This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/GiUXlZf0zBfuYBBAMHy9_aajdyg.roa File: GiUXlZf0zBfuYBBAMHy9_aajdyg.roa (raw, json) Hash identifier: L1PeZQ+K2VXr/kDHBD4XOdsQ7Gs1xXT9UeTey1KljtA= Subject key identifier: 1A:25:17:95:97:F4:CC:17:EE:60:10:40:30:7C:BD:FD:A6:A3:77:28 Certificate issuer: /CN=17eb3e00450198c8ad45ebf83e130219b93643a5 Certificate serial: 019B7F852A6EF64430584FD127FB4CCD15BA Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/GiUXlZf0zBfuYBBAMHy9_aajdyg.roa Signing time: Fri 02 Jan 2026 16:23:12 +0000 ROA not before: Fri 02 Jan 2026 16:23:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49256 IP address blocks: 91.214.12.0/24 maxlen: 24 91.214.13.0/24 maxlen: 24 91.214.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2a:6e:f6:44:30:58:4f:d1:27:fb:4c:cd:15:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5 Validity Not Before: Jan 2 16:23:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a25179597f4cc17ee601040307cbdfda6a37728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:fa:26:66:b8:1a:f4:75:5b:fa:d5:56:7f: e4:dc:c3:d9:27:83:d8:d1:dd:ca:f0:3e:ae:8b:a8: 76:39:44:b2:55:86:bb:31:b2:92:07:7d:69:6d:18: 17:bc:4e:9e:ac:54:2b:f8:54:89:a8:fc:1c:d8:ff: 9a:ab:cc:19:df:ab:a2:f0:89:ca:b7:5b:4e:d7:09: 0d:eb:17:19:7b:ca:aa:46:72:8d:90:40:9b:6a:6e: 21:a3:63:1c:4e:25:70:45:16:3b:fe:3e:d9:64:a0: 4b:13:5a:29:4d:07:99:5d:f3:42:fb:68:15:af:5c: 8c:5b:c9:d4:33:d3:28:7a:57:15:02:23:9c:a3:20: dc:91:c6:86:1c:2b:8e:ef:c0:52:13:93:ed:d1:10: 4a:7c:31:55:9d:7a:71:e5:1e:f8:c4:18:58:db:17: a3:92:be:23:f7:4e:62:9d:ce:4d:99:00:9b:1f:b8: c9:67:b7:c0:c8:9a:ae:2e:46:de:34:8e:b5:65:a1: 60:63:dc:1b:c3:68:20:68:96:55:ab:86:72:ca:0e: 7d:b9:73:28:b3:d6:0d:4f:03:1c:45:48:78:5d:00: b5:88:f1:2a:0f:32:ab:02:26:6e:59:e1:15:2f:69: 9d:ae:e3:17:8c:16:bc:76:c6:a3:cd:8b:bb:5d:12: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:25:17:95:97:F4:CC:17:EE:60:10:40:30:7C:BD:FD:A6:A3:77:28 X509v3 Authority Key Identifier: keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/GiUXlZf0zBfuYBBAMHy9_aajdyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.12.0-91.214.14.255 Signature Algorithm: sha256WithRSAEncryption 5d:ea:71:14:d1:b4:29:d9:0d:f3:a4:ac:18:9a:29:68:8f:19: 60:19:da:95:96:c5:77:17:c9:c4:09:15:8b:7b:62:74:e3:ac: f6:45:a9:a9:8e:d1:30:fd:2a:f8:ab:0c:af:b6:57:dc:aa:e9: 43:4e:bf:bd:e0:e5:02:84:ac:a9:3b:81:55:02:81:69:b3:d2: 0a:37:14:9d:0f:f0:c1:42:4c:d7:ef:22:2a:d7:71:6d:02:71: df:36:d4:b3:86:13:83:a1:1b:a2:ff:4d:d3:29:b8:6f:c6:11: 00:76:fa:03:59:c0:40:ad:54:10:2e:2a:0f:69:45:d1:2e:72: 1c:23:21:64:b3:e0:a3:37:d5:bd:27:6f:c1:e8:dc:2e:d8:23: 19:af:b8:fa:96:b2:65:4e:d0:a3:5c:56:ff:72:fe:9b:2a:1c: 6d:7a:75:e0:61:a2:df:6b:ef:f6:6a:28:35:f5:85:e4:29:9f: 5f:1d:7c:3c:04:d7:61:7a:ac:13:ea:b0:89:b1:68:44:d3:f1: ce:2f:46:a6:0a:ff:d6:ab:a3:df:e1:3f:97:88:00:45:5d:01: f9:9d:ed:c1:1c:2e:86:2a:86:73:f8:81:b4:ae:25:11:bc:49: da:28:e7:22:f5:e1:45:9b:f1:bf:f8:52:3d:a3:6a:a5:39:31: 16:09:2c:e9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hSpu9kQwWE/RJ/tMzRW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZWIzZTAwNDUwMTk4YzhhZDQ1ZWJmODNlMTMwMjE5Yjkz NjQzYTUwHhcNMjYwMTAyMTYyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTI1MTc5NTk3ZjRjYzE3ZWU2MDEwNDAzMDdjYmRmZGE2YTM3NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwb6Jma4GvR1W/rVVn/k3MPZJ4PY 0d3K8D6ui6h2OUSyVYa7MbKSB31pbRgXvE6erFQr+FSJqPwc2P+aq8wZ36ui8InK t1tO1wkN6xcZe8qqRnKNkECbam4ho2McTiVwRRY7/j7ZZKBLE1opTQeZXfNC+2gV r1yMW8nUM9MoelcVAiOcoyDckcaGHCuO78BSE5Pt0RBKfDFVnXpx5R74xBhY2xej kr4j905inc5NmQCbH7jJZ7fAyJquLkbeNI61ZaFgY9wbw2ggaJZVq4Zyyg59uXMo s9YNTwMcRUh4XQC1iPEqDzKrAiZuWeEVL2mdruMXjBa8dsajzYu7XRI0PwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBolF5WX9MwX7mAQQDB8vf2mo3coMB8GA1UdIwQY MBaAFBfrPgBFAZjIrUXr+D4TAhm5NkOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi1zLUFFVUJtTWl0UmV2NFBoTUNHYmsyUTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMzY0MGMtMzA2NS00M2I4LWI5NTUt MTg4ODg0NWNhODU5LzEvR2lVWGxaZjB6QmZ1WUJCQU1IeTlfYWFqZHlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yMzY0MGMtMzA2NS00M2I4LWI5NTUtMTg4ODg0NWNhODU5 LzEvRi1zLUFFVUJtTWl0UmV2NFBoTUNHYmsyUTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJb1gwD BABb1g4wDQYJKoZIhvcNAQELBQADggEBAF3qcRTRtCnZDfOkrBiaKWiPGWAZ2pWW xXcXycQJFYt7YnTjrPZFqamO0TD9KvirDK+2V9yq6UNOv73g5QKErKk7gVUCgWmz 0go3FJ0P8MFCTNfvIirXcW0Ccd821LOGE4OhG6L/TdMpuG/GEQB2+gNZwECtVBAu Kg9pRdEuchwjIWSz4KM31b0nb8Ho3C7YIxmvuPqWsmVO0KNcVv9y/psqHG16deBh ot9r7/ZqKDX1heQpn18dfDwE12F6rBPqsImxaETT8c4vRqYK/9aro9/hP5eIAEVd Afmd7cEcLoYqhnP4gbSuJRG8Sdoo5yL14UWb8b/4Uj2jaqU5MRYJLOk= -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:14 2026 by rpki-client