This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/13ja1cIxS4cK0b0RY3CC1WL6GYs.roa File: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (raw, json) Hash identifier: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50= Subject key identifier: D7:78:DA:D5:C2:31:4B:87:0A:D1:BD:11:63:70:82:D5:62:FA:19:8B Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965 Certificate serial: 019B76EBA0C9A959223706B495B0C6D9036B Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/13ja1cIxS4cK0b0RY3CC1WL6GYs.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39402 IP address blocks: 91.240.80.0/22 maxlen: 22 91.240.80.0/24 maxlen: 24 91.240.81.0/24 maxlen: 24 91.240.82.0/24 maxlen: 24 91.240.83.0/24 maxlen: 24 194.246.88.0/22 maxlen: 22 194.246.88.0/24 maxlen: 24 194.246.89.0/24 maxlen: 24 194.246.90.0/24 maxlen: 24 194.246.91.0/24 maxlen: 24 2a0d:e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:c9:a9:59:22:37:06:b4:95:b0:c6:d9:03:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d778dad5c2314b870ad1bd11637082d562fa198b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:f6:25:89:c7:18:29:30:dc:f1:6c:9b:6d: 26:0d:aa:d8:63:86:56:54:cc:64:f7:67:27:20:0a: 3e:3c:96:95:14:57:8c:78:a4:67:b2:f1:14:df:e5: b3:27:f5:39:11:64:6e:d4:36:83:ab:bc:5e:06:90: 20:1e:4b:8a:d9:e5:bb:2f:3b:21:8f:33:a9:19:c3: ea:aa:fa:24:a4:e1:19:3e:e3:d7:2a:c4:18:90:39: 39:34:70:46:2f:d0:91:65:5c:f3:7f:d8:81:05:ee: 97:78:df:17:8d:fa:54:bc:d9:e9:8d:da:ae:ce:40: db:59:03:ab:da:3d:68:df:3f:7c:7c:d9:2d:b6:9c: 5f:9c:04:8e:71:71:2e:83:5c:aa:59:e5:35:af:13: 14:c7:0d:c2:0e:41:05:a4:f6:02:c0:39:9a:a1:11: 60:ff:9a:ed:ba:c9:fa:69:63:76:79:fe:d9:c5:ca: 8e:35:63:13:7d:9d:e3:7b:fa:81:c9:01:11:eb:85: 2a:b2:39:8e:8f:fe:98:f8:1d:3f:1e:31:9c:25:ca: e3:d4:43:92:01:f2:9f:42:d8:eb:1c:bd:a2:3e:0d: 59:7e:8a:5c:43:cb:24:38:5a:7d:79:50:d9:e8:28: 29:e0:3f:24:5e:f3:24:31:59:87:71:4f:24:68:6a: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:78:DA:D5:C2:31:4B:87:0A:D1:BD:11:63:70:82:D5:62:FA:19:8B X509v3 Authority Key Identifier: keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/13ja1cIxS4cK0b0RY3CC1WL6GYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.80.0/22 194.246.88.0/22 IPv6: 2a0d:e40::/29 Signature Algorithm: sha256WithRSAEncryption 3f:16:4d:f3:77:c6:f2:18:a1:64:81:7a:cb:8e:58:de:79:c8: 3a:bf:4d:46:fc:a5:44:80:40:d6:52:44:fd:36:a4:72:6f:00: 98:27:ad:4f:2e:2e:44:7d:70:96:1a:6b:94:a6:b4:76:c5:f8: 5b:d2:a7:ed:d5:52:63:a6:94:e0:05:b8:91:8f:6b:68:80:68: e4:e1:9f:1c:95:e6:f0:55:3a:94:c6:68:32:5f:65:a7:8a:04: 79:b3:f8:9a:21:e6:38:26:86:6d:12:73:db:34:3f:d1:45:96: 1c:0b:60:27:91:5e:22:58:34:9b:5d:75:d4:5d:45:b8:4e:d3: 93:54:b0:bf:f6:e1:61:7b:81:4f:77:ee:70:04:c8:b6:80:07: ae:ce:ed:60:88:d5:84:5a:ff:0e:50:01:2a:70:52:52:d2:95: f4:fc:a0:5a:b9:ac:78:27:13:7d:a4:d0:c5:19:54:14:5a:c2: 84:7f:41:3e:e2:ea:8f:79:c8:1e:a3:fa:ed:81:fa:e8:9b:4f: f8:ef:2e:b7:b2:c2:4f:ca:80:e4:d1:cb:c6:0d:93:e1:e1:bb: d6:13:66:d7:db:59:f3:b3:c3:60:3b:f7:70:03:ec:a6:2d:eb: b1:8e:8c:70:f0:35:56:6a:46:d8:8b:1b:cf:f4:8d:26:3c:ef: f0:99:c8:20 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt266DJqVkiNwa0lbDG2QNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw NjY5NjUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzc4ZGFkNWMyMzE0Yjg3MGFkMWJkMTE2MzcwODJkNTYyZmExOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp772JYnHGCkw3PFsm20mDarYY4ZW VMxk92cnIAo+PJaVFFeMeKRnsvEU3+WzJ/U5EWRu1DaDq7xeBpAgHkuK2eW7Lzsh jzOpGcPqqvokpOEZPuPXKsQYkDk5NHBGL9CRZVzzf9iBBe6XeN8XjfpUvNnpjdqu zkDbWQOr2j1o3z98fNkttpxfnASOcXEug1yqWeU1rxMUxw3CDkEFpPYCwDmaoRFg /5rtusn6aWN2ef7ZxcqONWMTfZ3je/qByQER64UqsjmOj/6Y+B0/HjGcJcrj1EOS AfKfQtjrHL2iPg1ZfopcQ8skOFp9eVDZ6Cgp4D8kXvMkMVmHcU8kaGqkLQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNd42tXCMUuHCtG9EWNwgtVi+hmLMB8GA1UdIwQY MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt ZDQyMDlmYzdmM2M5LzEvMTNqYTFjSXhTNGNLMGIwUlkzQ0MxV0w2R1lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5 LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW/BQAwQC wvZYMA0EAgACMAcDBQMqDQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQA/Fk3zd8byGKFk gXrLjljeecg6v01G/KVEgEDWUkT9NqRybwCYJ61PLi5EfXCWGmuUprR2xfhb0qft 1VJjppTgBbiRj2togGjk4Z8clebwVTqUxmgyX2WnigR5s/iaIeY4JoZtEnPbND/R RZYcC2AnkV4iWDSbXXXUXUW4TtOTVLC/9uFhe4FPd+5wBMi2gAeuzu1giNWEWv8O UAEqcFJS0pX0/KBauax4JxN9pNDFGVQUWsKEf0E+4uqPecgeo/rtgfrom0/47y63 ssJPyoDk0cvGDZPh4bvWE2bX21nzs8NgO/dwA+ymLeuxjoxw8DVWakbYixvP9I0m PO/wmcgg -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:10 2026 by rpki-client