This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/1-wQ3YkftdprDoOmlgFZ-QrfGuyY.roa File: 1-wQ3YkftdprDoOmlgFZ-QrfGuyY.roa (raw, json) Hash identifier: OqSChaZ/V/EnZPQ5uWZhNV82AGjz1LLNW03PELdqBA4= Subject key identifier: FB:04:37:62:47:ED:76:9A:C3:A0:E9:A5:80:56:7E:42:B7:C6:BB:26 Certificate issuer: /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04 Certificate serial: 019B76EAC5629A5DCCD57AC642FA532BE81A Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/1-wQ3YkftdprDoOmlgFZ-QrfGuyY.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44001 IP address blocks: 91.229.36.0/22 maxlen: 22 91.229.36.0/24 maxlen: 24 91.229.225.0/24 maxlen: 24 2001:67c:cf0::/48 maxlen: 48 2001:67c:cf4::/48 maxlen: 48 2001:67c:cf8::/48 maxlen: 48 2001:67c:2cc4::/48 maxlen: 48 2001:67c:2f38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c5:62:9a:5d:cc:d5:7a:c6:42:fa:53:2b:e8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb04376247ed769ac3a0e9a580567e42b7c6bb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:b3:6c:ff:d9:81:b6:4d:f4:6c:63:7b:bf: 3b:77:b4:5b:89:73:f5:2b:9e:c6:28:92:1b:93:6a: 6a:28:bd:da:5b:0f:d7:26:40:80:36:72:f2:2b:71: 86:13:1e:96:c1:6d:f5:f3:50:1b:c8:5e:a3:29:8c: 67:03:2e:84:b2:05:dc:fe:06:60:e2:cc:6e:73:12: 92:e8:1b:98:ad:04:c0:8d:95:80:3f:da:5a:bc:a4: a5:d0:5c:33:29:84:59:21:6a:17:2f:72:3b:11:83: df:4f:5e:80:e6:88:c7:5a:b6:d9:8b:1e:3e:0b:10: e2:69:9f:00:0c:0a:2b:c1:fd:66:3b:02:27:1e:4c: f6:df:ec:55:33:34:f3:d6:6c:13:ac:2d:46:be:b5: c8:67:0e:ac:c6:7e:ad:4a:d5:84:d3:ca:35:8c:02: 50:6f:7f:30:b9:a9:d0:64:55:4c:43:a6:e5:b2:f0: 29:98:ef:3a:08:3b:e3:00:0d:98:75:48:c2:75:7a: 7a:e9:99:ec:9a:95:f1:61:0f:a4:19:37:0d:a7:66: db:9d:59:ec:64:e0:2b:46:04:79:8a:d0:dd:bc:21: b5:5e:ae:2a:54:a7:ee:1e:7f:8b:2a:76:9b:40:da: 01:e7:4f:a8:e1:93:30:50:c7:92:57:87:c3:94:a7: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:04:37:62:47:ED:76:9A:C3:A0:E9:A5:80:56:7E:42:B7:C6:BB:26 X509v3 Authority Key Identifier: keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/1-wQ3YkftdprDoOmlgFZ-QrfGuyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.36.0/22 91.229.225.0/24 IPv6: 2001:67c:cf0::/48 2001:67c:cf4::/48 2001:67c:cf8::/48 2001:67c:2cc4::/48 2001:67c:2f38::/48 Signature Algorithm: sha256WithRSAEncryption 09:c3:f2:85:22:29:de:e0:60:7f:04:c9:1d:a4:e6:34:a5:45: 10:3a:73:78:78:e3:71:f3:63:45:f2:ad:86:ae:97:3a:4b:f8: 60:41:b1:fd:83:86:eb:17:19:06:c4:35:1c:eb:7e:4d:aa:9e: 6a:01:e0:3f:22:68:fb:91:63:99:a9:f2:a6:bc:4f:38:ee:7d: 8b:58:71:5f:c3:2b:f7:55:80:9e:80:82:05:c9:ff:36:6f:0d: c3:dc:4c:c2:b0:52:cb:f6:3c:c0:d4:20:b7:a7:be:a0:c3:7f: 05:70:97:e4:5e:21:85:28:4a:11:84:5f:77:17:84:d3:44:ae: a3:5a:19:af:52:46:80:8c:c2:7a:93:01:1d:a2:1e:e6:29:39: b6:46:a9:8a:b1:33:c0:d4:63:33:50:d8:7d:64:8b:40:38:a4: 77:cf:86:e9:d9:1e:38:0a:ad:a0:1b:4d:21:f4:e0:1d:6a:e8: 79:5f:c9:ab:75:bb:0d:2e:af:36:68:e0:a4:ee:f9:4f:96:d2: 01:10:b2:4f:d2:55:aa:70:d4:cf:49:ca:e6:4a:1c:fd:74:0e: b4:78:5f:ab:58:b4:49:1e:b7:9b:dd:e3:3c:38:3e:61:ba:62: 01:18:f9:22:57:3c:e5:83:6d:e4:2e:ca:68:e7:5a:f6:15:79: 33:6e:00:21 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt26sViml3M1XrGQvpTK+gaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2NjMWE3ODcwYjYxMGMzNTVjNmVjMjk5YjE2NmVkYWJh M2RmMDQwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjA0Mzc2MjQ3ZWQ3NjlhYzNhMGU5YTU4MDU2N2U0MmI3YzZiYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+izbP/ZgbZN9Gxje787d7RbiXP1 K57GKJIbk2pqKL3aWw/XJkCANnLyK3GGEx6WwW3181AbyF6jKYxnAy6EsgXc/gZg 4sxucxKS6BuYrQTAjZWAP9pavKSl0FwzKYRZIWoXL3I7EYPfT16A5ojHWrbZix4+ CxDiaZ8ADAorwf1mOwInHkz23+xVMzTz1mwTrC1GvrXIZw6sxn6tStWE08o1jAJQ b38wuanQZFVMQ6blsvApmO86CDvjAA2YdUjCdXp66ZnsmpXxYQ+kGTcNp2bbnVns ZOArRgR5itDdvCG1Xq4qVKfuHn+LKnabQNoB50+o4ZMwUMeSV4fDlKfdxQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFPsEN2JH7Xaaw6DppYBWfkK3xrsmMB8GA1UdIwQY MBaAFK08waeHC2EMNVxuwpmxZu2ro98EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zZDA0NmMtMTE3OC00NmEzLTgyZTAt NzRkNTZjNDQxZGMxLzEvMS13UTNZa2Z0ZHByRG9PbWxnRlotUXJmR3V5WS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2QvM2QwNDZjLTExNzgtNDZhMy04MmUwLTc0ZDU2YzQ0MWRj MS8xL3JUekJwNGNMWVF3MVhHN0NtYkZtN2F1ajN3US5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBaBggrBgEFBQcBBwEB/wRLMEkwEgQCAAEwDAMEAlvlJAME AFvl4TAzBAIAAjAtAwcAIAEGfAzwAwcAIAEGfAz0AwcAIAEGfAz4AwcAIAEGfCzE AwcAIAEGfC84MA0GCSqGSIb3DQEBCwUAA4IBAQAJw/KFIine4GB/BMkdpOY0pUUQ OnN4eONx82NF8q2Grpc6S/hgQbH9g4brFxkGxDUc635Nqp5qAeA/Imj7kWOZqfKm vE847n2LWHFfwyv3VYCegIIFyf82bw3D3EzCsFLL9jzA1CC3p76gw38FcJfkXiGF KEoRhF93F4TTRK6jWhmvUkaAjMJ6kwEdoh7mKTm2RqmKsTPA1GMzUNh9ZItAOKR3 z4bp2R44Cq2gG00h9OAdauh5X8mrdbsNLq82aOCk7vlPltIBELJP0lWqcNTPScrm Shz9dA60eF+rWLRJHreb3eM8OD5humIBGPkiVzzlg23kLspo51r2FXkzbgAh -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:31 2026 by rpki-client