This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/1iAUZQnAjPJmM3fx6VheKbjSaC0.roa File: 1iAUZQnAjPJmM3fx6VheKbjSaC0.roa (raw, json) Hash identifier: ayQpZh8PFS4/2h7rrWfeqNzGcx6D/Lzgpi5g3p8RHQo= Subject key identifier: D6:20:14:65:09:C0:8C:F2:66:33:77:F1:E9:58:5E:29:B8:D2:68:2D Certificate issuer: /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c Certificate serial: 019B7759718DB609E1DFC14CEACEE2277075 Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/1iAUZQnAjPJmM3fx6VheKbjSaC0.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 91.210.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:71:8d:b6:09:e1:df:c1:4c:ea:ce:e2:27:70:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d620146509c08cf2663377f1e9585e29b8d2682d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:de:34:1d:12:8c:06:d4:1c:2d:80:8c:9f: 22:31:bc:0b:97:02:d9:a3:a1:34:68:72:4c:78:1d: 43:95:6f:b0:20:a4:83:e9:f7:ec:f6:79:a0:04:2b: 2c:9b:6c:3e:53:4d:41:21:cb:64:38:20:c7:61:cc: 29:bc:b7:b6:7b:67:1e:43:f7:bc:34:75:0c:b2:2e: c8:48:e1:5a:f7:30:c2:de:6e:7d:9f:d6:a3:35:37: e2:4e:4b:9c:6b:d8:10:59:0e:57:7e:e7:50:7e:ce: 85:14:ca:f0:77:2e:a8:4f:14:97:d2:bc:49:fd:75: f8:59:8f:dd:75:15:2d:e1:df:d9:8a:85:7e:01:9a: 46:18:48:98:1b:fa:e0:0f:02:d2:7e:9a:06:a6:9f: 76:3a:1d:69:a3:c3:bf:b9:36:72:ed:b5:90:53:e6: 2a:43:bb:26:d1:22:af:cb:2a:b6:ea:90:c1:a5:51: 02:3d:9f:6d:1a:e2:72:70:f1:c6:d3:9e:b1:3b:15: 6f:70:af:e1:85:ef:69:ff:15:a4:a8:a8:83:40:b8: 53:51:cb:ae:69:3f:fb:25:cf:99:b0:9a:b1:82:bf: ef:e5:eb:fb:5b:62:83:f0:ef:dd:c8:87:58:02:38: cc:0b:28:cd:55:89:a8:7d:47:6b:89:6b:17:8a:b5: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:20:14:65:09:C0:8C:F2:66:33:77:F1:E9:58:5E:29:B8:D2:68:2D X509v3 Authority Key Identifier: keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/1iAUZQnAjPJmM3fx6VheKbjSaC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:08:78:b9:ed:9e:40:a3:1c:6d:6b:2f:55:d6:ec:68:15:2a: 02:8c:9b:3a:f8:e9:33:74:7e:4e:ff:94:d1:84:7e:fe:ca:7f: 03:78:8a:8e:52:76:f9:3a:e5:7f:92:6f:72:83:a6:9c:f8:d3: 59:e3:a1:4a:ae:b7:f1:f7:52:86:9f:d6:cc:2d:0e:2d:b7:5b: 05:e7:d8:af:f0:04:3e:cb:39:76:dd:e1:e9:e5:43:b6:20:db: 57:37:08:43:56:f4:fb:4c:85:52:5f:24:7e:fc:5e:55:9b:42: 13:48:a2:49:58:3f:a2:53:6a:99:0e:e2:83:32:98:18:c4:36: cf:fe:d4:2a:bc:0d:8f:ed:1d:3a:95:3a:34:a2:d2:36:f3:cc: 85:e0:d3:1c:b7:1b:00:d3:fa:44:f4:83:80:70:39:e0:c4:c1: b9:41:0b:f3:fb:60:ab:c7:b6:0c:68:f4:a5:98:70:91:cf:99: 28:0e:34:fb:9a:a1:25:ed:96:55:51:52:0f:84:a6:8e:b4:2a: e5:d7:40:2f:31:53:01:95:8a:00:ee:a1:f1:4c:1e:2c:3f:90: 90:de:05:fa:55:49:28:a8:44:c8:18:a5:9e:61:c6:99:0f:fa: 14:99:d1:6a:9c:68:39:4c:8b:ea:6c:dc:90:e5:94:4d:49:4b: 95:7f:f2:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXGNtgnh38FM6s7iJ3B1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjY2NjkxYWQzYTQxNjUyZjViZDg1OTYyMzBiM2FjNzQz ZDJhMmMwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjIwMTQ2NTA5YzA4Y2YyNjYzMzc3ZjFlOTU4NWUyOWI4ZDI2ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWneNB0SjAbUHC2AjJ8iMbwLlwLZ o6E0aHJMeB1DlW+wIKSD6ffs9nmgBCssm2w+U01BIctkOCDHYcwpvLe2e2ceQ/e8 NHUMsi7ISOFa9zDC3m59n9ajNTfiTkuca9gQWQ5XfudQfs6FFMrwdy6oTxSX0rxJ /XX4WY/ddRUt4d/ZioV+AZpGGEiYG/rgDwLSfpoGpp92Oh1po8O/uTZy7bWQU+Yq Q7sm0SKvyyq26pDBpVECPZ9tGuJycPHG056xOxVvcK/hhe9p/xWkqKiDQLhTUcuu aT/7Jc+ZsJqxgr/v5ev7W2KD8O/dyIdYAjjMCyjNVYmofUdriWsXirXjdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNYgFGUJwIzyZjN38elYXim40mgtMB8GA1UdIwQY MBaAFI72ZpGtOkFlL1vYWWIws6x0PSosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZabWthMDZRV1V2VzloWllqQ3pySFE5S2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYzg3ZmEtY2JmYS00ZjNjLTg4ZDMt YmE5MjJiYjFlYmI0LzEvMWlBVVpRbkFqUEptTTNmeDZWaGVLYmpTYUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mYzg3ZmEtY2JmYS00ZjNjLTg4ZDMtYmE5MjJiYjFlYmI0 LzEvanZabWthMDZRV1V2VzloWllqQ3pySFE5S2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9IcMA0G CSqGSIb3DQEBCwUAA4IBAQBOCHi57Z5Aoxxtay9V1uxoFSoCjJs6+OkzdH5O/5TR hH7+yn8DeIqOUnb5OuV/km9yg6ac+NNZ46FKrrfx91KGn9bMLQ4tt1sF59iv8AQ+ yzl23eHp5UO2INtXNwhDVvT7TIVSXyR+/F5Vm0ITSKJJWD+iU2qZDuKDMpgYxDbP /tQqvA2P7R06lTo0otI288yF4NMctxsA0/pE9IOAcDngxMG5QQvz+2Crx7YMaPSl mHCRz5koDjT7mqEl7ZZVUVIPhKaOtCrl10AvMVMBlYoA7qHxTB4sP5CQ3gX6VUko qETIGKWeYcaZD/oUmdFqnGg5TIvqbNyQ5ZRNSUuVf/Iq -----END CERTIFICATE-----Generated at Mon Jan 19 23:59:58 2026 by rpki-client