This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa File: 1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa (raw, json) Hash identifier: fWr15RBt+7/7WtyC/v/I3WPSvILNHAPy+A8F/stwfsE= Subject key identifier: FA:BE:8E:23:B7:75:AC:C0:D3:72:70:E8:26:F8:83:1F:EC:FE:25:77 Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4 Certificate serial: 019B7BA51E212EC991E74E2047B5B87A471B Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205132 IP address blocks: 91.216.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1e:21:2e:c9:91:e7:4e:20:47:b5:b8:7a:47:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fabe8e23b775acc0d37270e826f8831fecfe2577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:1c:b1:1f:1a:4d:fa:77:58:1a:3a:f9:39: bb:3b:73:7c:58:b8:b7:78:cb:4b:14:9e:6b:8b:90: 7d:c9:13:65:81:ea:76:8a:cc:b5:d8:52:b9:df:15: 14:b9:ad:c3:ca:2b:47:18:c8:dc:8d:be:1e:69:e6: 3d:ba:d6:e0:c9:6c:ae:04:3d:2d:65:44:60:61:96: f7:8d:80:aa:b9:4c:01:80:5f:ae:9c:51:88:c7:46: b5:3f:e1:f0:04:a9:57:89:64:40:49:d7:ce:85:2d: 63:9d:93:05:ec:66:63:78:e9:24:92:cb:93:79:4a: 4b:20:70:b6:7e:4c:3d:57:a8:da:cc:d7:55:ed:0b: ca:91:1f:5c:ec:f0:62:ed:1f:22:ef:be:31:e6:d7: c9:6c:06:2f:9b:43:35:92:ab:10:d0:35:29:54:d0: 10:95:5b:c8:25:22:99:86:8d:fb:93:98:7f:41:fd: d5:9b:cc:3c:0b:06:65:42:bb:92:d0:72:bb:61:d8: 26:45:e0:0b:ea:aa:94:f8:03:eb:0e:a8:8c:35:5a: 80:67:8e:d2:43:c0:11:31:dc:34:15:42:c5:df:5e: 6a:df:54:71:5b:1c:5d:7d:25:1e:ea:a0:bd:43:f5: 08:38:f1:69:4a:a8:ff:27:e9:28:e4:30:c9:9e:64: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BE:8E:23:B7:75:AC:C0:D3:72:70:E8:26:F8:83:1F:EC:FE:25:77 X509v3 Authority Key Identifier: keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.174.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:ce:00:8e:59:6e:8d:6c:76:46:9d:09:67:02:d8:fe:a4:78: 48:9c:4d:33:18:c0:08:b3:bc:5d:df:8a:77:b9:13:fe:25:9f: a2:4e:17:32:f9:ba:37:cf:d5:66:b2:d3:d2:36:1a:4d:44:94: e2:2f:81:1e:c4:5f:09:b9:64:ab:bd:8b:45:d1:72:ed:6e:07: 21:b2:08:cb:30:c2:62:47:20:83:6f:a3:00:b5:d9:cb:84:49: 6b:20:8e:db:51:9c:29:8b:23:20:36:ba:4a:25:79:1e:c5:2d: cc:45:c2:cd:9a:ad:68:bc:a2:19:c4:73:e1:5b:f1:b5:12:2d: 04:be:0e:68:3a:59:7e:83:e5:fe:a6:c2:3c:bc:19:a2:73:9b: 69:4b:81:ee:e9:ea:74:f4:72:3b:de:55:69:35:dc:a9:cd:08: 33:33:1b:1e:94:6e:a1:35:ea:f6:f5:a7:1a:e6:c3:42:56:fd: 1f:1d:34:55:67:01:58:ae:f4:52:46:a6:c8:e7:73:d7:71:29: 83:2a:c7:bf:d6:35:e7:46:bc:78:d5:94:bb:94:88:ea:71:5a: 76:2c:09:af:ef:9a:08:f6:99:f4:13:3a:e4:2f:e8:27:76:f2: 50:89:3a:65:b5:0a:1b:a5:3a:d5:6e:21:b8:c4:02:b1:64:c5: 6f:05:84:2e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pR4hLsmR504gR7W4ekcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDJiM2YzMWE2YjBhNWQ3YzA2OThhMzc3OTZhNTFkN2Iw Y2I2YTQwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWJlOGUyM2I3NzVhY2MwZDM3MjcwZTgyNmY4ODMxZmVjZmUyNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssocsR8aTfp3WBo6+Tm7O3N8WLi3 eMtLFJ5ri5B9yRNlgep2isy12FK53xUUua3DyitHGMjcjb4eaeY9utbgyWyuBD0t ZURgYZb3jYCquUwBgF+unFGIx0a1P+HwBKlXiWRASdfOhS1jnZMF7GZjeOkkksuT eUpLIHC2fkw9V6jazNdV7QvKkR9c7PBi7R8i774x5tfJbAYvm0M1kqsQ0DUpVNAQ lVvIJSKZho37k5h/Qf3Vm8w8CwZlQruS0HK7YdgmReAL6qqU+APrDqiMNVqAZ47S Q8ARMdw0FULF315q31RxWxxdfSUe6qC9Q/UIOPFpSqj/J+ko5DDJnmQcAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPq+jiO3dazA03Jw6Cb4gx/s/iV3MB8GA1UdIwQY MBaAFEvSs/MaawpdfAaYo3eWpR17DLakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYt MmQ3ZmQwZmIyMmNlLzEvMS1yNk9JN2Qxck1EVGNuRG9KdmlESC16LUpYYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvMzk5N2VhLTIwNGEtNGVmZC04NWQ2LTJkN2ZkMGZiMjJj ZS8xL1M5S3o4eHByQ2wxOEJwaWpkNWFsSFhzTXRxUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvYrjAN BgkqhkiG9w0BAQsFAAOCAQEAXc4AjllujWx2Rp0JZwLY/qR4SJxNMxjACLO8Xd+K d7kT/iWfok4XMvm6N8/VZrLT0jYaTUSU4i+BHsRfCblkq72LRdFy7W4HIbIIyzDC Ykcgg2+jALXZy4RJayCO21GcKYsjIDa6SiV5HsUtzEXCzZqtaLyiGcRz4VvxtRIt BL4OaDpZfoPl/qbCPLwZonObaUuB7unqdPRyO95VaTXcqc0IMzMbHpRuoTXq9vWn GubDQlb9Hx00VWcBWK70UkamyOdz13EpgyrHv9Y150a8eNWUu5SI6nFadiwJr++a CPaZ9BM65C/oJ3byUIk6ZbUKG6U61W4huMQCsWTFbwWELg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:19 2026 by rpki-client