This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/1-i4S5deTfU5Sh15fYqf5Jhusm2U.roa File: 1-i4S5deTfU5Sh15fYqf5Jhusm2U.roa (raw, json) Hash identifier: I950vcuKR1BNQlR6pb4t14q2i1wr101AxNTWsanHl/E= Subject key identifier: FA:2E:12:E5:D7:93:7D:4E:52:87:5E:5F:62:A7:F9:26:1B:AC:9B:65 Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99 Certificate serial: 019B7E3834345297D61394E4C706303EC27C Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/1-i4S5deTfU5Sh15fYqf5Jhusm2U.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212398 IP address blocks: 91.194.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:34:34:52:97:d6:13:94:e4:c7:06:30:3e:c2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa2e12e5d7937d4e52875e5f62a7f9261bac9b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:8e:d3:02:17:45:e0:5e:91:38:e6:8f:79: fe:2a:a2:27:02:fc:85:e2:05:bd:b6:df:d4:99:cf: 78:3e:e0:77:fe:be:a9:89:69:91:7e:8e:1f:3b:d9: 30:e6:2b:5e:87:f9:ba:9a:84:57:6a:f6:b8:44:b1: 9d:32:56:c9:a4:aa:1b:28:04:60:f8:6a:3c:03:ce: 83:e6:c0:8d:67:db:73:dc:29:29:2f:fb:d7:c7:e3: 09:26:38:72:96:95:f8:14:7b:25:c7:e9:b3:7c:ec: d5:08:0a:96:8e:50:67:7f:2e:8b:bd:ae:73:f7:ed: 42:46:4c:a6:d3:0b:28:d7:3e:35:ba:63:8b:b1:90: 07:ba:a4:d7:41:f4:d6:ec:c3:bd:8f:c8:de:91:9e: db:45:6e:ae:ae:92:68:d5:17:85:68:c4:1f:0e:62: 66:6a:37:94:ff:42:db:97:5f:16:df:41:a9:90:38: 3d:31:23:ec:9b:87:c8:6c:0c:c3:e6:63:9a:fe:09: b4:6c:73:c1:a1:f6:78:17:26:12:f8:9e:bf:92:ac: f1:93:78:3f:ca:41:84:93:37:db:bd:24:cb:f1:d9: 54:76:36:f9:df:b7:8b:bc:b5:77:bd:9f:30:a7:52: b5:16:14:98:54:14:37:64:9a:4b:2e:fe:5f:7b:c9: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2E:12:E5:D7:93:7D:4E:52:87:5E:5F:62:A7:F9:26:1B:AC:9B:65 X509v3 Authority Key Identifier: keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/1-i4S5deTfU5Sh15fYqf5Jhusm2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.7.0/24 Signature Algorithm: sha256WithRSAEncryption cb:75:fe:5a:50:24:1d:1f:cb:aa:a6:30:fa:60:48:a7:08:e9: 3c:fd:41:f0:50:cc:8c:40:75:b0:0b:34:79:3b:af:1c:f8:d2: d8:0c:b4:ed:1b:0a:70:3b:a1:0c:b6:59:b4:b8:46:01:71:53: 64:db:55:49:ce:c0:9e:e9:02:50:ff:96:92:ec:2e:9b:e6:19: b1:60:bf:1e:59:14:ab:95:28:b6:e5:72:12:65:f2:cb:bb:08: bb:98:55:37:02:31:77:c5:36:2f:00:c3:03:a7:62:55:93:47: 6c:cf:7d:40:78:bd:01:b7:c3:e1:12:ce:16:1b:f6:90:3b:df: 94:3b:e3:08:22:ed:b2:0c:fc:15:f0:13:40:63:03:58:47:c1: 5c:ed:6e:82:19:7f:88:be:33:1a:87:90:e2:49:c5:65:50:0e: a1:50:f1:91:ad:7d:fa:23:09:71:44:35:93:15:c9:c8:f9:eb: 2c:d7:ee:29:73:8f:25:98:e6:be:39:a7:61:a3:de:42:17:e8: 96:32:b0:83:cb:d1:e1:6d:25:85:ed:88:f9:31:c4:10:d0:b6: ea:fd:75:03:03:a2:0c:f7:a8:b3:21:47:96:e0:0b:60:37:04: 81:ec:89:4f:dc:80:4f:b4:59:51:8c:5c:b5:2b:20:dd:16:a7: 8d:e9:90:37 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+ODQ0UpfWE5TkxwYwPsJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDY1ZjRmYjZiNjc5ZTdmMWNiZGQ4MDM1Zjk2NzQ2NzAx MGVhOTkwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTJlMTJlNWQ3OTM3ZDRlNTI4NzVlNWY2MmE3ZjkyNjFiYWM5YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YeO0wIXReBekTjmj3n+KqInAvyF 4gW9tt/Umc94PuB3/r6piWmRfo4fO9kw5iteh/m6moRXava4RLGdMlbJpKobKARg +Go8A86D5sCNZ9tz3CkpL/vXx+MJJjhylpX4FHslx+mzfOzVCAqWjlBnfy6Lva5z 9+1CRkym0wso1z41umOLsZAHuqTXQfTW7MO9j8jekZ7bRW6urpJo1ReFaMQfDmJm ajeU/0Lbl18W30GpkDg9MSPsm4fIbAzD5mOa/gm0bHPBofZ4FyYS+J6/kqzxk3g/ ykGEkzfbvSTL8dlUdjb537eLvLV3vZ8wp1K1FhSYVBQ3ZJpLLv5fe8ky+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPouEuXXk31OUodeX2Kn+SYbrJtlMB8GA1UdIwQY MBaAFNEGX0+2tnnn8cvdgDX5Z0ZwEOqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFaZlQ3YTJlZWZ4eTkyQU5mbG5SbkFRNnBrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83OGY0OWYtMjQ3ZC00ODg4LWFmOGQt YTFmMDQwZThlOGQ0LzEvMS1pNFM1ZGVUZlU1U2gxNWZZcWY1Smh1c20yVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTUvNzhmNDlmLTI0N2QtNDg4OC1hZjhkLWExZjA0MGU4ZThk NC8xLzBRWmZUN2EyZWVmeHk5MkFOZmxuUm5BUTZway5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvCBzAN BgkqhkiG9w0BAQsFAAOCAQEAy3X+WlAkHR/LqqYw+mBIpwjpPP1B8FDMjEB1sAs0 eTuvHPjS2Ay07RsKcDuhDLZZtLhGAXFTZNtVSc7AnukCUP+Wkuwum+YZsWC/HlkU q5UotuVyEmXyy7sIu5hVNwIxd8U2LwDDA6diVZNHbM99QHi9AbfD4RLOFhv2kDvf lDvjCCLtsgz8FfATQGMDWEfBXO1ughl/iL4zGoeQ4knFZVAOoVDxka19+iMJcUQ1 kxXJyPnrLNfuKXOPJZjmvjmnYaPeQhfoljKwg8vR4W0lhe2I+THEENC26v11AwOi DPeosyFHluALYDcEgeyJT9yAT7RZUYxctSsg3RanjemQNw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:47 2026 by rpki-client