This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa File: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (raw, json) Hash identifier: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs= Subject key identifier: FB:B9:82:74:9C:E1:DC:02:42:07:34:24:AF:B2:E6:F1:46:24:56:82 Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44 Certificate serial: 019B77C6BFF5C2595B89692C39856AE5A25E Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199165 IP address blocks: 91.241.56.0/24 maxlen: 24 2001:67c:2e7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bf:f5:c2:59:5b:89:69:2c:39:85:6a:e5:a2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbb982749ce1dc0242073424afb2e6f146245682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:38:63:fe:23:37:f8:0c:17:a1:94:58:2d: c0:e4:f9:d3:d3:4b:fb:22:d1:3e:14:68:9b:86:9c: 81:aa:19:b5:3c:c9:fe:98:a3:6f:1a:4c:46:cb:b3: 07:95:f6:fd:7e:ea:dc:77:37:63:c8:57:c4:ea:08: 28:39:ae:ce:76:d3:66:70:79:60:aa:1b:ef:69:49: 8a:85:43:97:6c:70:16:a5:c2:3d:4c:c6:26:1d:33: b7:b9:55:f4:0a:a7:9c:92:d3:cb:4f:59:e6:63:82: d1:4e:2f:fb:50:e0:fd:30:6b:dd:9a:21:ab:42:98: 77:a0:d6:68:cc:e3:33:82:81:90:f3:39:cd:92:9c: 25:58:34:e3:a3:8c:00:e1:cc:ba:f2:a6:36:5f:f4: 9d:68:69:5d:d3:68:81:5b:97:78:d7:bb:44:b9:f0: cb:56:e8:b7:cf:ea:e3:ce:a6:24:78:f4:58:f2:6b: d0:91:fe:ac:d6:06:b2:ac:33:37:b2:3a:9a:e3:cf: ee:31:43:c6:6d:bf:03:a4:2e:cf:94:5d:c2:35:3c: 69:52:6a:d0:bf:89:9e:29:7b:91:e2:62:af:51:a2: 81:e1:4f:87:01:b8:e8:f1:fb:5b:90:ed:71:c2:d0: 58:37:38:d7:78:9a:28:17:9b:23:c0:f4:c4:50:0d: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B9:82:74:9C:E1:DC:02:42:07:34:24:AF:B2:E6:F1:46:24:56:82 X509v3 Authority Key Identifier: keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.56.0/24 IPv6: 2001:67c:2e7c::/48 Signature Algorithm: sha256WithRSAEncryption 86:18:1d:af:a0:74:95:81:6e:de:14:f9:ec:64:c7:3e:9d:da: d8:01:b5:63:d5:6d:95:83:56:cf:2b:39:24:ca:02:0a:44:65: 46:0c:36:89:ee:53:2e:69:5b:bc:5f:78:04:27:69:8c:0a:44: 2c:1d:de:0a:0a:07:20:85:4e:56:72:96:94:65:c7:1d:7b:ce: 47:6b:18:54:8e:0b:7b:2f:d8:e1:f8:95:01:78:aa:fc:57:b0: d4:82:3d:60:cf:4a:c0:ec:20:b4:09:e8:97:a8:e5:1b:5c:e0: e7:5f:29:7b:5d:23:c4:cf:4e:9a:33:3d:35:fe:67:43:36:23: 96:77:3f:a3:dd:bd:aa:1d:89:87:b0:b8:2d:b7:1c:9b:ba:36: fe:55:48:c1:cd:46:76:02:9b:3e:8b:48:25:ec:4b:3a:c0:81: bb:a2:7d:64:b9:4f:de:3f:28:cc:54:41:a8:36:5d:38:e9:7e: 2e:1b:1c:54:7f:40:c4:85:22:2a:cf:7b:03:2c:7c:d0:31:41: 0e:da:4e:42:dc:89:5a:0f:db:f4:e3:05:91:72:c6:ce:41:8e: 89:c8:35:f2:97:b6:df:eb:de:0e:b4:45:5c:4f:5a:e0:76:f5: 26:40:ae:6b:8c:7b:98:b3:eb:b9:68:cc:f9:c9:3b:06:76:d2: 89:59:74:06 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xr/1wllbiWksOYVq5aJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzODIwZTk2NGRmZDNkMjgxNDIwYWZkYTIwY2U5NDllNjBk NGNjNDQwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmI5ODI3NDljZTFkYzAyNDIwNzM0MjRhZmIyZTZmMTQ2MjQ1NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN44Y/4jN/gMF6GUWC3A5PnT00v7 ItE+FGibhpyBqhm1PMn+mKNvGkxGy7MHlfb9furcdzdjyFfE6ggoOa7OdtNmcHlg qhvvaUmKhUOXbHAWpcI9TMYmHTO3uVX0CqecktPLT1nmY4LRTi/7UOD9MGvdmiGr Qph3oNZozOMzgoGQ8znNkpwlWDTjo4wA4cy68qY2X/SdaGld02iBW5d417tEufDL Vui3z+rjzqYkePRY8mvQkf6s1gayrDM3sjqa48/uMUPGbb8DpC7PlF3CNTxpUmrQ v4meKXuR4mKvUaKB4U+HAbjo8ftbkO1xwtBYNzjXeJooF5sjwPTEUA16AQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPu5gnSc4dwCQgc0JK+y5vFGJFaCMB8GA1UdIwQY MBaAFAOCDpZN/T0oFCCv2iDOlJ5g1MxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUt NjI4YjBmYmNkMGI2LzEvMS03bUNkSnpoM0FKQ0J6UWtyN0xtOFVZa1ZvSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTUvMmVkNWRhLTg1Y2YtNDQ5Zi1iZDg1LTYyOGIwZmJjZDBi Ni8xL0E0SU9sazM5UFNnVUlLX2FJTTZVbm1EVXpFUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFvxODAP BAIAAjAJAwcAIAEGfC58MA0GCSqGSIb3DQEBCwUAA4IBAQCGGB2voHSVgW7eFPns ZMc+ndrYAbVj1W2Vg1bPKzkkygIKRGVGDDaJ7lMuaVu8X3gEJ2mMCkQsHd4KCgcg hU5WcpaUZccde85HaxhUjgt7L9jh+JUBeKr8V7DUgj1gz0rA7CC0CeiXqOUbXODn Xyl7XSPEz06aMz01/mdDNiOWdz+j3b2qHYmHsLgttxybujb+VUjBzUZ2Aps+i0gl 7Es6wIG7on1kuU/ePyjMVEGoNl046X4uGxxUf0DEhSIqz3sDLHzQMUEO2k5C3Ila D9v04wWRcsbOQY6JyDXyl7bf694OtEVcT1rgdvUmQK5rjHuYs+u5aMz5yTsGdtKJ WXQG -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:58 2026 by rpki-client