This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/1-oF-we2cmHSHaID5tDY175ejYyc.roa File: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (raw, json) Hash identifier: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ= Subject key identifier: FA:81:7E:C1:ED:9C:98:74:87:68:80:F9:B4:36:35:EF:97:A3:63:27 Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Certificate serial: 019B79EC344A0DBA55C9C8335E024E4B85AD Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/1-oF-we2cmHSHaID5tDY175ejYyc.roa Signing time: Thu 01 Jan 2026 14:18:01 +0000 ROA not before: Thu 01 Jan 2026 14:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43013 IP address blocks: 91.241.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:34:4a:0d:ba:55:c9:c8:33:5e:02:4e:4b:85:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa817ec1ed9c9874876880f9b43635ef97a36327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:eb:ca:19:73:ef:b6:87:10:16:01:eb:e7: 17:4e:a7:7b:00:66:1d:49:13:18:69:34:b7:90:aa: 6e:e2:40:34:79:ee:e7:aa:c5:88:f1:50:c7:7b:83: 3a:64:4f:8b:4b:9f:0b:b4:0a:6b:12:03:06:c1:76: e5:ae:e2:ff:61:25:b9:32:a2:7a:9b:48:21:bf:55: dc:75:5a:e6:b4:b1:1f:bd:e4:00:19:74:c7:da:6d: 12:55:92:f2:a6:af:0f:00:71:23:3d:09:59:dd:c4: 55:48:ec:d7:37:4f:0c:a8:03:9b:f1:44:c2:3e:4c: cf:db:33:78:88:a8:4d:e1:ac:23:2c:60:df:2b:7a: 4d:49:ab:b7:11:4b:2b:0d:3a:eb:cd:10:be:43:41: d6:b9:fc:59:c7:5d:7e:0d:f6:b8:ea:82:df:bb:e5: 8e:f9:8a:4c:e3:8f:f5:36:cc:3b:22:3e:fd:31:71: 6e:71:b3:19:96:46:6a:20:fa:92:3f:c1:c9:fb:33: b3:ab:aa:e3:50:a9:7e:b1:3e:0d:5b:2f:56:7f:1f: 7b:f3:42:bc:df:78:8e:bc:ad:bb:ef:39:c3:93:9e: d5:a0:e0:4e:6d:ee:5b:a7:f7:75:ad:c0:c2:63:93: 98:76:8f:2c:16:52:45:70:62:5c:53:a8:bb:14:64: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:81:7E:C1:ED:9C:98:74:87:68:80:F9:B4:36:35:EF:97:A3:63:27 X509v3 Authority Key Identifier: keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/1-oF-we2cmHSHaID5tDY175ejYyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.0.0/23 Signature Algorithm: sha256WithRSAEncryption 41:3d:71:7f:40:de:1a:8e:fd:1f:30:20:f9:72:74:42:11:72: aa:ed:34:e3:6f:75:83:c3:c6:67:5b:f3:e3:d5:59:68:b9:85: f0:50:b7:cb:e4:04:ed:9d:a5:27:62:33:5c:21:10:b1:c1:2f: aa:5c:0d:a5:c9:8b:96:c5:49:ab:fa:2e:65:59:b8:0c:96:39: 1d:f7:96:6a:ba:a4:c6:e6:6a:b7:4b:91:34:9e:42:12:37:ac: b1:99:48:23:fd:a6:e5:c9:53:3f:39:d3:88:eb:23:dd:75:11: 63:6c:6c:b1:53:7b:a9:00:b4:41:96:81:68:40:a2:4b:d3:8e: 36:8d:d6:55:05:43:2b:2e:35:42:79:f9:1d:7b:37:5d:b9:ee: aa:de:26:b2:78:c0:7a:42:9a:40:e8:31:3d:bf:4c:5d:b6:99: 30:ed:0a:5e:22:15:97:80:3e:f3:80:b2:b8:9e:5f:92:a3:ed: 7b:83:34:d6:92:b9:42:3f:60:6d:98:1d:9a:df:37:62:fb:08: 8f:cc:07:96:07:3a:42:f6:c3:4f:17:3b:cc:ee:25:21:58:46: 65:3f:9c:5a:e1:3d:3b:61:3f:2d:b3:64:1e:b3:30:54:68:ff: 3c:c1:1f:cc:bb:7c:b5:14:76:04:41:ce:7e:4b:b1:a1:03:9f: c3:f1:3f:53 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57DRKDbpVycgzXgJOS4WtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1 YWM5MzAwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTgxN2VjMWVkOWM5ODc0ODc2ODgwZjliNDM2MzVlZjk3YTM2MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNzryhlz77aHEBYB6+cXTqd7AGYd SRMYaTS3kKpu4kA0ee7nqsWI8VDHe4M6ZE+LS58LtAprEgMGwXblruL/YSW5MqJ6 m0ghv1XcdVrmtLEfveQAGXTH2m0SVZLypq8PAHEjPQlZ3cRVSOzXN08MqAOb8UTC PkzP2zN4iKhN4awjLGDfK3pNSau3EUsrDTrrzRC+Q0HWufxZx11+Dfa46oLfu+WO +YpM44/1Nsw7Ij79MXFucbMZlkZqIPqSP8HJ+zOzq6rjUKl+sT4NWy9Wfx9780K8 33iOvK277znDk57VoOBObe5bp/d1rcDCY5OYdo8sFlJFcGJcU6i7FGRKRwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqBfsHtnJh0h2iA+bQ2Ne+Xo2MnMB8GA1UdIwQY MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt NDA5ODlkMGRmYzVjLzEvMS1vRi13ZTJjbUhTSGFJRDV0RFkxNzVlall5Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzAvNDZjZjJjLTViZWEtNDg2MS04ZTVkLTQwOTg5ZDBkZmM1 Yy8xL0NDRUE4TEdaSFlDa1pDSFpfbEZIOHRWYXlUQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvxADAN BgkqhkiG9w0BAQsFAAOCAQEAQT1xf0DeGo79HzAg+XJ0QhFyqu004291g8PGZ1vz 49VZaLmF8FC3y+QE7Z2lJ2IzXCEQscEvqlwNpcmLlsVJq/ouZVm4DJY5HfeWarqk xuZqt0uRNJ5CEjessZlII/2m5clTPznTiOsj3XURY2xssVN7qQC0QZaBaECiS9OO No3WVQVDKy41Qnn5HXs3Xbnuqt4msnjAekKaQOgxPb9MXbaZMO0KXiIVl4A+84Cy uJ5fkqPte4M01pK5Qj9gbZgdmt83YvsIj8wHlgc6QvbDTxc7zO4lIVhGZT+cWuE9 O2E/LbNkHrMwVGj/PMEfzLt8tRR2BEHOfkuxoQOfw/E/Uw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:52:35 2026 by rpki-client