This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/i1wzJi411R8A7tdxRjJMFITH3kg.roa File: i1wzJi411R8A7tdxRjJMFITH3kg.roa (raw, json) Hash identifier: lf3PRhdfk/V5Q4RlSc6sqN7sf87cHuqeFhcGd+41a0U= Subject key identifier: 8B:5C:33:26:2E:35:D5:1F:00:EE:D7:71:46:32:4C:14:84:C7:DE:48 Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd Certificate serial: 019B7C12BEC50026E42D5A9418A7F185F989 Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/i1wzJi411R8A7tdxRjJMFITH3kg.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59500 IP address blocks: 91.200.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:be:c5:00:26:e4:2d:5a:94:18:a7:f1:85:f9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b5c33262e35d51f00eed77146324c1484c7de48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:9a:a6:97:53:6b:39:a2:69:1f:8c:a2:61: 81:a4:82:4b:68:85:5a:a2:9c:0e:29:f1:b2:93:ec: c0:0c:f1:8d:fc:d8:65:83:ac:51:83:a8:3a:4a:c0: 77:39:51:a7:bd:2d:9f:a2:c9:63:08:98:85:b8:8c: 88:89:ec:bf:91:61:61:8e:2a:60:9b:f2:c5:53:e0: c2:42:80:c3:b6:50:c4:d5:0e:d0:07:14:00:79:28: 9f:1f:9b:f9:35:a9:b0:19:a7:19:2c:28:52:87:4b: 6b:ca:33:cd:d7:d7:c9:1e:4c:dc:b9:51:74:cd:2a: 82:eb:ac:d4:40:8c:56:11:f3:d1:21:52:88:56:d3: f8:31:c2:d3:5a:99:f3:01:39:f7:58:e5:e5:c7:94: 88:df:42:1f:f0:58:8c:67:ae:76:50:b7:fc:ae:60: 6d:fe:f1:ca:b0:2d:e4:01:b4:ff:42:8b:3c:09:9e: 10:2d:44:6c:57:8d:c2:97:26:03:21:5c:3a:55:1c: d5:d0:fb:86:af:d8:19:c9:20:0c:50:4f:16:97:3a: b4:cf:62:b0:80:40:eb:2f:cc:d3:2b:dc:83:6d:85: 7f:56:de:2c:1b:d8:8f:0c:05:b8:70:e9:78:73:61: 1d:5d:cf:53:16:bb:2f:04:38:16:81:ea:fc:92:57: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5C:33:26:2E:35:D5:1F:00:EE:D7:71:46:32:4C:14:84:C7:DE:48 X509v3 Authority Key Identifier: keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/i1wzJi411R8A7tdxRjJMFITH3kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.60.0/24 Signature Algorithm: sha256WithRSAEncryption 62:81:ec:da:73:f7:74:03:4c:c7:f3:f6:58:63:24:c5:2d:ba: 5f:97:e1:53:a8:e3:b2:62:bf:7d:da:a1:70:c1:d0:31:db:21: 11:31:6b:dc:b5:67:d1:6b:00:92:04:14:4c:48:62:f8:2f:f5: 24:ce:90:0e:d1:a0:20:2c:6e:19:eb:6b:19:b5:b4:b4:a1:9d: 66:98:97:7d:37:d0:bb:4b:54:c8:25:36:85:b5:ce:40:9b:67: 6a:21:a3:7e:ad:b5:ab:14:17:c1:26:06:b0:09:f5:f4:a7:b7: e1:68:8a:99:75:31:68:0a:8f:6e:1b:cb:8d:dc:b6:aa:4e:d5: 03:b5:71:11:45:6f:83:1d:83:27:6a:7d:30:9b:77:80:1e:30: f1:aa:f0:87:df:16:64:9d:ff:2d:c9:ce:c3:ed:c0:d9:32:2c: c1:39:46:d9:84:03:fd:da:ad:0a:84:21:1a:44:8b:ae:df:3f: 70:2d:9b:24:62:4e:5c:5c:32:a4:25:07:a0:2b:da:8a:28:99: 23:3f:a1:f9:38:c1:93:67:d6:db:78:75:6f:0c:55:d5:25:af: 24:1d:e0:82:a8:b0:61:14:4a:aa:29:62:31:eb:a4:f5:aa:9f: 94:c1:3f:c3:6d:c8:bf:38:c1:cf:74:cb:83:ae:65:66:db:62: e8:7d:ac:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Er7FACbkLVqUGKfxhfmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwODFmY2Y5ZWI3MGFiMGUxZmRjYWMwOWM3ZjliYjVlMDE0 YzlkYmQwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjVjMzMyNjJlMzVkNTFmMDBlZWQ3NzE0NjMyNGMxNDg0YzdkZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6iappdTazmiaR+MomGBpIJLaIVa opwOKfGyk+zADPGN/Nhlg6xRg6g6SsB3OVGnvS2fosljCJiFuIyIiey/kWFhjipg m/LFU+DCQoDDtlDE1Q7QBxQAeSifH5v5NamwGacZLChSh0tryjPN19fJHkzcuVF0 zSqC66zUQIxWEfPRIVKIVtP4McLTWpnzATn3WOXlx5SI30If8FiMZ652ULf8rmBt /vHKsC3kAbT/Qos8CZ4QLURsV43ClyYDIVw6VRzV0PuGr9gZySAMUE8Wlzq0z2Kw gEDrL8zTK9yDbYV/Vt4sG9iPDAW4cOl4c2EdXc9TFrsvBDgWger8klcuhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFItcMyYuNdUfAO7XcUYyTBSEx95IMB8GA1UdIwQY MBaAFGCB/PnrcKsOH9ysCcf5u14BTJ29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9mZmQxZWQtNjliMS00OTMyLThmZDAt NzdmOWVkMTE5NWQ1LzEvaTF3ekppNDExUjhBN3RkeFJqSk1GSVRIM2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9mZmQxZWQtNjliMS00OTMyLThmZDAtNzdmOWVkMTE5NWQ1 LzEvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8g8MA0G CSqGSIb3DQEBCwUAA4IBAQBigezac/d0A0zH8/ZYYyTFLbpfl+FTqOOyYr992qFw wdAx2yERMWvctWfRawCSBBRMSGL4L/UkzpAO0aAgLG4Z62sZtbS0oZ1mmJd9N9C7 S1TIJTaFtc5Am2dqIaN+rbWrFBfBJgawCfX0p7fhaIqZdTFoCo9uG8uN3LaqTtUD tXERRW+DHYMnan0wm3eAHjDxqvCH3xZknf8tyc7D7cDZMizBOUbZhAP92q0KhCEa RIuu3z9wLZskYk5cXDKkJQegK9qKKJkjP6H5OMGTZ9bbeHVvDFXVJa8kHeCCqLBh FEqqKWIx66T1qp+UwT/Dbci/OMHPdMuDrmVm22Lofawz -----END CERTIFICATE-----Generated at Tue Jan 27 07:12:51 2026 by rpki-client