This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa File: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (raw, json) Hash identifier: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU= Subject key identifier: F9:71:58:C0:F4:27:8A:10:0A:18:08:5A:1E:65:FF:62:02:EA:E6:19 Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a Certificate serial: 019B7CED4AEBACBED14319212512200BFC0D Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57136 IP address blocks: 91.230.248.0/24 maxlen: 24 194.102.117.0/24 maxlen: 24 194.105.143.0/24 maxlen: 24 194.126.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4a:eb:ac:be:d1:43:19:21:25:12:20:0b:fc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f97158c0f4278a100a18085a1e65ff6202eae619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:91:be:8a:a2:40:2a:82:b3:8c:71:af:ea: 06:f5:7a:79:fa:72:d9:d2:3c:ae:27:91:31:4e:e5: 1a:6f:db:e0:e9:25:0b:e1:98:64:73:aa:ed:93:d4: a8:26:75:7d:5b:2b:80:b2:9a:9f:6c:f7:37:9b:d2: df:6b:59:76:63:a6:9e:dc:0c:dd:f6:e7:45:dd:ec: ea:0b:97:84:86:6d:11:27:f7:91:61:9a:d9:62:75: a4:0c:6c:46:cd:a4:29:b5:1c:21:87:5a:99:61:67: 0f:99:b5:ad:71:bf:2d:4b:d6:3a:74:be:4b:4c:13: 2a:7f:a9:5d:5d:15:e9:4f:55:3f:93:3b:72:f2:70: 67:1b:0c:6d:2d:22:36:09:ff:82:e6:8e:9f:95:f4: d2:5a:16:89:1f:41:7c:8c:f6:7d:da:9d:8e:57:d0: a2:6d:32:ea:75:ff:ee:43:ec:c8:e0:6f:30:4f:b3: 68:57:68:6e:fc:f9:35:c6:c3:91:e8:3e:93:94:0b: 23:8e:31:57:7f:49:5e:ed:99:8d:a3:3e:36:23:94: 09:64:76:1a:19:fe:63:a2:cb:cb:3f:f6:cc:4b:b3: 28:78:c7:f0:a4:49:3a:bb:ea:18:b3:f9:3f:b1:f7: cc:d4:71:44:71:c3:0f:78:89:c6:e7:62:92:f7:6e: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:71:58:C0:F4:27:8A:10:0A:18:08:5A:1E:65:FF:62:02:EA:E6:19 X509v3 Authority Key Identifier: keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.248.0/24 194.102.117.0/24 194.105.143.0/24 194.126.205.0/24 Signature Algorithm: sha256WithRSAEncryption 21:50:56:eb:60:76:a7:08:28:eb:80:b5:df:24:70:6d:52:59: 22:cc:54:1d:7e:44:ea:30:7b:a9:1c:7e:4f:1a:21:75:89:9c: 1d:9f:30:3e:54:69:ec:5f:84:3f:12:1a:ef:8b:92:92:5c:34: 8c:32:fe:ff:20:93:35:e1:36:cd:3d:a4:58:19:1a:7d:99:e0: f3:fa:b8:27:60:12:a4:98:11:7b:db:35:2a:ef:e4:19:8e:c6: 39:b1:cc:39:bd:fc:7e:b1:30:c0:8f:11:6a:be:82:4c:e4:a0: b4:0c:28:cb:6b:39:87:98:4e:ba:3c:39:d7:06:b4:a2:f9:8f: a4:a4:0a:54:9a:57:58:43:3a:94:11:82:96:f4:c9:3d:9f:8a: c7:0f:21:64:9a:51:75:37:2e:f9:75:9c:c8:9f:54:77:07:f0: 3f:54:d0:09:f5:6a:65:f4:a2:79:91:50:a9:7d:d0:88:55:21: f7:f5:85:ea:00:bc:50:cc:a6:dc:17:1f:31:05:26:de:b6:13: 2b:ac:fa:f8:ab:5d:97:c9:9d:8d:83:0f:8f:ba:16:23:77:57: 3f:91:1f:c9:3d:80:82:ff:00:d1:0a:fc:eb:7c:3d:bc:c2:38: 01:90:c3:25:1f:ec:02:6d:2b:07:71:e2:13:5d:04:de:61:0f: cf:dd:d0:92 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt87UrrrL7RQxkhJRIgC/wNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTA2ZDgwYWI1OTJkZTdiZTBhMzMxYmJmNGZhMDA2OGQ0 MTQwOGEwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTcxNThjMGY0Mjc4YTEwMGExODA4NWExZTY1ZmY2MjAyZWFlNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VORvoqiQCqCs4xxr+oG9Xp5+nLZ 0jyuJ5ExTuUab9vg6SUL4Zhkc6rtk9SoJnV9WyuAspqfbPc3m9Lfa1l2Y6ae3Azd 9udF3ezqC5eEhm0RJ/eRYZrZYnWkDGxGzaQptRwhh1qZYWcPmbWtcb8tS9Y6dL5L TBMqf6ldXRXpT1U/kzty8nBnGwxtLSI2Cf+C5o6flfTSWhaJH0F8jPZ92p2OV9Ci bTLqdf/uQ+zI4G8wT7NoV2hu/Pk1xsOR6D6TlAsjjjFXf0le7ZmNoz42I5QJZHYa Gf5josvLP/bMS7MoeMfwpEk6u+oYs/k/sffM1HFEccMPeInG52KS925yrwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPlxWMD0J4oQChgIWh5l/2IC6uYZMB8GA1UdIwQY MBaAFDhQbYCrWS3nvgozG79PoAaNQUCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgt OGRmOGFmMzAwMWJjLzEvMS1YRll3UFFuaWhBS0dBaGFIbVhfWWdMcTVoay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWYvZjk0Zjc4LWYyNjItNDIwNy04ZjE4LThkZjhhZjMwMDFi Yy8xL09GQnRnS3RaTGVlLUNqTWJ2MC1nQm8xQlFJby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFvm+AME AMJmdQMEAMJpjwMEAMJ+zTANBgkqhkiG9w0BAQsFAAOCAQEAIVBW62B2pwgo64C1 3yRwbVJZIsxUHX5E6jB7qRx+TxohdYmcHZ8wPlRp7F+EPxIa74uSklw0jDL+/yCT NeE2zT2kWBkafZng8/q4J2ASpJgRe9s1Ku/kGY7GObHMOb38frEwwI8Rar6CTOSg tAwoy2s5h5hOujw51wa0ovmPpKQKVJpXWEM6lBGClvTJPZ+Kxw8hZJpRdTcu+XWc yJ9UdwfwP1TQCfVqZfSieZFQqX3QiFUh9/WF6gC8UMym3BcfMQUm3rYTK6z6+Ktd l8mdjYMPj7oWI3dXP5EfyT2Agv8A0Qr863w9vMI4AZDDJR/sAm0rB3HiE10E3mEP z93Qkg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:15 2026 by rpki-client