This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa File: Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa (raw, json) Hash identifier: mExfVg4mEZkQfa/o53ZXrQKDJoTaHqGKP/mA0/Gw99A= Subject key identifier: 01:CE:25:D6:9F:DB:66:5F:B0:20:D7:64:04:68:C9:2B:AB:79:58:E0 Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d Certificate serial: 019B7EA4BD3790A47667F3B70453BFC7C1BE Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa Signing time: Fri 02 Jan 2026 12:18:04 +0000 ROA not before: Fri 02 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205446 IP address blocks: 91.216.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:bd:37:90:a4:76:67:f3:b7:04:53:bf:c7:c1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d Validity Not Before: Jan 2 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01ce25d69fdb665fb020d7640468c92bab7958e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:b1:d3:63:4d:7d:44:cc:a0:e8:5a:78:8b: a5:6b:fd:66:cf:7f:c7:ee:2f:75:1e:4d:62:35:fe: fb:2a:5b:52:c0:d8:50:88:53:3a:ad:e6:4d:5a:fd: 4f:24:2f:5e:ee:a4:4c:8f:a5:45:d8:37:4a:9e:3a: ca:e7:49:31:39:c1:ef:b9:d6:6f:17:ae:e7:8a:be: 9e:36:00:7f:21:fe:57:a4:cb:67:35:2b:95:8c:82: ad:c4:7f:43:19:21:7a:a5:1c:0d:28:e8:21:19:9e: e0:6f:0f:59:48:29:0d:05:83:c0:c4:ae:8f:05:53: dd:5e:f0:4c:49:42:f4:c3:d2:11:99:5b:eb:83:68: a2:8f:6c:7b:fb:31:a1:e9:db:65:9f:57:81:96:39: 9b:f8:2d:a5:30:59:b1:f1:b1:ca:48:ff:3b:de:29: c8:e9:73:78:53:6b:23:73:12:a5:8a:89:d7:90:fb: 38:9e:ad:11:fa:1d:94:69:0a:c1:92:68:c4:be:37: 0c:61:8d:d3:02:f2:10:a1:52:ba:b7:27:98:ff:39: 8d:0f:0a:ff:b0:d4:bb:60:53:c0:e6:dc:a8:c3:a1: af:78:12:93:be:d3:94:09:26:c6:78:47:8e:54:5e: 19:5b:b9:76:30:0b:e5:c3:31:c1:8b:3d:cc:c9:8f: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CE:25:D6:9F:DB:66:5F:B0:20:D7:64:04:68:C9:2B:AB:79:58:E0 X509v3 Authority Key Identifier: keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.210.0/24 Signature Algorithm: sha256WithRSAEncryption 31:9b:43:f9:b4:dc:58:a2:bf:79:95:fb:2d:52:c3:ab:0c:ba: d2:07:20:dd:52:db:e9:c1:e5:cf:f1:4d:ab:09:2e:89:d1:a9: 17:a2:f5:02:b6:fa:d9:3e:56:38:85:20:aa:5f:55:94:82:1b: 9a:c0:cc:97:c4:19:db:3c:d2:c8:38:b3:c1:30:27:40:46:31: 54:34:f8:84:75:fb:d7:dc:ad:83:5e:02:18:67:30:0e:d6:29: 51:36:4e:19:17:a3:84:a4:ce:b0:56:8c:e1:ca:60:64:9b:27: 36:90:37:d5:a9:7a:90:c0:04:0f:03:f4:a7:56:f3:ba:07:00: 2a:43:4c:9b:89:a3:3b:2e:01:a1:c3:b0:e7:e3:b3:72:8b:74: d9:78:12:ee:2a:47:36:5c:d5:3c:43:42:c1:d7:6b:6c:33:27: 3a:c7:57:16:d8:8f:9f:49:f5:4d:39:a0:ac:05:ce:e7:d9:a3: ed:d9:b8:5c:23:94:36:a1:be:ff:7e:44:d2:e5:5d:a4:d6:81: e3:d7:45:36:92:d8:c0:60:56:99:60:da:76:be:ba:96:50:91: 10:6e:a4:57:5e:30:1f:fe:a1:e6:44:9e:cb:08:97:f1:85:0a: c1:bf:83:46:ee:7b:ce:26:f2:50:56:93:c1:4c:a1:7b:e2:6a: 24:63:52:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pL03kKR2Z/O3BFO/x8G+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODExYzhhZmZhZmIwYWMxZjVmN2Y2ZmY3YjY0YmI3MDM0 NjQ1N2QwHhcNMjYwMTAyMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWNlMjVkNjlmZGI2NjVmYjAyMGQ3NjQwNDY4YzkyYmFiNzk1OGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p+x02NNfUTMoOhaeIula/1mz3/H 7i91Hk1iNf77KltSwNhQiFM6reZNWv1PJC9e7qRMj6VF2DdKnjrK50kxOcHvudZv F67nir6eNgB/If5XpMtnNSuVjIKtxH9DGSF6pRwNKOghGZ7gbw9ZSCkNBYPAxK6P BVPdXvBMSUL0w9IRmVvrg2iij2x7+zGh6dtln1eBljmb+C2lMFmx8bHKSP873inI 6XN4U2sjcxKlionXkPs4nq0R+h2UaQrBkmjEvjcMYY3TAvIQoVK6tyeY/zmNDwr/ sNS7YFPA5tyow6GveBKTvtOUCSbGeEeOVF4ZW7l2MAvlwzHBiz3MyY+7LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHOJdaf22ZfsCDXZARoySureVjgMB8GA1UdIwQY MBaAFDaBHIr/r7CsH19/b/e2S7cDRkV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEt MGY1OTUyN2YzNGNiLzEvQWM0bDFwX2JabC13SU5ka0JHakpLNnQ1V09BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEtMGY1OTUyN2YzNGNi LzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jSMA0G CSqGSIb3DQEBCwUAA4IBAQAxm0P5tNxYor95lfstUsOrDLrSByDdUtvpweXP8U2r CS6J0akXovUCtvrZPlY4hSCqX1WUghuawMyXxBnbPNLIOLPBMCdARjFUNPiEdfvX 3K2DXgIYZzAO1ilRNk4ZF6OEpM6wVozhymBkmyc2kDfVqXqQwAQPA/SnVvO6BwAq Q0ybiaM7LgGhw7Dn47Nyi3TZeBLuKkc2XNU8Q0LB12tsMyc6x1cW2I+fSfVNOaCs Bc7n2aPt2bhcI5Q2ob7/fkTS5V2k1oHj10U2ktjAYFaZYNp2vrqWUJEQbqRXXjAf /qHmRJ7LCJfxhQrBv4NG7nvOJvJQVpPBTKF74mokY1Jj -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:23 2026 by rpki-client