This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1R11TdPl2cndFm6A5mGq1Xk9AcI.roa File: 1R11TdPl2cndFm6A5mGq1Xk9AcI.roa (raw, json) Hash identifier: ayaJOmBBrb5R0TsHazkd/VkPZ9tXhTcfGLRbZHbkMKU= Subject key identifier: D5:1D:75:4D:D3:E5:D9:C9:DD:16:6E:80:E6:61:AA:D5:79:3D:01:C2 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019BFC136E3F28726AF03712FA90676ACA07 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1R11TdPl2cndFm6A5mGq1Xk9AcI.roa Signing time: Mon 26 Jan 2026 20:51:30 +0000 ROA not before: Mon 26 Jan 2026 20:51:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 217.147.13.0/24 maxlen: 24 217.147.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:13:6e:3f:28:72:6a:f0:37:12:fa:90:67:6a:ca:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 26 20:51:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51d754dd3e5d9c9dd166e80e661aad5793d01c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:8d:6b:3f:fc:1f:d2:e5:74:1d:04:a0:b1: 1d:ce:f9:11:9b:38:b7:47:66:9b:09:6f:cf:c8:e9: 03:79:7a:1b:4b:9e:50:ef:68:c8:e2:77:ae:29:0f: 1b:98:06:3c:94:ee:a1:b9:d7:fa:6a:ad:f5:fc:a4: 3c:ba:ff:2f:93:2a:63:4d:81:89:99:c5:76:d5:43: 2e:f0:e7:ab:3a:92:a5:b2:dc:cc:01:e7:5f:65:48: 40:b7:62:e9:6d:84:52:ac:e1:17:40:12:0a:0c:15: 09:ad:9c:16:b7:6d:34:c9:84:7f:25:a5:f9:5a:5a: bb:0d:b1:ae:5f:0b:57:58:cc:9c:04:cf:22:a8:6f: d2:25:5f:9b:ec:03:f5:18:1c:a3:c4:ca:e8:24:cb: 99:1b:84:0e:14:14:2c:86:51:f8:b9:7d:43:6f:ac: 4f:ef:6a:a7:91:39:96:02:13:07:be:c1:09:c8:39: 3b:ad:47:0d:3c:01:12:de:bc:62:b2:74:f8:53:3c: a5:eb:86:84:70:01:3e:ad:5c:79:50:b1:6e:34:5c: 43:92:52:c9:8f:4a:d4:03:a2:a5:83:30:ef:7e:12: 57:60:7d:12:b1:88:34:7d:ba:ad:68:cd:fb:58:7d: 68:91:15:47:89:2b:b3:09:6e:e2:75:ef:de:64:14: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:75:4D:D3:E5:D9:C9:DD:16:6E:80:E6:61:AA:D5:79:3D:01:C2 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1R11TdPl2cndFm6A5mGq1Xk9AcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.13.0-217.147.14.255 Signature Algorithm: sha256WithRSAEncryption 3d:b9:23:5b:08:7a:34:7d:c0:77:7e:96:74:d7:73:57:a8:26: fd:2a:7b:16:9e:b2:36:51:48:68:8c:cf:72:44:31:f8:15:d2: 67:13:90:b4:c0:1c:6a:2c:6c:93:d1:ed:aa:b7:8a:7d:0e:b4: 9d:1a:b9:e2:74:8d:2a:7b:58:1f:cd:76:c0:40:66:27:12:e2: 0d:bf:db:bc:97:ad:f1:26:7e:39:96:73:b0:3a:4e:34:4c:17: 47:94:2e:99:af:d9:c2:ea:21:1b:18:d6:2c:86:ee:af:0d:47: bb:88:24:37:4c:f8:54:32:ca:a7:46:2b:fe:35:fa:e1:10:1c: 3d:cb:59:c6:b4:eb:2a:38:c4:c0:7d:7a:a6:5a:dc:09:60:20: 5e:70:df:e1:f7:cf:d5:c1:8f:7d:3f:0f:0b:9b:a4:f3:34:84: 10:f1:79:d4:5f:b6:21:6f:0d:d4:15:53:e8:9a:47:89:86:c6: 3a:8e:c8:39:b4:0a:90:25:cd:f1:a5:c4:c0:b5:cd:d4:e7:92: bf:05:61:9f:42:88:22:d2:57:58:1a:d3:9b:8b:10:2f:f0:1e: a7:d5:45:2a:df:d0:43:c5:4f:f9:c7:b4:2b:a0:7d:7f:6e:9b: 40:a0:21:a6:96:f1:20:bb:fe:41:06:61:61:28:4c:72:bf:56: fe:09:e7:5e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZv8E24/KHJq8DcS+pBnasoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTI2MjA1MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTFkNzU0ZGQzZTVkOWM5ZGQxNjZlODBlNjYxYWFkNTc5M2QwMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoASNaz/8H9LldB0EoLEdzvkRmzi3 R2abCW/PyOkDeXobS55Q72jI4neuKQ8bmAY8lO6hudf6aq31/KQ8uv8vkypjTYGJ mcV21UMu8OerOpKlstzMAedfZUhAt2LpbYRSrOEXQBIKDBUJrZwWt200yYR/JaX5 Wlq7DbGuXwtXWMycBM8iqG/SJV+b7AP1GByjxMroJMuZG4QOFBQshlH4uX1Db6xP 72qnkTmWAhMHvsEJyDk7rUcNPAES3rxisnT4Uzyl64aEcAE+rVx5ULFuNFxDklLJ j0rUA6KlgzDvfhJXYH0SsYg0fbqtaM37WH1okRVHiSuzCW7ide/eZBQoCQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNUddU3T5dnJ3RZugOZhqtV5PQHCMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvMVIxMVRkUGwyY25kRm02QTVtR3ExWGs5QWNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZkw0D BADZkw4wDQYJKoZIhvcNAQELBQADggEBAD25I1sIejR9wHd+lnTXc1eoJv0qexae sjZRSGiMz3JEMfgV0mcTkLTAHGosbJPR7aq3in0OtJ0aueJ0jSp7WB/NdsBAZicS 4g2/27yXrfEmfjmWc7A6TjRMF0eULpmv2cLqIRsY1iyG7q8NR7uIJDdM+FQyyqdG K/41+uEQHD3LWca06yo4xMB9eqZa3AlgIF5w3+H3z9XBj30/DwubpPM0hBDxedRf tiFvDdQVU+iaR4mGxjqOyDm0CpAlzfGlxMC1zdTnkr8FYZ9CiCLSV1ga05uLEC/w HqfVRSrf0EPFT/nHtCugfX9um0CgIaaW8SC7/kEGYWEoTHK/Vv4J514= -----END CERTIFICATE-----Generated at Wed Jan 28 19:55:57 2026 by rpki-client