This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/rL1DSaQ9b1jLm2PglJQrH9t9aF0.roa File: rL1DSaQ9b1jLm2PglJQrH9t9aF0.roa (raw, json) Hash identifier: KRJaPLV1D/wK1Jz64oCWVytuVNDt1KVUfdmkO2/NHCk= Subject key identifier: AC:BD:43:49:A4:3D:6F:58:CB:9B:63:E0:94:94:2B:1F:DB:7D:68:5D Certificate issuer: /CN=482734bff01a3ceab350bcb84b25f73be829df6f Certificate serial: 019B7BA362CA2F5907B0AEE964CDFB77FD6A Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/rL1DSaQ9b1jLm2PglJQrH9t9aF0.roa Signing time: Thu 01 Jan 2026 22:17:43 +0000 ROA not before: Thu 01 Jan 2026 22:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48698 IP address blocks: 91.211.188.0/22 maxlen: 22 195.178.8.0/24 maxlen: 24 195.178.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:62:ca:2f:59:07:b0:ae:e9:64:cd:fb:77:fd:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acbd4349a43d6f58cb9b63e094942b1fdb7d685d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:8b:a3:17:02:61:74:c2:6b:ea:88:33:e7: 68:97:4c:2a:f7:e2:07:2b:ab:4e:a0:f0:cc:21:d8: 33:bc:28:9d:2e:71:7b:1a:b3:b1:92:eb:2b:0c:b3: 77:10:51:74:ce:71:0e:90:7e:f9:eb:46:5f:30:bb: 8d:2e:df:f8:d4:6c:4e:3f:b2:fa:cc:8a:37:1d:e2: bd:a4:6e:b1:e3:e0:e2:19:fe:27:dd:90:5a:5b:c0: 23:0d:d8:ff:82:fe:b0:7d:2d:87:ee:6d:e0:a9:ca: 11:2c:fb:3e:5a:c3:12:53:ee:f5:39:2f:90:bb:f5: f5:98:a0:c5:47:ab:8b:ea:3a:e7:6f:f1:44:67:34: 64:b7:fc:57:30:7c:a6:cc:be:57:28:b7:13:76:83: b3:be:49:4c:7c:0a:42:8c:1c:de:b3:6f:f6:a5:df: 9a:6a:b5:1b:0f:09:0b:b6:1a:36:c8:79:55:56:60: 13:46:b8:af:3f:65:ab:61:57:7e:bc:13:16:c4:fe: 5a:f0:3b:19:3a:d6:e9:ce:7a:f2:93:49:75:cd:45: b1:47:ab:84:b6:d1:4d:1f:20:3d:c4:a2:d8:73:fb: 56:5e:10:c6:3e:24:cb:d5:26:8b:d4:5d:84:41:24: eb:6a:32:84:81:2e:97:c0:bd:e8:3f:bc:8c:2a:ca: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:43:49:A4:3D:6F:58:CB:9B:63:E0:94:94:2B:1F:DB:7D:68:5D X509v3 Authority Key Identifier: keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/rL1DSaQ9b1jLm2PglJQrH9t9aF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.188.0/22 195.178.8.0/23 Signature Algorithm: sha256WithRSAEncryption 72:11:5a:a1:1c:eb:b8:69:cc:d5:53:4b:97:e3:a8:53:2b:3f: 85:63:6c:8c:ff:1d:18:a1:a1:4e:e1:ee:c7:f6:44:85:0f:3b: 4e:fe:c7:21:66:8f:60:13:2e:32:5e:37:7a:88:3d:f6:da:ec: 3c:95:30:d4:97:7e:f3:ab:58:1e:16:dc:5b:3f:db:df:0f:f3: 19:39:1a:f3:62:fd:41:83:ec:45:04:47:7f:20:54:46:ea:85: 50:0c:72:ad:14:86:d9:a8:72:e8:5c:2a:1c:22:bd:da:25:8b: 1a:54:49:7d:ed:74:aa:e8:72:e8:65:b2:f0:19:41:be:00:5c: ac:2b:f0:e4:ab:86:ed:69:7c:35:a7:de:fa:bf:97:f9:43:98: 0c:15:00:77:18:47:33:80:3a:ff:53:2d:e8:82:d1:6b:23:f1: 88:4e:ff:45:ab:5c:7e:0b:a4:f4:78:9c:1d:17:67:d0:03:dd: 86:a6:b5:9c:34:9b:ff:a0:ec:58:55:cb:60:d8:42:41:1a:3a: 0e:e7:1e:05:08:a9:46:a3:95:78:85:67:ee:33:ca:10:2c:94: 8f:d7:a7:ae:4b:6b:42:0f:dd:7f:9c:c6:7a:2c:63:a8:ce:f6: aa:72:10:83:38:a6:de:40:5a:83:13:46:c2:66:a0:eb:1e:43: e1:d9:d1:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o2LKL1kHsK7pZM37d/1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MjczNGJmZjAxYTNjZWFiMzUwYmNiODRiMjVmNzNiZTgy OWRmNmYwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2JkNDM0OWE0M2Q2ZjU4Y2I5YjYzZTA5NDk0MmIxZmRiN2Q2ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KWLoxcCYXTCa+qIM+dol0wq9+IH K6tOoPDMIdgzvCidLnF7GrOxkusrDLN3EFF0znEOkH7560ZfMLuNLt/41GxOP7L6 zIo3HeK9pG6x4+DiGf4n3ZBaW8AjDdj/gv6wfS2H7m3gqcoRLPs+WsMSU+71OS+Q u/X1mKDFR6uL6jrnb/FEZzRkt/xXMHymzL5XKLcTdoOzvklMfApCjBzes2/2pd+a arUbDwkLtho2yHlVVmATRrivP2WrYVd+vBMWxP5a8DsZOtbpznryk0l1zUWxR6uE ttFNHyA9xKLYc/tWXhDGPiTL1SaL1F2EQSTrajKEgS6XwL3oP7yMKspKUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKy9Q0mkPW9Yy5tj4JSUKx/bfWhdMB8GA1UdIwQY MBaAFEgnNL/wGjzqs1C8uEsl9zvoKd9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Mjk0YjYtNmE4YS00Njk1LWIyOTEt NTgyYTk3MjA1NGZjLzEvckwxRFNhUTliMWpMbTJQZ2xKUXJIOXQ5YUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81Mjk0YjYtNmE4YS00Njk1LWIyOTEtNTgyYTk3MjA1NGZj LzEvU0NjMHZfQWFQT3F6VUx5NFN5WDNPLWdwMzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9O8AwQB w7IIMA0GCSqGSIb3DQEBCwUAA4IBAQByEVqhHOu4aczVU0uX46hTKz+FY2yM/x0Y oaFO4e7H9kSFDztO/schZo9gEy4yXjd6iD322uw8lTDUl37zq1geFtxbP9vfD/MZ ORrzYv1Bg+xFBEd/IFRG6oVQDHKtFIbZqHLoXCocIr3aJYsaVEl97XSq6HLoZbLw GUG+AFysK/Dkq4btaXw1p976v5f5Q5gMFQB3GEczgDr/Uy3ogtFrI/GITv9Fq1x+ C6T0eJwdF2fQA92GprWcNJv/oOxYVctg2EJBGjoO5x4FCKlGo5V4hWfuM8oQLJSP 16euS2tCD91/nMZ6LGOozvaqchCDOKbeQFqDE0bCZqDrHkPh2dHA -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:22 2026 by rpki-client