This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/1f_aG-ctoD3E7upCiJrl7HGPpko.roa File: 1f_aG-ctoD3E7upCiJrl7HGPpko.roa (raw, json) Hash identifier: t33Wovg3LWM5UJmGDCcfRoHBuBqPD2D3QhvlJCm3TB0= Subject key identifier: D5:FF:DA:1B:E7:2D:A0:3D:C4:EE:EA:42:88:9A:E5:EC:71:8F:A6:4A Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717 Certificate serial: 019B76EB73BF0388E2AF95326ED4D08F61A0 Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/1f_aG-ctoD3E7upCiJrl7HGPpko.roa Signing time: Thu 01 Jan 2026 00:18:20 +0000 ROA not before: Thu 01 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47657 IP address blocks: 91.206.150.0/24 maxlen: 24 91.206.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:73:bf:03:88:e2:af:95:32:6e:d4:d0:8f:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5ffda1be72da03dc4eeea42889ae5ec718fa64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:5c:a5:df:d6:f8:f7:68:e2:3d:34:b4:e6: eb:47:22:51:11:3e:0a:e3:21:ec:8d:f3:67:51:81: a4:f2:0c:fb:c2:4f:ad:32:48:62:10:21:f9:41:14: f8:ea:b0:86:e2:7a:2c:ac:55:f5:60:0e:81:39:dd: 53:6b:c5:f3:10:79:39:58:63:9d:1f:d7:f8:f6:a2: ac:19:3a:6b:e3:1d:ee:37:90:e3:a5:7a:8c:a6:7b: 36:bd:cb:af:22:77:08:4f:3e:9d:d3:68:f7:fe:e0: 75:5f:da:6b:26:91:91:79:2f:bb:a7:03:51:11:47: 43:27:e9:54:8b:14:59:42:aa:84:e3:55:71:ab:e4: 53:fc:7a:1f:ce:6f:0e:6d:e3:34:f3:3e:01:a1:92: 78:10:9a:91:74:b1:d7:42:dc:1a:b7:52:ce:08:69: ec:0f:d9:4e:a0:b6:e7:b5:e0:7f:07:2b:8a:8d:cb: 71:e3:31:33:e1:c9:3f:ab:e8:0c:6c:42:5e:d6:1b: 86:ec:ec:fd:f0:60:1f:2e:87:a9:3b:66:e5:5b:ee: 78:a2:12:44:01:b1:23:be:b4:43:0e:08:c5:06:60: 53:8b:e3:47:24:16:dd:88:4d:10:19:ff:3d:ca:61: e6:f9:b0:54:2b:54:58:b0:ba:0a:53:69:37:1f:83: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FF:DA:1B:E7:2D:A0:3D:C4:EE:EA:42:88:9A:E5:EC:71:8F:A6:4A X509v3 Authority Key Identifier: keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/1f_aG-ctoD3E7upCiJrl7HGPpko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.150.0/23 Signature Algorithm: sha256WithRSAEncryption 16:0b:41:ba:e3:ed:aa:2e:22:0c:96:f8:9c:44:96:f2:52:6a: 59:6d:d2:35:83:16:db:66:99:ba:84:4f:2c:7b:74:73:31:b0: ed:9d:cc:36:ee:33:b8:b6:49:1d:58:e3:3e:76:b5:c2:a6:d5: e5:a3:60:b0:61:23:a1:9b:ad:d3:53:5d:da:8d:da:36:e9:6c: 4d:33:c9:b3:0a:e2:12:03:4a:ba:c1:3e:04:41:2e:8a:f1:d5: af:6b:95:55:cc:bb:80:10:2b:e7:ac:a6:9d:a8:76:9d:b3:90: 5b:21:30:15:07:5c:54:f7:e1:82:5e:a9:5e:3d:0a:a1:df:86: ac:f9:f5:5b:26:59:b1:b5:88:34:de:ab:1b:6c:be:c1:79:97: 0c:6f:bb:37:16:9d:73:48:06:57:fb:62:1d:a4:bc:2c:dc:6c: c0:21:ec:f2:46:12:3d:ae:c2:cd:78:50:bd:de:19:85:8b:88: fa:bb:7c:11:6e:a1:f3:6f:c3:3a:1d:03:34:15:cc:cd:f4:0f: c1:d1:d8:99:20:27:9b:e5:7b:58:d0:a6:8a:af:36:d4:10:69: d7:c5:f4:49:ee:1f:bc:2f:46:82:13:9b:28:a8:6d:74:7f:e7: 1d:b3:50:af:31:12:81:f7:ca:b2:68:e0:24:c4:bf:89:c1:49: 25:39:35:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263O/A4jir5UybtTQj2GgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NTFkM2RkYzZhZGQ0ODNiNzYxYWMwNDc2MjY5NTMzZmU3 ZWE3MTcwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWZmZGExYmU3MmRhMDNkYzRlZWVhNDI4ODlhZTVlYzcxOGZhNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI9cpd/W+Pdo4j00tObrRyJRET4K 4yHsjfNnUYGk8gz7wk+tMkhiECH5QRT46rCG4nosrFX1YA6BOd1Ta8XzEHk5WGOd H9f49qKsGTpr4x3uN5DjpXqMpns2vcuvIncITz6d02j3/uB1X9prJpGReS+7pwNR EUdDJ+lUixRZQqqE41Vxq+RT/Hofzm8ObeM08z4BoZJ4EJqRdLHXQtwat1LOCGns D9lOoLbnteB/ByuKjctx4zEz4ck/q+gMbEJe1huG7Oz98GAfLoepO2blW+54ohJE AbEjvrRDDgjFBmBTi+NHJBbdiE0QGf89ymHm+bBUK1RYsLoKU2k3H4PTaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNX/2hvnLaA9xO7qQoia5exxj6ZKMB8GA1UdIwQY MBaAFBZR093GrdSDt2GsBHYmlTP+fqcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUt MjA1NGY2ZTYxOTIyLzEvMWZfYUctY3RvRDNFN3VwQ2lKcmw3SEdQcGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUtMjA1NGY2ZTYxOTIy LzEvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW86WMA0G CSqGSIb3DQEBCwUAA4IBAQAWC0G64+2qLiIMlvicRJbyUmpZbdI1gxbbZpm6hE8s e3RzMbDtncw27jO4tkkdWOM+drXCptXlo2CwYSOhm63TU13ajdo26WxNM8mzCuIS A0q6wT4EQS6K8dWva5VVzLuAECvnrKadqHads5BbITAVB1xU9+GCXqlePQqh34as +fVbJlmxtYg03qsbbL7BeZcMb7s3Fp1zSAZX+2IdpLws3GzAIezyRhI9rsLNeFC9 3hmFi4j6u3wRbqHzb8M6HQM0FczN9A/B0diZICeb5XtY0KaKrzbUEGnXxfRJ7h+8 L0aCE5soqG10f+cds1CvMRKB98qyaOAkxL+JwUklOTWs -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:29 2026 by rpki-client