This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa File: rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa (raw, json) Hash identifier: 5haE3uSWqoSmkVp2C59/CSPiEElkrF1oivdNjZDrJeE= Subject key identifier: AE:4D:5B:71:A7:D9:F8:D6:DB:51:D6:42:2D:3F:65:31:15:18:9B:E2 Certificate issuer: /CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d Certificate serial: 019B7DC9FA63F21BF62BCECE63A35E83A9F7 Authority key identifier: 09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3302 IP address blocks: 91.234.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.mft rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fa:63:f2:1b:f6:2b:ce:ce:63:a3:5e:83:a9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0969cb21563e26edb6afb20d1d92e893a8ddb81d Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae4d5b71a7d9f8d6db51d6422d3f653115189be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:9a:92:1a:ea:fc:e2:75:3a:de:e7:40:fd: 33:92:0b:d2:7d:2b:c4:6d:56:13:14:58:05:85:e3: df:e0:25:f2:f7:16:ef:38:a0:41:e9:42:6a:ef:0a: 30:ee:ee:d2:9d:9f:d4:cc:97:53:8f:92:7d:5f:d2: 0a:ea:be:46:94:4c:44:b5:2f:3b:ba:ac:74:d4:77: ed:b9:58:72:ca:18:3e:6e:96:4b:fe:3d:40:0a:7e: b4:73:34:d0:d4:85:49:0c:3e:f1:c1:c7:50:24:d8: e4:1c:79:b0:21:89:74:92:b0:e8:33:4a:a3:ab:6a: 58:74:38:85:40:69:7b:80:e5:f3:6b:95:a2:7d:64: 88:d5:36:31:d1:c0:be:01:81:f2:99:e8:12:ab:4a: c7:31:53:61:02:09:31:4e:4f:02:03:39:17:f3:59: 12:58:91:54:3c:ad:74:9c:e7:94:d4:1b:e0:9f:90: 8b:a8:c7:59:7c:24:57:70:54:21:e0:49:75:bc:46: 32:15:ee:68:f6:a8:19:29:93:56:a7:1c:c8:89:36: be:b2:24:8b:1c:fe:2f:3b:ef:46:dc:d7:61:bc:78: 7c:e0:f8:fe:ed:b8:0d:d8:6e:49:c9:2b:75:15:3f: 69:18:df:63:a4:8c:71:7a:9b:2c:46:2f:63:29:f4: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:5B:71:A7:D9:F8:D6:DB:51:D6:42:2D:3F:65:31:15:18:9B:E2 X509v3 Authority Key Identifier: keyid:09:69:CB:21:56:3E:26:ED:B6:AF:B2:0D:1D:92:E8:93:A8:DD:B8:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWnLIVY-Ju22r7INHZLok6jduB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/rk1bcafZ-NbbUdZCLT9lMRUYm-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fe823-6ed7-4786-97b4-3600d02a6f0e/1/CWnLIVY-Ju22r7INHZLok6jduB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.237.0/24 Signature Algorithm: sha256WithRSAEncryption 82:56:5d:53:21:db:ba:32:b2:7b:c2:7f:28:f6:e2:56:e5:cb: e5:d7:14:a9:8b:7c:34:38:60:11:40:2a:c0:c5:08:2b:d5:c2: 59:30:1f:96:6b:85:e3:3a:5e:00:f0:be:8c:f1:b4:b7:4f:cf: 1b:d6:68:dd:e5:ef:84:e1:03:74:92:64:4a:7b:38:a4:1a:83: d1:e3:c5:6f:6e:4f:66:43:ca:46:fd:66:ad:0a:d7:ef:38:f9: a8:03:44:00:0d:0c:5c:c6:64:f1:88:52:34:4f:56:af:c8:20: ad:3a:91:b4:63:e4:e5:e0:12:e2:35:f6:f5:65:74:1a:be:80: e6:a2:a7:3c:03:fd:9a:26:d9:b5:b2:13:12:bd:8f:b3:88:ee: 4c:52:dd:26:96:69:59:58:73:cc:ef:f3:81:18:1e:2e:14:cb: 48:d6:5d:4f:9b:63:26:6c:6b:0d:1f:55:c4:ef:de:b8:b0:81: 1b:6a:ee:1c:9d:39:2e:94:dd:79:00:b4:9d:24:6a:e7:64:4b: 9a:41:db:e5:32:84:61:33:6f:51:b9:fd:cd:57:44:fa:e9:ff: 9c:5d:57:74:6f:2d:e9:b7:a3:7a:87:41:4b:91:06:20:ce:e7: 9b:02:05:40:51:47:e6:18:c8:3b:1f:2d:30:f9:de:7b:3b:34: 53:7c:85:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yfpj8hv2K87OY6Neg6n3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjljYjIxNTYzZTI2ZWRiNmFmYjIwZDFkOTJlODkzYThk ZGI4MWQwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTRkNWI3MWE3ZDlmOGQ2ZGI1MWQ2NDIyZDNmNjUzMTE1MTg5YmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqquakhrq/OJ1Ot7nQP0zkgvSfSvE bVYTFFgFhePf4CXy9xbvOKBB6UJq7wow7u7SnZ/UzJdTj5J9X9IK6r5GlExEtS87 uqx01HftuVhyyhg+bpZL/j1ACn60czTQ1IVJDD7xwcdQJNjkHHmwIYl0krDoM0qj q2pYdDiFQGl7gOXza5WifWSI1TYx0cC+AYHymegSq0rHMVNhAgkxTk8CAzkX81kS WJFUPK10nOeU1Bvgn5CLqMdZfCRXcFQh4El1vEYyFe5o9qgZKZNWpxzIiTa+siSL HP4vO+9G3NdhvHh84Pj+7bgN2G5JySt1FT9pGN9jpIxxepssRi9jKfTopwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5NW3Gn2fjW21HWQi0/ZTEVGJviMB8GA1UdIwQY MBaAFAlpyyFWPibttq+yDR2S6JOo3bgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1duTElWWS1KdTIycjdJTkhaTG9rNmpkdUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZmU4MjMtNmVkNy00Nzg2LTk3YjQt MzYwMGQwMmE2ZjBlLzEvcmsxYmNhZlotTmJiVWRaQ0xUOWxNUlVZbS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83ZmU4MjMtNmVkNy00Nzg2LTk3YjQtMzYwMGQwMmE2ZjBl LzEvQ1duTElWWS1KdTIycjdJTkhaTG9rNmpkdUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+rtMA0G CSqGSIb3DQEBCwUAA4IBAQCCVl1TIdu6MrJ7wn8o9uJW5cvl1xSpi3w0OGARQCrA xQgr1cJZMB+Wa4XjOl4A8L6M8bS3T88b1mjd5e+E4QN0kmRKezikGoPR48Vvbk9m Q8pG/WatCtfvOPmoA0QADQxcxmTxiFI0T1avyCCtOpG0Y+Tl4BLiNfb1ZXQavoDm oqc8A/2aJtm1shMSvY+ziO5MUt0mlmlZWHPM7/OBGB4uFMtI1l1Pm2MmbGsNH1XE 7964sIEbau4cnTkulN15ALSdJGrnZEuaQdvlMoRhM29Ruf3NV0T66f+cXVd0by3p t6N6h0FLkQYgzuebAgVAUUfmGMg7Hy0w+d57OzRTfIVf -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:41 2026 by rpki-client