This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/b1C1K0R4SsuxHJd-26aSi9G1s-s.roa File: b1C1K0R4SsuxHJd-26aSi9G1s-s.roa (raw, json) Hash identifier: UdNuNIgIX4vDZ6cHekj/pIxiG7gV3J4SuyTuh3WadyI= Subject key identifier: 6F:50:B5:2B:44:78:4A:CB:B1:1C:97:7E:DB:A6:92:8B:D1:B5:B3:EB Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019B7FF1AC490E0B4DBE4EB2894051592C2A Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/b1C1K0R4SsuxHJd-26aSi9G1s-s.roa Signing time: Fri 02 Jan 2026 18:21:43 +0000 ROA not before: Fri 02 Jan 2026 18:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 91.207.60.0/24 maxlen: 24 91.217.91.0/24 maxlen: 24 91.226.212.0/24 maxlen: 24 91.226.213.0/24 maxlen: 24 176.103.48.0/20 maxlen: 20 176.103.48.0/21 maxlen: 21 176.103.56.0/22 maxlen: 22 176.103.60.0/23 maxlen: 23 176.103.62.0/23 maxlen: 23 193.169.86.0/23 maxlen: 23 2001:678:334::/48 maxlen: 48 2a13:f580::/48 maxlen: 48 2a13:f580:1::/48 maxlen: 48 2a13:f580:2::/48 maxlen: 48 2a13:f580:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ac:49:0e:0b:4d:be:4e:b2:89:40:51:59:2c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Jan 2 18:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f50b52b44784acbb11c977edba6928bd1b5b3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:62:b3:e0:20:d5:94:35:ca:57:c5:f2:42: c2:02:86:18:c7:90:1a:8e:10:1a:57:40:74:67:c7: 20:00:62:26:13:25:f6:12:5f:93:ee:be:f1:03:81: 47:34:f9:76:81:7d:1a:47:bd:58:5b:86:ea:53:ee: 6b:71:fb:11:a5:6c:18:1a:86:a5:ca:4d:a4:68:ae: e9:61:88:81:01:27:5a:e3:4a:5a:6b:1e:8b:31:35: 66:f3:92:b9:1f:06:03:da:69:60:c9:33:33:59:ac: ff:56:1b:f4:33:ef:e0:aa:1a:49:dc:60:7d:39:a4: dc:fd:1e:2c:03:bf:c0:af:1b:26:b8:74:d7:03:9a: e9:25:80:1e:6b:ca:e1:2d:4c:98:80:2d:20:5a:1c: d6:09:ac:34:53:f8:c4:6b:1d:71:33:4c:99:ad:48: b2:89:11:42:8a:37:c6:dc:7f:e8:e4:62:29:83:15: 63:5e:40:fb:a8:3a:70:0f:94:4f:3d:1f:fb:f3:c1: 04:dd:24:67:2c:aa:fd:f3:6f:af:04:6b:ed:cd:b6: 6f:0f:82:09:c1:d6:66:88:be:0f:7e:76:92:3b:e7: ee:be:5c:0b:52:73:b6:64:ee:27:61:b0:de:df:6b: b0:ae:79:36:9e:fb:df:95:a5:a7:f1:10:be:cc:cf: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:50:B5:2B:44:78:4A:CB:B1:1C:97:7E:DB:A6:92:8B:D1:B5:B3:EB X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/b1C1K0R4SsuxHJd-26aSi9G1s-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.60.0/24 91.217.91.0/24 91.226.212.0/23 176.103.48.0/20 193.169.86.0/23 IPv6: 2001:678:334::/48 2a13:f580::-2a13:f580:2:ffff:ffff:ffff:ffff:ffff 2a13:f580:4::/48 Signature Algorithm: sha256WithRSAEncryption 31:8a:e5:d9:62:25:98:60:0c:96:5b:53:d8:15:40:4a:98:4c: 13:ec:98:50:a9:b1:0d:d6:b6:80:fd:6b:af:f3:9d:22:09:be: 24:d8:94:cb:06:9a:63:81:19:dc:4d:0c:73:b4:cd:10:b8:00: 46:34:25:3f:dc:a1:77:2a:96:bd:34:1c:fd:dd:36:dd:66:67: 91:7e:58:eb:c0:02:94:48:fb:4a:16:82:03:36:b2:10:cd:bc: 8f:3d:e4:e1:93:30:e9:fb:37:0d:e5:35:5e:91:96:c5:4a:94: 33:62:2f:7f:9f:20:fa:70:23:5c:51:b3:72:5c:1a:dc:17:b4: 94:56:80:bb:f9:dd:24:75:ec:10:b6:d4:b3:3a:84:98:60:23: 67:af:5d:b3:df:42:0f:7c:76:fc:b5:35:1f:9d:48:c0:1d:f1: 94:c3:7f:3e:e5:ff:39:e2:79:51:2c:17:cc:00:31:00:b7:c6: 84:0e:8c:6e:ed:5e:19:db:b5:cf:6c:64:b3:d3:25:5e:7c:58: 7e:91:0d:7a:6a:b6:ad:32:7e:bf:db:bd:9f:0e:48:7c:45:37: 03:1b:af:09:20:b7:e8:a0:fb:91:cf:97:d6:64:ac:44:49:c1: 29:52:24:33:b7:e8:b0:00:da:82:e6:60:15:7b:fd:8d:88:34: 32:28:83:95 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt/8axJDgtNvk6yiUBRWSwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjYwMTAyMTgyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjUwYjUyYjQ0Nzg0YWNiYjExYzk3N2VkYmE2OTI4YmQxYjViM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy1is+Ag1ZQ1ylfF8kLCAoYYx5Aa jhAaV0B0Z8cgAGImEyX2El+T7r7xA4FHNPl2gX0aR71YW4bqU+5rcfsRpWwYGoal yk2kaK7pYYiBASda40paax6LMTVm85K5HwYD2mlgyTMzWaz/Vhv0M+/gqhpJ3GB9 OaTc/R4sA7/ArxsmuHTXA5rpJYAea8rhLUyYgC0gWhzWCaw0U/jEax1xM0yZrUiy iRFCijfG3H/o5GIpgxVjXkD7qDpwD5RPPR/788EE3SRnLKr982+vBGvtzbZvD4IJ wdZmiL4PfnaSO+fuvlwLUnO2ZO4nYbDe32uwrnk2nvvflaWn8RC+zM8mbQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFG9QtStEeErLsRyXftumkovRtbPrMB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvYjFDMUswUjRTc3V4SEpkLTI2YVNpOUcxcy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjAkBAIAATAeAwQAW888AwQA W9lbAwQBW+LUAwQEsGcwAwQBwalWMCoEAgACMCQDBwAgAQZ4AzQwEAMFByoT9YAD BwAqE/WAAAIDBwAqE/WAAAQwDQYJKoZIhvcNAQELBQADggEBADGK5dliJZhgDJZb U9gVQEqYTBPsmFCpsQ3WtoD9a6/znSIJviTYlMsGmmOBGdxNDHO0zRC4AEY0JT/c oXcqlr00HP3dNt1mZ5F+WOvAApRI+0oWggM2shDNvI895OGTMOn7Nw3lNV6RlsVK lDNiL3+fIPpwI1xRs3JcGtwXtJRWgLv53SR17BC21LM6hJhgI2evXbPfQg98dvy1 NR+dSMAd8ZTDfz7l/znieVEsF8wAMQC3xoQOjG7tXhnbtc9sZLPTJV58WH6RDXpq tq0yfr/bvZ8OSHxFNwMbrwkgt+ig+5HPl9ZkrERJwSlSJDO36LAA2oLmYBV7/Y2I NDIog5U= -----END CERTIFICATE-----Generated at Tue Jan 20 00:00:12 2026 by rpki-client