This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1tifNydRwtyf488xKTezBYrJFiQ.roa File: 1tifNydRwtyf488xKTezBYrJFiQ.roa (raw, json) Hash identifier: GW02B9y+Bmp0uiTL43lpdUVhMGdNRPKmCRDhy2pUMQ0= Subject key identifier: D6:D8:9F:37:27:51:C2:DC:9F:E3:CF:31:29:37:B3:05:8A:C9:16:24 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E69B001D5A7813B7243A39742FE4C Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1tifNydRwtyf488xKTezBYrJFiQ.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22160 IP address blocks: 91.200.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:69:b0:01:d5:a7:81:3b:72:43:a3:97:42:fe:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6d89f372751c2dc9fe3cf312937b3058ac91624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:f1:16:44:06:29:9c:9b:f6:a0:21:c2:22: 97:4f:75:8f:ba:ae:e3:cf:a0:c7:36:8b:f3:b1:b6: 17:7b:ca:75:6e:09:db:b6:b8:04:b2:e1:35:b5:09: 01:97:cf:b9:3a:9d:a8:35:89:b5:17:4c:cf:e0:6a: d4:71:1f:5f:1b:45:8c:2f:1a:a5:04:9c:64:10:cd: 1c:47:9d:5b:26:05:f9:a2:7e:8d:82:41:48:ac:d4: 4b:d9:12:c7:67:37:f8:43:77:08:dd:b9:cb:45:19: e9:01:67:d3:5d:a6:40:28:63:d2:01:e8:62:19:a9: ae:2d:6d:80:fd:2e:17:bc:8c:f7:82:6b:cf:f5:af: f3:2f:a1:64:80:81:34:ad:60:38:df:7a:6c:dd:71: 57:47:12:a9:51:a0:d2:e1:4f:cb:86:74:a5:88:ce: 22:b2:97:c0:c5:80:50:54:a3:44:b2:4c:11:12:21: 0a:16:9e:78:6f:72:bb:99:56:51:96:4f:ab:8c:45: 21:1c:8a:22:32:c0:f6:93:73:b0:87:ba:5e:01:2b: 36:60:eb:14:37:f2:bc:a0:58:ce:23:6f:72:5b:37: a3:03:d6:40:18:9e:b4:d9:e0:2b:c8:9c:59:37:ab: fe:5e:d5:34:58:c7:03:c8:9d:b8:4b:7c:bb:19:b4: 0d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D8:9F:37:27:51:C2:DC:9F:E3:CF:31:29:37:B3:05:8A:C9:16:24 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1tifNydRwtyf488xKTezBYrJFiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.221.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ad:43:cf:0b:04:1b:5b:d2:f8:34:b6:30:48:d2:f4:8c:75: 63:7f:ae:58:83:7a:66:ad:30:a0:8a:d6:50:dd:c5:1c:ee:5c: 3f:53:03:b0:eb:f0:63:b1:4f:7e:4f:62:04:de:89:91:31:1e: 39:1e:59:ad:0f:5f:83:4e:9a:d6:7f:bc:cc:b0:ce:7a:8f:25: 89:e9:54:52:b9:a6:97:41:fc:01:c4:b6:7d:14:2f:04:1b:4f: 96:0a:ec:a3:52:6b:19:22:1f:c4:e0:98:a6:aa:c9:01:a9:ab: 45:21:57:08:5b:70:85:17:83:e2:d8:42:a2:04:89:58:13:8b: 41:a5:c9:c4:a3:7a:0a:dd:63:6c:a4:c2:26:69:19:b4:5b:ce: 63:53:16:10:3f:05:41:d4:56:52:17:15:e6:90:96:b2:2b:f4: f4:ed:0d:a5:eb:32:18:0f:64:20:de:71:de:4e:dc:97:86:04: 20:ba:c4:c6:b5:bb:35:a6:8e:bc:76:5c:49:12:b2:a2:1c:19: 2c:81:70:05:ef:49:0f:0d:d0:4e:45:d2:d1:4e:85:ce:7b:62: 99:f7:4c:15:c8:88:d9:09:89:b9:4f:53:7e:5c:41:5b:41:5f: 57:1f:81:d4:1d:67:22:46:82:53:2f:90:e5:37:e9:c8:dd:6c: 81:dc:9a:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmmwAdWngTtyQ6OXQv5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmQ4OWYzNzI3NTFjMmRjOWZlM2NmMzEyOTM3YjMwNThhYzkxNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSLxFkQGKZyb9qAhwiKXT3WPuq7j z6DHNovzsbYXe8p1bgnbtrgEsuE1tQkBl8+5Op2oNYm1F0zP4GrUcR9fG0WMLxql BJxkEM0cR51bJgX5on6NgkFIrNRL2RLHZzf4Q3cI3bnLRRnpAWfTXaZAKGPSAehi GamuLW2A/S4XvIz3gmvP9a/zL6FkgIE0rWA433ps3XFXRxKpUaDS4U/LhnSliM4i spfAxYBQVKNEskwREiEKFp54b3K7mVZRlk+rjEUhHIoiMsD2k3Owh7peASs2YOsU N/K8oFjOI29yWzejA9ZAGJ602eAryJxZN6v+XtU0WMcDyJ24S3y7GbQNbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbYnzcnUcLcn+PPMSk3swWKyRYkMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvMXRpZk55ZFJ3dHlmNDg4eEtUZXpCWXJKRmlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jdMA0G CSqGSIb3DQEBCwUAA4IBAQACrUPPCwQbW9L4NLYwSNL0jHVjf65Yg3pmrTCgitZQ 3cUc7lw/UwOw6/BjsU9+T2IE3omRMR45HlmtD1+DTprWf7zMsM56jyWJ6VRSuaaX QfwBxLZ9FC8EG0+WCuyjUmsZIh/E4JimqskBqatFIVcIW3CFF4Pi2EKiBIlYE4tB pcnEo3oK3WNspMImaRm0W85jUxYQPwVB1FZSFxXmkJayK/T07Q2l6zIYD2Qg3nHe TtyXhgQgusTGtbs1po68dlxJErKiHBksgXAF70kPDdBORdLRToXOe2KZ90wVyIjZ CYm5T1N+XEFbQV9XH4HUHWciRoJTL5DlN+nI3WyB3JrU -----END CERTIFICATE-----Generated at Sun Jan 11 18:51:03 2026 by rpki-client