This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s1jVKx6MPnoT6fhoO-u6kNx7Snk.roa File: s1jVKx6MPnoT6fhoO-u6kNx7Snk.roa (raw, json) Hash identifier: dsfvjead1IVFzzsZG1XO0QBx1jaRR3rnKmRegr6o9J0= Subject key identifier: B3:58:D5:2B:1E:8C:3E:7A:13:E9:F8:68:3B:EB:BA:90:DC:7B:4A:79 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85395D332CEB2BF5DC2B7534D5A754 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s1jVKx6MPnoT6fhoO-u6kNx7Snk.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46918 IP address blocks: 45.91.84.0/22 maxlen: 22 91.242.64.0/22 maxlen: 24 91.242.123.0/24 maxlen: 24 91.242.125.0/24 maxlen: 24 91.242.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:39:5d:33:2c:eb:2b:f5:dc:2b:75:34:d5:a7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b358d52b1e8c3e7a13e9f8683bebba90dc7b4a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:b3:5b:27:25:1b:a7:05:36:b0:3d:58:f6: 92:28:0b:bb:c1:78:e7:a4:e4:c8:0f:be:fe:d1:e1: 30:a8:21:66:7c:33:0b:9d:03:e9:11:2c:ce:32:f6: 6a:ac:42:17:75:95:5d:50:d8:56:df:87:76:6a:fc: b6:9b:bf:48:91:6a:64:6e:ef:80:24:87:88:f9:e5: 38:73:6d:35:04:24:23:15:78:6b:14:5e:09:9d:84: eb:5d:f5:85:78:ce:5a:d0:5c:e8:62:87:bb:07:4e: f5:74:0f:68:20:e7:9b:de:03:d1:ce:99:c7:59:74: 1d:38:0f:1d:9e:bf:85:08:00:b0:4a:73:ce:5e:c6: b3:5d:31:ce:49:ab:1f:80:cc:19:f3:74:b4:bc:bc: fc:8c:31:e6:a0:3d:7f:4e:ab:96:59:4b:48:80:6b: dc:9c:1e:2e:44:64:12:e5:19:b3:52:0a:f0:e1:ab: 73:c4:c3:47:d3:75:5b:90:7a:92:e8:ef:0a:01:39: a5:98:c3:cf:2e:57:e1:f8:50:45:4b:4f:de:3f:bb: 63:a7:5c:70:94:4a:0e:7f:75:07:eb:52:17:e4:52: 22:c3:e6:2b:d7:91:18:8b:2d:4e:1a:7e:b5:39:84: 2b:3d:27:db:26:d6:21:a0:2f:0a:8b:31:e6:98:5e: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:58:D5:2B:1E:8C:3E:7A:13:E9:F8:68:3B:EB:BA:90:DC:7B:4A:79 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s1jVKx6MPnoT6fhoO-u6kNx7Snk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.84.0/22 91.242.64.0/22 91.242.123.0/24 91.242.125.0/24 91.242.127.0/24 Signature Algorithm: sha256WithRSAEncryption 84:de:b0:d4:7f:bd:6f:2b:4e:35:8a:fd:16:77:38:b2:3e:5f: 04:91:46:9b:5b:60:b7:98:36:c0:44:a9:1e:60:ca:28:7c:9a: f9:df:f5:09:d2:2c:40:8f:fc:af:92:af:d4:ce:6b:88:d1:78: 50:11:74:8f:1d:06:48:5d:ba:82:d4:cd:6e:1b:ff:96:82:45: 63:14:bc:19:42:62:ca:11:49:9b:3b:26:bd:9b:33:76:82:f7: 17:f3:07:bd:ef:50:8c:53:01:87:7d:9d:9b:eb:f9:04:45:93: aa:a9:18:25:b6:39:a5:0a:85:f5:c6:77:81:ed:d8:99:b7:49: 7a:a0:c0:18:ee:71:5d:69:2a:a0:ab:12:83:22:2c:08:04:b7: 52:7b:ba:c9:c1:8a:cd:17:b6:e7:54:85:67:68:a2:36:44:99: 1e:22:32:82:f4:4b:9e:24:a2:5d:12:f7:f1:34:48:a6:ae:b3: ee:ab:8b:61:5e:35:a9:7a:54:e2:d9:01:c8:f2:ae:8e:3e:c5: ce:fd:a2:7f:60:19:18:17:72:50:af:62:d0:95:6b:94:bf:b0: 6d:30:fc:ab:34:ab:31:b7:3d:38:36:78:5f:57:de:f6:80:df: 02:27:7a:b3:c6:d0:8b:08:2a:a1:9d:39:f5:86:27:da:39:3d: 95:3b:d5:df -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hTldMyzrK/XcK3U01adUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzU4ZDUyYjFlOGMzZTdhMTNlOWY4NjgzYmViYmE5MGRjN2I0YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01ezWyclG6cFNrA9WPaSKAu7wXjn pOTID77+0eEwqCFmfDMLnQPpESzOMvZqrEIXdZVdUNhW34d2avy2m79IkWpkbu+A JIeI+eU4c201BCQjFXhrFF4JnYTrXfWFeM5a0FzoYoe7B071dA9oIOeb3gPRzpnH WXQdOA8dnr+FCACwSnPOXsazXTHOSasfgMwZ83S0vLz8jDHmoD1/TquWWUtIgGvc nB4uRGQS5RmzUgrw4atzxMNH03VbkHqS6O8KATmlmMPPLlfh+FBFS0/eP7tjp1xw lEoOf3UH61IX5FIiw+Yr15EYiy1OGn61OYQrPSfbJtYhoC8KizHmmF54vwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLNY1SsejD56E+n4aDvrupDce0p5MB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvczFqVkt4Nk1Qbm9UNmZob08tdTZrTng3U25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLVtUAwQC W/JAAwQAW/J7AwQAW/J9AwQAW/J/MA0GCSqGSIb3DQEBCwUAA4IBAQCE3rDUf71v K041iv0WdziyPl8EkUabW2C3mDbARKkeYMoofJr53/UJ0ixAj/yvkq/UzmuI0XhQ EXSPHQZIXbqC1M1uG/+WgkVjFLwZQmLKEUmbOya9mzN2gvcX8we971CMUwGHfZ2b 6/kERZOqqRgltjmlCoX1xneB7diZt0l6oMAY7nFdaSqgqxKDIiwIBLdSe7rJwYrN F7bnVIVnaKI2RJkeIjKC9EueJKJdEvfxNEimrrPuq4thXjWpelTi2QHI8q6OPsXO /aJ/YBkYF3JQr2LQlWuUv7BtMPyrNKsxtz04NnhfV972gN8CJ3qzxtCLCCqhnTn1 hifaOT2VO9Xf -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:21 2026 by rpki-client