This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa File: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (raw, json) Hash identifier: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM= Subject key identifier: FA:6F:13:B4:18:7E:E4:24:55:FB:31:AD:0B:BD:9A:AB:F5:59:0F:C5 Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404 Certificate serial: 019B76EB772A5CFD432DFE0C200B8BEF6131 Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212152 IP address blocks: 198.62.104.0/24 maxlen: 24 198.205.12.0/24 maxlen: 24 198.205.13.0/24 maxlen: 24 198.205.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:77:2a:5c:fd:43:2d:fe:0c:20:0b:8b:ef:61:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa6f13b4187ee42455fb31ad0bbd9aabf5590fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:43:62:11:fe:53:77:df:e7:0f:f4:d9:31: e1:8e:69:a1:1c:83:81:06:a1:a4:b7:95:be:69:e8: 97:af:c6:90:ef:0b:50:91:a1:2b:26:ee:d9:41:11: 69:ea:92:34:c3:0e:ea:66:ac:a0:87:46:b2:08:f1: ad:db:73:2c:8e:7f:7c:c3:30:11:f2:0c:03:f0:ec: a4:1b:5d:e2:ef:95:88:50:31:46:9a:20:e0:cc:2c: 40:da:d0:85:67:a7:ec:4e:66:2f:09:47:e8:37:f3: ed:12:2e:3e:bf:ff:fa:e0:06:c4:c6:b1:83:28:72: 98:07:0b:01:42:5c:27:47:43:53:5c:8b:be:cf:e5: d0:2c:6d:b2:13:07:26:d1:66:63:a5:51:ba:f2:fd: c4:18:4e:a5:07:af:07:18:42:b5:be:1a:01:e3:a6: 8b:f5:82:4d:63:37:0d:54:0a:39:ce:eb:ef:b7:3f: ab:8f:83:6f:66:25:c5:b9:ac:1f:09:01:98:7d:98: 54:53:e9:ca:fc:01:23:f3:5e:ed:0d:c4:8a:12:47: fd:29:f3:65:8a:11:08:93:b7:ff:6f:85:2d:75:89: 3e:cd:ac:f9:ee:69:2d:06:b8:93:8f:bb:20:ae:d7: 30:94:d1:49:fd:21:4c:0e:70:09:f6:48:d3:cc:7d: 16:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6F:13:B4:18:7E:E4:24:55:FB:31:AD:0B:BD:9A:AB:F5:59:0F:C5 X509v3 Authority Key Identifier: keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.62.104.0/24 198.205.12.0-198.205.14.255 Signature Algorithm: sha256WithRSAEncryption 67:a5:e7:72:46:6b:90:03:5a:81:c2:b0:99:a9:e9:92:44:f8: 3d:6f:7d:b1:6f:66:a3:14:88:7a:da:94:fc:c3:20:74:ba:45: b5:c7:81:b1:c2:0d:f0:7a:a2:cd:ba:bf:1f:d8:7d:d2:e4:75: 35:25:68:99:1a:a2:57:95:ee:e3:e4:2c:3c:d0:92:6c:8b:ee: d8:fa:2c:98:b3:42:37:15:d5:52:c4:5a:49:6c:08:4d:4a:00: d9:9d:54:6d:cc:26:b7:6a:0a:e4:94:dc:cb:63:e7:00:26:a4: 0d:55:7b:c8:61:06:50:f6:87:1c:bb:4e:4c:89:3b:90:72:3d: d9:db:1e:b9:55:47:1b:9e:6f:a0:8b:72:f4:af:25:57:6d:72: ed:22:e4:5f:4b:1f:0c:4a:7a:12:7f:46:93:bb:ab:ad:d1:3b: cf:77:8b:4c:15:e9:11:dd:64:de:d1:c9:86:4a:19:76:c3:83: 5a:54:f6:47:da:f2:7e:6a:6c:f7:48:3a:ae:32:44:26:09:6f: 6f:73:b0:f9:b5:d1:c6:21:37:25:0a:65:5c:ff:ec:5f:36:a0: 6e:dd:98:91:6a:cd:7f:b2:2b:12:60:b4:0b:99:b7:41:cf:e3: 92:ef:c0:31:d9:59:fc:74:7e:63:af:e0:33:84:47:15:60:b9: 5e:31:37:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt263cqXP1DLf4MIAuL72ExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh YWM0MDQwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTZmMTNiNDE4N2VlNDI0NTVmYjMxYWQwYmJkOWFhYmY1NTkwZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5lDYhH+U3ff5w/02THhjmmhHIOB BqGkt5W+aeiXr8aQ7wtQkaErJu7ZQRFp6pI0ww7qZqygh0ayCPGt23Msjn98wzAR 8gwD8OykG13i75WIUDFGmiDgzCxA2tCFZ6fsTmYvCUfoN/PtEi4+v//64AbExrGD KHKYBwsBQlwnR0NTXIu+z+XQLG2yEwcm0WZjpVG68v3EGE6lB68HGEK1vhoB46aL 9YJNYzcNVAo5zuvvtz+rj4NvZiXFuawfCQGYfZhUU+nK/AEj817tDcSKEkf9KfNl ihEIk7f/b4UtdYk+zaz57mktBriTj7sgrtcwlNFJ/SFMDnAJ9kjTzH0WNwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPpvE7QYfuQkVfsxrQu9mqv1WQ/FMB8GA1UdIwQY MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt NTE3YTY2MWFlNmJkLzEvMS1tOFR0QmgtNUNSVi16R3RDNzJhcV9WWkQ4VS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmIvYzZmOWU4LTRiNzUtNDRlNC1hMGQ2LTUxN2E2NjFhZTZi ZC8xLzJSRXVpWk93QzlvclRwd0NyRmVEZEFDcXhBUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAMY+aDAM AwQCxs0MAwQAxs0OMA0GCSqGSIb3DQEBCwUAA4IBAQBnpedyRmuQA1qBwrCZqemS RPg9b32xb2ajFIh62pT8wyB0ukW1x4Gxwg3weqLNur8f2H3S5HU1JWiZGqJXle7j 5Cw80JJsi+7Y+iyYs0I3FdVSxFpJbAhNSgDZnVRtzCa3agrklNzLY+cAJqQNVXvI YQZQ9occu05MiTuQcj3Z2x65VUcbnm+gi3L0ryVXbXLtIuRfSx8MSnoSf0aTu6ut 0TvPd4tMFekR3WTe0cmGShl2w4NaVPZH2vJ+amz3SDquMkQmCW9vc7D5tdHGITcl CmVc/+xfNqBu3ZiRas1/sisSYLQLmbdBz+OS78Ax2Vn8dH5jr+AzhEcVYLleMTeI -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:49 2026 by rpki-client