This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/1-tZEy19BYfVf-5wZ51FQXwuOEhw.roa File: 1-tZEy19BYfVf-5wZ51FQXwuOEhw.roa (raw, json) Hash identifier: /nAeBMYlXnQjZhhvuAHNLWLzGOzbbDnBysJXkWN1VRY= Subject key identifier: FA:D6:44:CB:5F:41:61:F5:5F:FB:9C:19:E7:51:50:5F:0B:8E:12:1C Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd Certificate serial: 019BE26F31B584A3A04FADCCECFC6A791D63 Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/1-tZEy19BYfVf-5wZ51FQXwuOEhw.roa Signing time: Wed 21 Jan 2026 21:21:36 +0000 ROA not before: Wed 21 Jan 2026 21:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50780 IP address blocks: 91.241.192.0/18 maxlen: 18 91.241.194.0/24 maxlen: 24 91.241.201.0/24 maxlen: 24 91.241.228.0/24 maxlen: 24 91.241.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:6f:31:b5:84:a3:a0:4f:ad:cc:ec:fc:6a:79:1d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd Validity Not Before: Jan 21 21:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fad644cb5f4161f55ffb9c19e751505f0b8e121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:01:6a:e7:2d:f9:2b:c2:9a:11:a7:e4:54: 37:46:cd:68:bd:42:5f:ee:c9:47:a1:39:0c:f3:11: b7:0f:90:1d:78:1e:b0:d3:27:46:77:b5:1c:94:b0: 1e:6f:4c:07:d0:96:13:5d:0a:5c:37:0c:2f:72:74: 35:c1:3c:0e:b7:b4:be:fe:f1:95:ba:b1:85:91:8a: a8:1c:d8:08:77:c6:ce:e5:a4:a0:28:56:c8:0d:ad: af:9a:51:ff:e2:0a:fc:8f:0d:a1:23:cb:ef:e1:c8: 4c:02:b4:df:e7:e9:f0:cd:db:bf:4a:6a:19:37:4e: ac:1f:ff:4f:39:80:ab:57:2d:21:12:fe:81:13:08: 2a:c7:ac:99:80:67:40:97:c7:98:b3:6b:f5:6c:a7: 27:a4:00:be:73:2e:06:62:fb:9c:34:a8:89:e4:ba: cf:b7:26:cf:68:8e:f6:7e:e4:5c:d0:7f:ab:d4:ac: ba:1b:6c:3f:b5:94:ac:f5:dd:16:b6:95:5d:01:32: f0:38:ab:53:cc:8f:f0:e5:a4:53:99:e3:f2:e8:76: da:82:15:91:07:d7:0f:63:0c:9f:e4:20:aa:c3:3e: e6:bc:06:ea:b6:ad:34:d3:53:6c:a4:de:0c:38:e7: 90:27:93:c4:16:49:dd:1f:dd:d0:ad:5a:80:49:74: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D6:44:CB:5F:41:61:F5:5F:FB:9C:19:E7:51:50:5F:0B:8E:12:1C X509v3 Authority Key Identifier: keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/1-tZEy19BYfVf-5wZ51FQXwuOEhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.192.0/18 Signature Algorithm: sha256WithRSAEncryption 6d:78:cb:a9:b3:d2:67:1b:b6:11:a4:91:6a:01:e1:76:98:61: 94:9c:e7:6f:da:d9:b8:4e:cd:04:68:e7:92:a4:88:9b:83:aa: d7:05:10:02:ba:52:29:a9:c3:d3:49:76:da:af:45:04:ec:b8: 3f:e5:49:ca:fd:e6:5b:9f:37:e7:ac:a1:6b:79:a2:eb:f5:14: 9d:71:a4:62:bf:22:35:a3:b7:e8:e5:d4:a9:3b:4b:91:82:07: ed:ff:c2:78:4f:2e:4d:10:4a:0b:f4:e4:9a:f7:72:61:cd:4b: 64:25:e9:a4:ae:08:c2:26:87:d9:7c:96:b8:1d:af:9b:4a:db: ee:e7:12:1c:17:cd:83:70:79:2c:db:5d:26:b9:06:60:d8:6d: 73:38:96:e5:32:0c:f6:fd:b7:3d:a5:44:8b:19:47:30:8b:fa: a9:de:59:33:71:f2:96:1e:1d:a8:7c:2d:d2:99:9f:5d:fa:fa: cb:94:4e:92:fe:aa:9c:6f:4d:6e:2d:a6:94:bc:9c:0b:95:dc: d9:26:6d:19:25:10:56:b8:f4:c3:45:5b:24:32:eb:87:e5:1d: f3:5b:fe:0a:7a:34:86:21:76:66:e2:cc:bd:73:9b:f9:72:d6: 14:0d:7f:06:98:ff:9b:81:bb:a3:59:5e:10:ec:a8:5b:78:5d: 6d:d0:e4:7b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvibzG1hKOgT63M7PxqeR1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjIzNDVhM2ZlYTRiM2RiZjI1Y2IxMjBmMWI3ODQyNTM2 MjY4Y2QwHhcNMjYwMTIxMjEyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWQ2NDRjYjVmNDE2MWY1NWZmYjljMTllNzUxNTA1ZjBiOGUxMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ4Bauct+SvCmhGn5FQ3Rs1ovUJf 7slHoTkM8xG3D5AdeB6w0ydGd7UclLAeb0wH0JYTXQpcNwwvcnQ1wTwOt7S+/vGV urGFkYqoHNgId8bO5aSgKFbIDa2vmlH/4gr8jw2hI8vv4chMArTf5+nwzdu/SmoZ N06sH/9POYCrVy0hEv6BEwgqx6yZgGdAl8eYs2v1bKcnpAC+cy4GYvucNKiJ5LrP tybPaI72fuRc0H+r1Ky6G2w/tZSs9d0WtpVdATLwOKtTzI/w5aRTmePy6HbaghWR B9cPYwyf5CCqwz7mvAbqtq0001NspN4MOOeQJ5PEFkndH93QrVqASXTCIwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPrWRMtfQWH1X/ucGedRUF8LjhIcMB8GA1UdIwQY MBaAFMjyNFo/6ks9vyXLEg8beEJTYmjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBJMFdqX3FTejJfSmNzU0R4dDRRbE5pYU0wLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80OGMyOGEtMDg0OC00YjBiLTkxNGEt MGVhMWUxMjM0MTdhLzEvMS10WkV5MTlCWWZWZi01d1o1MUZRWHd1T0Vody5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGQvNDhjMjhhLTA4NDgtNGIwYi05MTRhLTBlYTFlMTIzNDE3 YS8xL3lQSTBXal9xU3oyX0pjc1NEeHQ0UWxOaWFNMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBlvxwDAN BgkqhkiG9w0BAQsFAAOCAQEAbXjLqbPSZxu2EaSRagHhdphhlJznb9rZuE7NBGjn kqSIm4Oq1wUQArpSKanD00l22q9FBOy4P+VJyv3mW58356yha3mi6/UUnXGkYr8i NaO36OXUqTtLkYIH7f/CeE8uTRBKC/TkmvdyYc1LZCXppK4IwiaH2XyWuB2vm0rb 7ucSHBfNg3B5LNtdJrkGYNhtcziW5TIM9v23PaVEixlHMIv6qd5ZM3Hylh4dqHwt 0pmfXfr6y5ROkv6qnG9Nbi2mlLycC5Xc2SZtGSUQVrj0w0VbJDLrh+Ud81v+Cno0 hiF2ZuLMvXOb+XLWFA1/Bpj/m4G7o1leEOyoW3hdbdDkew== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:50 2026 by rpki-client