91.102.186.255 Signature Algorithm: sha256WithRSAEncryption 16:90:3e:f3:21:f8:c2:34:6e:35:78:1f:32:11:67:fc:00:b0: 2c:3b:54:6d:ba:3b:3a:ec:5f:ea:c9:16:1d:a5:9f:75:87:fd: 82:d0:3b:ec:42:37:fa:fb:bc:87:67:c7:ed:a8:57:e7:51:65: b2:ba:3b:e2:1f:9d:02:f6:f6:40:01:22:91:a9:a4:c8:e3:f6: b0:bc:d2:62:a2:dc:44:0c:53:d8:b1:ae:5a:c5:c6:14:3f:6f: 82:28:2d:16:49:6e:f1:7e:75:55:ac:23:0c:a3:d0:52:86:bb: 85:47:5b:fb:43:eb:b7:81:99:d6:e7:e2:bf:68:08:d5:2c:62: f6:a9:88:36:4a:5f:88:95:8e:b9:39:b0:34:42:8a:02:27:7f: 33:bc:7a:e5:04:10:bd:45:11:a9:9c:f0:71:3d:99:a3:51:ae: 32:15:16:52:b5:2c:8f:5f:74:97:c2:75:26:b6:57:29:20:15: 9d:e3:4b:32:36:76:da:b2:2d:f8:fe:96:f6:fe:52:00:60:57: f6:1c:3c:eb:d5:e1:90:4f:70:17:c6:9d:4e:53:ba:da:bb:b2: f4:fa:ea:5e:4b:d8:2e:4e:64:f1:3b:14:39:fe:25:22:f3:28: c0:15:84:80:ac:82:e0:1a:70:ef:a1:0d:08:58:4b:d4:99:3f: dd:18:29:4b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt9ykc9pYuh3+Khdk7duWPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4 YzJkM2IwHhcNMjYwMTAyMDgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGMzZTYyYjBiZGU2OGQ3YWY2YTEwOWIyNDQyZDEyNGU5YjE3MDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudVezyq7DI134FS9SSU7fprm88Uq xnuaI92WMMxc0kVoz7lQXx9TWBisn1oHkjVlrgXr+rumcaTeFX+oQD2ba6eUgDjX PctXtDRg2cWe4jSCOmwXOrAgsHmJdbi9VcQM1o4rE7wowWlOdj/QjxMs3U25ztfJ XcToB5m5SSY7yV97WhYWoNi8kMOEH1a6lf34eFJq/uEO+rgj4VWX86ydux2q3Dfh izywzwJOYE352wZ3N4O/2L2nljkEdcM0iehE4Wj2r1t4hWSSDjro1MnhTeX9LRLF kdL1ZOs9mN1CKnEEfB0sno6lgnTuOU+xvVuVUE7GfdVI89nMKGdX/p2jKQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPjD5isL3mjXr2oQmyRC0STpsXBMMB8GA1UdIwQY MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt MTU1ZmIzZmUyODdlLzEvMS1NUG1Ld3ZlYU5ldmFoQ2JKRUxSSk9teGNFdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTcvN2E2ODNiLWZhNzgtNDExMi1iNmI2LTE1NWZiM2ZlMjg3 ZS8xL3pzT3pSNklXdkVON0M5VFBDOGpOcGw2TUxUcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDW2a4 AwQAW2a6MA0GCSqGSIb3DQEBCwUAA4IBAQAWkD7zIfjCNG41eB8yEWf8ALAsO1Rt ujs67F/qyRYdpZ91h/2C0DvsQjf6+7yHZ8ftqFfnUWWyujviH50C9vZAASKRqaTI 4/awvNJiotxEDFPYsa5axcYUP2+CKC0WSW7xfnVVrCMMo9BShruFR1v7Q+u3gZnW 5+K/aAjVLGL2qYg2Sl+IlY65ObA0QooCJ38zvHrlBBC9RRGpnPBxPZmjUa4yFRZS tSyPX3SXwnUmtlcpIBWd40syNnbasi34/pb2/lIAYFf2HDzr1eGQT3AXxp1OU7ra u7L0+upeS9guTmTxOxQ5/iUi8yjAFYSArILgGnDvoQ0IWEvUmT/dGClL -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:40 2026 by rpki-client