This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/18LLAEyGOzDEqVOGhVOCxXqhlAE.roa File: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (raw, json) Hash identifier: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw= Subject key identifier: D7:C2:CB:00:4C:86:3B:30:C4:A9:53:86:85:53:82:C5:7A:A1:94:01 Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Certificate serial: 019B7DCAADDF2DAD5B697908996507986BAC Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/18LLAEyGOzDEqVOGhVOCxXqhlAE.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.107.72.0/21 maxlen: 21 91.107.88.0/21 maxlen: 21 159.253.124.0/22 maxlen: 22 185.91.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ad:df:2d:ad:5b:69:79:08:99:65:07:98:6b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7c2cb004c863b30c4a95386855382c57aa19401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:8a:44:b9:79:6c:9c:fe:f2:39:8f:be:18: 59:44:53:15:36:01:1c:e3:d9:85:bb:9d:d5:e3:78: 5f:38:fe:c8:32:c9:a1:92:19:32:8e:b8:ee:fa:65: bf:75:a8:3d:b0:81:81:7b:9c:59:b0:af:d5:2f:74: 1d:5e:b2:51:de:20:d8:f9:3e:6b:65:49:4c:07:92: 99:05:5b:5c:32:94:c5:4b:a8:2c:3a:92:ea:ad:81: ee:40:4e:26:44:3c:a2:96:9f:f4:c0:ec:f8:2b:ad: 93:4d:f1:36:5a:2d:47:93:30:22:68:64:98:0d:5f: 50:5e:0b:33:29:bd:89:04:c9:fc:33:58:58:36:20: 7b:79:66:fb:ab:96:6a:48:92:84:da:67:44:4d:7b: f4:be:4e:40:35:0d:26:db:77:d9:9f:4c:ed:dd:90: 01:a1:78:88:94:a0:d5:3f:53:25:b7:94:c0:34:14: 2b:b8:bd:21:21:ec:69:4d:0f:30:2e:0c:22:53:1c: e0:8c:e3:fb:f3:18:31:88:57:d9:3e:bf:39:92:e8: 1b:8b:ee:ec:ae:f0:7b:e2:51:a6:98:8a:61:40:ff: da:cd:10:b4:7d:00:fe:6c:0d:18:4a:1d:da:18:97: 7e:fc:28:ff:dd:e1:45:38:5e:25:a2:82:14:56:f4: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C2:CB:00:4C:86:3B:30:C4:A9:53:86:85:53:82:C5:7A:A1:94:01 X509v3 Authority Key Identifier: keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/18LLAEyGOzDEqVOGhVOCxXqhlAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.107.72.0/21 91.107.88.0/21 159.253.124.0/22 185.91.132.0/22 Signature Algorithm: sha256WithRSAEncryption 38:27:f0:72:e3:cd:5d:ce:1b:33:41:cc:96:ee:56:29:c4:58: 4c:ee:39:70:3d:13:a9:68:98:1a:47:37:76:d8:b0:87:3a:2b: 2e:bc:33:f4:4c:a6:86:2e:18:34:46:87:fc:79:ae:f8:a6:1a: 0a:7f:1a:01:ae:57:a3:5c:7e:59:d0:60:4e:b6:df:ac:d9:05: e5:09:e9:1b:00:50:d1:17:e8:ba:16:e2:23:55:d3:98:23:d2: 02:bd:64:e7:d8:81:8d:8b:5e:ee:ff:3f:25:60:64:86:e6:19: 92:2f:0d:e2:6d:ee:3d:3f:eb:6d:7b:b8:71:a6:69:f4:c1:d2: 79:78:33:65:28:e3:8a:46:30:e6:c2:d2:52:49:fd:a5:7b:21: c7:35:08:e2:a3:d3:c7:88:4d:d9:c7:8f:45:04:68:61:4c:71: 07:38:a7:e4:3e:35:a5:37:e2:1c:36:b0:f4:ef:1f:7d:46:10: 21:18:90:78:b7:d3:dc:bf:cc:ba:b1:37:f4:6a:d1:60:c9:61: c5:74:7b:cb:a9:56:1b:02:15:2b:5b:44:bb:e3:fc:65:bd:8f: 8f:8e:fc:57:46:23:f3:27:7e:2a:c9:c9:a7:7e:c1:c1:21:17: ed:b7:9d:b6:09:52:db:f2:ed:93:81:8a:c7:b1:0b:b0:89:2c: d5:44:63:c2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yq3fLa1baXkImWUHmGusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz MThmODYwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2MyY2IwMDRjODYzYjMwYzRhOTUzODY4NTUzODJjNTdhYTE5NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZGKRLl5bJz+8jmPvhhZRFMVNgEc 49mFu53V43hfOP7IMsmhkhkyjrju+mW/dag9sIGBe5xZsK/VL3QdXrJR3iDY+T5r ZUlMB5KZBVtcMpTFS6gsOpLqrYHuQE4mRDyilp/0wOz4K62TTfE2Wi1HkzAiaGSY DV9QXgszKb2JBMn8M1hYNiB7eWb7q5ZqSJKE2mdETXv0vk5ANQ0m23fZn0zt3ZAB oXiIlKDVP1Mlt5TANBQruL0hIexpTQ8wLgwiUxzgjOP78xgxiFfZPr85kugbi+7s rvB74lGmmIphQP/azRC0fQD+bA0YSh3aGJd+/Cj/3eFFOF4looIUVvQBuQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNfCywBMhjswxKlThoVTgsV6oZQBMB8GA1UdIwQY MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt Yjc4ZGFjMzdlYWM4LzEvMThMTEFFeUdPekRFcVZPR2hWT0N4WHFobEFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4 LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDW2tIAwQD W2tYAwQCn/18AwQCuVuEMA0GCSqGSIb3DQEBCwUAA4IBAQA4J/By481dzhszQcyW 7lYpxFhM7jlwPROpaJgaRzd22LCHOisuvDP0TKaGLhg0Rof8ea74phoKfxoBrlej XH5Z0GBOtt+s2QXlCekbAFDRF+i6FuIjVdOYI9ICvWTn2IGNi17u/z8lYGSG5hmS Lw3ibe49P+tte7hxpmn0wdJ5eDNlKOOKRjDmwtJSSf2leyHHNQjio9PHiE3Zx49F BGhhTHEHOKfkPjWlN+IcNrD07x99RhAhGJB4t9Pcv8y6sTf0atFgyWHFdHvLqVYb AhUrW0S74/xlvY+PjvxXRiPzJ34qycmnfsHBIRftt522CVLb8u2TgYrHsQuwiSzV RGPC -----END CERTIFICATE-----Generated at Fri Jan 2 13:01:59 2026 by rpki-client