This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/1-R7GhRXNiriw0Ks0AljMCxJFfvg.roa File: 1-R7GhRXNiriw0Ks0AljMCxJFfvg.roa (raw, json) Hash identifier: Ihiuc6Mf8e5SU/BW0lz5dqzcLRdt90132uDC4V5qk3w= Subject key identifier: F9:1E:C6:85:15:CD:8A:B8:B0:D0:AB:34:02:58:CC:0B:12:45:7E:F8 Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f Certificate serial: 019B77C672C0FAB72E48554C3CFA47D82506 Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/1-R7GhRXNiriw0Ks0AljMCxJFfvg.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210663 IP address blocks: 91.218.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:72:c0:fa:b7:2e:48:55:4c:3c:fa:47:d8:25:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f91ec68515cd8ab8b0d0ab340258cc0b12457ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:0d:17:c1:61:7c:1e:7b:a2:e4:39:56:91: eb:e3:d9:19:a8:29:70:2b:75:39:5f:bd:e9:f9:79: f6:92:7f:50:4b:55:83:fa:cb:10:68:03:c1:34:3e: dc:66:8d:52:c2:11:2f:51:9b:b2:c5:af:85:fa:2a: 8e:97:f5:e3:c9:0b:28:02:6f:53:3a:02:bf:91:be: 39:8d:1c:4d:cb:40:be:cf:43:53:1e:02:47:96:fb: 4a:ad:53:67:4b:c1:0a:a1:6e:22:0a:8a:a0:e7:b7: b5:e8:3f:d5:f0:ac:20:d6:ea:18:00:05:8e:e8:58: ff:92:fe:2d:41:a8:9c:c3:2a:1b:17:ed:26:32:38: e4:76:13:b1:55:4a:d6:17:9f:1c:1b:d8:fa:1d:05: 02:35:a1:a2:72:95:cb:f1:ae:50:e6:ce:5b:2e:bb: 07:3c:a4:e9:30:7b:c1:fd:72:7a:15:9c:6d:17:91: 67:0c:73:4d:cc:46:c0:8d:bf:8a:84:96:de:25:e9: cc:5f:0e:02:7a:67:2c:89:7f:7a:87:3e:8b:ab:e8: a9:1f:5f:36:be:d8:2e:bb:53:2b:7a:ce:0d:88:5f: 3d:41:2c:98:fd:5e:c0:52:42:d9:3e:89:44:93:17: a5:90:d7:86:17:5e:e3:e6:a8:0d:bc:2b:bf:d1:66: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1E:C6:85:15:CD:8A:B8:B0:D0:AB:34:02:58:CC:0B:12:45:7E:F8 X509v3 Authority Key Identifier: keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/1-R7GhRXNiriw0Ks0AljMCxJFfvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.181.0/24 Signature Algorithm: sha256WithRSAEncryption c9:62:ea:d6:56:38:bd:35:88:b2:1e:b3:83:fd:f7:36:c6:be: fe:42:a2:de:60:55:c6:2d:ea:75:3c:38:26:af:f2:10:4c:be: 97:8e:ef:2a:99:9c:49:a8:25:e4:3d:8e:62:8e:ba:48:c1:17: 1d:90:75:d8:5f:2d:d6:ee:9f:d7:6c:d5:c5:2a:14:88:da:8d: 07:9e:32:8b:a5:a6:9b:c3:38:76:0a:30:7e:3c:2b:c6:19:cc: a9:67:2c:d9:63:01:24:7e:d3:76:b3:ea:13:18:e5:d8:2c:b0: cc:d2:54:54:bc:0d:1b:5d:cd:32:eb:c5:70:8d:35:d7:01:15: da:aa:10:39:fd:b2:8f:72:7c:f3:e6:6d:bb:49:6f:27:ee:c3: 1f:67:90:f9:72:8b:ce:91:b6:cd:75:a9:8e:90:86:b9:30:31: 0c:52:a6:b6:e4:c1:a5:cb:82:dd:00:2f:46:f8:73:9c:38:c2: 45:fa:00:07:0b:3b:37:13:47:e2:7e:0c:23:fe:6f:e1:83:1a: 4f:29:bb:ee:15:0b:07:02:74:1d:10:0c:33:c8:96:04:4d:b5: 6c:7c:32:ab:32:3b:cb:ce:98:7c:0b:16:0d:c9:7a:3d:eb:c9: 08:c1:cf:50:5d:0c:77:0c:38:4a:9a:16:98:62:d1:e5:a1:82: 3b:66:d4:ab -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xnLA+rcuSFVMPPpH2CUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMmUzMjNmMWJlMTYzYzRkN2Y4Yjg4YWFkOGRhYWZiZTAx MDZkNmYwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTFlYzY4NTE1Y2Q4YWI4YjBkMGFiMzQwMjU4Y2MwYjEyNDU3ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDANF8FhfB57ouQ5VpHr49kZqClw K3U5X73p+Xn2kn9QS1WD+ssQaAPBND7cZo1SwhEvUZuyxa+F+iqOl/XjyQsoAm9T OgK/kb45jRxNy0C+z0NTHgJHlvtKrVNnS8EKoW4iCoqg57e16D/V8Kwg1uoYAAWO 6Fj/kv4tQaicwyobF+0mMjjkdhOxVUrWF58cG9j6HQUCNaGicpXL8a5Q5s5bLrsH PKTpMHvB/XJ6FZxtF5FnDHNNzEbAjb+KhJbeJenMXw4CemcsiX96hz6Lq+ipH182 vtguu1Mres4NiF89QSyY/V7AUkLZPolEkxelkNeGF17j5qgNvCu/0WZ3ZwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkexoUVzYq4sNCrNAJYzAsSRX74MB8GA1UdIwQY MBaAFMAuMj8b4WPE1/i4iq2NqvvgEG1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQt MWRmMWVjY2RkYzg3LzEvMS1SN0doUlhOaXJpdzBLczBBbGpNQ3hKRmZ2Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTIvYWFlZDZiLTE0MzQtNDdjNi1hNzRkLTFkZjFlY2NkZGM4 Ny8xL3dDNHlQeHZoWThUWC1MaUtyWTJxLS1BUWJXOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvatTAN BgkqhkiG9w0BAQsFAAOCAQEAyWLq1lY4vTWIsh6zg/33Nsa+/kKi3mBVxi3qdTw4 Jq/yEEy+l47vKpmcSagl5D2OYo66SMEXHZB12F8t1u6f12zVxSoUiNqNB54yi6Wm m8M4dgowfjwrxhnMqWcs2WMBJH7TdrPqExjl2CywzNJUVLwNG13NMuvFcI011wEV 2qoQOf2yj3J88+Ztu0lvJ+7DH2eQ+XKLzpG2zXWpjpCGuTAxDFKmtuTBpcuC3QAv RvhznDjCRfoABws7NxNH4n4MI/5v4YMaTym77hULBwJ0HRAMM8iWBE21bHwyqzI7 y86YfAsWDcl6PevJCMHPUF0Mdww4SpoWmGLR5aGCO2bUqw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:14 2026 by rpki-client