This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/M1haVXqPOvnr0M8YD8F0YeZUvPQ.roa File: M1haVXqPOvnr0M8YD8F0YeZUvPQ.roa (raw, json) Hash identifier: 1273tbmqWVfCsPa/v1kUBewWpBdKXZmtQ2j4FIBXvLk= Subject key identifier: 33:58:5A:55:7A:8F:3A:F9:EB:D0:CF:18:0F:C1:74:61:E6:54:BC:F4 Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Certificate serial: 019B7EA478AFEC646E1FA9E7E90C552C55BE Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/M1haVXqPOvnr0M8YD8F0YeZUvPQ.roa Signing time: Fri 02 Jan 2026 12:17:46 +0000 ROA not before: Fri 02 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47475 IP address blocks: 91.194.80.0/24 maxlen: 24 195.43.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:78:af:ec:64:6e:1f:a9:e7:e9:0c:55:2c:55:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Validity Not Before: Jan 2 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33585a557a8f3af9ebd0cf180fc17461e654bcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:37:64:d8:0a:bc:ab:7a:da:37:fa:9d:d5: 6d:ca:65:db:6d:1c:fb:52:86:2c:b9:9f:2f:cf:ee: 43:3f:8d:df:62:dc:28:b3:a2:dc:fa:f8:3b:95:89: da:c0:1e:5a:8e:52:ac:52:e5:ea:cc:16:64:5c:39: f5:38:13:53:d8:a2:56:ef:2c:97:a1:ad:11:18:25: f1:39:b2:b8:1b:7f:f5:66:4b:c8:c6:b0:0c:28:35: 40:ce:02:c5:8e:50:2e:90:2c:6b:7b:22:0a:ef:9f: 1c:f0:f1:79:af:05:74:bd:e8:c2:57:74:86:41:1e: 85:85:c0:a5:fd:d8:4d:40:97:87:2f:fd:05:c3:2c: 10:d1:d5:cc:61:0d:7c:ba:ce:2b:c9:18:a0:29:b4: d4:b3:1a:22:57:f1:f9:62:bc:03:a0:72:18:14:c4: f5:1e:82:09:8a:49:87:65:59:3f:7a:9d:6d:56:19: 7d:14:a7:47:df:12:87:52:12:bf:67:29:e5:fe:5d: 1a:62:9d:b9:75:c7:72:e1:5d:bf:ac:85:d3:a6:99: 78:03:b4:39:18:41:7c:97:ac:3d:fa:e9:9b:d6:9d: c2:89:43:2a:db:e5:b6:f2:21:e1:ba:3b:52:c1:cb: a6:fd:df:97:db:6e:8a:c5:9e:de:a3:dd:d0:0e:c7: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:58:5A:55:7A:8F:3A:F9:EB:D0:CF:18:0F:C1:74:61:E6:54:BC:F4 X509v3 Authority Key Identifier: keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/M1haVXqPOvnr0M8YD8F0YeZUvPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.80.0/24 195.43.146.0/24 Signature Algorithm: sha256WithRSAEncryption 82:a3:29:0c:6f:7f:f6:01:a7:01:5c:da:36:8f:28:66:e1:dc: b2:f0:45:99:a0:8f:17:22:29:77:89:cf:ad:28:73:7e:06:6a: ac:0d:e5:13:f3:33:37:80:bc:03:c0:a4:19:a8:d5:47:09:c6: 33:05:30:fe:1a:86:dd:d1:50:45:72:19:a3:fc:3c:65:4e:f4: db:e9:8c:51:3c:4c:18:bb:88:62:90:34:9a:8f:0c:be:6b:cb: d3:90:d8:51:46:a5:e7:07:56:8a:03:af:e1:e1:70:9f:84:9c: 43:60:99:2b:48:2d:54:8d:9c:57:c2:be:04:05:4e:0c:6f:e3: e9:31:e4:b7:d4:fb:cd:64:25:1f:78:43:76:a3:a3:0d:dd:31: 03:b3:e6:4a:57:ad:19:c0:46:5b:8e:28:9d:c9:b3:f1:76:d1: b8:81:61:42:1d:9c:f5:6f:f3:51:6b:9b:6c:01:a9:67:38:d7: 03:91:63:c4:4b:ca:2c:6e:d6:d4:3a:42:a0:2e:f9:ed:dc:e5: c5:40:ca:e1:8d:5b:7b:a8:1e:a2:32:ad:1b:b3:ac:51:54:80: aa:c1:b6:f3:78:b4:a9:a1:82:ac:0c:b9:ba:dd:cb:91:df:39: 70:b2:e3:a3:7b:a5:79:4f:4c:77:a9:ad:45:25:59:cd:cf:1f: 21:2f:e0:f1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pHiv7GRuH6nn6QxVLFW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm NWI3MTQwHhcNMjYwMTAyMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzU4NWE1NTdhOGYzYWY5ZWJkMGNmMTgwZmMxNzQ2MWU2NTRiY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqY3ZNgKvKt62jf6ndVtymXbbRz7 UoYsuZ8vz+5DP43fYtwos6Lc+vg7lYnawB5ajlKsUuXqzBZkXDn1OBNT2KJW7yyX oa0RGCXxObK4G3/1ZkvIxrAMKDVAzgLFjlAukCxreyIK758c8PF5rwV0vejCV3SG QR6FhcCl/dhNQJeHL/0FwywQ0dXMYQ18us4ryRigKbTUsxoiV/H5YrwDoHIYFMT1 HoIJikmHZVk/ep1tVhl9FKdH3xKHUhK/Zynl/l0aYp25dcdy4V2/rIXTppl4A7Q5 GEF8l6w9+umb1p3CiUMq2+W28iHhujtSwcum/d+X226KxZ7eo93QDscQWwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDNYWlV6jzr569DPGA/BdGHmVLz0MB8GA1UdIwQY MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx LTEzODM5NjQwYTYwNC8xL00xaGFWWHFQT3ZucjBNOFlEOEYwWWVaVXZQUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABbwlAD BADDK5IwDQYJKoZIhvcNAQELBQADggEBAIKjKQxvf/YBpwFc2jaPKGbh3LLwRZmg jxciKXeJz60oc34GaqwN5RPzMzeAvAPApBmo1UcJxjMFMP4aht3RUEVyGaP8PGVO 9NvpjFE8TBi7iGKQNJqPDL5ry9OQ2FFGpecHVooDr+HhcJ+EnENgmStILVSNnFfC vgQFTgxv4+kx5LfU+81kJR94Q3ajow3dMQOz5kpXrRnARluOKJ3Js/F20biBYUId nPVv81Frm2wBqWc41wORY8RLyixu1tQ6QqAu+e3c5cVAyuGNW3uoHqIyrRuzrFFU gKrBtvN4tKmhgqwMubrdy5HfOXCy46N7pXlPTHeprUUlWc3PHyEv4PE= -----END CERTIFICATE-----Generated at Mon Feb 9 21:02:54 2026 by rpki-client