This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/fXd2qSqxEZOV3cRcZOHurquaaX0.roa File: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (raw, json) Hash identifier: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI= Subject key identifier: 7D:77:76:A9:2A:B1:11:93:95:DD:C4:5C:64:E1:EE:AE:AB:9A:69:7D Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Certificate serial: 019B77589C254F0A4F9DC08A88C853C8E327 Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/fXd2qSqxEZOV3cRcZOHurquaaX0.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57530 IP address blocks: 91.232.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9c:25:4f:0a:4f:9d:c0:8a:88:c8:53:c8:e3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d7776a92ab1119395ddc45c64e1eeaeab9a697d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:99:d7:47:ce:ec:67:8e:fc:14:a0:02:74: 33:08:df:55:1d:2d:a7:ac:b6:28:ba:fa:5f:bb:76: c3:69:6e:a1:c7:4e:f0:fa:ed:42:e0:ae:2b:cd:e7: 32:1f:35:59:68:ea:c6:9d:da:f8:6a:bb:b3:3a:4c: 8c:11:56:e0:f4:e1:b6:d9:97:01:68:52:ce:f8:d6: 03:3c:3c:31:2e:fc:da:2f:e6:6b:97:aa:4a:32:57: f1:6e:1a:e8:ec:3f:d7:29:dd:0a:f9:f0:4e:d6:5a: 0c:8e:be:81:fb:2b:97:36:b2:3e:d7:ae:e0:22:3e: cf:b7:25:61:98:6f:bc:a7:2b:56:6d:5b:67:2f:bc: 7e:2e:8b:2c:1b:43:c4:18:3f:5e:2b:a6:20:2a:ee: 02:c1:7e:0d:bf:c9:66:30:55:43:d7:12:f9:8c:f4: 34:e3:6a:f1:de:fb:5d:2c:c0:7b:6c:98:6c:75:5a: 33:d1:ba:9c:6f:25:e6:24:7b:be:3b:01:df:17:a4: 62:9e:f9:83:18:d0:b2:30:7b:df:a0:02:b9:91:1f: b5:82:be:44:04:5f:80:51:5c:5a:42:7d:68:2d:60: 23:2c:a1:f2:d7:d5:d6:a9:84:b0:e7:b6:54:08:af: dd:14:90:7f:8f:e7:e7:ec:be:09:ca:ea:bd:04:b5: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:77:76:A9:2A:B1:11:93:95:DD:C4:5C:64:E1:EE:AE:AB:9A:69:7D X509v3 Authority Key Identifier: keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/fXd2qSqxEZOV3cRcZOHurquaaX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.113.0/24 Signature Algorithm: sha256WithRSAEncryption 10:0f:7e:b0:04:fb:df:cb:f5:46:b7:75:74:0f:58:d7:fd:6c: ce:94:fd:ba:e6:c0:d9:c7:d6:d3:62:ec:19:fc:65:7d:fc:02: 19:5e:6f:3a:a3:fd:e2:db:38:c1:ec:76:ee:5c:c7:b5:f4:57: d3:33:6e:b4:3e:46:ed:eb:bd:32:4a:05:1d:72:8f:ae:be:33: 23:05:44:a2:c6:a7:17:22:19:08:80:ba:65:d7:62:38:7b:ee: a5:cb:1b:36:3d:7a:b6:5d:a0:37:01:78:bd:52:5e:5d:0c:d6: ff:ed:54:79:01:d0:21:29:eb:fd:de:e5:be:d6:86:47:92:e3: 81:20:0e:cc:12:55:0c:1e:bb:48:f7:56:49:66:0c:64:71:9b: 8f:6e:53:27:5a:6f:a1:16:67:6e:5e:61:aa:5a:fa:04:2f:fe: 3a:ab:36:36:70:44:11:4a:2e:f1:1f:84:ba:0d:56:28:ae:a1: ed:d3:4a:d3:a3:87:7d:9a:60:aa:ff:32:77:63:9f:45:03:6b: 5e:0d:17:25:6b:6c:0e:e0:66:14:bf:0d:e7:07:6d:1b:29:84: cd:7b:34:0f:35:50:4d:15:83:9d:ae:16:23:bc:1e:07:15:0e: 6e:ec:07:a5:f0:33:1e:98:f1:9f:cc:e3:77:66:7d:1a:20:57: 6b:a3:4e:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJwlTwpPncCKiMhTyOMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNjBiOTY2NzA4OTNmYzNkNjM3MWY2YzU3NDZjNWYyNmI2 YTIwM2QwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDc3NzZhOTJhYjExMTkzOTVkZGM0NWM2NGUxZWVhZWFiOWE2OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VyZ10fO7GeO/BSgAnQzCN9VHS2n rLYouvpfu3bDaW6hx07w+u1C4K4rzecyHzVZaOrGndr4aruzOkyMEVbg9OG22ZcB aFLO+NYDPDwxLvzaL+Zrl6pKMlfxbhro7D/XKd0K+fBO1loMjr6B+yuXNrI+167g Ij7PtyVhmG+8pytWbVtnL7x+LossG0PEGD9eK6YgKu4CwX4Nv8lmMFVD1xL5jPQ0 42rx3vtdLMB7bJhsdVoz0bqcbyXmJHu+OwHfF6RinvmDGNCyMHvfoAK5kR+1gr5E BF+AUVxaQn1oLWAjLKHy19XWqYSw57ZUCK/dFJB/j+fn7L4Jyuq9BLWYNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH13dqkqsRGTld3EXGTh7q6rmml9MB8GA1UdIwQY MBaAFBpguWZwiT/D1jcfbFdGxfJraiA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjkt NmE2MTM5NGY2MjY5LzEvZlhkMnFTcXhFWk9WM2NSY1pPSHVycXVhYVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjktNmE2MTM5NGY2MjY5 LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hxMA0G CSqGSIb3DQEBCwUAA4IBAQAQD36wBPvfy/VGt3V0D1jX/WzOlP265sDZx9bTYuwZ /GV9/AIZXm86o/3i2zjB7HbuXMe19FfTM260Pkbt670ySgUdco+uvjMjBUSixqcX IhkIgLpl12I4e+6lyxs2PXq2XaA3AXi9Ul5dDNb/7VR5AdAhKev93uW+1oZHkuOB IA7MElUMHrtI91ZJZgxkcZuPblMnWm+hFmduXmGqWvoEL/46qzY2cEQRSi7xH4S6 DVYorqHt00rTo4d9mmCq/zJ3Y59FA2teDRcla2wO4GYUvw3nB20bKYTNezQPNVBN FYOdrhYjvB4HFQ5u7Ael8DMemPGfzON3Zn0aIFdro05p -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:10 2026 by rpki-client