This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-xKIBkpa7T0veSSTKBuORX_yg6I.roa File: 1-xKIBkpa7T0veSSTKBuORX_yg6I.roa (raw, json) Hash identifier: fYNjN1Yuj4o1fOt/7nwc1/53oKDoa+n/LUtvQGqIcIw= Subject key identifier: FB:12:88:06:4A:5A:ED:3D:2F:79:24:93:28:1B:8E:45:7F:F2:83:A2 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84DABD4271274DD512EF6A436537E2 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-xKIBkpa7T0veSSTKBuORX_yg6I.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 83.137.154.0/24 maxlen: 24 88.209.203.0/24 maxlen: 24 88.209.230.0/24 maxlen: 24 88.209.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:da:bd:42:71:27:4d:d5:12:ef:6a:43:65:37:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb1288064a5aed3d2f792493281b8e457ff283a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:b3:64:69:82:85:53:f6:b6:da:eb:93:e8: a5:d9:ce:0b:6f:0f:34:85:31:67:e4:c1:a9:cd:a2: 17:4a:dc:b6:bc:32:7c:40:2f:d0:6f:76:e3:0d:07: 37:0b:05:96:b6:4c:97:5f:4b:f0:63:61:7b:a3:af: dd:6d:16:c5:c5:2c:5c:6f:d6:b2:c7:46:bd:48:87: 7b:29:bd:26:bd:a1:62:0d:4a:97:c0:74:4f:10:10: 29:d1:18:48:f7:b4:66:2d:7e:b6:55:80:20:96:41: 41:4a:6b:6f:c5:e6:ac:49:9f:41:f0:43:d8:df:08: 82:55:30:f1:0c:f1:fb:0f:eb:10:84:44:cf:6a:f0: ee:24:49:6f:fc:d8:3f:a4:44:ec:e8:5f:c9:81:df: 84:93:2e:6d:e7:02:71:7d:e3:73:ea:56:0b:49:10: 0e:f1:0e:00:c1:18:68:67:16:e0:de:6b:12:d3:24: 96:70:5b:31:7f:d5:b4:77:23:45:39:c4:95:5e:b7: d2:f4:d9:60:d0:24:00:86:34:3a:44:54:f5:4e:ea: 19:8e:9f:7c:96:72:09:cf:15:a3:11:cc:b0:a1:13: bc:a8:c6:0f:f3:4b:79:1d:d3:dd:15:82:2f:09:00: f7:f2:fc:f4:e3:e0:be:5c:7d:70:f9:0f:95:6b:81: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:12:88:06:4A:5A:ED:3D:2F:79:24:93:28:1B:8E:45:7F:F2:83:A2 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-xKIBkpa7T0veSSTKBuORX_yg6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.154.0/24 88.209.203.0/24 88.209.230.0/24 88.209.255.0/24 Signature Algorithm: sha256WithRSAEncryption 89:d6:9e:83:a2:49:2a:39:50:55:3f:d6:fe:23:7c:30:da:5a: 81:4e:31:78:3c:5f:98:60:2e:56:64:c8:47:12:ae:ce:75:bd: d3:36:5e:0d:90:05:26:11:a6:ad:60:ba:0d:e5:f1:cc:51:ae: 51:b9:48:fe:64:d8:48:8a:e2:bf:29:1e:fa:87:14:49:0d:48: 4b:fd:16:ad:09:4b:c8:1d:41:f1:e7:a2:a8:08:19:2e:65:c9: 64:54:17:ee:ed:0f:80:b3:32:c5:82:7e:86:d5:cc:a7:4c:4b: 5f:78:28:d4:f2:87:ff:28:45:a4:00:56:b2:e9:c8:4e:ea:73: e9:9b:ab:39:00:a9:58:22:a6:46:81:f8:ca:a9:3a:e5:be:b7: f6:de:2e:7c:b5:5e:da:b6:25:a7:50:68:d2:ff:1e:b1:f0:c9: c0:11:bf:60:61:bc:8b:2e:f3:26:11:89:7f:62:5d:94:cb:fe: c9:42:a3:10:85:93:4f:7d:af:a6:e5:8b:9e:ee:14:f2:7d:d5: 55:ea:e4:9f:f0:44:61:83:20:06:a1:e3:13:8f:a5:d8:c6:46: d4:d0:4b:48:a9:dd:8e:c1:ae:39:8f:e8:23:35:3d:dd:fe:28: e9:c7:9a:bc:63:14:b1:81:f0:ea:f5:00:3a:0d:92:c2:8d:5d: cc:01:05:de -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/hNq9QnEnTdUS72pDZTfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjEyODgwNjRhNWFlZDNkMmY3OTI0OTMyODFiOGU0NTdmZjI4M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHuzZGmChVP2ttrrk+il2c4Lbw80 hTFn5MGpzaIXSty2vDJ8QC/Qb3bjDQc3CwWWtkyXX0vwY2F7o6/dbRbFxSxcb9ay x0a9SId7Kb0mvaFiDUqXwHRPEBAp0RhI97RmLX62VYAglkFBSmtvxeasSZ9B8EPY 3wiCVTDxDPH7D+sQhETPavDuJElv/Ng/pETs6F/Jgd+Eky5t5wJxfeNz6lYLSRAO 8Q4AwRhoZxbg3msS0ySWcFsxf9W0dyNFOcSVXrfS9Nlg0CQAhjQ6RFT1TuoZjp98 lnIJzxWjEcywoRO8qMYP80t5HdPdFYIvCQD38vz04+C+XH1w+Q+Va4F5aQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPsSiAZKWu09L3kkkygbjkV/8oOiMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvMS14S0lCa3BhN1QwdmVTU1RLQnVPUlhfeWc2SS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGQvNTg5MTI3LTEwOTYtNGM5MS05NmNjLTdlNGQ2ZjZmNmU2 Ni8xL3phcWc0SUkyQTJDczJqUjJaT3VERk9zUjJoQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFOJmgME AFjRywMEAFjR5gMEAFjR/zANBgkqhkiG9w0BAQsFAAOCAQEAidaeg6JJKjlQVT/W /iN8MNpagU4xeDxfmGAuVmTIRxKuznW90zZeDZAFJhGmrWC6DeXxzFGuUblI/mTY SIrivyke+ocUSQ1IS/0WrQlLyB1B8eeiqAgZLmXJZFQX7u0PgLMyxYJ+htXMp0xL X3go1PKH/yhFpABWsunITupz6ZurOQCpWCKmRoH4yqk65b639t4ufLVe2rYlp1Bo 0v8esfDJwBG/YGG8iy7zJhGJf2JdlMv+yUKjEIWTT32vpuWLnu4U8n3VVerkn/BE YYMgBqHjE4+l2MZG1NBLSKndjsGuOY/oIzU93f4o6ceavGMUsYHw6vUAOg2Swo1d zAEF3g== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:54 2026 by rpki-client