This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/1--uR84TmxMmj_tqc32k0ls6g_r4.roa File: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (raw, json) Hash identifier: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q= Subject key identifier: FB:EB:91:F3:84:E6:C4:C9:A3:FE:DA:9C:DF:69:34:96:CE:A0:FE:BE Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Certificate serial: 019B7D5AEBAA93D5B7356A30453182400C2F Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/1--uR84TmxMmj_tqc32k0ls6g_r4.roa Signing time: Fri 02 Jan 2026 06:17:49 +0000 ROA not before: Fri 02 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 91.214.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:eb:aa:93:d5:b7:35:6a:30:45:31:82:40:0c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbeb91f384e6c4c9a3feda9cdf693496cea0febe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:a2:69:89:94:aa:ce:eb:15:42:f1:2c:07: ff:6f:c7:1d:1d:8d:fa:67:bb:59:f7:e5:91:4c:d5: c8:58:aa:80:46:45:50:21:6a:2c:b0:f7:ca:90:4a: 03:81:24:ee:82:bb:09:6c:0a:3e:aa:01:25:54:04: 7d:dc:9d:37:b1:43:06:5a:88:79:cd:3b:a0:4f:15: c0:5d:08:d1:2e:d0:14:82:24:b3:71:33:9f:ae:a7: 23:de:70:04:ec:6e:12:d0:97:3d:99:6d:03:66:9b: 38:e3:e7:6a:7e:0f:9c:08:d5:a2:99:1b:c6:ac:6a: bf:de:cd:ac:24:5d:06:d1:c0:8c:d4:49:c2:e6:48: b3:48:d2:11:b5:e0:9f:61:61:d6:c2:0d:f9:8d:30: a1:d1:0f:61:7a:de:44:29:c4:28:dd:91:de:b5:21: e1:03:b5:35:04:cc:d7:ad:5c:3d:97:09:19:f4:c5: 29:52:98:72:cf:76:25:13:fe:0d:0b:7c:45:a5:11: b0:97:d0:66:67:e8:46:3e:89:2f:11:e4:b3:6a:dd: 14:04:cb:c3:b5:5d:f0:f9:e0:93:fb:87:73:23:aa: 6e:93:fb:7b:83:9c:06:09:39:24:02:02:37:17:8f: c1:e4:10:e3:29:77:da:af:88:71:43:36:3b:8c:ed: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EB:91:F3:84:E6:C4:C9:A3:FE:DA:9C:DF:69:34:96:CE:A0:FE:BE X509v3 Authority Key Identifier: keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/1--uR84TmxMmj_tqc32k0ls6g_r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:00:87:04:df:b6:6d:24:ea:67:28:ec:39:28:bf:5a:fa:89: 35:75:9c:36:68:f1:5f:e0:ad:07:da:91:d3:86:d4:ab:1d:cd: 85:55:cb:52:d7:2e:26:f4:a3:c0:20:16:d7:cb:c3:07:cc:51: 52:80:46:45:9a:fe:7c:56:74:ea:b9:ea:06:f5:8e:18:da:cd: 2b:6f:73:fe:a7:c2:1e:09:35:66:e5:ac:c4:00:d5:d4:6a:13: eb:7c:3f:a5:82:83:1c:aa:cf:38:a5:e3:3e:19:f5:61:2c:24: 99:cc:29:cd:d4:79:49:b5:a5:b3:d5:20:2e:d1:0b:83:0e:95: af:6e:14:c8:4e:4d:f9:a5:a3:8d:77:59:a4:75:9f:b1:bf:ee: 2b:a8:01:06:c2:70:7b:36:c5:07:20:f7:19:74:1d:db:19:28: 38:6d:e9:bf:36:42:e7:ed:43:72:a1:2c:80:06:0d:65:10:fb: 67:5a:c7:37:93:40:74:a4:8a:44:75:c7:d2:4d:36:8a:d7:f5: 75:9b:94:45:b9:69:45:52:30:50:29:b2:c8:90:ef:c6:44:19: 35:67:eb:83:ab:ac:7c:08:41:7f:44:10:ac:0b:70:5f:a9:60: 7f:bb:2c:46:0e:46:b0:4b:7c:68:42:6a:2f:91:4f:39:5c:41: da:9b:59:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9Wuuqk9W3NWowRTGCQAwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi OGRmZTIwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmViOTFmMzg0ZTZjNGM5YTNmZWRhOWNkZjY5MzQ5NmNlYTBmZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuSiaYmUqs7rFULxLAf/b8cdHY36 Z7tZ9+WRTNXIWKqARkVQIWossPfKkEoDgSTugrsJbAo+qgElVAR93J03sUMGWoh5 zTugTxXAXQjRLtAUgiSzcTOfrqcj3nAE7G4S0Jc9mW0DZps44+dqfg+cCNWimRvG rGq/3s2sJF0G0cCM1EnC5kizSNIRteCfYWHWwg35jTCh0Q9het5EKcQo3ZHetSHh A7U1BMzXrVw9lwkZ9MUpUphyz3YlE/4NC3xFpRGwl9BmZ+hGPokvEeSzat0UBMvD tV3w+eCT+4dzI6puk/t7g5wGCTkkAgI3F4/B5BDjKXfar4hxQzY7jO2zUQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvrkfOE5sTJo/7anN9pNJbOoP6+MB8GA1UdIwQY MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt Zjg0NWJmYzQyZjZkLzEvMS0tdVI4NFRteE1tal90cWMzMmswbHM2Z19yNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvNjM4ZjI4LTAwZDUtNDYzYi1iMTZjLWY4NDViZmM0MmY2 ZC8xL3NDUXJma01GUEpFOVlyOWR1eGFDXy1hNDMtSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvWwDAN BgkqhkiG9w0BAQsFAAOCAQEATQCHBN+2bSTqZyjsOSi/WvqJNXWcNmjxX+CtB9qR 04bUqx3NhVXLUtcuJvSjwCAW18vDB8xRUoBGRZr+fFZ06rnqBvWOGNrNK29z/qfC Hgk1ZuWsxADV1GoT63w/pYKDHKrPOKXjPhn1YSwkmcwpzdR5SbWls9UgLtELgw6V r24UyE5N+aWjjXdZpHWfsb/uK6gBBsJwezbFByD3GXQd2xkoOG3pvzZC5+1DcqEs gAYNZRD7Z1rHN5NAdKSKRHXH0k02itf1dZuURblpRVIwUCmyyJDvxkQZNWfrg6us fAhBf0QQrAtwX6lgf7ssRg5GsEt8aEJqL5FPOVxB2ptZTg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:08:51 2026 by rpki-client