This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa File: 1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa (raw, json) Hash identifier: avI9enOgnl+yynJNmVDI/bPieULR/2YL8z47OvnAoGM= Subject key identifier: F9:96:B0:04:4D:8A:57:06:7A:72:1E:67:FA:48:DC:AA:65:0B:73:4F Certificate issuer: /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab Certificate serial: 019BD09EAF1A617BF5E1CBE6173FD042D4F2 Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa Signing time: Sun 18 Jan 2026 10:20:19 +0000 ROA not before: Sun 18 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56714 IP address blocks: 91.227.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:9e:af:1a:61:7b:f5:e1:cb:e6:17:3f:d0:42:d4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab Validity Not Before: Jan 18 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f996b0044d8a57067a721e67fa48dcaa650b734f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:72:4e:cd:3d:48:c7:6d:ae:d7:58:d0:fa: ff:8a:fa:fb:07:ad:72:a7:43:76:02:dd:1c:96:e1: 20:87:c6:12:e9:51:17:fd:92:8b:57:ef:aa:96:ad: f0:36:79:e1:e4:e3:ac:00:5a:a2:5b:74:bc:27:0f: a0:b2:94:84:1a:7c:e7:13:3d:99:92:0d:2f:cb:1b: bc:52:c3:c3:82:5d:25:cf:97:c4:ca:b8:62:e8:39: fd:55:29:2c:e5:34:b4:a2:79:4b:d9:26:bb:42:d6: 13:e9:18:7b:94:bc:c8:b1:0c:ea:c5:37:bc:f9:b3: 53:69:27:11:14:21:3f:c4:6a:40:9b:2b:16:dd:33: 08:4e:57:fa:66:0a:cd:fb:58:14:69:3d:52:0e:2f: e5:2b:f7:1f:c1:4e:24:e5:55:1c:67:1e:f0:a4:f8: 95:65:ff:21:3c:70:39:f6:5b:00:eb:8f:42:12:7b: d8:07:e5:49:e1:da:d8:67:ca:30:fe:0e:cb:f7:0e: df:fe:63:c4:16:49:e8:91:c5:76:ba:c8:73:c6:6b: 2d:32:93:ef:81:a3:0e:76:2c:e5:6f:26:13:a7:21: 56:d7:9a:f7:65:7b:99:d5:e6:cc:cf:57:bc:38:e1: f9:a0:89:b2:f0:8b:4e:a5:29:cb:36:46:8e:ee:17: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:96:B0:04:4D:8A:57:06:7A:72:1E:67:FA:48:DC:AA:65:0B:73:4F X509v3 Authority Key Identifier: keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.24.0/23 Signature Algorithm: sha256WithRSAEncryption 79:44:29:08:5a:de:37:c3:7b:15:cd:37:ae:23:24:b0:30:c0: 96:70:9d:36:c3:57:2d:d6:d7:40:b9:d0:59:f1:5e:ef:59:f9: 70:36:a2:34:75:7e:b9:69:45:0d:9b:81:64:5c:82:9c:ff:a4: aa:40:98:ce:f4:5b:25:11:63:3c:57:03:06:e3:97:e7:18:0a: 44:a7:38:cc:57:7e:26:d7:68:ce:64:82:40:a1:ff:e0:94:44: c4:b8:ac:70:4d:5a:60:88:23:61:27:6d:a4:b2:42:26:b8:2d: c6:75:57:99:83:a5:83:a0:01:49:bf:30:d9:3c:30:67:6a:4a: ae:a9:37:a9:e3:fc:fc:c4:c9:95:96:42:e4:6b:70:d4:93:83: 01:fc:06:82:20:ff:90:c0:f7:7c:c7:e9:1b:b4:12:98:ad:1c: f9:89:b9:31:66:17:6b:cc:26:4c:fa:c7:59:08:e4:78:34:11: 1a:5d:6b:81:c6:a3:73:0e:cf:72:0e:34:fa:53:a0:ec:40:e6: aa:7d:fa:f4:0d:85:21:40:03:ca:cd:5b:12:22:45:15:9f:6d: d1:2a:d5:49:49:b6:72:af:dd:93:c1:f3:27:0c:91:ef:f1:87: ba:c9:d0:b0:a8:50:43:3c:75:43:23:d5:e3:6b:7c:95:27:b2: fd:68:96:b5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvQnq8aYXv14cvmFz/QQtTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MGVlNzNiMWU2YTg5YjRlZjUxNWJjNjdkYzk4MTcyOTZh NGQ4YWIwHhcNMjYwMTE4MTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTk2YjAwNDRkOGE1NzA2N2E3MjFlNjdmYTQ4ZGNhYTY1MGI3MzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAxyTs09SMdtrtdY0Pr/ivr7B61y p0N2At0cluEgh8YS6VEX/ZKLV++qlq3wNnnh5OOsAFqiW3S8Jw+gspSEGnznEz2Z kg0vyxu8UsPDgl0lz5fEyrhi6Dn9VSks5TS0onlL2Sa7QtYT6Rh7lLzIsQzqxTe8 +bNTaScRFCE/xGpAmysW3TMITlf6ZgrN+1gUaT1SDi/lK/cfwU4k5VUcZx7wpPiV Zf8hPHA59lsA649CEnvYB+VJ4drYZ8ow/g7L9w7f/mPEFknokcV2ushzxmstMpPv gaMOdizlbyYTpyFW15r3ZXuZ1ebMz1e8OOH5oImy8ItOpSnLNkaO7hertwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmWsARNilcGenIeZ/pI3KplC3NPMB8GA1UdIwQY MBaAFFgO5zseaom071Fbxn3JgXKWpNirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0E3bk94NXFpYlR2VVZ2R2ZjbUJjcGFrMktzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xNDRjMTgtOWU5ZS00ZTgxLTliYmIt ZmE2YTE4NzViOTQ3LzEvMS1aYXdCRTJLVndaNmNoNW4ta2pjcW1VTGMwOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTYvMTQ0YzE4LTllOWUtNGU4MS05YmJiLWZhNmExODc1Yjk0 Ny8xL1dBN25PeDVxaWJUdlVWdkdmY21CY3BhazJLcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvjGDAN BgkqhkiG9w0BAQsFAAOCAQEAeUQpCFreN8N7Fc03riMksDDAlnCdNsNXLdbXQLnQ WfFe71n5cDaiNHV+uWlFDZuBZFyCnP+kqkCYzvRbJRFjPFcDBuOX5xgKRKc4zFd+ JtdozmSCQKH/4JRExLiscE1aYIgjYSdtpLJCJrgtxnVXmYOlg6ABSb8w2TwwZ2pK rqk3qeP8/MTJlZZC5Gtw1JODAfwGgiD/kMD3fMfpG7QSmK0c+Ym5MWYXa8wmTPrH WQjkeDQRGl1rgcajcw7Pcg40+lOg7EDmqn369A2FIUADys1bEiJFFZ9t0SrVSUm2 cq/dk8HzJwyR7/GHusnQsKhQQzx1QyPV42t8lSey/WiWtQ== -----END CERTIFICATE-----Generated at Thu Jan 22 12:46:27 2026 by rpki-client