This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/2v3v91RFQjN6l9mWptJO680RMkc.roa File: 2v3v91RFQjN6l9mWptJO680RMkc.roa (raw, json) Hash identifier: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208= Subject key identifier: DA:FD:EF:F7:54:45:42:33:7A:97:D9:96:A6:D2:4E:EB:CD:11:32:47 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019B7C7FE0924544BAEB7DD93909A61B1491 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/2v3v91RFQjN6l9mWptJO680RMkc.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31615 IP address blocks: 84.241.192.0/18 maxlen: 24 89.205.128.0/17 maxlen: 24 91.141.128.0/17 maxlen: 24 95.98.0.0/15 maxlen: 24 178.224.0.0/13 maxlen: 24 188.88.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e0:92:45:44:ba:eb:7d:d9:39:09:a6:1b:14:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dafdeff7544542337a97d996a6d24eebcd113247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ff:bd:1e:7e:f6:df:c9:c4:4d:0b:d5:1f:df: 62:7e:b5:b6:89:8a:56:d5:7e:30:15:46:bd:25:98: 08:de:e1:4e:10:5e:a7:82:36:a1:5c:c3:cd:33:87: 08:03:0d:e1:2c:45:cb:3b:ba:f3:ab:ab:86:5d:84: 08:4b:0c:ab:84:bd:2d:d4:cc:77:f1:2e:9f:f7:ea: dd:58:f4:99:dd:33:03:1e:ed:b1:e0:a7:2e:da:f2: 22:cf:34:a5:da:aa:38:1d:40:a5:90:07:86:93:46: 6c:c7:56:22:91:24:4e:25:f4:56:35:6d:8c:66:41: ef:9e:b7:eb:35:bd:87:d0:d3:98:9b:35:75:ab:72: 51:ce:a7:8e:a7:0b:66:7e:31:73:19:12:05:6d:fa: 2d:1e:8d:3e:3a:e2:c3:75:87:2d:43:21:05:fd:8e: 9d:60:b3:a7:cb:02:ea:de:9d:7b:1b:2e:21:2d:ca: 9c:9e:1d:2f:b6:73:9d:57:9d:29:a7:05:83:0f:63: 48:0c:57:c8:0c:89:a3:a9:2a:13:7b:24:85:ce:25: 1b:16:c6:2f:13:95:c3:55:43:8e:0f:e3:8d:40:29: 22:1e:fc:87:e8:73:f2:e4:7e:83:f7:82:e7:0d:c8: 36:d8:a0:38:92:e4:cc:18:95:a5:d6:3a:09:70:41: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FD:EF:F7:54:45:42:33:7A:97:D9:96:A6:D2:4E:EB:CD:11:32:47 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/2v3v91RFQjN6l9mWptJO680RMkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.241.192.0/18 89.205.128.0/17 91.141.128.0/17 95.98.0.0/15 178.224.0.0/13 188.88.0.0/14 Signature Algorithm: sha256WithRSAEncryption 77:7e:b5:a4:fb:80:a5:05:2b:07:54:34:df:81:c7:aa:4b:65: 43:e0:84:52:ce:85:7a:a5:b9:98:e8:a0:b5:8c:f2:b1:3e:9c: 66:f3:46:6b:8e:aa:a5:7f:16:06:21:42:98:aa:0f:0a:81:30: 8c:32:0f:8d:73:9a:0d:8a:a9:80:b7:bd:19:c7:36:cd:4b:3b: 9f:b9:93:3d:f5:4a:50:05:eb:d3:93:a9:08:87:6c:4e:81:af: d2:66:83:91:6c:9c:14:ea:f4:cc:f5:32:51:1a:df:a8:7e:e6: 2f:f7:08:cb:78:67:5d:e1:25:ad:92:0e:af:f5:2c:d1:37:1b: 92:b9:78:b0:8a:19:3e:e9:a9:0c:a5:ee:d4:f3:8a:27:5f:03: 5b:f4:f7:32:6a:c4:23:3b:cb:18:e7:33:25:e3:3d:78:1e:b3: cc:39:46:44:7c:ef:91:7b:3d:9d:2a:52:69:52:7d:8a:51:0b: 9f:ea:7e:f4:15:24:3a:4e:de:51:55:86:8f:4a:06:26:7d:63: 05:de:db:a2:ef:69:d1:4a:f6:d1:32:96:e9:b5:24:8d:9c:c6: d2:50:86:14:53:f4:f2:79:4e:20:69:af:c3:28:f6:3e:13:7b: 04:bb:0b:e8:fc:83:36:b0:13:04:47:29:01:a9:95:1c:c4:17: 36:fe:73:e3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8f+CSRUS6633ZOQmmGxSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWZkZWZmNzU0NDU0MjMzN2E5N2Q5OTZhNmQyNGVlYmNkMTEzMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P+9Hn7238nETQvVH99ifrW2iYpW 1X4wFUa9JZgI3uFOEF6ngjahXMPNM4cIAw3hLEXLO7rzq6uGXYQISwyrhL0t1Mx3 8S6f9+rdWPSZ3TMDHu2x4Kcu2vIizzSl2qo4HUClkAeGk0Zsx1YikSROJfRWNW2M ZkHvnrfrNb2H0NOYmzV1q3JRzqeOpwtmfjFzGRIFbfotHo0+OuLDdYctQyEF/Y6d YLOnywLq3p17Gy4hLcqcnh0vtnOdV50ppwWDD2NIDFfIDImjqSoTeySFziUbFsYv E5XDVUOOD+ONQCkiHvyH6HPy5H6D94LnDcg22KA4kuTMGJWl1joJcEHBpwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNr97/dURUIzepfZlqbSTuvNETJHMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvMnYzdjkxUkZRak42bDltV3B0Sk82ODBSTWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwQGVPHAAwQH Wc2AAwQHW42AAwMBX2IDAwOy4AMDArxYMA0GCSqGSIb3DQEBCwUAA4IBAQB3frWk +4ClBSsHVDTfgceqS2VD4IRSzoV6pbmY6KC1jPKxPpxm80ZrjqqlfxYGIUKYqg8K gTCMMg+Nc5oNiqmAt70ZxzbNSzufuZM99UpQBevTk6kIh2xOga/SZoORbJwU6vTM 9TJRGt+ofuYv9wjLeGdd4SWtkg6v9SzRNxuSuXiwihk+6akMpe7U84onXwNb9Pcy asQjO8sY5zMl4z14HrPMOUZEfO+Rez2dKlJpUn2KUQuf6n70FSQ6Tt5RVYaPSgYm fWMF3tui72nRSvbRMpbptSSNnMbSUIYUU/TyeU4gaa/DKPY+E3sEuwvo/IM2sBME RykBqZUcxBc2/nPj -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:44 2026 by rpki-client