This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/_1hB8H52OK9tZ7oTDVioeT82qgM.roa File: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (raw, json) Hash identifier: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw= Subject key identifier: FF:58:41:F0:7E:76:38:AF:6D:67:BA:13:0D:58:A8:79:3F:36:AA:03 Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965 Certificate serial: 019B76EBA0081F7A71476DE9D02FEF1FDCE8 Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/_1hB8H52OK9tZ7oTDVioeT82qgM.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13044 IP address blocks: 91.240.80.0/24 maxlen: 24 91.240.81.0/24 maxlen: 24 91.240.82.0/24 maxlen: 24 91.240.83.0/24 maxlen: 24 194.246.88.0/24 maxlen: 24 194.246.89.0/24 maxlen: 24 194.246.90.0/24 maxlen: 24 194.246.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:08:1f:7a:71:47:6d:e9:d0:2f:ef:1f:dc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff5841f07e7638af6d67ba130d58a8793f36aa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:86:c1:55:81:4f:5f:f9:7e:8c:9e:6f:70: 7b:bd:cc:4f:d5:ad:0a:58:34:0a:42:a1:ef:51:34: ee:48:02:5a:0a:07:24:99:fd:74:14:3c:1f:84:d8: 51:b4:25:3c:50:ec:d2:2b:87:37:26:66:b8:0a:af: c6:68:54:7e:46:31:67:a3:b9:9b:41:37:93:25:56: 1e:c5:37:88:78:92:aa:81:63:87:31:ad:61:14:93: d8:26:2f:e4:11:de:24:b7:36:d0:bc:32:23:6c:7c: c9:8d:29:08:39:73:13:f3:4e:c3:a3:d5:1a:ec:31: 73:f0:76:43:08:a1:03:3f:a3:b6:f7:a2:81:a8:2a: 57:bd:55:3b:21:e0:9e:f3:2f:07:98:5e:da:70:2e: aa:3d:c2:74:b0:1c:8b:68:39:67:ef:08:e8:58:50: e2:72:ac:ad:0f:6a:37:48:6e:6c:4d:db:e5:b0:21: 19:43:65:34:10:25:eb:a8:2b:91:3d:fa:2c:0e:47: 02:09:52:55:ed:90:a7:d4:1d:d4:8a:df:e4:de:a3: 52:68:1c:88:a5:ed:de:0a:a3:87:28:01:4d:1e:05: 23:3b:cc:33:9b:9b:01:9c:00:fe:a1:47:8d:bd:d4: e3:08:f8:bb:2a:1d:a2:28:09:ef:a7:fb:1a:61:35: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:41:F0:7E:76:38:AF:6D:67:BA:13:0D:58:A8:79:3F:36:AA:03 X509v3 Authority Key Identifier: keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/_1hB8H52OK9tZ7oTDVioeT82qgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.80.0/22 194.246.88.0/22 Signature Algorithm: sha256WithRSAEncryption 84:62:bf:5a:82:af:d6:6e:9b:6b:5c:c2:96:13:64:18:8d:c9: f9:95:92:52:c7:6e:3f:a7:52:b0:06:79:c3:2e:21:b6:1d:dc: f2:47:4c:22:a8:9b:21:15:32:df:6c:27:8f:fb:6b:63:bd:42: ec:9b:fa:ef:c0:b0:4a:cd:da:98:d0:f9:79:f3:6d:3c:51:ce: 8f:f1:84:26:ff:5e:6b:4f:b9:0b:16:85:56:ff:a8:0e:f8:97: 27:90:ee:a8:b2:1e:9e:4a:8a:5f:40:1c:0a:26:4e:aa:ac:5d: b3:23:2c:81:a2:e1:1a:fe:92:58:06:78:fa:68:00:9c:54:d0: 1c:e7:bd:40:9b:81:61:e5:a1:0e:b2:e1:f3:c0:92:52:00:45: d2:80:dc:e8:1b:72:10:d6:c7:11:dd:d2:9b:d0:79:c9:aa:50: c9:7e:ab:2e:84:a9:16:2b:0b:03:06:e0:0a:65:ee:56:44:64: 7c:90:37:ce:2a:69:98:da:dc:28:41:7f:7f:65:d4:60:09:65: cd:5d:9c:60:2b:ca:bb:8c:a9:68:c8:07:7c:ca:13:a6:c0:f3: 2f:8f:3f:d9:05:9d:e5:74:16:20:01:ba:af:e0:e7:94:4a:c1: 14:ad:30:20:50:8e:b1:b0:0f:84:fb:ee:a0:5a:4c:ba:84:45: f1:f2:7e:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt266AIH3pxR23p0C/vH9zoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw NjY5NjUwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjU4NDFmMDdlNzYzOGFmNmQ2N2JhMTMwZDU4YTg3OTNmMzZhYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpeGwVWBT1/5foyeb3B7vcxP1a0K WDQKQqHvUTTuSAJaCgckmf10FDwfhNhRtCU8UOzSK4c3Jma4Cq/GaFR+RjFno7mb QTeTJVYexTeIeJKqgWOHMa1hFJPYJi/kEd4ktzbQvDIjbHzJjSkIOXMT807Do9Ua 7DFz8HZDCKEDP6O296KBqCpXvVU7IeCe8y8HmF7acC6qPcJ0sByLaDln7wjoWFDi cqytD2o3SG5sTdvlsCEZQ2U0ECXrqCuRPfosDkcCCVJV7ZCn1B3Uit/k3qNSaByI pe3eCqOHKAFNHgUjO8wzm5sBnAD+oUeNvdTjCPi7Kh2iKAnvp/saYTVUTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP9YQfB+djivbWe6Ew1YqHk/NqoDMB8GA1UdIwQY MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt ZDQyMDlmYzdmM2M5LzEvXzFoQjhINTJPSzl0WjdvVERWaW9lVDgycWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5 LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/BQAwQC wvZYMA0GCSqGSIb3DQEBCwUAA4IBAQCEYr9agq/WbptrXMKWE2QYjcn5lZJSx24/ p1KwBnnDLiG2HdzyR0wiqJshFTLfbCeP+2tjvULsm/rvwLBKzdqY0Pl58208Uc6P 8YQm/15rT7kLFoVW/6gO+JcnkO6osh6eSopfQBwKJk6qrF2zIyyBouEa/pJYBnj6 aACcVNAc571Am4Fh5aEOsuHzwJJSAEXSgNzoG3IQ1scR3dKb0HnJqlDJfqsuhKkW KwsDBuAKZe5WRGR8kDfOKmmY2twoQX9/ZdRgCWXNXZxgK8q7jKloyAd8yhOmwPMv jz/ZBZ3ldBYgAbqv4OeUSsEUrTAgUI6xsA+E++6gWky6hEXx8n5x -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:13 2026 by rpki-client