This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/1-vhU_JsxCJpqpWHaHS6_hs-zIJ4.roa File: 1-vhU_JsxCJpqpWHaHS6_hs-zIJ4.roa (raw, json) Hash identifier: Hq+dP+btQbNrYBQSTsx2CRpU6VIf7Y+oZgutJKi72PA= Subject key identifier: FA:F8:54:FC:9B:31:08:9A:6A:A5:61:DA:1D:2E:BF:86:CF:B3:20:9E Certificate issuer: /CN=cb7aebc4e85b8cb9824ae487aa1444eef43826a3 Certificate serial: 019BF9CF473D382748F35DF7FDBB9388CA2F Authority key identifier: CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/1-vhU_JsxCJpqpWHaHS6_hs-zIJ4.roa Signing time: Mon 26 Jan 2026 10:17:49 +0000 ROA not before: Mon 26 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50824 IP address blocks: 91.205.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:cf:47:3d:38:27:48:f3:5d:f7:fd:bb:93:88:ca:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb7aebc4e85b8cb9824ae487aa1444eef43826a3 Validity Not Before: Jan 26 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faf854fc9b31089a6aa561da1d2ebf86cfb3209e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dd:0f:c5:85:da:1a:ae:0a:1d:93:45:79:10: 99:4e:82:e2:38:37:e9:9e:d1:a4:b7:dd:e6:ea:70: be:d1:39:62:57:79:3a:c0:bc:c6:ca:48:25:7a:5e: 74:dc:f9:51:4b:12:6b:97:06:d6:85:72:17:70:89: 06:e2:8d:5a:7a:09:f4:dc:fb:4a:d8:fa:9a:13:fb: 2a:a3:2e:41:83:4a:0e:8f:6f:f2:38:8e:91:1b:a3: c0:c4:69:0d:ea:23:a3:a5:e3:bb:19:20:b5:db:5d: 5e:f5:85:ee:6b:5b:ec:1c:01:df:53:65:b1:69:c3: 29:6f:ff:1e:86:78:b6:96:6b:bb:10:b1:5d:ef:63: d4:47:44:03:bd:3d:2f:6e:c9:a5:8b:cf:f5:e6:79: 67:72:af:ce:0b:cd:94:4a:a2:bc:29:9a:80:7c:ff: ab:b1:75:01:55:6c:9e:1b:c7:37:cd:32:df:df:91: cf:aa:e8:e8:a6:5c:78:7b:bf:14:98:ee:34:80:c6: 2e:3d:7b:a6:47:63:99:12:33:04:bb:43:69:07:71: 1d:df:14:58:cd:ae:81:3f:39:79:e3:be:2a:32:73: 56:14:88:99:bc:e3:31:e8:5b:a4:13:e3:28:2a:cc: 5c:4b:0b:d0:5a:af:1d:37:91:9d:e0:4b:20:67:ad: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F8:54:FC:9B:31:08:9A:6A:A5:61:DA:1D:2E:BF:86:CF:B3:20:9E X509v3 Authority Key Identifier: keyid:CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/1-vhU_JsxCJpqpWHaHS6_hs-zIJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.36.0/22 Signature Algorithm: sha256WithRSAEncryption 50:8c:9d:38:02:d4:26:03:59:5e:90:6b:38:50:24:ca:63:e3: bb:fa:04:da:6c:a7:43:e4:30:54:58:1f:26:38:0a:83:c9:33: f3:e8:5b:4b:0a:08:02:5d:b1:d6:49:6c:0e:2e:49:4e:23:75: 52:fd:a8:71:96:e4:35:d2:07:e0:80:94:4e:88:3d:83:27:89: c5:2c:87:44:b9:c5:d2:27:02:5b:f2:73:7c:d2:0e:9a:ec:ce: e3:64:2d:0c:59:94:ed:55:95:08:74:8e:e2:9c:0c:bb:46:c6: 5c:a3:fd:21:db:9c:a0:0a:2f:08:76:8a:bd:35:d3:08:33:b8: 4c:2f:16:10:60:7e:56:c5:34:c8:b5:5e:2d:9e:11:7e:c7:2e: ce:e4:a5:01:6e:8d:06:7d:10:1e:f2:0a:63:b6:18:61:0e:c3: 18:0c:14:5d:a5:60:c9:03:2e:42:f9:ac:37:e8:09:3f:99:13: 9a:be:cf:c9:17:70:cd:a7:6b:84:01:8a:85:b3:96:77:1b:cc: 63:d3:78:98:db:b8:41:a1:42:74:13:f0:95:a9:b4:36:65:e8: de:e6:3a:ed:97:59:b9:dc:32:88:9e:53:71:56:b4:d2:9a:d3: 14:fd:e9:de:b4:b1:72:d4:73:81:89:a6:97:ed:7b:0e:a8:09: 6e:89:ce:9e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZv5z0c9OCdI8133/buTiMovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiN2FlYmM0ZTg1YjhjYjk4MjRhZTQ4N2FhMTQ0NGVlZjQz ODI2YTMwHhcNMjYwMTI2MTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWY4NTRmYzliMzEwODlhNmFhNTYxZGExZDJlYmY4NmNmYjMyMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8d0PxYXaGq4KHZNFeRCZToLiODfp ntGkt93m6nC+0TliV3k6wLzGykglel503PlRSxJrlwbWhXIXcIkG4o1aegn03PtK 2PqaE/sqoy5Bg0oOj2/yOI6RG6PAxGkN6iOjpeO7GSC1211e9YXua1vsHAHfU2Wx acMpb/8ehni2lmu7ELFd72PUR0QDvT0vbsmli8/15nlncq/OC82USqK8KZqAfP+r sXUBVWyeG8c3zTLf35HPqujoplx4e78UmO40gMYuPXumR2OZEjMEu0NpB3Ed3xRY za6BPzl5474qMnNWFIiZvOMx6FukE+MoKsxcSwvQWq8dN5Gd4EsgZ60scQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPr4VPybMQiaaqVh2h0uv4bPsyCeMB8GA1UdIwQY MBaAFMt668ToW4y5gkrkh6oURO70OCajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTNycnhPaGJqTG1DU3VTSHFoUkU3dlE0SnFNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNWI3OWEtNGM2Mi00NDE4LWIyY2It Nzc3M2ZkZTNmYTdhLzEvMS12aFVfSnN4Q0pwcXBXSGFIUzZfaHMteklKNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjcvMjViNzlhLTRjNjItNDQxOC1iMmNiLTc3NzNmZGUzZmE3 YS8xL3kzcnJ4T2hiakxtQ1N1U0hxaFJFN3ZRNEpxTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvNJDAN BgkqhkiG9w0BAQsFAAOCAQEAUIydOALUJgNZXpBrOFAkymPju/oE2mynQ+QwVFgf JjgKg8kz8+hbSwoIAl2x1klsDi5JTiN1Uv2ocZbkNdIH4ICUTog9gyeJxSyHRLnF 0icCW/JzfNIOmuzO42QtDFmU7VWVCHSO4pwMu0bGXKP9IducoAovCHaKvTXTCDO4 TC8WEGB+VsU0yLVeLZ4RfscuzuSlAW6NBn0QHvIKY7YYYQ7DGAwUXaVgyQMuQvms N+gJP5kTmr7PyRdwzadrhAGKhbOWdxvMY9N4mNu4QaFCdBPwlam0NmXo3uY67ZdZ udwyiJ5TcVa00prTFP3p3rSxctRzgYmml+17DqgJbonOng== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:46 2026 by rpki-client