This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa File: 1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa (raw, json) Hash identifier: lGRtYYr1rsbRooh6viti8BU7RHgdGU7SHvd+34Ph5r0= Subject key identifier: F9:32:E7:89:45:15:54:EB:23:91:4A:14:36:99:A8:16:06:7C:8D:BC Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531 Certificate serial: 019B7C80260CD929A726E5AC78EEFE88FE9E Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212684 IP address blocks: 91.192.9.0/24 maxlen: 24 107.150.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:26:0c:d9:29:a7:26:e5:ac:78:ee:fe:88:fe:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f932e789451554eb23914a143699a816067c8dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:ec:ec:c0:41:a1:62:15:1c:ef:c0:ff:13: 5e:4d:e8:a8:6c:36:62:f2:03:71:6f:a4:44:91:9c: 12:b6:d1:6c:fd:2d:b4:84:a0:ec:40:a4:c6:e3:67: c6:dd:0b:70:10:0d:27:b3:3a:5a:71:35:e0:ef:28: 53:bf:ba:5a:3a:da:a0:79:34:bd:fc:7b:8a:18:9d: c1:d4:53:c0:ae:1e:fe:8b:fc:3e:fa:89:3f:d1:7e: fe:4d:d8:6c:82:d1:2f:df:71:62:c7:e9:36:bf:dd: 4d:72:25:1a:a6:ff:ed:c5:59:90:f5:d0:cb:11:dc: 1f:6a:26:fd:78:b6:92:dd:18:f7:aa:94:09:36:ce: b6:cc:66:8c:6e:d9:81:f4:1e:af:19:ab:d9:9a:cd: 38:49:fa:71:af:8d:77:c4:d4:a4:73:9c:41:12:79: 84:af:67:8c:86:7d:2d:23:66:10:a6:bf:b8:6d:89: e3:c4:23:dd:5c:8b:5f:36:1b:81:ac:bf:48:f7:72: f3:9f:81:70:67:8d:cc:6e:e8:b8:89:f2:23:f1:4c: a5:26:98:55:10:c3:7b:fc:9b:c1:e3:bc:06:d6:8d: 93:d7:12:29:d1:ba:fb:b0:93:0d:c2:e7:eb:1f:04: 56:9a:59:d4:62:8a:0f:ec:4c:58:82:0d:bf:ec:88: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:32:E7:89:45:15:54:EB:23:91:4A:14:36:99:A8:16:06:7C:8D:BC X509v3 Authority Key Identifier: keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/1-TLniUUVVOsjkUoUNpmoFgZ8jbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.9.0/24 107.150.165.0/24 Signature Algorithm: sha256WithRSAEncryption 58:78:d5:68:f9:aa:49:17:04:b0:6b:c3:2f:2b:60:b3:92:af: bc:cd:56:ed:42:de:a9:61:31:91:c6:2c:9e:ff:5f:da:8e:90: a7:b6:df:c8:e8:d5:e2:8e:4b:d6:dd:30:22:c5:ff:bb:d5:c7: 2a:61:d9:b7:45:11:bb:83:bd:36:e2:72:ac:3f:24:a5:71:05: c8:f5:16:bf:ef:31:4e:29:b7:67:f3:a6:54:50:a8:51:43:70: 6b:15:9c:57:b2:7b:fb:8d:6e:09:66:f9:d4:9c:82:d2:b1:20: 0d:ab:e6:77:64:42:3e:ce:db:32:ab:69:62:38:1e:1a:92:e9: 2b:5a:ce:60:9e:6b:76:ef:22:3d:cb:63:17:6f:e0:e4:32:68: 99:d9:58:e6:4b:62:b6:f6:d8:94:0f:ec:e7:f5:69:6a:bf:fb: 03:82:6a:d1:34:60:32:0d:92:e0:26:13:89:8b:c3:bf:77:21: f6:da:97:7e:14:d5:d1:af:d2:7f:c4:05:d0:85:af:82:e4:95: 00:bd:69:7c:2f:75:26:ec:dc:33:b3:e7:72:13:42:1b:a4:f4: ec:56:8e:5f:64:8e:f9:ad:a1:8a:a5:e7:b8:2c:64:85:9f:d9: 4d:fa:7a:f7:75:dc:07:9b:b3:af:8b:1f:41:f8:dc:85:5d:a0: a2:58:b7:c0 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt8gCYM2SmnJuWseO7+iP6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzc5ZThhMjdjZGU5OTExYmQ3ZGE2Mzg3M2M1Y2M1NThk YmQ1MzEwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTMyZTc4OTQ1MTU1NGViMjM5MTRhMTQzNjk5YTgxNjA2N2M4ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrns7MBBoWIVHO/A/xNeTeiobDZi 8gNxb6REkZwSttFs/S20hKDsQKTG42fG3QtwEA0nszpacTXg7yhTv7paOtqgeTS9 /HuKGJ3B1FPArh7+i/w++ok/0X7+TdhsgtEv33Fix+k2v91NciUapv/txVmQ9dDL Edwfaib9eLaS3Rj3qpQJNs62zGaMbtmB9B6vGavZms04Sfpxr413xNSkc5xBEnmE r2eMhn0tI2YQpr+4bYnjxCPdXItfNhuBrL9I93Lzn4FwZ43Mbui4ifIj8UylJphV EMN7/JvB47wG1o2T1xIp0br7sJMNwufrHwRWmlnUYooP7ExYgg2/7IhIFQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPky54lFFVTrI5FKFDaZqBYGfI28MB8GA1UdIwQY MBaAFBHHnoonzemRG9faY4c8XMVY29UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmIt Yjk5MzA1MTBkMGEwLzEvMS1UTG5pVVVWVk9zamtVb1VOcG1vRmdaOGpidy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2EvNDE0ZTVhLTUyZjgtNDg0NS1iMWJiLWI5OTMwNTEwZDBh MC8xL0VjZWVpaWZONlpFYjE5cGpoenhjeFZqYjFURS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvACQME AGuWpTANBgkqhkiG9w0BAQsFAAOCAQEAWHjVaPmqSRcEsGvDLytgs5KvvM1W7ULe qWExkcYsnv9f2o6Qp7bfyOjV4o5L1t0wIsX/u9XHKmHZt0URu4O9NuJyrD8kpXEF yPUWv+8xTim3Z/OmVFCoUUNwaxWcV7J7+41uCWb51JyC0rEgDavmd2RCPs7bMqtp YjgeGpLpK1rOYJ5rdu8iPctjF2/g5DJomdlY5ktitvbYlA/s5/Vpar/7A4Jq0TRg Mg2S4CYTiYvDv3ch9tqXfhTV0a/Sf8QF0IWvguSVAL1pfC91JuzcM7PnchNCG6T0 7FaOX2SO+a2hiqXnuCxkhZ/ZTfp693XcB5uzr4sfQfjchV2goli3wA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:05 2026 by rpki-client