This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa File: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (raw, json) Hash identifier: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE= Subject key identifier: FB:A8:9A:19:7C:67:99:90:10:3E:7A:E0:AB:FF:05:FE:27:0E:D6:0E Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322 Certificate serial: 019B7F14F2951D0B58C08ECFF23B11A4D8F6 Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa Signing time: Fri 02 Jan 2026 14:20:37 +0000 ROA not before: Fri 02 Jan 2026 14:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59521 IP address blocks: 82.163.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f2:95:1d:0b:58:c0:8e:cf:f2:3b:11:a4:d8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322 Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fba89a197c679990103e7ae0abff05fe270ed60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:a5:9e:6d:bf:dc:35:17:c1:a3:15:1a:64: 6b:0b:28:bc:cc:df:cc:05:84:4e:62:cb:3d:83:0b: f1:51:3e:60:47:fe:f5:af:c7:6b:50:8a:95:bc:9c: a2:07:94:c4:eb:2b:2c:33:df:bf:44:64:71:24:f2: 6b:85:d7:4b:8f:30:ab:c5:13:1c:5d:8e:7c:81:ea: 67:50:95:9e:4f:de:56:9e:55:6a:7d:75:61:34:45: cb:9d:c4:28:b6:93:48:22:8b:ba:57:78:75:8b:35: 1e:a3:42:2f:51:c0:4e:5c:ad:7f:42:22:71:85:d9: 73:49:bd:1a:bc:71:7f:3a:ed:dd:68:67:4c:d0:74: 72:41:b8:d6:23:08:af:a4:9a:eb:fe:ef:c6:68:ae: 7c:a8:27:31:da:e4:d9:60:d2:c5:e3:82:09:55:e5: cc:a5:69:59:03:4a:d2:8d:23:6b:fd:ea:a6:47:93: 39:bf:cb:81:34:2e:17:fe:a2:2a:a9:c6:92:97:f3: 78:e4:cb:a4:81:28:be:24:cd:7c:da:b0:e1:b1:01: d9:ff:68:f2:cc:4b:82:93:41:ce:29:f1:5b:f8:5c: 9f:3d:df:b2:f9:06:52:ee:b7:e3:ca:64:3a:90:83: 82:c0:8a:8b:fe:ec:dc:99:55:ef:83:b2:ae:f7:93: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A8:9A:19:7C:67:99:90:10:3E:7A:E0:AB:FF:05:FE:27:0E:D6:0E X509v3 Authority Key Identifier: keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.44.0/22 Signature Algorithm: sha256WithRSAEncryption 45:37:21:a1:b6:21:e2:29:c3:8f:c1:76:4e:02:27:cd:50:79: 6d:30:ca:f0:db:52:03:e7:d4:2c:b4:d9:ba:e8:91:a4:5a:cc: d3:75:10:ec:c7:a6:fa:0f:bd:ba:09:6d:73:41:f1:e7:b0:bf: 9c:74:56:b6:47:8a:dd:26:1d:87:7f:7a:62:29:16:14:ff:c3: 70:59:6f:31:89:e1:6b:0b:d8:41:98:08:e1:5a:06:89:94:d2: 40:a1:bc:5d:02:2c:83:62:80:0f:b7:88:4f:ce:fd:d9:b1:0b: 12:7a:88:82:c2:f1:c7:92:83:58:70:28:31:ac:90:e3:b7:56: 26:4c:10:10:45:2e:cf:a8:2c:81:96:fb:02:27:3f:5a:97:08: df:98:bf:6f:65:64:dc:95:c7:5b:2d:be:1c:4e:6c:d8:be:74: 8e:d2:cf:e8:15:65:4b:50:ab:8e:61:a7:b4:0a:09:2d:6f:75: 34:22:f9:ff:86:c8:ed:3e:01:00:86:17:9a:f7:fc:d5:8a:ae: 36:28:2f:70:20:6f:e7:a6:68:63:eb:4c:11:bf:a7:db:90:9c: 42:f4:85:55:d3:0a:b1:d2:6f:31:c8:6d:1e:c7:ea:44:d0:6e: 5f:90:4f:89:60:4a:6d:ca:33:10:02:93:04:3a:a7:b8:03:71: cc:2a:5b:89 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FPKVHQtYwI7P8jsRpNj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk MTgzMjIwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmE4OWExOTdjNjc5OTkwMTAzZTdhZTBhYmZmMDVmZTI3MGVkNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kSlnm2/3DUXwaMVGmRrCyi8zN/M BYROYss9gwvxUT5gR/71r8drUIqVvJyiB5TE6yssM9+/RGRxJPJrhddLjzCrxRMc XY58gepnUJWeT95WnlVqfXVhNEXLncQotpNIIou6V3h1izUeo0IvUcBOXK1/QiJx hdlzSb0avHF/Ou3daGdM0HRyQbjWIwivpJrr/u/GaK58qCcx2uTZYNLF44IJVeXM pWlZA0rSjSNr/eqmR5M5v8uBNC4X/qIqqcaSl/N45MukgSi+JM182rDhsQHZ/2jy zEuCk0HOKfFb+FyfPd+y+QZS7rfjymQ6kIOCwIqL/uzcmVXvg7Ku95NHuwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuomhl8Z5mQED564Kv/Bf4nDtYOMB8GA1UdIwQY MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt N2U0NmFkNzQ4NDg0LzEvMS02aWFHWHhubVpBUVBucmdxXzhGX2ljTzFnNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWMvYWY4OWQ4LThjMzUtNGM4Yy1iMTVkLTdlNDZhZDc0ODQ4 NC8xL0c4N2tCQVd1LTIyaGVqUU83eFdjNmNUUmd5SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlKjLDAN BgkqhkiG9w0BAQsFAAOCAQEARTchobYh4inDj8F2TgInzVB5bTDK8NtSA+fULLTZ uuiRpFrM03UQ7Mem+g+9ugltc0Hx57C/nHRWtkeK3SYdh396YikWFP/DcFlvMYnh awvYQZgI4VoGiZTSQKG8XQIsg2KAD7eIT8792bELEnqIgsLxx5KDWHAoMayQ47dW JkwQEEUuz6gsgZb7Aic/WpcI35i/b2Vk3JXHWy2+HE5s2L50jtLP6BVlS1CrjmGn tAoJLW91NCL5/4bI7T4BAIYXmvf81YquNigvcCBv56ZoY+tMEb+n25CcQvSFVdMK sdJvMchtHsfqRNBuX5BPiWBKbcozEAKTBDqnuANxzCpbiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:27:05 2026 by rpki-client