This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/V1ivFQWDP77i8oEcG_p8QyZQJAM.roa File: V1ivFQWDP77i8oEcG_p8QyZQJAM.roa (raw, json) Hash identifier: dOMZrRoKiVBS9GiMZZVqHJQh/9Gux0X1bI6FS/AevuM= Subject key identifier: 57:58:AF:15:05:83:3F:BE:E2:F2:81:1C:1B:FA:7C:43:26:50:24:03 Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Certificate serial: 019B77587CE17BAABC6C5AD84C5FEE0C79CE Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/V1ivFQWDP77i8oEcG_p8QyZQJAM.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50272 IP address blocks: 91.235.60.0/22 maxlen: 22 91.235.60.0/23 maxlen: 23 91.235.62.0/24 maxlen: 24 195.238.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7c:e1:7b:aa:bc:6c:5a:d8:4c:5f:ee:0c:79:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5758af1505833fbee2f2811c1bfa7c4326502403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:ce:7f:c4:7e:1c:2a:d1:90:a0:54:c4:ea: 24:3e:5f:a8:65:b6:97:84:ad:d6:6a:3e:e9:22:ec: 53:a9:10:3d:79:c2:6d:c2:8d:9f:09:0e:e7:66:5f: 7b:82:58:f0:42:d6:51:f2:ee:ed:19:7d:a0:96:1a: 2a:0c:f7:eb:29:1a:7b:96:7f:3c:20:19:58:c6:83: 56:1e:e1:50:8b:19:1c:4b:27:4a:50:9d:b1:5a:4f: 81:5b:9b:73:3a:24:ec:eb:03:e2:09:a7:e6:c2:4f: 54:b2:d2:64:9e:85:a0:e5:0c:f1:1e:75:51:3d:d9: 12:b0:cd:d1:af:e7:52:56:df:c1:e1:b9:5d:da:67: ca:5c:2e:b0:cf:87:4b:e9:8c:4e:4e:d0:3e:19:e1: 59:a7:3c:50:f8:45:80:68:00:e6:f6:92:06:c8:1e: ab:99:d7:16:3a:cb:d7:47:39:03:26:b7:b3:49:a4: 3f:3b:4d:2b:a7:66:65:fd:d5:67:72:ec:0e:75:d8: 06:21:27:ea:b3:6e:b6:9f:3d:d2:6a:1d:16:a7:4d: 3d:12:e9:c7:d5:f7:db:3e:e8:da:5b:98:31:10:d8: 51:e1:14:9a:52:79:2a:c5:e2:1f:2a:b1:da:ca:e6: f1:e0:f8:9f:87:60:63:31:a0:bb:22:3b:cf:30:ae: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:AF:15:05:83:3F:BE:E2:F2:81:1C:1B:FA:7C:43:26:50:24:03 X509v3 Authority Key Identifier: keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/V1ivFQWDP77i8oEcG_p8QyZQJAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.60.0/22 195.238.234.0/24 Signature Algorithm: sha256WithRSAEncryption 40:64:49:2e:38:c1:30:07:e6:02:84:2c:19:4d:81:71:b5:11: 2b:c2:be:48:e7:1d:0c:2d:8a:ee:41:d0:ba:76:6e:45:34:5a: 7d:bb:95:d0:6a:8a:4c:6f:6b:d0:3e:aa:96:a1:8a:27:93:4a: a2:7f:36:be:ef:a1:92:b5:c5:9b:90:00:00:44:f8:00:27:9e: 6f:99:db:af:94:96:56:32:ac:de:77:f0:fb:b2:25:3c:81:ab: a1:93:f7:cb:f1:dd:17:c6:ee:cb:af:78:f1:66:cd:35:3e:d1: ba:bc:c7:d6:a5:a0:6b:5c:d6:dc:4a:bb:f4:6a:7d:bf:20:7f: 54:96:c0:98:34:19:a9:c0:04:b5:6a:8f:c1:1d:1d:c4:cd:4d: 31:b9:1b:cb:9b:b0:16:1d:07:d5:61:6a:50:f7:81:1a:71:72: 89:24:b4:27:4b:bc:19:e4:da:26:8e:b7:dc:6d:f3:08:05:7e: ce:65:06:ec:32:ae:29:dc:8d:93:da:d9:9b:9c:cb:78:10:43: 0d:c8:5c:be:3c:a1:00:ba:a3:ba:6f:53:9c:0a:35:be:74:1d: 61:94:51:ef:b3:cc:65:5d:c7:61:34:8b:a4:0b:77:7c:69:61: 17:52:d4:80:81:7f:e2:d6:0a:80:db:c8:fc:42:0f:9e:13:ec: f1:ff:b9:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WHzhe6q8bFrYTF/uDHnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx Nzg3ZTEwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzU4YWYxNTA1ODMzZmJlZTJmMjgxMWMxYmZhN2M0MzI2NTAyNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXTOf8R+HCrRkKBUxOokPl+oZbaX hK3Waj7pIuxTqRA9ecJtwo2fCQ7nZl97gljwQtZR8u7tGX2glhoqDPfrKRp7ln88 IBlYxoNWHuFQixkcSydKUJ2xWk+BW5tzOiTs6wPiCafmwk9UstJknoWg5QzxHnVR PdkSsM3Rr+dSVt/B4bld2mfKXC6wz4dL6YxOTtA+GeFZpzxQ+EWAaADm9pIGyB6r mdcWOsvXRzkDJrezSaQ/O00rp2Zl/dVncuwOddgGISfqs262nz3Sah0Wp009EunH 1ffbPujaW5gxENhR4RSaUnkqxeIfKrHayubx4Pifh2BjMaC7IjvPMK4GLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFdYrxUFgz++4vKBHBv6fEMmUCQDMB8GA1UdIwQY MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt YzVjZjRiM2IxY2E2LzEvVjFpdkZRV0RQNzdpOG9FY0dfcDhReVpRSkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2 LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+s8AwQA w+7qMA0GCSqGSIb3DQEBCwUAA4IBAQBAZEkuOMEwB+YChCwZTYFxtRErwr5I5x0M LYruQdC6dm5FNFp9u5XQaopMb2vQPqqWoYonk0qifza+76GStcWbkAAARPgAJ55v mduvlJZWMqzed/D7siU8gauhk/fL8d0Xxu7Lr3jxZs01PtG6vMfWpaBrXNbcSrv0 an2/IH9UlsCYNBmpwAS1ao/BHR3EzU0xuRvLm7AWHQfVYWpQ94EacXKJJLQnS7wZ 5NomjrfcbfMIBX7OZQbsMq4p3I2T2tmbnMt4EEMNyFy+PKEAuqO6b1OcCjW+dB1h lFHvs8xlXcdhNIukC3d8aWEXUtSAgX/i1gqA28j8Qg+eE+zx/7n+ -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:52 2026 by rpki-client