This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/1nHUlwt2X9A095aW8Ml7tVPj8v4.roa File: 1nHUlwt2X9A095aW8Ml7tVPj8v4.roa (raw, json) Hash identifier: eAfz7g6fQcUQW5klBUU8wHwhbjDDEZDHt243j4/4j64= Subject key identifier: D6:71:D4:97:0B:76:5F:D0:34:F7:96:96:F0:C9:7B:B5:53:E3:F2:FE Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3 Certificate serial: 019B7C11A5C123F46DADFC8CE8E930619F82 Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/1nHUlwt2X9A095aW8Ml7tVPj8v4.roa Signing time: Fri 02 Jan 2026 00:18:09 +0000 ROA not before: Fri 02 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42475 IP address blocks: 91.207.34.0/24 maxlen: 24 91.207.35.0/24 maxlen: 24 185.82.52.0/24 maxlen: 24 185.82.53.0/24 maxlen: 24 185.82.54.0/24 maxlen: 24 185.82.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a5:c1:23:f4:6d:ad:fc:8c:e8:e9:30:61:9f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3 Validity Not Before: Jan 2 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d671d4970b765fd034f79696f0c97bb553e3f2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:70:7c:16:95:1e:ea:87:93:14:6c:1e:04: a7:6b:c6:43:b8:bd:da:15:07:6b:36:b8:d7:16:14: c3:14:5e:e7:65:be:d4:0e:56:4c:3d:37:fd:42:cc: e0:ea:4b:98:76:b0:04:ff:7d:84:6e:2d:f7:5e:bb: eb:8b:15:34:7b:16:53:b5:e1:82:7e:89:64:65:19: a8:46:0f:e9:4b:c4:b2:90:67:0e:9e:e4:cd:48:a2: 49:55:98:19:22:01:45:48:bc:fe:bf:c1:40:fd:84: 11:c0:42:5f:98:38:d8:b5:ff:42:15:c5:08:a7:f4: 8e:e7:3d:b3:cf:b5:f5:38:bc:79:04:03:6e:f1:08: 65:9f:46:d1:d4:7a:fb:95:76:66:99:a9:c5:68:2f: bb:23:f9:bf:dd:2f:e3:9f:88:f1:d9:07:f0:a2:e3: a8:7e:6d:14:ba:48:66:0c:d4:50:2c:7e:1d:4d:4d: c7:6c:66:c5:97:57:c4:d1:09:49:bb:e4:6a:d0:1a: b1:7e:cb:1e:44:84:76:90:c7:55:b7:e2:8f:dc:28: 59:4c:39:2a:f6:00:3f:ee:ae:2b:fc:35:bb:66:ea: e8:3e:cb:21:b6:c6:b5:df:46:02:71:0c:cf:fd:d4: ca:24:28:cc:11:ef:06:84:76:c0:b8:03:81:2f:b0: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:D4:97:0B:76:5F:D0:34:F7:96:96:F0:C9:7B:B5:53:E3:F2:FE X509v3 Authority Key Identifier: keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/1nHUlwt2X9A095aW8Ml7tVPj8v4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.34.0/23 185.82.52.0/22 Signature Algorithm: sha256WithRSAEncryption 40:41:5a:b2:41:f8:1c:49:11:1e:ed:3e:24:b8:49:3e:19:76: b5:a1:b0:d4:dd:0d:90:3a:f8:6d:38:f3:eb:6c:70:03:b5:9c: 5c:8b:f3:eb:05:fb:5a:9a:2c:7f:5f:51:7a:e5:88:95:bb:d6: 06:b7:bf:2d:4c:07:8f:84:13:46:2e:36:e3:d1:0c:00:2f:62: dc:95:46:a9:93:ef:7e:33:db:a7:8e:9b:26:d4:30:11:41:fd: 33:f8:af:68:ff:fe:9b:96:e3:04:c7:6c:17:33:fa:a6:a8:f7: 6f:2b:76:4e:09:1d:07:d1:b6:90:26:1f:19:22:f7:bb:6e:af: f2:da:d7:f7:c2:25:ec:12:e9:d6:f3:5a:82:3b:dd:40:16:e4: ad:e6:07:07:cb:5b:4b:45:83:5f:70:db:67:8b:84:19:01:e3: a2:cc:dc:6c:08:c4:f4:ee:9a:19:9e:de:73:ad:ac:cb:fe:b1: df:93:08:23:73:79:3b:b2:5d:91:93:2b:5b:ae:a6:04:d4:cf: 1a:ce:0d:ef:aa:59:7e:00:3f:c0:a1:b2:e6:1a:dc:fa:b3:6e: 96:ea:20:d9:b8:bd:8c:9f:c4:b9:b5:02:ff:cd:31:34:7c:c0: 84:66:cb:95:da:34:6f:ed:8e:2e:8d:76:ea:d5:99:05:37:ef: f7:00:16:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EaXBI/RtrfyM6OkwYZ+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OGNlODZkNDA5ZTgyNDM3NjU2MGZlM2IxYTE2OGYyYmEw MDgyZTMwHhcNMjYwMTAyMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjcxZDQ5NzBiNzY1ZmQwMzRmNzk2OTZmMGM5N2JiNTUzZTNmMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ZwfBaVHuqHkxRsHgSna8ZDuL3a FQdrNrjXFhTDFF7nZb7UDlZMPTf9Qszg6kuYdrAE/32Ebi33XrvrixU0exZTteGC folkZRmoRg/pS8SykGcOnuTNSKJJVZgZIgFFSLz+v8FA/YQRwEJfmDjYtf9CFcUI p/SO5z2zz7X1OLx5BANu8Qhln0bR1Hr7lXZmmanFaC+7I/m/3S/jn4jx2QfwouOo fm0UukhmDNRQLH4dTU3HbGbFl1fE0QlJu+Rq0BqxfsseRIR2kMdVt+KP3ChZTDkq 9gA/7q4r/DW7ZuroPsshtsa130YCcQzP/dTKJCjMEe8GhHbAuAOBL7AWCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNZx1JcLdl/QNPeWlvDJe7VT4/L+MB8GA1UdIwQY MBaAFOaM6G1AnoJDdlYP47GhaPK6AILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYt MGNhZGQ4NDc0NDhiLzEvMW5IVWx3dDJYOUEwOTVhVzhNbDd0VlBqOHY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYtMGNhZGQ4NDc0NDhi LzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW88iAwQC uVI0MA0GCSqGSIb3DQEBCwUAA4IBAQBAQVqyQfgcSREe7T4kuEk+GXa1obDU3Q2Q OvhtOPPrbHADtZxci/PrBftamix/X1F65YiVu9YGt78tTAePhBNGLjbj0QwAL2Lc lUapk+9+M9unjpsm1DARQf0z+K9o//6bluMEx2wXM/qmqPdvK3ZOCR0H0baQJh8Z Ive7bq/y2tf3wiXsEunW81qCO91AFuSt5gcHy1tLRYNfcNtni4QZAeOizNxsCMT0 7poZnt5zrazL/rHfkwgjc3k7sl2RkytbrqYE1M8azg3vqll+AD/AobLmGtz6s26W 6iDZuL2Mn8S5tQL/zTE0fMCEZsuV2jRv7Y4ujXbq1ZkFN+/3ABbq -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:28 2026 by rpki-client