This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/1-t_zhWLilE6KvhfiWmcU3qakEiY.roa File: 1-t_zhWLilE6KvhfiWmcU3qakEiY.roa (raw, json) Hash identifier: 0Yp7FcFsKOjytovm/Gd90cW5FsF6AebKXtz8XB/GJT0= Subject key identifier: FA:DF:F3:85:62:E2:94:4E:8A:BE:17:E2:5A:67:14:DE:A6:A4:12:26 Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2 Certificate serial: 019B7F15664578D9128BC05C6DA65AF91865 Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/1-t_zhWLilE6KvhfiWmcU3qakEiY.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47545 IP address blocks: 91.208.22.0/24 maxlen: 24 2001:67c:2114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:66:45:78:d9:12:8b:c0:5c:6d:a6:5a:f9:18:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fadff38562e2944e8abe17e25a6714dea6a41226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:8b:5f:5d:eb:7d:43:fb:14:9a:19:c0:bd: c9:a4:dd:9f:42:23:0d:dd:c0:32:5a:2b:2a:a1:c3: 80:24:09:3b:41:ca:dc:cb:4d:18:bd:da:b7:2b:67: 49:e3:7d:a2:ed:2b:44:46:9b:ff:39:92:9b:0d:87: 15:23:fb:0c:a7:0a:56:03:1d:aa:ef:f3:47:26:f6: a6:ee:a1:6c:16:f3:d2:34:0c:6b:e3:6f:e5:44:20: 8a:63:2f:66:12:79:82:cd:66:66:c5:4f:b0:29:a0: 33:c3:6d:88:0c:3b:6a:75:8c:11:53:8e:8c:3a:b2: 6e:7a:b2:70:28:aa:83:ad:80:c6:54:c4:82:62:81: 5d:8f:3f:e2:87:e1:60:bd:d3:da:4b:3e:55:82:25: 82:94:76:9e:23:4f:5b:df:c0:ea:00:b5:61:49:a4: 03:fe:9a:de:31:61:db:7e:68:4e:e0:2a:be:0b:f6: 64:25:08:25:d9:ea:d7:83:06:1a:50:07:d2:4e:16: 0d:07:33:42:15:3a:8d:21:cc:cb:64:c8:17:ad:9a: 97:65:d6:51:2d:01:1b:56:5b:24:c6:9d:4e:c3:bd: ba:46:13:aa:1a:a9:1d:17:52:36:0c:86:7a:7e:87: 0d:76:ec:98:ec:48:b7:4d:57:d9:54:79:f7:f7:5e: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DF:F3:85:62:E2:94:4E:8A:BE:17:E2:5A:67:14:DE:A6:A4:12:26 X509v3 Authority Key Identifier: keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/1-t_zhWLilE6KvhfiWmcU3qakEiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.22.0/24 IPv6: 2001:67c:2114::/48 Signature Algorithm: sha256WithRSAEncryption 5d:b5:b3:89:d0:64:f1:4b:4d:76:ff:ad:b0:90:93:ea:bf:67: da:d8:01:9a:22:bc:4a:3f:10:f6:58:81:57:7d:b9:af:50:d5: 7d:75:3b:f6:e0:63:21:55:be:ea:72:a2:4e:3f:fc:58:7f:d6: 82:78:59:0c:aa:54:fb:7b:4f:c3:86:d4:b8:83:48:a1:53:16: 83:7b:d3:9c:6d:1f:f9:e5:74:af:d4:0c:34:44:a9:dd:92:f4: 29:bf:11:44:36:a8:72:c9:71:61:fc:6f:52:1e:02:b5:bf:9d: 68:a7:8f:ed:7b:b3:fa:64:f5:e1:47:c3:d1:80:79:8b:c8:17: ad:57:b2:e4:14:ac:8c:62:96:51:da:d0:99:4b:39:27:ae:bb: 4c:ae:99:81:ed:83:a0:c6:e6:67:1d:a9:ce:95:d2:8b:ef:0d: e5:b9:42:74:c8:9b:38:e5:14:01:94:61:bb:bd:49:05:85:72: 43:fb:de:98:ea:aa:fb:bc:ac:a2:08:9c:1d:13:a5:b2:1d:01: 3b:f4:98:8f:a8:21:44:82:cd:ef:57:98:84:fe:93:f0:57:73: 7a:c4:4d:a1:96:75:2a:d9:88:21:6d:1b:83:47:fd:d0:f4:13: f6:74:f6:fe:ed:cf:2a:e2:a8:60:ee:ee:a1:f1:d8:d6:a9:e8: ef:8c:fa:0e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FWZFeNkSi8BcbaZa+RhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMWRiNjQ0ZWEwZTI3NDlkZDZlZDAyMmFlY2QxMjE5NGJj Yjk2ZjIwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWRmZjM4NTYyZTI5NDRlOGFiZTE3ZTI1YTY3MTRkZWE2YTQxMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5eLX13rfUP7FJoZwL3JpN2fQiMN 3cAyWisqocOAJAk7Qcrcy00Yvdq3K2dJ432i7StERpv/OZKbDYcVI/sMpwpWAx2q 7/NHJvam7qFsFvPSNAxr42/lRCCKYy9mEnmCzWZmxU+wKaAzw22IDDtqdYwRU46M OrJuerJwKKqDrYDGVMSCYoFdjz/ih+FgvdPaSz5VgiWClHaeI09b38DqALVhSaQD /preMWHbfmhO4Cq+C/ZkJQgl2erXgwYaUAfSThYNBzNCFTqNIczLZMgXrZqXZdZR LQEbVlskxp1Ow726RhOqGqkdF1I2DIZ6focNduyY7Ei3TVfZVHn3915L7QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPrf84Vi4pROir4X4lpnFN6mpBImMB8GA1UdIwQY MBaAFIsdtkTqDidJ3W7QIq7NEhlLy5byMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMt NTQzNzc2ZjdjOTJlLzEvMS10X3poV0xpbEU2S3ZoZmlXbWNVM3Fha0VpWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvZGM5YzZhLTU1MGEtNGVlMS1iNGZjLTU0Mzc3NmY3Yzky ZS8xL2l4MjJST29PSjBuZGJ0QWlyczBTR1V2TGx2SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFvQFjAP BAIAAjAJAwcAIAEGfCEUMA0GCSqGSIb3DQEBCwUAA4IBAQBdtbOJ0GTxS012/62w kJPqv2fa2AGaIrxKPxD2WIFXfbmvUNV9dTv24GMhVb7qcqJOP/xYf9aCeFkMqlT7 e0/DhtS4g0ihUxaDe9OcbR/55XSv1Aw0RKndkvQpvxFENqhyyXFh/G9SHgK1v51o p4/te7P6ZPXhR8PRgHmLyBetV7LkFKyMYpZR2tCZSzknrrtMrpmB7YOgxuZnHanO ldKL7w3luUJ0yJs45RQBlGG7vUkFhXJD+96Y6qr7vKyiCJwdE6WyHQE79JiPqCFE gs3vV5iE/pPwV3N6xE2hlnUq2YghbRuDR/3Q9BP2dPb+7c8q4qhg7u6h8djWqejv jPoO -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:29 2026 by rpki-client