This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/1-Fy84YC95r-bQW2cLl79V6F_YT4.roa File: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (raw, json) Hash identifier: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU= Subject key identifier: F8:5C:BC:E1:80:BD:E6:BF:9B:41:6D:9C:2E:5E:FD:57:A1:7F:61:3E Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E38931B00B4B45CA5E2FC71639570FC Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/1-Fy84YC95r-bQW2cLl79V6F_YT4.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59497 IP address blocks: 194.44.90.0/24 maxlen: 24 194.44.96.0/24 maxlen: 24 194.44.97.0/24 maxlen: 24 194.44.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:93:1b:00:b4:b4:5c:a5:e2:fc:71:63:95:70:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f85cbce180bde6bf9b416d9c2e5efd57a17f613e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:7c:be:f4:ba:0d:25:08:9c:da:40:b6:e5: 66:11:29:12:7a:75:72:d2:a8:2c:b0:b8:47:02:12: df:56:bf:0e:fe:6d:dd:c6:db:91:5e:2a:22:79:7d: 22:f8:6f:02:ac:76:88:a8:ae:e0:ba:b2:b3:b3:81: da:67:0d:c0:0b:14:81:4d:69:78:55:b0:e2:47:1a: 91:63:e4:16:34:11:56:5c:c1:67:d3:b2:49:e1:e6: 36:f2:9d:1c:37:34:70:d1:01:61:96:fc:f6:2b:97: e0:eb:23:b9:c2:e3:86:f3:b2:bf:38:d3:c6:08:46: a9:70:03:74:e4:87:74:62:da:9d:71:d9:40:f5:30: ea:89:87:35:ed:51:08:a1:21:4d:c6:1a:c5:40:d8: 27:16:2b:66:6e:ab:9e:e5:06:12:bf:8e:4b:cf:90: 6a:35:21:9e:07:c7:ee:5f:0b:83:22:5d:4c:ac:c4: 7a:6a:24:bf:dc:ef:bc:8f:7d:ee:ca:5d:ca:88:bc: ff:dc:a5:dc:77:ea:28:5a:3c:82:b5:82:f9:2b:9d: de:79:67:4a:c7:17:8b:ca:40:04:cd:05:7f:d0:b4: 69:3c:c4:f4:63:d4:6c:ad:b4:d0:32:39:8c:ff:0c: 7e:55:ea:6e:f0:23:ac:1f:4b:c7:de:a7:df:1b:3e: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5C:BC:E1:80:BD:E6:BF:9B:41:6D:9C:2E:5E:FD:57:A1:7F:61:3E X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/1-Fy84YC95r-bQW2cLl79V6F_YT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.90.0/24 194.44.96.0/23 194.44.99.0/24 Signature Algorithm: sha256WithRSAEncryption 97:7c:a1:b6:22:8a:39:fd:bb:a3:4a:26:3f:94:83:ed:32:ce: f2:72:7f:cd:ef:04:6b:90:68:1f:44:9e:8a:10:77:ed:19:4d: ac:9d:7b:1c:9f:7f:6f:e3:5e:70:2e:4d:50:e5:6d:86:a6:21: f3:e5:d4:2d:ed:ac:ea:0f:28:dd:c9:ce:8a:f6:18:1d:c1:07: d8:3e:99:f9:91:6a:6e:70:27:c4:e4:46:6a:78:97:4b:3d:97: 0c:ef:e2:91:91:31:67:77:c3:fc:e6:44:19:ca:3c:f9:51:86: 99:88:e1:ce:30:b5:39:a0:f4:6b:4b:44:6c:26:e9:4d:f8:0e: 4c:fe:81:89:36:43:23:b9:10:34:16:ca:e4:08:81:f1:3c:a5: 33:6b:ca:84:bc:58:65:b3:e8:9b:0e:11:92:15:64:6d:49:89: a4:a8:ac:0c:b5:42:61:23:ec:e7:31:cd:91:18:a0:04:e5:2c: ed:3a:29:6f:9a:e4:90:40:ae:78:e7:28:7b:35:1d:fd:d7:ff: 76:f7:ca:fc:e0:ea:65:f9:08:8f:b8:8f:c4:f9:7c:9c:61:ff: a1:48:15:77:5c:66:52:d9:7c:0f:bd:c5:6c:40:aa:c3:02:72: e9:60:20:4a:a8:02:4d:e6:99:57:f3:5e:50:a5:5b:07:03:4d: b6:cc:e9:58 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt+OJMbALS0XKXi/HFjlXD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODVjYmNlMTgwYmRlNmJmOWI0MTZkOWMyZTVlZmQ1N2ExN2Y2MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniV8vvS6DSUInNpAtuVmESkSenVy 0qgssLhHAhLfVr8O/m3dxtuRXioieX0i+G8CrHaIqK7gurKzs4HaZw3ACxSBTWl4 VbDiRxqRY+QWNBFWXMFn07JJ4eY28p0cNzRw0QFhlvz2K5fg6yO5wuOG87K/ONPG CEapcAN05Id0YtqdcdlA9TDqiYc17VEIoSFNxhrFQNgnFitmbque5QYSv45Lz5Bq NSGeB8fuXwuDIl1MrMR6aiS/3O+8j33uyl3KiLz/3KXcd+ooWjyCtYL5K53eeWdK xxeLykAEzQV/0LRpPMT0Y9RsrbTQMjmM/wx+Vepu8COsH0vH3qffGz77LQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPhcvOGAvea/m0FtnC5e/Vehf2E+MB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvMS1GeTg0WUM5NXItYlFXMmNMbDc5VjZGX1lUNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWQvNzBiZmZlLWI0ZjMtNDQ5ZS04MWVkLTU0OWVlNmQzMGZi Ni8xL3R2UGJOV1dSTXpGZEw4LVRCWTNPTlFwTXNYby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMIsWgME AcIsYAMEAMIsYzANBgkqhkiG9w0BAQsFAAOCAQEAl3yhtiKKOf27o0omP5SD7TLO 8nJ/ze8Ea5BoH0SeihB37RlNrJ17HJ9/b+NecC5NUOVthqYh8+XULe2s6g8o3cnO ivYYHcEH2D6Z+ZFqbnAnxORGaniXSz2XDO/ikZExZ3fD/OZEGco8+VGGmYjhzjC1 OaD0a0tEbCbpTfgOTP6BiTZDI7kQNBbK5AiB8TylM2vKhLxYZbPomw4RkhVkbUmJ pKisDLVCYSPs5zHNkRigBOUs7Topb5rkkECueOcoezUd/df/dvfK/ODqZfkIj7iP xPl8nGH/oUgVd1xmUtl8D73FbECqwwJy6WAgSqgCTeaZV/NeUKVbBwNNtszpWA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:38 2026 by rpki-client