This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/cBk3ZWq1jJ5c0Xw6pclTJe1ARUQ.roa File: cBk3ZWq1jJ5c0Xw6pclTJe1ARUQ.roa (raw, json) Hash identifier: tIaWypa+2w3+EhClID+rbKASz6IrpIfwCtlLXu1+XIg= Subject key identifier: 70:19:37:65:6A:B5:8C:9E:5C:D1:7C:3A:A5:C9:53:25:ED:40:45:44 Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7 Certificate serial: 019B7D5BDC0DFE79AB63F8CE62E1D8669DE2 Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/cBk3ZWq1jJ5c0Xw6pclTJe1ARUQ.roa Signing time: Fri 02 Jan 2026 06:18:50 +0000 ROA not before: Fri 02 Jan 2026 06:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50204 IP address blocks: 91.217.100.0/23 maxlen: 23 151.249.96.0/21 maxlen: 21 185.22.16.0/22 maxlen: 22 193.32.12.0/22 maxlen: 22 195.211.252.0/22 maxlen: 22 2a00:5fa0::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:dc:0d:fe:79:ab:63:f8:ce:62:e1:d8:66:9d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7 Validity Not Before: Jan 2 06:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=701937656ab58c9e5cd17c3aa5c95325ed404544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:a7:c1:56:fe:fe:1b:09:9c:5a:49:26:53: a2:78:55:93:3a:c3:85:81:ca:b2:48:f8:87:17:09: 73:d5:3e:c5:ef:5c:73:ee:a3:ae:b4:74:e0:04:8e: 6d:f5:58:2f:82:f6:4e:9d:80:a9:7a:30:1f:e1:db: 0a:93:b9:4c:dc:ff:47:ae:ba:1b:a8:cc:83:4a:eb: 4d:2a:7e:4c:c3:28:5e:cc:6c:00:56:ba:85:76:a4: 55:af:88:c2:f8:18:89:f0:99:b6:69:d8:81:c2:c7: 84:54:26:6b:76:8b:21:5f:4d:f0:ab:7a:72:24:da: e0:48:29:8e:60:c0:3f:b6:19:41:1e:01:11:f8:44: 86:43:c6:44:c9:26:57:6e:34:32:c4:45:6f:b6:ed: 35:59:c1:38:18:91:a6:59:49:be:60:0b:f2:fc:85: f0:23:ea:7e:61:71:56:ed:42:a2:44:63:9f:b4:10: 32:4f:19:4e:3e:4c:93:5b:71:f3:c9:39:13:b0:ac: 83:e8:73:20:a3:1d:b1:47:c0:d1:c7:60:5f:f1:89: b0:8a:5a:b5:9f:6c:0f:af:4c:0c:49:cd:13:b4:82: 21:1b:6a:a1:15:88:32:d8:c1:dc:8a:83:19:f7:cb: 72:df:b9:ba:91:dc:63:ee:79:3b:ee:55:28:2a:bf: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:19:37:65:6A:B5:8C:9E:5C:D1:7C:3A:A5:C9:53:25:ED:40:45:44 X509v3 Authority Key Identifier: keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/cBk3ZWq1jJ5c0Xw6pclTJe1ARUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.100.0/23 151.249.96.0/21 185.22.16.0/22 193.32.12.0/22 195.211.252.0/22 IPv6: 2a00:5fa0::/36 Signature Algorithm: sha256WithRSAEncryption b1:40:5c:1b:87:fe:63:18:2f:e8:6e:c9:b2:0b:ac:45:f2:c2: b9:ab:7e:6d:3d:e1:91:a8:b5:4a:90:95:3e:a7:45:49:6d:16: bb:bb:8d:99:59:0c:6e:fe:35:08:86:22:31:8f:49:88:67:2c: 0d:6c:3e:46:7d:62:c5:a1:99:80:e4:98:75:d9:0c:57:fa:fb: 96:1d:23:41:5a:63:e8:88:15:bd:35:7e:33:8a:0e:aa:cd:d1: d4:2d:eb:50:d0:02:4a:a6:4a:b4:09:aa:07:d8:60:7f:dd:2d: ce:08:cf:2e:e5:51:68:f0:ea:c5:bb:9f:95:46:91:57:40:bc: 88:1e:cd:2b:5f:72:0a:c4:5d:0f:d3:95:c0:ca:b4:3d:43:69: 40:c0:ec:bc:99:06:16:6b:4c:e8:2c:a4:a0:b9:b6:6a:88:e6: 86:33:60:91:3b:ca:2f:f2:ad:7f:c8:9b:28:25:86:3a:8b:c5: 71:a0:00:85:de:bd:ab:49:d0:c2:24:d0:1a:91:50:ad:10:9e: de:c0:b5:38:ab:f0:d7:21:14:8b:17:25:56:17:5b:bb:0f:2c: ca:33:92:cc:2d:7e:63:55:d7:01:a9:7b:68:1d:2a:56:3a:03: 6c:7d:4c:a6:ac:eb:4a:c3:39:36:49:21:95:58:33:f6:d6:ac: 3d:e6:8a:2b -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt9W9wN/nmrY/jOYuHYZp3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NDAyNThhMWE2OGFlNjA1YzA3M2ZiNTgzYjEzZTEzNzZi Nzc4YTcwHhcNMjYwMTAyMDYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDE5Mzc2NTZhYjU4YzllNWNkMTdjM2FhNWM5NTMyNWVkNDA0NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LmnwVb+/hsJnFpJJlOieFWTOsOF gcqySPiHFwlz1T7F71xz7qOutHTgBI5t9VgvgvZOnYCpejAf4dsKk7lM3P9Hrrob qMyDSutNKn5MwyhezGwAVrqFdqRVr4jC+BiJ8Jm2adiBwseEVCZrdoshX03wq3py JNrgSCmOYMA/thlBHgER+ESGQ8ZEySZXbjQyxEVvtu01WcE4GJGmWUm+YAvy/IXw I+p+YXFW7UKiRGOftBAyTxlOPkyTW3HzyTkTsKyD6HMgox2xR8DRx2Bf8Ymwilq1 n2wPr0wMSc0TtIIhG2qhFYgy2MHcioMZ98ty37m6kdxj7nk77lUoKr/syQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFHAZN2VqtYyeXNF8OqXJUyXtQEVEMB8GA1UdIwQY MBaAFGlAJYoaaK5gXAc/tYOxPhN2t3inMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgt NzQ5ZTk4MGVjMGI3LzEvY0JrM1pXcTFqSjVjMFh3NnBjbFRKZTFBUlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgtNzQ5ZTk4MGVjMGI3 LzEvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBW9lkAwQD l/lgAwQCuRYQAwQCwSAMAwQCw9P8MA4EAgACMAgDBgQqAF+gADANBgkqhkiG9w0B AQsFAAOCAQEAsUBcG4f+Yxgv6G7JsgusRfLCuat+bT3hkai1SpCVPqdFSW0Wu7uN mVkMbv41CIYiMY9JiGcsDWw+Rn1ixaGZgOSYddkMV/r7lh0jQVpj6IgVvTV+M4oO qs3R1C3rUNACSqZKtAmqB9hgf90tzgjPLuVRaPDqxbuflUaRV0C8iB7NK19yCsRd D9OVwMq0PUNpQMDsvJkGFmtM6CykoLm2aojmhjNgkTvKL/Ktf8ibKCWGOovFcaAA hd69q0nQwiTQGpFQrRCe3sC1OKvw1yEUixclVhdbuw8syjOSzC1+Y1XXAal7aB0q VjoDbH1MpqzrSsM5NkkhlVgz9tasPeaKKw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:31 2026 by rpki-client