This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa File: hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa (raw, json) Hash identifier: cpqOWHtN94mOqq00TRgWZYOzNgb1KPx9bUeISQBdKYU= Subject key identifier: 85:16:7B:2B:5A:F9:B1:87:47:D5:96:7C:72:80:DC:7D:37:6B:ED:0F Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Certificate serial: 019B7F14D861FE6119C658126D6ACFABBB10 Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa Signing time: Fri 02 Jan 2026 14:20:31 +0000 ROA not before: Fri 02 Jan 2026 14:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15879 IP address blocks: 91.206.80.0/23 maxlen: 24 195.191.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d8:61:fe:61:19:c6:58:12:6d:6a:cf:ab:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5 Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85167b2b5af9b18747d5967c7280dc7d376bed0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:12:7e:b5:bc:f9:3d:75:4c:66:02:9c:0a: 3f:e3:79:03:92:d3:b1:23:47:01:7e:5b:a7:a6:09: d3:c0:a6:19:fa:6a:8b:b6:fa:82:cb:ce:5c:a2:f9: 23:e6:a8:03:1c:6b:fa:ae:f4:b0:52:9b:3c:d8:8e: 25:a5:72:06:2f:94:39:43:29:eb:c6:31:86:26:72: 65:69:40:f0:af:4d:99:7d:4a:76:a5:14:c7:7f:92: 94:1f:f2:63:09:25:24:4b:f6:f9:80:bc:76:16:59: b9:c7:28:99:65:1a:33:8c:8b:bb:2b:2f:c7:d1:11: cf:b7:56:02:a9:fd:06:12:ee:78:32:5e:4a:40:b0: c1:27:9e:36:71:8b:a6:92:4f:3f:ee:a4:f8:6e:30: cd:7a:ed:56:a7:c4:6c:54:32:a2:80:6f:3d:af:55: b0:93:e2:0b:f5:16:ea:a6:44:7a:47:f2:a3:60:c3: 79:67:11:f8:85:9a:de:c8:f0:40:02:e0:d9:72:e1: cf:6a:e3:3a:ef:fc:06:f1:fa:67:63:1c:c2:a6:32: 7e:04:a9:81:d0:4a:31:9e:df:3d:24:b0:98:1d:18: d1:7e:c9:13:c4:b8:9a:6c:1a:3d:66:8f:b8:a1:f1: ba:02:68:54:51:c9:af:3b:30:a8:45:0a:d6:e8:30: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:16:7B:2B:5A:F9:B1:87:47:D5:96:7C:72:80:DC:7D:37:6B:ED:0F X509v3 Authority Key Identifier: keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/hRZ7K1r5sYdH1ZZ8coDcfTdr7Q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.80.0/23 195.191.1.0/24 Signature Algorithm: sha256WithRSAEncryption 46:4b:97:61:23:27:e2:b0:5e:ff:05:9c:b7:2d:5d:64:69:b4: b6:ef:6e:80:96:47:b3:47:b3:a5:88:c3:42:cd:50:9e:05:73: f2:d7:0f:39:33:96:4e:d7:32:af:5e:68:2a:f7:1a:9c:41:02: f4:5d:78:0e:ea:1a:09:7d:fb:ed:71:ff:45:09:0d:8e:10:c6: 92:23:9a:35:e5:64:35:1b:e2:00:20:b5:9e:62:c6:63:f3:99: 75:2c:ea:20:b6:ad:a7:ab:3c:8b:8c:b5:f9:80:e4:bd:66:46: 3c:b0:52:da:21:c4:8d:b3:26:dd:5a:f3:de:9f:07:6c:d7:86: 67:64:6e:ee:6c:ec:d7:b9:be:2d:f0:f6:69:e4:8f:a3:02:92: 89:a3:22:49:32:83:88:fc:0b:82:06:35:93:e0:14:22:53:7c: 48:29:51:26:03:d4:41:d8:6c:42:02:c8:7f:09:ca:c8:8d:b5: ab:c1:92:a6:bc:5c:6f:64:41:5b:08:87:71:f3:ca:f8:e0:19: 4f:59:df:93:6e:fa:4c:5e:27:c4:3d:52:14:31:16:e9:c4:67: 80:da:f3:5b:45:65:ed:c9:67:c9:96:e8:4b:54:19:f8:1f:56: 43:21:b7:27:e3:9b:b3:7e:0a:09:b1:62:cb:c0:a2:36:2c:f3: a8:21:70:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FNhh/mEZxlgSbWrPq7sQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh NjVhYzUwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTE2N2IyYjVhZjliMTg3NDdkNTk2N2M3MjgwZGM3ZDM3NmJlZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3oSfrW8+T11TGYCnAo/43kDktOx I0cBflunpgnTwKYZ+mqLtvqCy85covkj5qgDHGv6rvSwUps82I4lpXIGL5Q5Qynr xjGGJnJlaUDwr02ZfUp2pRTHf5KUH/JjCSUkS/b5gLx2Flm5xyiZZRozjIu7Ky/H 0RHPt1YCqf0GEu54Ml5KQLDBJ542cYumkk8/7qT4bjDNeu1Wp8RsVDKigG89r1Ww k+IL9RbqpkR6R/KjYMN5ZxH4hZreyPBAAuDZcuHPauM67/wG8fpnYxzCpjJ+BKmB 0Eoxnt89JLCYHRjRfskTxLiabBo9Zo+4ofG6AmhUUcmvOzCoRQrW6DCC0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIUWeyta+bGHR9WWfHKA3H03a+0PMB8GA1UdIwQY MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt MWEwZTUwNDg2MzJhLzEvaFJaN0sxcjVzWWRIMVpaOGNvRGNmVGRyN1E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW85QAwQA w78BMA0GCSqGSIb3DQEBCwUAA4IBAQBGS5dhIyfisF7/BZy3LV1kabS2726Alkez R7OliMNCzVCeBXPy1w85M5ZO1zKvXmgq9xqcQQL0XXgO6hoJffvtcf9FCQ2OEMaS I5o15WQ1G+IAILWeYsZj85l1LOogtq2nqzyLjLX5gOS9ZkY8sFLaIcSNsybdWvPe nwds14ZnZG7ubOzXub4t8PZp5I+jApKJoyJJMoOI/AuCBjWT4BQiU3xIKVEmA9RB 2GxCAsh/CcrIjbWrwZKmvFxvZEFbCIdx88r44BlPWd+TbvpMXifEPVIUMRbpxGeA 2vNbRWXtyWfJluhLVBn4H1ZDIbcn45uzfgoJsWLLwKI2LPOoIXAT -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:29 2026 by rpki-client