This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/1JivGUDnbvvAALdPLWmN3LnRPUU.roa File: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (raw, json) Hash identifier: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY= Subject key identifier: D4:98:AF:19:40:E7:6E:FB:C0:00:B7:4F:2D:69:8D:DC:B9:D1:3D:45 Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be Certificate serial: 019B7B35FA804B84CC6F387DA4A44518281F Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/1JivGUDnbvvAALdPLWmN3LnRPUU.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.212.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fa:80:4b:84:cc:6f:38:7d:a4:a4:45:18:28:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d498af1940e76efbc000b74f2d698ddcb9d13d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:82:67:c0:67:8e:50:81:4c:70:92:40:71: c8:f3:1e:e5:69:be:65:1d:a6:19:dd:9a:d7:b4:b1: 52:f7:8f:bc:e5:e8:28:f1:98:52:63:49:4c:b3:0a: c3:00:92:91:84:64:83:ef:4f:d7:a4:56:18:e7:b8: 3d:1e:4f:16:c9:29:a8:b4:ed:2b:15:c8:ae:86:4b: 74:1a:21:8d:6b:b8:67:c3:82:c4:3a:ea:01:40:19: 93:ae:2c:44:13:07:ad:00:bf:9b:6d:01:24:82:c2: c3:ca:b2:ee:08:48:82:ac:bb:64:c3:bb:4f:50:5f: 17:18:7a:a8:59:67:b2:60:a7:46:e9:88:03:5c:c2: 9b:39:f3:ab:22:62:f2:cf:cd:87:63:41:e0:72:40: ab:28:ff:28:86:65:78:5a:ca:2d:b1:31:a8:9d:d0: a3:a4:56:19:e4:c0:3e:22:93:3e:25:23:40:de:1b: 8e:a4:81:19:0b:bb:80:b3:fa:f2:34:a0:44:53:fb: bc:a2:4f:fe:9c:7a:c3:6e:cd:e2:43:54:c7:29:31: 9a:0f:3e:01:af:90:27:43:53:36:50:84:c0:6b:09: b3:a6:29:7f:77:6e:c1:21:48:04:d7:5a:34:e5:c5: ce:db:2b:e6:66:ff:f3:58:74:69:97:bc:84:14:26: 62:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:AF:19:40:E7:6E:FB:C0:00:B7:4F:2D:69:8D:DC:B9:D1:3D:45 X509v3 Authority Key Identifier: keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/1JivGUDnbvvAALdPLWmN3LnRPUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.29.0/24 Signature Algorithm: sha256WithRSAEncryption 51:67:a0:ce:38:37:97:e1:f5:cb:24:28:1a:8c:4b:95:2b:54: c8:26:70:1c:27:ee:04:96:1e:25:2b:d0:ce:2a:0b:c5:e8:fc: f9:1e:cd:84:d5:3e:0c:bf:bf:7b:7a:91:03:61:c5:45:86:ef: 52:f7:79:0e:ec:7a:96:2f:18:92:60:a7:2d:87:84:19:f7:e5: e4:79:af:a9:5e:bc:ef:ee:f8:3e:04:db:ed:ab:94:b8:54:0a: 12:13:00:cc:98:02:38:8a:7b:ee:a0:bd:8c:9b:52:3b:23:fd: ac:9f:50:3d:2e:5f:6d:96:25:18:e7:bb:d4:97:a6:a8:01:c9: 7b:71:03:d1:ed:b4:22:f0:70:9a:ba:e3:10:4a:fe:15:5a:b6: ec:1f:d8:0b:97:ab:46:18:e4:a3:9f:cf:48:57:cd:a9:5c:33: a9:af:f2:3d:65:15:18:a5:7d:25:09:0c:db:db:7f:d2:98:90: e4:b1:b7:d3:c0:d1:9d:4e:f2:f5:89:f8:d9:53:6b:de:7b:59: 71:d3:b1:05:81:0b:fb:5b:fe:96:f0:1b:c6:12:ee:00:99:50: 07:24:89:a6:f1:d8:ca:ce:74:cd:d5:5a:e2:b2:b7:98:e5:80: bb:49:18:49:7d:cc:01:8a:a3:e5:ab:7d:2c:ab:dd:0d:ff:f9: 4f:a4:0c:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfqAS4TMbzh9pKRFGCgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4 OTA1YmUwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDk4YWYxOTQwZTc2ZWZiYzAwMGI3NGYyZDY5OGRkY2I5ZDEzZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+eCZ8BnjlCBTHCSQHHI8x7lab5l HaYZ3ZrXtLFS94+85ego8ZhSY0lMswrDAJKRhGSD70/XpFYY57g9Hk8WySmotO0r Fciuhkt0GiGNa7hnw4LEOuoBQBmTrixEEwetAL+bbQEkgsLDyrLuCEiCrLtkw7tP UF8XGHqoWWeyYKdG6YgDXMKbOfOrImLyz82HY0HgckCrKP8ohmV4WsotsTGondCj pFYZ5MA+IpM+JSNA3huOpIEZC7uAs/ryNKBEU/u8ok/+nHrDbs3iQ1THKTGaDz4B r5AnQ1M2UITAawmzpil/d27BIUgE11o05cXO2yvmZv/zWHRpl7yEFCZiDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSYrxlA5277wAC3Ty1pjdy50T1FMB8GA1UdIwQY MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt ZTQ5ZDQ2MWMzMTU0LzEvMUppdkdVRG5idnZBQUxkUExXbU4zTG5SUFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0 LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QdMA0G CSqGSIb3DQEBCwUAA4IBAQBRZ6DOODeX4fXLJCgajEuVK1TIJnAcJ+4Elh4lK9DO KgvF6Pz5Hs2E1T4Mv797epEDYcVFhu9S93kO7HqWLxiSYKcth4QZ9+Xkea+pXrzv 7vg+BNvtq5S4VAoSEwDMmAI4invuoL2Mm1I7I/2sn1A9Ll9tliUY57vUl6aoAcl7 cQPR7bQi8HCauuMQSv4VWrbsH9gLl6tGGOSjn89IV82pXDOpr/I9ZRUYpX0lCQzb 23/SmJDksbfTwNGdTvL1ifjZU2vee1lx07EFgQv7W/6W8BvGEu4AmVAHJImm8djK znTN1VrisreY5YC7SRhJfcwBiqPlq30sq90N//lPpAx7 -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:56 2026 by rpki-client