This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa File: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (raw, json) Hash identifier: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk= Subject key identifier: FA:D2:D5:8A:D6:EC:A9:B4:8A:54:44:36:74:50:4B:B8:27:61:EC:F2 Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351 Certificate serial: 019B7F158A09106A707468548B59F3895DE9 Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41135 IP address blocks: 81.201.80.0/20 maxlen: 24 185.47.148.0/22 maxlen: 24 2a03:b500::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8a:09:10:6a:70:74:68:54:8b:59:f3:89:5d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fad2d58ad6eca9b48a54443674504bb82761ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:30:45:86:21:95:c3:8c:27:27:2c:cb:8d: be:92:c7:52:fc:36:2c:93:68:76:dc:89:f8:8c:92: cd:98:a2:70:e5:dd:bb:f8:6d:2e:2a:4b:13:d8:ca: 87:90:c3:84:cb:b5:71:c8:c0:63:de:52:68:b1:f3: e0:fc:98:0b:6d:4a:83:62:c9:1e:13:6e:b8:a1:79: 7d:9f:ef:bd:88:cf:ea:0c:92:1c:ad:8f:cb:e0:35: 1b:a9:2b:cd:69:83:a7:9b:28:03:62:4e:4a:52:ca: 57:96:ec:98:bd:e3:83:eb:10:50:c3:1f:95:c0:0d: 54:14:8c:0c:70:b8:b1:f1:1a:33:73:50:05:70:ac: bd:54:74:11:ff:0c:55:d3:34:c0:68:ac:1f:65:75: ec:e6:4b:5c:5b:c9:e9:2b:fb:26:b7:eb:d8:9c:e8: 04:c4:d7:58:c5:5e:d5:c3:d2:52:cd:a6:81:dc:df: e0:e2:e8:42:fd:92:c2:86:f1:dd:3a:ea:9e:77:6e: 3d:ab:4a:a4:a5:ab:f0:63:05:d6:52:04:c2:3f:41: 79:f4:d3:cc:f4:6a:65:1c:d1:b8:6a:e4:f7:c1:f9: 44:fd:49:27:db:1a:fe:23:a2:16:3e:c3:1f:67:da: 50:4f:83:8b:01:4c:c0:19:34:aa:63:9b:9c:f5:28: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D2:D5:8A:D6:EC:A9:B4:8A:54:44:36:74:50:4B:B8:27:61:EC:F2 X509v3 Authority Key Identifier: keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.201.80.0/20 185.47.148.0/22 IPv6: 2a03:b500::/32 Signature Algorithm: sha256WithRSAEncryption 2b:80:04:b0:8a:ce:65:62:e4:08:66:81:1e:c3:b1:af:44:5c: d2:1a:32:37:72:00:d7:77:16:53:05:03:33:c9:18:e2:15:50: 07:87:7b:12:40:b5:28:60:2c:05:65:ec:49:0b:8a:5c:71:58: 52:56:b9:5e:05:52:ce:3a:76:09:8e:f7:f2:56:81:bc:ff:5b: 77:84:4a:7e:dc:c5:24:a1:1d:5a:2d:da:74:d9:db:75:b4:81: 4e:eb:56:bd:83:6f:6e:85:b2:2e:d7:e9:51:eb:84:0b:85:90: 65:98:1a:36:d4:95:17:17:93:49:bb:e4:98:7c:15:36:7e:cc: 3c:5e:33:9a:dc:25:7b:11:ee:08:02:16:c7:d7:70:03:c1:e9: 77:89:3d:12:3f:bb:24:65:ac:c2:0f:2e:85:1b:4b:2f:79:a2: 61:56:59:fc:6d:6f:e0:ba:21:12:32:e9:08:a5:0e:1c:dc:be: b6:24:62:31:bb:48:fa:43:82:38:0d:a8:6f:fa:c0:4c:e1:55: e0:36:bc:f1:f8:54:4b:ba:9b:44:f1:32:01:97:ca:90:31:d7: 94:83:99:aa:cf:01:6f:d5:73:be:c3:b9:ce:10:b5:97:2c:85: 14:4d:50:b9:4b:bb:3e:48:d0:e7:25:09:5b:23:ef:e2:50:33: 30:80:76:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/FYoJEGpwdGhUi1nziV3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi MmYzNTEwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWQyZDU4YWQ2ZWNhOWI0OGE1NDQ0MzY3NDUwNGJiODI3NjFlY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhwwRYYhlcOMJycsy42+ksdS/DYs k2h23In4jJLNmKJw5d27+G0uKksT2MqHkMOEy7VxyMBj3lJosfPg/JgLbUqDYske E264oXl9n++9iM/qDJIcrY/L4DUbqSvNaYOnmygDYk5KUspXluyYveOD6xBQwx+V wA1UFIwMcLix8Rozc1AFcKy9VHQR/wxV0zTAaKwfZXXs5ktcW8npK/smt+vYnOgE xNdYxV7Vw9JSzaaB3N/g4uhC/ZLChvHdOuqed249q0qkpavwYwXWUgTCP0F59NPM 9GplHNG4auT3wflE/Ukn2xr+I6IWPsMfZ9pQT4OLAUzAGTSqY5uc9SgA/QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPrS1YrW7Km0ilRENnRQS7gnYezyMB8GA1UdIwQY MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt ZDVhZWZjY2M5NTIyLzEvMS10TFZpdGJzcWJTS1ZFUTJkRkJMdUNkaDdQSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGYvNWQzMWNiLTQ2YzYtNGI1OC04Mjc5LWQ1YWVmY2NjOTUy Mi8xL2tJZU1PV0pLN2VPU25oZk0yVmg0d3BLeTgxRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBFHJUAME ArkvlDANBAIAAjAHAwUAKgO1ADANBgkqhkiG9w0BAQsFAAOCAQEAK4AEsIrOZWLk CGaBHsOxr0Rc0hoyN3IA13cWUwUDM8kY4hVQB4d7EkC1KGAsBWXsSQuKXHFYUla5 XgVSzjp2CY738laBvP9bd4RKftzFJKEdWi3adNnbdbSBTutWvYNvboWyLtfpUeuE C4WQZZgaNtSVFxeTSbvkmHwVNn7MPF4zmtwlexHuCAIWx9dwA8Hpd4k9Ej+7JGWs wg8uhRtLL3miYVZZ/G1v4LohEjLpCKUOHNy+tiRiMbtI+kOCOA2ob/rATOFV4Da8 8fhUS7qbRPEyAZfKkDHXlIOZqs8Bb9VzvsO5zhC1lyyFFE1QuUu7PkjQ5yUJWyPv 4lAzMIB2nA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:52 2026 by rpki-client