This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa File: 1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa (raw, json) Hash identifier: Xb0xuBfRe7FwO8H+eAMIQNLLlYRIEueyRhLbYCR1L9E= Subject key identifier: D6:A0:78:94:77:50:13:71:B9:06:0A:54:ED:C1:5D:17:A1:56:7C:19 Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Certificate serial: 019B791117A0AADDE60D4A60619FECDD7C85 Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15542 IP address blocks: 91.230.33.0/24 maxlen: 24 91.230.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:17:a0:aa:dd:e6:0d:4a:60:61:9f:ec:dd:7c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6a0789477501371b9060a54edc15d17a1567c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:a6:d0:4b:de:9d:52:32:b8:d8:0a:81:d8: 62:82:a6:de:38:86:9c:cf:60:31:56:1e:ff:80:16: 62:e5:42:53:7f:2a:91:38:ba:96:24:4b:90:c0:77: 3f:09:e8:f0:31:38:9d:3d:e8:65:ec:8f:a4:aa:2b: c5:cb:5b:04:85:50:0e:ba:67:49:a5:b9:9d:5f:c8: 63:1f:96:6a:c4:e4:eb:2b:51:69:8a:63:17:c5:13: c7:eb:5d:8f:ea:d2:ea:d4:56:63:ab:bc:b6:dc:d5: 96:b2:4c:65:d3:5f:9f:dc:c8:c4:8d:34:72:98:1c: 2f:06:bd:d2:0d:54:52:c1:b8:40:60:91:e1:e9:63: f0:46:aa:52:53:d4:45:30:df:68:b9:cc:db:c7:c3: 88:7c:f6:b2:54:cb:99:42:6f:60:3e:d3:d0:01:e9: 92:67:74:1a:4b:05:3b:ce:48:c6:91:c8:6b:cf:d7: f9:9f:a5:cb:9f:e9:5b:89:e7:1e:4d:95:15:e6:b2: 9e:d3:c7:18:c4:f1:21:42:f2:74:2b:ab:d4:00:52: e1:ba:ae:87:3b:35:9f:b9:67:52:aa:58:b6:00:1f: 69:31:1b:e5:5b:3c:1f:e7:14:b3:b5:dc:58:00:9a: b0:08:ef:78:d7:ab:25:b1:47:1a:40:6c:ae:dd:24: c5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A0:78:94:77:50:13:71:B9:06:0A:54:ED:C1:5D:17:A1:56:7C:19 X509v3 Authority Key Identifier: keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.33.0-91.230.35.255 Signature Algorithm: sha256WithRSAEncryption 6e:93:6b:a3:0b:06:9c:ea:65:4a:0a:13:0e:83:1d:21:07:ff: c7:4a:c6:6a:6c:bf:86:a4:92:48:e2:7b:ac:e7:5d:be:8d:89: 9f:6b:6c:9d:3d:09:60:8a:78:80:5d:47:e9:cf:fb:3e:d9:da: eb:25:bd:a7:65:83:2b:63:20:85:35:5d:cd:09:0c:9b:2e:b2: 14:a3:64:eb:74:a6:ad:33:42:ff:11:36:81:80:ab:36:c3:be: 3e:2b:41:83:4f:73:bc:0c:53:b7:1e:67:ab:87:36:15:a4:6c: 97:ca:b9:35:38:49:c2:cf:21:a1:94:57:f8:f8:a5:ae:da:c5: a6:64:a0:9e:c0:72:c4:bf:fc:41:64:5c:67:a9:34:28:95:db: 00:b8:c9:ba:b7:41:22:f1:6d:01:41:f0:73:1a:c5:2e:7c:b3: 9c:ae:82:15:41:c5:30:7e:27:d9:ac:fb:17:03:22:ed:a5:ab: 2a:28:dc:4c:26:1f:1c:09:73:57:01:2c:2f:81:9c:ff:0d:7a: 6e:9a:70:f1:40:28:19:c1:d7:4f:73:db:dc:3d:53:62:4f:4e: 04:de:bf:bb:4e:16:fb:b3:85:73:b3:4f:82:a5:58:1b:24:4c: 0a:ce:5d:96:3b:d1:97:20:6d:48:b0:44:ba:f8:be:a1:8e:5b: aa:12:b6:f5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ERegqt3mDUpgYZ/s3XyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx NzRkMmQwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmEwNzg5NDc3NTAxMzcxYjkwNjBhNTRlZGMxNWQxN2ExNTY3YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEym0EvenVIyuNgKgdhigqbeOIac z2AxVh7/gBZi5UJTfyqROLqWJEuQwHc/CejwMTidPehl7I+kqivFy1sEhVAOumdJ pbmdX8hjH5ZqxOTrK1FpimMXxRPH612P6tLq1FZjq7y23NWWskxl01+f3MjEjTRy mBwvBr3SDVRSwbhAYJHh6WPwRqpSU9RFMN9ouczbx8OIfPayVMuZQm9gPtPQAemS Z3QaSwU7zkjGkchrz9f5n6XLn+lbieceTZUV5rKe08cYxPEhQvJ0K6vUAFLhuq6H OzWfuWdSqli2AB9pMRvlWzwf5xSztdxYAJqwCO9416slsUcaQGyu3STFcQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNageJR3UBNxuQYKVO3BXRehVnwZMB8GA1UdIwQY MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt ZWJkMzE0NTQyMmVhLzEvMXFCNGxIZFFFM0c1QmdwVTdjRmRGNkZXZkJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb5iED BAJb5iAwDQYJKoZIhvcNAQELBQADggEBAG6Ta6MLBpzqZUoKEw6DHSEH/8dKxmps v4akkkjie6znXb6NiZ9rbJ09CWCKeIBdR+nP+z7Z2uslvadlgytjIIU1Xc0JDJsu shSjZOt0pq0zQv8RNoGAqzbDvj4rQYNPc7wMU7ceZ6uHNhWkbJfKuTU4ScLPIaGU V/j4pa7axaZkoJ7AcsS//EFkXGepNCiV2wC4ybq3QSLxbQFB8HMaxS58s5yughVB xTB+J9ms+xcDIu2lqyoo3EwmHxwJc1cBLC+BnP8Nem6acPFAKBnB109z29w9U2JP TgTev7tOFvuzhXOzT4KlWBskTArOXZY70ZcgbUiwRLr4vqGOW6oStvU= -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:22 2026 by rpki-client