This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa File: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (raw, json) Hash identifier: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA= Subject key identifier: 1C:97:59:D6:60:A9:8F:6F:80:A0:B6:3B:9B:89:FD:31:1A:05:E8:FE Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Certificate serial: 019B7AC7FF486E3A1E09D84199E508F78384 Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa Signing time: Thu 01 Jan 2026 18:18:05 +0000 ROA not before: Thu 01 Jan 2026 18:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198984 IP address blocks: 91.199.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ff:48:6e:3a:1e:09:d8:41:99:e5:08:f7:83:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Validity Not Before: Jan 1 18:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c9759d660a98f6f80a0b63b9b89fd311a05e8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:49:e2:f9:cf:04:5c:c2:01:60:c8:8c:e8: 8a:c8:0c:fc:dc:a9:20:a0:ea:9c:47:f4:21:6d:51: 10:8c:d1:0d:58:ff:50:27:60:dd:7e:d6:59:18:77: 1f:68:7c:da:98:d6:d7:26:7d:56:f4:e8:dc:5e:62: 11:47:9d:ee:d6:7a:5b:1e:01:96:cf:4c:25:20:fa: 62:fd:7c:11:af:c0:77:71:c2:70:f1:58:85:91:31: 08:bd:04:09:d9:00:36:5f:31:d7:18:38:bd:57:45: 54:66:00:f5:f1:c5:e0:7e:b3:9b:6e:8f:9c:dd:e1: 19:e7:0f:6d:16:d2:c4:9d:bf:fa:3a:a6:20:ef:1c: f5:66:ae:12:96:3b:ae:92:cf:55:c1:84:04:28:0a: a7:17:f6:5c:d9:26:eb:af:5d:81:e6:32:09:f4:ae: d0:1a:fc:e9:ef:67:c0:28:47:21:de:c9:04:92:eb: cc:a8:61:6d:f1:b1:78:c1:af:8b:cc:ed:9d:06:22: 63:64:3b:8c:4c:3c:2d:d0:24:2a:f8:88:7a:de:ab: c6:e1:8d:30:fe:cb:d4:05:8d:55:a0:4a:6c:b6:73: 9a:79:5c:9c:59:48:e1:88:54:39:b9:ef:bb:33:da: 61:72:63:13:7f:26:03:8b:0b:b8:e2:b0:e0:0d:92: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:97:59:D6:60:A9:8F:6F:80:A0:B6:3B:9B:89:FD:31:1A:05:E8:FE X509v3 Authority Key Identifier: keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.12.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:00:bd:85:fe:c6:72:9b:c2:71:05:52:67:17:e1:bc:21:1d: 49:c3:ff:35:5c:d7:b2:39:8f:56:d6:ef:83:d1:0d:ba:ec:1a: be:6c:06:cb:36:2d:1b:bb:2d:95:99:93:64:26:09:0f:b9:e3: 5f:dd:3a:17:6e:0c:da:c0:38:7c:77:64:f6:fa:3a:02:15:73: 92:ce:33:52:a2:0a:2e:eb:3f:1c:e9:42:7c:51:32:1e:5a:d4: 7c:77:fd:db:c9:93:a6:81:09:08:72:1b:0c:19:99:14:4e:fb: b9:81:ec:6e:6d:39:23:ea:da:ae:e8:c1:d7:d7:f8:8c:31:89: ca:a0:f2:e5:ac:d9:37:93:59:1d:33:73:1b:41:f7:1d:be:a1: 5f:b7:73:19:f5:74:92:bc:f9:9e:85:68:95:61:e2:ab:53:0c: 20:d3:12:38:87:1e:c3:42:1f:6f:2a:b7:ee:d4:0f:f8:e4:06: 37:a0:81:f2:a8:e2:0a:d0:e8:c6:3b:35:a3:3d:4c:99:dd:69: bd:8f:b4:a6:5f:55:c9:90:ee:0a:ef:d0:67:aa:6b:42:d8:8c: 40:a1:52:6a:c8:f8:49:3c:e8:e7:47:89:8e:26:05:8f:c1:42: cd:c8:92:55:23:ed:dd:b3:4f:8b:92:64:a0:3c:39:c6:9f:49: 85:94:43:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/9IbjoeCdhBmeUI94OEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5 MTZiMWEwHhcNMjYwMTAxMTgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzk3NTlkNjYwYTk4ZjZmODBhMGI2M2I5Yjg5ZmQzMTFhMDVlOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeFJ4vnPBFzCAWDIjOiKyAz83Kkg oOqcR/QhbVEQjNENWP9QJ2DdftZZGHcfaHzamNbXJn1W9OjcXmIRR53u1npbHgGW z0wlIPpi/XwRr8B3ccJw8ViFkTEIvQQJ2QA2XzHXGDi9V0VUZgD18cXgfrObbo+c 3eEZ5w9tFtLEnb/6OqYg7xz1Zq4Sljuuks9VwYQEKAqnF/Zc2Sbrr12B5jIJ9K7Q Gvzp72fAKEch3skEkuvMqGFt8bF4wa+LzO2dBiJjZDuMTDwt0CQq+Ih63qvG4Y0w /svUBY1VoEpstnOaeVycWUjhiFQ5ue+7M9phcmMTfyYDiwu44rDgDZL2LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFByXWdZgqY9vgKC2O5uJ/TEaBej+MB8GA1UdIwQY MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt NDFhY2UxOTU4MDNhLzEvSEpkWjFtQ3BqMi1Bb0xZN200bjlNUm9GNlA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cMMA0G CSqGSIb3DQEBCwUAA4IBAQBOAL2F/sZym8JxBVJnF+G8IR1Jw/81XNeyOY9W1u+D 0Q267Bq+bAbLNi0buy2VmZNkJgkPueNf3ToXbgzawDh8d2T2+joCFXOSzjNSogou 6z8c6UJ8UTIeWtR8d/3byZOmgQkIchsMGZkUTvu5gexubTkj6tqu6MHX1/iMMYnK oPLlrNk3k1kdM3MbQfcdvqFft3MZ9XSSvPmehWiVYeKrUwwg0xI4hx7DQh9vKrfu 1A/45AY3oIHyqOIK0OjGOzWjPUyZ3Wm9j7SmX1XJkO4K79BnqmtC2IxAoVJqyPhJ POjnR4mOJgWPwULNyJJVI+3ds0+LkmSgPDnGn0mFlEPt -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:04 2026 by rpki-client