This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/851W_kifbk5uWqZqvRWpLulX6u0.roa File: 851W_kifbk5uWqZqvRWpLulX6u0.roa (raw, json) Hash identifier: JuKr2G5Gk3U/236UNuzcgJrBK5lrJfgVVbIUKV3qpGE= Subject key identifier: F3:9D:56:FE:48:9F:6E:4E:6E:5A:A6:6A:BD:15:A9:2E:E9:57:EA:ED Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c Certificate serial: 019B797EE9E3EA0D4A2B8CAA96CABDBECE3C Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/851W_kifbk5uWqZqvRWpLulX6u0.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208046 IP address blocks: 2001:67c:9b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e9:e3:ea:0d:4a:2b:8c:aa:96:ca:bd:be:ce:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f39d56fe489f6e4e6e5aa66abd15a92ee957eaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:3c:ea:91:44:c6:c9:7e:e1:b1:00:ba:16: c4:4c:f1:99:cd:0c:dc:d7:37:f4:f7:0c:01:bf:01: 42:4d:1d:13:51:d4:22:79:ff:4d:57:16:7e:ce:e0: 50:de:1e:d5:ad:50:21:20:ce:13:b5:18:04:7c:02: 59:d3:45:cd:3c:c0:a1:19:f7:18:92:af:0b:73:83: c3:98:a6:86:1f:b8:c0:cc:a3:99:3e:22:cd:4b:44: 3f:1b:4d:c4:78:91:90:89:2d:67:c0:2d:75:e4:45: d5:08:43:c1:23:e9:49:b8:a9:39:26:ee:5b:d4:54: 27:55:c9:64:f5:0b:81:15:d2:c4:75:7f:99:8c:74: 9a:ef:82:99:41:37:bf:46:0f:bd:43:63:5d:c5:cf: dd:f9:ac:06:b3:4b:ca:99:c2:66:76:70:41:d3:00: 1d:fa:0f:4d:c6:80:82:3f:40:f1:12:2d:ba:d2:54: 34:6b:5a:f9:61:91:4f:7b:1f:ce:d5:bf:f6:9e:82: 37:2a:d1:51:bc:da:7b:55:e9:38:99:7f:ac:e2:c9: ad:67:d6:6f:7d:58:e7:5a:63:e3:a8:55:25:76:e2: 70:02:c4:a0:a1:71:c1:fc:40:96:eb:f7:38:5b:07: 11:8a:ea:b2:f1:7e:db:eb:fc:da:a5:74:7b:00:79: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:56:FE:48:9F:6E:4E:6E:5A:A6:6A:BD:15:A9:2E:E9:57:EA:ED X509v3 Authority Key Identifier: keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/851W_kifbk5uWqZqvRWpLulX6u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:9b0::/48 Signature Algorithm: sha256WithRSAEncryption 22:5f:19:ad:06:71:d8:e2:06:eb:fa:48:68:d5:34:da:21:12: 58:28:bc:ee:63:59:66:ce:0a:79:f5:5b:27:bd:cc:02:c5:c1: 66:05:c4:7c:04:ed:71:5c:80:cd:9d:f1:d2:9e:e1:89:94:12: 1c:90:5b:da:e8:5b:eb:9e:92:fd:03:77:6a:ab:4b:fe:57:f5: 36:60:b0:75:24:93:bc:b0:df:93:ad:e1:04:8d:df:66:bf:eb: e8:6a:e2:5c:85:0d:ef:43:41:c4:d4:b4:1f:44:a7:9d:18:93: d4:94:d6:dc:a3:41:f9:83:49:96:ec:be:3b:23:f0:25:f2:f0: 01:e1:61:55:38:ae:db:fa:95:52:0b:7c:23:7c:41:33:47:d2: 2a:d7:e3:99:09:0c:48:22:9a:49:db:9f:3d:8f:26:9a:e7:f0: c8:c1:21:0f:95:ee:86:d5:c7:35:e5:51:65:76:ce:5e:8c:bd: 95:e5:f0:e2:47:8b:f7:17:65:60:01:0b:0b:e0:c4:37:82:67: 50:00:60:57:41:86:f3:fa:02:32:bd:ad:74:5d:4c:d8:57:58: 64:40:86:0d:b1:74:54:f4:96:ce:f2:2e:9e:ad:ed:cc:e8:3b: 75:a2:9d:67:96:8e:d5:2a:5e:ea:1f:64:71:71:53:71:43:c8: b3:36:ba:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5funj6g1KK4yqlsq9vs48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZGQwZTQ4ZDkwMTFhZGYzNzY2NjVhZDRkNjJjZjMxY2U2 MzA1OGMwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzlkNTZmZTQ4OWY2ZTRlNmU1YWE2NmFiZDE1YTkyZWU5NTdlYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuo86pFExsl+4bEAuhbETPGZzQzc 1zf09wwBvwFCTR0TUdQief9NVxZ+zuBQ3h7VrVAhIM4TtRgEfAJZ00XNPMChGfcY kq8Lc4PDmKaGH7jAzKOZPiLNS0Q/G03EeJGQiS1nwC115EXVCEPBI+lJuKk5Ju5b 1FQnVclk9QuBFdLEdX+ZjHSa74KZQTe/Rg+9Q2Ndxc/d+awGs0vKmcJmdnBB0wAd +g9NxoCCP0DxEi260lQ0a1r5YZFPex/O1b/2noI3KtFRvNp7Vek4mX+s4smtZ9Zv fVjnWmPjqFUlduJwAsSgoXHB/ECW6/c4WwcRiuqy8X7b6/zapXR7AHlf9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPOdVv5In25Oblqmar0VqS7pV+rtMB8GA1UdIwQY MBaAFJHdDkjZARrfN2ZlrU1izzHOYwWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2QwT1NOa0JHdDgzWm1XdFRXTFBNYzVqQll3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xZTlkMDQtZDk0Zi00ZjEzLWJlM2Mt MTBmMzRmNTU4MzYzLzEvODUxV19raWZiazV1V3FacXZSV3BMdWxYNnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xZTlkMDQtZDk0Zi00ZjEzLWJlM2MtMTBmMzRmNTU4MzYz LzEva2QwT1NOa0JHdDgzWm1XdFRXTFBNYzVqQll3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAmw MA0GCSqGSIb3DQEBCwUAA4IBAQAiXxmtBnHY4gbr+kho1TTaIRJYKLzuY1lmzgp5 9VsnvcwCxcFmBcR8BO1xXIDNnfHSnuGJlBIckFva6FvrnpL9A3dqq0v+V/U2YLB1 JJO8sN+TreEEjd9mv+voauJchQ3vQ0HE1LQfRKedGJPUlNbco0H5g0mW7L47I/Al 8vAB4WFVOK7b+pVSC3wjfEEzR9Iq1+OZCQxIIppJ2589jyaa5/DIwSEPle6G1cc1 5VFlds5ejL2V5fDiR4v3F2VgAQsL4MQ3gmdQAGBXQYbz+gIyva10XUzYV1hkQIYN sXRU9JbO8i6ere3M6Dt1op1nlo7VKl7qH2RxcVNxQ8izNrrs -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:06 2026 by rpki-client