This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-chgRkcynJNNp4qL1xRusv6xyLQ.roa File: 1-chgRkcynJNNp4qL1xRusv6xyLQ.roa (raw, json) Hash identifier: mawIOgBAZRNWprY4AfpPGjATL63ST4155zCvwBbWjj0= Subject key identifier: F9:C8:60:46:47:32:9C:93:4D:A7:8A:8B:D7:14:6E:B2:FE:B1:C8:B4 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019C04A33493920EFDFAC7BA8545C96DFD55 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-chgRkcynJNNp4qL1xRusv6xyLQ.roa Signing time: Wed 28 Jan 2026 12:45:30 +0000 ROA not before: Wed 28 Jan 2026 12:45:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199527 IP address blocks: 80.81.39.0/24 maxlen: 24 83.223.157.0/24 maxlen: 24 85.254.12.0/24 maxlen: 24 85.254.13.0/24 maxlen: 24 85.254.15.0/24 maxlen: 24 85.254.63.0/24 maxlen: 24 91.190.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:a3:34:93:92:0e:fd:fa:c7:ba:85:45:c9:6d:fd:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 28 12:45:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c8604647329c934da78a8bd7146eb2feb1c8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:1d:25:fb:0c:57:33:55:ef:1e:73:8d:00: 15:ad:1c:93:f7:9d:53:73:ac:cf:b0:9c:35:8c:64: 76:da:12:e9:54:ab:39:90:e1:07:4f:ab:c1:7c:55: 00:ff:22:fa:a1:fc:d4:2a:26:60:bb:ca:c4:d6:42: 7e:40:7f:4e:52:6f:d2:26:aa:da:e0:94:52:20:47: 92:6d:32:30:58:97:cb:90:86:7b:13:aa:a2:4d:1c: ef:11:9e:7f:9a:b5:c9:3e:ee:7f:d4:b0:5d:d5:98: 48:55:a3:e6:0d:02:c7:cb:fd:1d:04:8b:b8:91:7d: 16:e4:de:a6:dc:ea:09:42:a6:7c:9e:18:4e:85:32: e5:14:d0:fa:1f:a5:b8:7b:bf:27:c5:a2:c9:42:30: 13:a6:b8:ed:83:d1:48:1c:a9:25:29:e1:dd:31:87: 8a:86:61:2c:2c:80:5c:37:be:96:41:6c:64:a5:51: 43:6d:d4:79:80:fa:9b:40:8e:33:bf:6a:f8:59:20: 21:b6:a9:73:86:aa:89:b7:12:b3:8d:03:c7:22:ba: f7:3c:39:70:1f:71:a1:14:30:7a:50:9d:45:d2:c9: 7c:f4:88:44:29:0b:60:e5:e9:b8:05:d1:1e:82:b2: 08:9e:02:b8:d9:e5:ae:c5:d4:8f:bc:99:8c:de:8c: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C8:60:46:47:32:9C:93:4D:A7:8A:8B:D7:14:6E:B2:FE:B1:C8:B4 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-chgRkcynJNNp4qL1xRusv6xyLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.39.0/24 83.223.157.0/24 85.254.12.0/23 85.254.15.0/24 85.254.63.0/24 91.190.61.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:af:f8:a3:8d:27:c7:48:92:30:83:b9:d9:8c:ad:12:a6:5a: 88:79:57:c4:6c:b1:46:6b:2e:82:a6:8b:39:a7:fc:cd:79:e9: cc:c1:69:ce:88:53:5c:3a:a8:ea:e1:60:c0:34:c6:d0:9c:f1: a6:70:c6:03:9f:f3:b1:07:9e:ab:d5:2b:06:f7:ef:49:ad:0d: 95:b4:59:d7:a2:20:70:d7:f3:4c:23:5c:0e:3f:1a:43:b5:ff: 21:d4:0b:64:48:ff:6e:f5:c2:38:2f:ed:22:fc:bb:49:09:63: b3:7a:cf:9e:82:38:28:9e:d7:40:a1:e9:a3:b5:94:74:d6:26: 49:ac:67:a9:bc:6b:66:30:b5:96:af:c1:57:76:fc:5d:90:3b: 08:cb:37:f5:66:1b:bd:79:25:b6:ee:a6:85:49:84:07:18:04: d8:fe:f7:8e:75:5c:8b:a6:31:fe:6d:2c:fa:02:84:62:d6:d7: 10:55:42:ec:c6:d8:a4:47:9b:23:e2:aa:93:a2:fd:9f:8a:55: b6:e1:c7:78:3a:38:7f:31:26:ef:90:d7:a1:35:76:c6:e8:93: 5d:19:ab:99:52:5e:5e:29:ff:ca:0e:82:be:66:5b:41:20:1d: 10:54:67:50:14:22:2c:c2:4b:b8:bc:80:b6:2c:7c:0f:f0:f0: 68:c0:93:6e -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZwEozSTkg79+se6hUXJbf1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTI4MTI0NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWM4NjA0NjQ3MzI5YzkzNGRhNzhhOGJkNzE0NmViMmZlYjFjOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAEdJfsMVzNV7x5zjQAVrRyT951T c6zPsJw1jGR22hLpVKs5kOEHT6vBfFUA/yL6ofzUKiZgu8rE1kJ+QH9OUm/SJqra 4JRSIEeSbTIwWJfLkIZ7E6qiTRzvEZ5/mrXJPu5/1LBd1ZhIVaPmDQLHy/0dBIu4 kX0W5N6m3OoJQqZ8nhhOhTLlFND6H6W4e78nxaLJQjATprjtg9FIHKklKeHdMYeK hmEsLIBcN76WQWxkpVFDbdR5gPqbQI4zv2r4WSAhtqlzhqqJtxKzjQPHIrr3PDlw H3GhFDB6UJ1F0sl89IhEKQtg5em4BdEegrIIngK42eWuxdSPvJmM3oxmbwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPnIYEZHMpyTTaeKi9cUbrL+sci0MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvMS1jaGdSa2N5bkpOTnA0cUwxeFJ1c3Y2eHlMUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2 Zi8xL3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFBRJwME AFPfnQMEAVX+DAMEAFX+DwMEAFX+PwMEAFu+PTANBgkqhkiG9w0BAQsFAAOCAQEA b6/4o40nx0iSMIO52YytEqZaiHlXxGyxRmsugqaLOaf8zXnpzMFpzohTXDqo6uFg wDTG0JzxpnDGA5/zsQeeq9UrBvfvSa0NlbRZ16IgcNfzTCNcDj8aQ7X/IdQLZEj/ bvXCOC/tIvy7SQljs3rPnoI4KJ7XQKHpo7WUdNYmSaxnqbxrZjC1lq/BV3b8XZA7 CMs39WYbvXkltu6mhUmEBxgE2P73jnVci6Yx/m0s+gKEYtbXEFVC7MbYpEebI+Kq k6L9n4pVtuHHeDo4fzEm75DXoTV2xuiTXRmrmVJeXin/yg6CvmZbQSAdEFRnUBQi LMJLuLyAtix8D/DwaMCTbg== -----END CERTIFICATE-----Generated at Mon Feb 2 21:00:46 2026 by rpki-client