This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/1yJjuTyf2ztvnkdUcqNAvBEgaSg.roa File: 1yJjuTyf2ztvnkdUcqNAvBEgaSg.roa (raw, json) Hash identifier: nfIlAhagUA3pYoE5LuKLJK3yVXO0M1iaR7XMEzKKagA= Subject key identifier: D7:22:63:B9:3C:9F:DB:3B:6F:9E:47:54:72:A3:40:BC:11:20:69:28 Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d Certificate serial: 019B7F83F25AD3B6F3E268A1CF0BBE7FE230 Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/1yJjuTyf2ztvnkdUcqNAvBEgaSg.roa Signing time: Fri 02 Jan 2026 16:21:52 +0000 ROA not before: Fri 02 Jan 2026 16:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50636 IP address blocks: 91.194.184.0/24 maxlen: 24 91.194.185.0/24 maxlen: 24 2001:67c:2940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f2:5a:d3:b6:f3:e2:68:a1:cf:0b:be:7f:e2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d Validity Not Before: Jan 2 16:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d72263b93c9fdb3b6f9e475472a340bc11206928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:a5:a5:4d:9e:14:ea:6f:50:0f:7e:30:cc: 1c:d7:e1:89:49:c5:85:28:3d:3b:35:8c:de:5c:85: 07:81:92:58:f0:01:5b:12:eb:c0:02:d0:4e:12:6d: 05:38:3b:52:02:15:7b:b3:07:77:f0:54:2d:9e:27: bf:f7:a2:de:13:16:24:66:74:8d:53:a9:bb:9c:76: 7e:c8:03:35:29:c6:03:3b:df:40:ad:58:2a:70:c4: 43:0b:fc:dd:51:18:0c:61:98:88:d8:a1:c6:50:f0: a0:57:0c:21:a9:43:c0:2f:22:df:f7:32:2c:ab:29: f3:b7:00:b5:1c:89:6a:e6:ad:10:f0:a1:25:97:42: 86:2b:8f:46:cf:69:54:be:d9:58:e1:1e:14:5e:a3: dc:cc:c8:73:f4:e5:6c:ad:4a:b0:34:e4:36:ea:bb: 7a:af:9b:68:15:05:72:f2:53:16:44:da:de:4a:a5: 84:dd:71:e8:32:b0:fa:a4:a6:d3:72:c2:3c:5e:76: 6a:36:68:f7:9f:6f:1b:78:51:97:91:51:fa:0b:13: 60:45:8d:f3:17:6c:b3:45:86:6a:44:7c:f2:29:57: 7f:b2:96:b0:61:54:0f:27:b6:3c:cc:95:5d:a7:3b: 21:44:ef:fa:95:aa:ed:c1:d5:65:ac:4b:e0:86:85: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:22:63:B9:3C:9F:DB:3B:6F:9E:47:54:72:A3:40:BC:11:20:69:28 X509v3 Authority Key Identifier: keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/1yJjuTyf2ztvnkdUcqNAvBEgaSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.184.0/23 IPv6: 2001:67c:2940::/48 Signature Algorithm: sha256WithRSAEncryption 39:e0:42:d3:96:19:ab:b1:1e:23:83:6e:c7:7f:1f:d2:fc:db: 9f:75:9f:8d:43:30:d5:f7:98:3d:a2:98:68:a5:66:c1:d6:b0: 64:ea:6b:62:7b:b0:67:f0:ec:2b:4d:5c:97:93:b5:c1:62:63: 26:c0:9a:a1:39:07:67:7d:a7:5a:62:c9:c9:78:12:8e:15:38: af:c8:4c:a1:6c:7f:79:2e:76:43:b3:37:0e:f2:0f:5d:9b:3e: 80:23:5e:81:f3:80:55:a2:5e:42:8d:31:5e:5a:96:91:6f:96: 6c:91:1b:d9:6f:52:4a:0f:5a:e0:39:c4:57:64:2e:88:77:28: 9d:5f:6b:64:a6:e1:ad:48:f9:88:63:4b:d4:fd:52:20:d2:e8: ce:8f:89:69:b9:af:e7:61:ab:92:5d:9a:62:70:7c:ad:61:32: 8c:56:24:56:32:fd:75:94:4f:d7:4f:51:63:64:a7:c7:3f:b6: d9:5a:c6:3a:4f:90:dc:d8:9a:8a:72:5c:7f:bb:49:03:5e:cb: 83:de:84:98:c4:cb:3d:9f:68:a0:b9:b2:c7:f5:47:dd:84:91: 6c:69:4e:52:27:3c:30:95:a7:23:e3:05:54:a7:cf:7c:d5:56: 76:09:cf:26:43:57:ff:bf:4a:da:8e:d5:40:e5:ef:f2:7b:65: 61:bb:1c:d8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g/Ja07bz4mihzwu+f+IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2Q0MzAxYjI4OTVmMWQ5OGE4NTBlNTg5Y2U3YzA2M2M1 MzlmNGQwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzIyNjNiOTNjOWZkYjNiNmY5ZTQ3NTQ3MmEzNDBiYzExMjA2OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5GlpU2eFOpvUA9+MMwc1+GJScWF KD07NYzeXIUHgZJY8AFbEuvAAtBOEm0FODtSAhV7swd38FQtnie/96LeExYkZnSN U6m7nHZ+yAM1KcYDO99ArVgqcMRDC/zdURgMYZiI2KHGUPCgVwwhqUPALyLf9zIs qynztwC1HIlq5q0Q8KEll0KGK49Gz2lUvtlY4R4UXqPczMhz9OVsrUqwNOQ26rt6 r5toFQVy8lMWRNreSqWE3XHoMrD6pKbTcsI8XnZqNmj3n28beFGXkVH6CxNgRY3z F2yzRYZqRHzyKVd/spawYVQPJ7Y8zJVdpzshRO/6lartwdVlrEvghoUTRwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNciY7k8n9s7b55HVHKjQLwRIGkoMB8GA1UdIwQY MBaAFKLNQwGyiV8dmKhQ5YnOfAY8U59NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjkt NThmM2YzN2NjZGQ5LzEvMXlKanVUeWYyenR2bmtkVWNxTkF2QkVnYVNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjktNThmM2YzN2NjZGQ5 LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW8K4MA8E AgACMAkDBwAgAQZ8KUAwDQYJKoZIhvcNAQELBQADggEBADngQtOWGauxHiODbsd/ H9L82591n41DMNX3mD2imGilZsHWsGTqa2J7sGfw7CtNXJeTtcFiYybAmqE5B2d9 p1piycl4Eo4VOK/ITKFsf3kudkOzNw7yD12bPoAjXoHzgFWiXkKNMV5alpFvlmyR G9lvUkoPWuA5xFdkLoh3KJ1fa2Sm4a1I+YhjS9T9UiDS6M6PiWm5r+dhq5JdmmJw fK1hMoxWJFYy/XWUT9dPUWNkp8c/ttlaxjpPkNzYmopyXH+7SQNey4PehJjEyz2f aKC5ssf1R92EkWxpTlInPDCVpyPjBVSnz3zVVnYJzyZDV/+/StqO1UDl7/J7ZWG7 HNg= -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:22 2026 by rpki-client