This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/1-IJA-q45HspUpMubIpcnRXcTB8M.roa File: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (raw, json) Hash identifier: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0= Subject key identifier: F8:82:40:FA:AE:39:1E:CA:54:A4:CB:9B:22:97:27:45:77:13:07:C3 Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Certificate serial: 019B7C112E8ED968F971B4E96AC9539D3AEF Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/1-IJA-q45HspUpMubIpcnRXcTB8M.roa Signing time: Fri 02 Jan 2026 00:17:39 +0000 ROA not before: Fri 02 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204672 IP address blocks: 91.137.80.0/22 maxlen: 22 91.137.84.0/23 maxlen: 23 91.137.86.0/23 maxlen: 23 91.137.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:2e:8e:d9:68:f9:71:b4:e9:6a:c9:53:9d:3a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Validity Not Before: Jan 2 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f88240faae391eca54a4cb9b22972745771307c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:3a:3b:69:b8:eb:94:43:ac:31:4d:50:a6: a6:81:50:a6:e8:d2:2d:06:35:e2:56:26:6f:7e:3c: 3c:a9:47:79:1e:06:8f:d0:ae:ef:80:79:b3:55:85: b5:6a:06:fb:a3:71:8f:64:03:3e:c9:93:c2:a9:29: 67:d8:87:73:76:4f:7f:8e:54:18:f6:bf:0d:90:3e: 9f:6a:db:50:8f:63:c4:b4:fc:b9:c5:eb:77:6b:2c: 6d:9a:06:83:43:a6:c9:76:99:68:77:e1:4e:c1:aa: 13:d8:5c:71:29:69:2a:80:ff:fd:5f:57:11:5f:39: b5:c7:60:61:b8:89:21:c8:4b:75:e7:84:68:66:9e: d1:52:7b:e3:9f:71:22:4d:92:15:f9:21:e6:ec:f9: 9c:5d:69:c2:d6:8b:07:11:75:df:d3:09:3a:4d:ab: d8:d0:01:b6:12:d7:4a:0c:27:5c:f8:35:ba:7d:df: 82:8f:3d:a0:98:07:34:6a:45:bf:fe:c4:1e:8f:f9: 34:51:99:59:fb:e8:e3:87:a8:68:ce:28:65:bc:7e: 21:75:b4:ef:cc:8d:31:dc:12:0b:c6:15:59:9e:f9: 59:4a:0d:61:be:e5:91:75:9f:a1:52:b4:e9:f7:48: c6:37:69:51:3f:df:8e:3a:45:bf:5a:66:cc:50:74: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:82:40:FA:AE:39:1E:CA:54:A4:CB:9B:22:97:27:45:77:13:07:C3 X509v3 Authority Key Identifier: keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/1-IJA-q45HspUpMubIpcnRXcTB8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.137.80.0/21 91.137.118.0/23 Signature Algorithm: sha256WithRSAEncryption 85:68:34:44:18:65:46:71:9b:6b:f0:89:4d:d4:8b:50:1e:9d: c3:37:a1:bd:b3:26:dc:8d:85:c8:6f:9d:34:3d:a8:e8:05:2c: 18:d4:8f:cc:6b:b9:9f:e3:c4:e4:7f:6f:d1:d3:ba:40:85:00: f0:a4:16:1e:08:66:72:ea:62:24:ec:c0:6b:b8:8a:27:52:7a: 41:76:0c:4e:dd:9a:d6:c3:7e:fe:38:15:0d:75:af:2c:86:3e: a5:65:91:4e:db:09:3c:ba:db:ae:44:e8:2a:38:a3:01:1b:03: d4:f7:82:19:d8:f9:b1:5a:7d:c6:7d:50:b0:2c:ae:7b:47:46: e5:60:f8:a8:5c:77:03:a5:9d:73:95:ef:fa:1b:c7:5d:76:e4: 7b:c5:8c:8b:cf:19:5b:14:35:9c:32:75:a8:4f:e9:5b:fb:a2: d0:f9:83:79:d5:d7:a6:0c:ce:54:a2:02:43:98:cd:de:f6:cc: 2e:15:a1:ba:a6:2a:ef:11:a6:1c:ed:29:70:e4:1c:a8:49:2c: e7:4c:c8:b3:59:9e:44:10:56:99:c1:b9:3b:68:52:32:ca:b8: 29:58:c6:5f:64:49:6d:25:ab:b7:09:12:d1:bb:c3:a3:91:28: 2f:ca:ee:b1:34:8a:03:e3:a5:a8:f3:a2:53:a6:cb:66:30:46: ef:ca:d0:9f -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt8ES6O2Wj5cbTpaslTnTrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2 YmRkY2EwHhcNMjYwMTAyMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODgyNDBmYWFlMzkxZWNhNTRhNGNiOWIyMjk3Mjc0NTc3MTMwN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRQ6O2m465RDrDFNUKamgVCm6NIt BjXiViZvfjw8qUd5HgaP0K7vgHmzVYW1agb7o3GPZAM+yZPCqSln2Idzdk9/jlQY 9r8NkD6fattQj2PEtPy5xet3ayxtmgaDQ6bJdplod+FOwaoT2FxxKWkqgP/9X1cR Xzm1x2BhuIkhyEt154RoZp7RUnvjn3EiTZIV+SHm7PmcXWnC1osHEXXf0wk6TavY 0AG2EtdKDCdc+DW6fd+Cjz2gmAc0akW//sQej/k0UZlZ++jjh6hozihlvH4hdbTv zI0x3BILxhVZnvlZSg1hvuWRdZ+hUrTp90jGN2lRP9+OOkW/WmbMUHT3GwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPiCQPquOR7KVKTLmyKXJ0V3EwfDMB8GA1UdIwQY MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt NWVmMzYyMjZhNzY3LzEvMS1JSkEtcTQ1SHNwVXBNdWJJcGNuUlhjVEI4TS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzgvYjQyYzUzLWUwNWEtNGQ3Ny04MmVlLTVlZjM2MjI2YTc2 Ny8xL05NM2xwaEZGMDVrdXpON0h0X0M0ZlZacjNjby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA1uJUAME AVuJdjANBgkqhkiG9w0BAQsFAAOCAQEAhWg0RBhlRnGba/CJTdSLUB6dwzehvbMm 3I2FyG+dND2o6AUsGNSPzGu5n+PE5H9v0dO6QIUA8KQWHghmcupiJOzAa7iKJ1J6 QXYMTt2a1sN+/jgVDXWvLIY+pWWRTtsJPLrbrkToKjijARsD1PeCGdj5sVp9xn1Q sCyue0dG5WD4qFx3A6Wdc5Xv+hvHXXbke8WMi88ZWxQ1nDJ1qE/pW/ui0PmDedXX pgzOVKICQ5jN3vbMLhWhuqYq7xGmHO0pcOQcqEks50zIs1meRBBWmcG5O2hSMsq4 KVjGX2RJbSWrtwkS0bvDo5EoL8rusTSKA+OlqPOiU6bLZjBG78rQnw== -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:23 2026 by rpki-client