This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/1-kWvGwe3rzaIsRc1gmxCFz8lXgU.roa File: 1-kWvGwe3rzaIsRc1gmxCFz8lXgU.roa (raw, json) Hash identifier: daW3ebtu2fPNsARxfFCyXqL/swO4wfgF7RvbMI+oQl0= Subject key identifier: FA:45:AF:1B:07:B7:AF:36:88:B1:17:35:82:6C:42:17:3F:25:5E:05 Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Certificate serial: 019B79ECCE8801250F3394989BECB9AECD73 Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/1-kWvGwe3rzaIsRc1gmxCFz8lXgU.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21320 IP address blocks: 83.97.88.0/21 maxlen: 21 2001:799::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ce:88:01:25:0f:33:94:98:9b:ec:b9:ae:cd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa45af1b07b7af3688b11735826c42173f255e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:32:16:1f:fd:8d:e0:9f:5b:0e:93:94:14: 46:a5:b4:72:e9:53:4e:a1:93:83:de:b0:aa:4b:5d: 90:cb:71:f3:a0:5a:8e:b2:e7:03:86:d3:b5:20:90: 1e:98:9c:ce:03:1d:4f:42:1a:9e:d0:ad:e0:47:39: 9e:ea:27:83:05:b9:f8:52:3a:72:d0:21:8f:08:7f: 5d:e5:50:77:c1:d7:ae:d0:54:5a:c0:01:2b:f6:ac: 96:d1:42:9e:05:86:07:6d:f8:68:58:ec:c7:dd:4c: 33:fa:24:33:a9:19:af:ba:a1:76:90:b1:05:33:d3: e0:96:3d:57:10:db:d2:2b:af:36:98:cc:c7:fa:6a: 03:ef:48:1a:0d:8a:20:8f:10:6e:33:b1:2a:78:5c: 4d:2d:1a:80:06:73:36:37:65:72:1b:8b:c0:aa:6e: 0d:07:2d:6b:0a:19:69:68:a4:c3:bd:ee:23:79:16: af:c7:db:74:83:1a:f4:b4:44:1a:20:11:c5:ba:97: b8:01:47:f8:ab:b0:b9:bd:99:5f:1e:fc:75:2b:24: 1f:90:f4:a1:ab:31:c7:46:1c:30:0d:2b:31:ae:48: 6d:81:46:d9:ef:84:c1:d5:ec:5e:e8:78:3e:d7:bf: 00:e8:16:a6:11:86:f4:50:30:9a:dd:13:0c:31:35: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:AF:1B:07:B7:AF:36:88:B1:17:35:82:6C:42:17:3F:25:5E:05 X509v3 Authority Key Identifier: keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/1-kWvGwe3rzaIsRc1gmxCFz8lXgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.88.0/21 IPv6: 2001:799::/32 Signature Algorithm: sha256WithRSAEncryption 23:2e:d6:81:55:fe:48:e6:f0:1e:f7:77:6a:c8:42:38:92:f9: e9:e2:b9:6c:37:2d:4b:15:c9:d2:a8:9c:73:79:17:7a:74:cd: dd:d7:e2:b8:f4:52:7a:f1:d5:f4:22:9e:69:67:c8:5c:b5:44: c3:de:d9:2f:3b:1e:b5:3b:4d:54:29:56:de:68:b4:cd:ff:b4: 5c:6b:d8:ac:65:53:78:a5:22:ce:eb:28:77:fb:4a:c6:84:b8: 98:9e:a3:43:c1:4c:5f:31:8c:8a:83:01:7a:6a:79:2d:07:ed: c4:b9:de:ac:6e:13:93:24:d7:27:ef:39:3d:82:43:8f:08:b7: f1:f8:9e:1c:b9:ef:66:05:2a:24:e7:87:16:44:5a:e4:e7:9a: b5:cb:42:31:78:69:3b:d6:ea:1f:40:46:8e:4d:1e:7f:ea:55: 41:1d:f1:ee:00:8b:5e:b1:d7:48:a5:6e:a1:06:f4:a7:20:b9: 7a:00:0f:b4:eb:c5:2a:65:b5:91:19:27:59:c6:13:9e:23:a2: f0:93:c7:03:76:06:f3:49:17:01:d6:eb:6e:13:45:d2:73:5f: fa:40:a3:44:5a:86:63:5a:ae:f9:a1:7a:a3:96:21:1f:8c:7e: f9:bf:4e:4b:41:7d:37:db:bb:a5:52:fb:6f:e7:c7:3e:42:c7: 58:33:82:ee -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt57M6IASUPM5SYm+y5rs1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk OTRmNjEwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQ1YWYxYjA3YjdhZjM2ODhiMTE3MzU4MjZjNDIxNzNmMjU1ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA8yFh/9jeCfWw6TlBRGpbRy6VNO oZOD3rCqS12Qy3HzoFqOsucDhtO1IJAemJzOAx1PQhqe0K3gRzme6ieDBbn4Ujpy 0CGPCH9d5VB3wdeu0FRawAEr9qyW0UKeBYYHbfhoWOzH3Uwz+iQzqRmvuqF2kLEF M9Pglj1XENvSK682mMzH+moD70gaDYogjxBuM7EqeFxNLRqABnM2N2VyG4vAqm4N By1rChlpaKTDve4jeRavx9t0gxr0tEQaIBHFupe4AUf4q7C5vZlfHvx1KyQfkPSh qzHHRhwwDSsxrkhtgUbZ74TB1exe6Hg+178A6BamEYb0UDCa3RMMMTUEewIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPpFrxsHt682iLEXNYJsQhc/JV4FMB8GA1UdIwQY MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt ZWY0YjY1OWVmZjhkLzEvMS1rV3ZHd2UzcnphSXNSYzFnbXhDRno4bFhnVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmIvYzJmNjFhLTE1ZjktNGM2Yi05MGU1LWVmNGI2NTllZmY4 ZC8xL3p0ZFZjejZSSURvWHd3azhwZG5MQTVMWlQyRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA1NhWDAN BAIAAjAHAwUAIAEHmTANBgkqhkiG9w0BAQsFAAOCAQEAIy7WgVX+SObwHvd3ashC OJL56eK5bDctSxXJ0qicc3kXenTN3dfiuPRSevHV9CKeaWfIXLVEw97ZLzsetTtN VClW3mi0zf+0XGvYrGVTeKUizusod/tKxoS4mJ6jQ8FMXzGMioMBemp5LQftxLne rG4TkyTXJ+85PYJDjwi38fieHLnvZgUqJOeHFkRa5OeatctCMXhpO9bqH0BGjk0e f+pVQR3x7gCLXrHXSKVuoQb0pyC5egAPtOvFKmW1kRknWcYTniOi8JPHA3YG80kX AdbrbhNF0nNf+kCjRFqGY1qu+aF6o5YhH4x++b9OS0F9N9u7pVL7b+fHPkLHWDOC 7g== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:39 2026 by rpki-client