This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa File: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (raw, json) Hash identifier: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M= Subject key identifier: FB:A7:18:93:72:15:DD:AC:CD:4C:3C:4B:57:D1:C8:BF:C2:62:34:D5 Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370 Certificate serial: 019B78A2842E6A390F9E3CF1B9A0F4811C61 Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa Signing time: Thu 01 Jan 2026 08:17:55 +0000 ROA not before: Thu 01 Jan 2026 08:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48306 IP address blocks: 91.209.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:84:2e:6a:39:0f:9e:3c:f1:b9:a0:f4:81:1c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350cce1b9d06dcce8856659536499c1603391370 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fba718937215ddaccd4c3c4b57d1c8bfc26234d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:23:df:c7:28:f7:1f:56:5a:a7:3f:cf:37: 14:3d:d3:46:66:28:39:80:14:58:66:3d:ce:ce:cc: 5f:07:22:dd:1a:c1:0f:61:f3:ad:98:e4:bf:af:54: 72:5c:2d:61:61:b2:14:a8:e6:40:08:37:ae:91:03: a0:1f:6a:d9:53:94:97:0f:cd:2a:5a:7c:03:03:fe: 46:d3:52:3f:6a:1c:a3:08:2e:f4:07:7a:3a:39:41: 07:90:9b:45:a0:6b:03:ba:47:c8:40:35:63:f8:18: 27:05:c8:54:86:45:a2:2e:25:2e:a2:84:64:b1:5c: 57:32:53:47:71:30:8f:b6:98:3f:0d:59:c4:0f:38: 55:61:d9:02:e7:1e:17:c3:45:88:a7:ca:30:24:86: 72:9c:8b:69:6e:13:df:e2:d8:8e:2f:ef:1c:f2:74: f4:37:39:3e:77:72:19:f8:23:4b:15:bd:67:20:44: b0:c7:dc:c4:5c:d1:92:c3:54:c1:71:21:92:f5:0b: ae:c2:71:e8:58:ca:79:cf:bc:03:16:93:5b:b5:51: 73:42:6e:87:d7:9d:16:c5:c7:56:15:50:cc:e7:d4: 99:ad:0c:3e:73:d3:e8:1f:82:50:ef:06:1c:96:0a: 1c:f4:99:56:68:7f:89:b4:69:ac:37:7b:34:f4:6f: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A7:18:93:72:15:DD:AC:CD:4C:3C:4B:57:D1:C8:BF:C2:62:34:D5 X509v3 Authority Key Identifier: keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.88.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:e4:76:b7:d3:fe:03:d8:26:05:2d:42:ee:23:0e:0a:92:6d: e6:54:0b:32:da:2e:46:09:6c:4a:96:51:70:cd:3e:c8:48:1d: 38:6a:09:74:ef:65:ea:48:e5:a0:f7:f0:90:04:77:73:79:48: 42:b3:c2:72:e6:c9:8c:ec:c2:c2:b0:5c:ac:c5:3b:96:ef:50: fd:80:ac:20:59:54:e8:60:6b:47:df:86:f3:a7:4c:76:44:4d: 38:f2:b3:20:cb:24:d0:1c:5b:e5:16:34:c3:82:74:c5:51:3f: 3c:5a:1a:da:68:ca:e7:0e:5d:4e:2e:91:0b:0e:5b:ee:ba:0d: ca:bb:6b:90:bf:28:c9:ea:a7:e5:d9:40:ec:52:55:c5:aa:d6: 74:b0:3f:3c:88:e9:dc:47:ce:94:a1:b1:a8:bf:1b:4e:67:f2: 40:ca:62:30:6b:f4:34:8a:46:5a:c9:21:de:05:e4:70:db:f0: 07:a6:50:f9:c1:ff:a8:64:ea:42:f1:54:4f:f8:07:20:bc:74: 72:03:e1:ad:61:0a:a4:02:a4:6b:79:6f:b8:a1:5a:53:cb:da: 19:18:0e:d9:fd:7e:40:2c:5e:0b:79:dc:5f:cb:7e:0e:12:b6: 24:59:c0:e0:8d:ce:fc:04:d3:7d:fc:f3:19:7e:45:84:2c:d0: 91:80:e9:6f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ooQuajkPnjzxuaD0gRxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MGNjZTFiOWQwNmRjY2U4ODU2NjU5NTM2NDk5YzE2MDMz OTEzNzAwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmE3MTg5MzcyMTVkZGFjY2Q0YzNjNGI1N2QxYzhiZmMyNjIzNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynYj38co9x9WWqc/zzcUPdNGZig5 gBRYZj3OzsxfByLdGsEPYfOtmOS/r1RyXC1hYbIUqOZACDeukQOgH2rZU5SXD80q WnwDA/5G01I/ahyjCC70B3o6OUEHkJtFoGsDukfIQDVj+BgnBchUhkWiLiUuooRk sVxXMlNHcTCPtpg/DVnEDzhVYdkC5x4Xw0WIp8owJIZynItpbhPf4tiOL+8c8nT0 Nzk+d3IZ+CNLFb1nIESwx9zEXNGSw1TBcSGS9QuuwnHoWMp5z7wDFpNbtVFzQm6H 150WxcdWFVDM59SZrQw+c9PoH4JQ7wYclgoc9JlWaH+JtGmsN3s09G+EBwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPunGJNyFd2szUw8S1fRyL/CYjTVMB8GA1UdIwQY MBaAFDUMzhudBtzOiFZllTZJnBYDORNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQt NTU0MTVhMGJhNzNiLzEvMS02Y1lrM0lWM2F6TlREeExWOUhJdjhKaU5OVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTMvZjUyZGI5LThlMjUtNDI5Ny05M2ZkLTU1NDE1YTBiYTcz Yi8xL05Rek9HNTBHM002SVZtV1ZOa21jRmdNNUUzQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvRWDAN BgkqhkiG9w0BAQsFAAOCAQEAC+R2t9P+A9gmBS1C7iMOCpJt5lQLMtouRglsSpZR cM0+yEgdOGoJdO9l6kjloPfwkAR3c3lIQrPCcubJjOzCwrBcrMU7lu9Q/YCsIFlU 6GBrR9+G86dMdkRNOPKzIMsk0Bxb5RY0w4J0xVE/PFoa2mjK5w5dTi6RCw5b7roN yrtrkL8oyeqn5dlA7FJVxarWdLA/PIjp3EfOlKGxqL8bTmfyQMpiMGv0NIpGWskh 3gXkcNvwB6ZQ+cH/qGTqQvFUT/gHILx0cgPhrWEKpAKka3lvuKFaU8vaGRgO2f1+ QCxeC3ncX8t+DhK2JFnA4I3O/ATTffzzGX5FhCzQkYDpbw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:33 2026 by rpki-client