This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa File: 64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa (raw, json) Hash identifier: pu8wgjr4VrA4g+LsPAV0cojDn7FfUUvf2NSJDNpkiw8= Subject key identifier: EB:81:9C:8F:48:7C:BC:D5:DF:EC:61:4D:67:19:8C:9B:69:9F:AF:51 Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988 Certificate serial: 019B77C6BB6888B118C3FD5169A373E82A08 Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205134 IP address blocks: 91.216.171.0/24 maxlen: 24 2a12:d9c0:1::/48 maxlen: 48 2a12:d9c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bb:68:88:b1:18:c3:fd:51:69:a3:73:e8:2a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb819c8f487cbcd5dfec614d67198c9b699faf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:8b:77:ed:2b:65:1a:9c:2d:fc:4a:a4:60: 03:ef:67:1b:3d:0b:04:73:8e:60:7d:1a:48:f8:c8: d9:d0:59:65:f2:d3:4e:9c:89:4a:26:77:51:06:02: 47:f8:6c:da:1b:83:de:9a:ef:ee:3f:50:63:14:18: 26:60:36:8f:bd:55:f5:5e:37:6b:c4:d8:91:99:96: 9d:8c:26:d1:07:c7:11:28:f1:ee:d1:10:f2:0b:d0: f8:cc:6d:0b:6a:15:25:93:75:ad:8f:26:d4:52:c6: 0c:d6:eb:f4:05:df:51:eb:08:5f:27:74:62:e7:f6: 4f:ed:76:35:c1:7d:a7:23:92:ff:c8:12:93:4d:24: 02:92:c0:07:84:65:3d:dc:de:a5:cb:da:24:1e:cd: df:b7:62:95:2e:cc:3e:70:3c:ac:1a:a3:2a:a0:e5: c1:d1:e4:7e:39:12:7a:a4:04:c3:61:4b:6f:83:aa: ba:6f:b6:02:fe:73:65:dd:20:be:7b:c6:28:fc:b4: 28:0a:92:5f:d8:7b:74:e6:94:93:cd:ad:d0:a3:fb: 33:f3:a3:63:8c:d3:3b:29:7d:cf:9c:53:6f:2d:37: eb:29:2d:e7:2f:fb:fd:c5:37:86:15:67:64:62:c0: b5:c4:c5:3d:01:54:a8:d6:88:3f:7c:0d:64:0d:dc: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:9C:8F:48:7C:BC:D5:DF:EC:61:4D:67:19:8C:9B:69:9F:AF:51 X509v3 Authority Key Identifier: keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.171.0/24 IPv6: 2a12:d9c0:1::-2a12:d9c0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 55:d3:97:10:37:f3:95:a9:97:85:0b:a2:36:27:f4:56:c8:ba: 3f:42:fc:f0:8f:db:c0:46:7e:d1:c5:f7:b5:71:33:21:07:c9: 05:d3:29:50:34:0e:c8:7a:e1:5b:84:b7:19:20:43:85:48:eb: 89:38:13:b3:99:2b:2a:2b:36:7f:53:ef:09:c2:2e:2a:c8:9a: cc:67:03:56:35:d5:3a:a5:85:d3:1e:25:c0:b2:0c:18:16:31: e0:6e:22:1c:34:d4:81:5f:05:f3:ee:ed:3d:c5:46:70:fb:2f: c2:84:59:c5:fd:5d:f0:f8:8b:21:63:87:fa:22:39:7a:a4:38: 2a:13:c4:90:e8:c1:f5:bc:64:c5:77:8b:07:eb:8f:d5:fc:9f: 67:0a:bf:40:78:e3:07:f9:79:be:e1:f8:ef:78:ab:25:e0:e4: 5f:a0:f1:c5:06:00:cb:5d:10:f2:97:f7:5f:14:5c:ac:cf:9f: 78:9f:36:74:41:34:05:b2:ae:6e:b6:a7:16:5d:20:9b:b5:53: 5d:68:5b:0c:97:7d:8e:ee:4b:c1:c2:1a:5e:08:4d:dc:2d:e7: 97:e3:5a:1c:98:47:8e:e5:55:08:43:1c:1d:c5:f8:be:8e:24: 50:c9:17:c3:14:fe:c7:52:15:ab:ec:df:3a:31:8a:b2:bd:de: 25:d7:94:ee -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt3xrtoiLEYw/1RaaNz6CoIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTgzMjZlMDAxYWE3ZmM1NmY4MzUzMTMxNTM3NmY5ZWFh ZTA5ODgwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjgxOWM4ZjQ4N2NiY2Q1ZGZlYzYxNGQ2NzE5OGM5YjY5OWZhZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudGLd+0rZRqcLfxKpGAD72cbPQsE c45gfRpI+MjZ0Fll8tNOnIlKJndRBgJH+GzaG4Pemu/uP1BjFBgmYDaPvVX1Xjdr xNiRmZadjCbRB8cRKPHu0RDyC9D4zG0LahUlk3WtjybUUsYM1uv0Bd9R6whfJ3Ri 5/ZP7XY1wX2nI5L/yBKTTSQCksAHhGU93N6ly9okHs3ft2KVLsw+cDysGqMqoOXB 0eR+ORJ6pATDYUtvg6q6b7YC/nNl3SC+e8Yo/LQoCpJf2Ht05pSTza3Qo/sz86Nj jNM7KX3PnFNvLTfrKS3nL/v9xTeGFWdkYsC1xMU9AVSo1og/fA1kDdzbzwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOuBnI9IfLzV3+xhTWcZjJtpn69RMB8GA1UdIwQY MBaAFA8YMm4AGqf8Vvg1MTFTdvnqrgmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhneWJnQWFwX3hXLURVeE1WTjItZXF1Q1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hN2U0NWMtZjI5Ny00NTIwLWFiZTYt NmI4MTM2OTNiYzhjLzEvNjRHY2owaDh2TlhmN0dGTlp4bU1tMm1mcjFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9hN2U0NWMtZjI5Ny00NTIwLWFiZTYtNmI4MTM2OTNiYzhj LzEvRHhneWJnQWFwX3hXLURVeE1WTjItZXF1Q1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAW9irMBoE AgACMBQwEgMHACoS2cAAAQMHACoS2cAAAjANBgkqhkiG9w0BAQsFAAOCAQEAVdOX EDfzlamXhQuiNif0Vsi6P0L88I/bwEZ+0cX3tXEzIQfJBdMpUDQOyHrhW4S3GSBD hUjriTgTs5krKis2f1PvCcIuKsiazGcDVjXVOqWF0x4lwLIMGBYx4G4iHDTUgV8F 8+7tPcVGcPsvwoRZxf1d8PiLIWOH+iI5eqQ4KhPEkOjB9bxkxXeLB+uP1fyfZwq/ QHjjB/l5vuH473irJeDkX6DxxQYAy10Q8pf3XxRcrM+feJ82dEE0BbKubranFl0g m7VTXWhbDJd9ju5LwcIaXghN3C3nl+NaHJhHjuVVCEMcHcX4vo4kUMkXwxT+x1IV q+zfOjGKsr3eJdeU7g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:07 2026 by rpki-client