This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1-cVf8eeKXCEQK8TREHL3pvOVlJ4.roa File: 1-cVf8eeKXCEQK8TREHL3pvOVlJ4.roa (raw, json) Hash identifier: 6xb8adt+Cq8dGBV+dEVWMVOB3aEPAl4inrU5zc1A6qU= Subject key identifier: F9:C5:5F:F1:E7:8A:5C:21:10:2B:C4:D1:10:72:F7:A6:F3:95:94:9E Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C1178DD09F2E40B3AB695C945B86B04 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1-cVf8eeKXCEQK8TREHL3pvOVlJ4.roa Signing time: Fri 02 Jan 2026 00:17:58 +0000 ROA not before: Fri 02 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 91.197.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:78:dd:09:f2:e4:0b:3a:b6:95:c9:45:b8:6b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c55ff1e78a5c21102bc4d11072f7a6f395949e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:73:a8:82:d9:54:40:2e:0b:c7:7b:d3:4c:50: 9c:d2:55:72:26:1a:fb:61:8b:2f:ab:3f:62:60:98: 0a:14:38:9d:4e:10:8f:8d:77:59:26:62:e6:08:32: 65:fe:2d:2c:4d:5f:ab:41:f2:11:25:55:cd:c6:80: 81:51:a9:50:1c:ba:38:b0:e4:d7:94:a6:88:48:0e: 39:6d:92:47:31:43:9f:a7:46:02:6b:6a:a9:f9:80: a8:b5:bd:2d:b7:c2:7d:85:de:b7:2f:dd:86:1c:ed: 35:68:c4:83:9c:fa:26:12:59:34:db:bc:d0:fc:38: 09:df:03:65:12:0d:9a:03:d0:ea:41:d7:1e:e6:f3: e0:82:37:3a:44:53:80:35:dd:d5:ce:97:ce:75:a6: a5:ef:a5:2b:07:8c:ad:34:45:08:ee:6d:fd:d9:46: 78:85:6f:85:02:a8:05:d8:52:24:3f:df:49:35:3a: 46:03:dd:fe:1d:52:11:be:9a:3b:65:c8:66:29:4e: a3:8b:f5:6b:1a:d2:9b:b4:3f:41:9b:bf:e5:78:8f: b2:dd:19:0c:33:b3:14:9e:0b:68:f9:ca:f0:24:b8: b3:a1:82:66:0c:03:1e:0e:98:70:a2:8e:a5:1f:52: a9:99:e1:e4:8c:ef:ba:f7:a1:22:88:28:05:b7:21: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C5:5F:F1:E7:8A:5C:21:10:2B:C4:D1:10:72:F7:A6:F3:95:94:9E X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1-cVf8eeKXCEQK8TREHL3pvOVlJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.71.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:6e:76:6e:a0:4c:f5:be:d6:60:0f:44:19:be:8a:65:1b:e5: a3:7f:24:05:f8:bf:f0:db:7e:2c:9b:a3:01:05:eb:73:24:2d: a7:5b:8d:0c:3b:15:b7:9e:80:4d:60:b0:43:73:cf:77:93:34: cb:ed:00:f8:f9:23:74:72:10:53:50:ad:e8:5f:1e:7f:94:85: c7:ec:9b:2c:45:8e:83:e8:fd:e9:9f:c9:c1:1f:f0:96:e7:f8: db:e1:0d:a3:6e:1f:25:f1:33:53:3e:79:e4:dd:70:12:1d:b3: bf:9c:a7:29:9c:e6:6c:d8:fe:cb:89:01:dd:60:07:30:21:e8: 07:35:1e:ab:8c:c2:b2:0e:56:bd:c8:28:43:ff:03:0a:95:42: f8:4b:e4:06:bd:3c:7e:1e:96:1d:1b:55:62:98:1d:ca:24:f4: ca:36:cc:3f:10:63:ea:96:4e:d4:0d:f5:ea:a2:3d:19:89:47: 74:94:3a:6f:90:46:8d:68:12:05:6b:b7:1e:51:bf:85:4d:eb: b5:30:89:c4:c9:02:6f:6a:c6:b0:2d:c7:42:ce:3c:c2:14:9d: 5c:00:8e:aa:20:44:1b:54:15:ca:35:ae:93:40:a5:a4:15:f0: 41:7f:39:e9:89:57:46:98:63:16:74:d9:e4:af:6b:bc:53:c1: 02:87:03:c6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EXjdCfLkCzq2lclFuGsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWM1NWZmMWU3OGE1YzIxMTAyYmM0ZDExMDcyZjdhNmYzOTU5NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nOogtlUQC4Lx3vTTFCc0lVyJhr7 YYsvqz9iYJgKFDidThCPjXdZJmLmCDJl/i0sTV+rQfIRJVXNxoCBUalQHLo4sOTX lKaISA45bZJHMUOfp0YCa2qp+YCotb0tt8J9hd63L92GHO01aMSDnPomElk027zQ /DgJ3wNlEg2aA9DqQdce5vPggjc6RFOANd3VzpfOdaal76UrB4ytNEUI7m392UZ4 hW+FAqgF2FIkP99JNTpGA93+HVIRvpo7ZchmKU6ji/VrGtKbtD9Bm7/leI+y3RkM M7MUngto+crwJLizoYJmDAMeDphwoo6lH1KpmeHkjO+696EiiCgFtyHL5wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnFX/HnilwhECvE0RBy96bzlZSeMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvMS1jVmY4ZWVLWENFUUs4VFJFSEwzcHZPVmxKNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzUvOTc4ZDBmLTkyOTctNGM3MS05Y2ZiLTQ2Yjk0OTA5MmNi ZS8xL2pyUkIydHUteTJsbDFPb2ZCR3pGeU9LSUZfdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvFRzAN BgkqhkiG9w0BAQsFAAOCAQEADG52bqBM9b7WYA9EGb6KZRvlo38kBfi/8Nt+LJuj AQXrcyQtp1uNDDsVt56ATWCwQ3PPd5M0y+0A+PkjdHIQU1Ct6F8ef5SFx+ybLEWO g+j96Z/JwR/wluf42+ENo24fJfEzUz555N1wEh2zv5ynKZzmbNj+y4kB3WAHMCHo BzUeq4zCsg5WvcgoQ/8DCpVC+EvkBr08fh6WHRtVYpgdyiT0yjbMPxBj6pZO1A31 6qI9GYlHdJQ6b5BGjWgSBWu3HlG/hU3rtTCJxMkCb2rGsC3HQs48whSdXACOqiBE G1QVyjWuk0ClpBXwQX856YlXRphjFnTZ5K9rvFPBAocDxg== -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:38 2026 by rpki-client