This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa File: 1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa (raw, json) Hash identifier: Ha8Q7daEnMbbFyY/dxOcBlU2bNw+1RH5tta+lgnhb9k= Subject key identifier: FB:14:51:17:AB:7A:28:67:56:31:47:0A:18:0F:78:81:55:58:06:DE Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019B78A2670F76F99DE941824F579921B746 Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa Signing time: Thu 01 Jan 2026 08:17:47 +0000 ROA not before: Thu 01 Jan 2026 08:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42675 IP address blocks: 91.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:67:0f:76:f9:9d:e9:41:82:4f:57:99:21:b7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb145117ab7a28675631470a180f7881555806de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:66:51:82:8e:ba:a3:19:f4:63:5c:ee:c1:ed: 9d:94:71:d9:5c:2a:da:47:60:28:f9:12:20:61:dc: 3f:ee:9e:19:e1:57:c6:cd:cb:93:d0:3f:8d:ca:72: 82:31:c4:7a:30:a6:d7:24:3e:57:ac:5a:da:8e:55: ff:f2:f3:ed:fa:75:35:95:45:6f:a1:ee:32:98:1f: 60:2a:5a:27:af:90:a0:be:54:6c:d8:a9:6e:b8:94: 15:05:b1:a6:ad:47:c0:89:b5:cb:4a:98:40:0e:27: 31:7d:f2:23:bb:cc:0f:ac:b5:3e:24:1d:7c:ed:c7: 1e:8d:08:8f:07:5e:7e:62:50:5d:5f:7f:63:3b:2d: e2:d0:9e:89:d6:58:1e:33:ab:10:6e:9c:77:b2:ee: cb:e2:77:a4:97:ce:30:c2:ec:f6:6b:b9:8f:0d:b2: eb:b5:b4:d0:70:cb:41:d2:4f:bc:3a:66:14:ef:da: 4b:f5:7d:7d:fb:f4:82:69:38:3b:34:e7:10:3a:e1: 9c:d6:e7:0c:66:cc:d9:89:06:7e:53:e7:51:18:c3: 19:ba:b3:9d:09:73:22:3e:48:ff:c6:fa:5a:91:81: 0a:7d:31:8e:f1:ad:15:55:cc:78:5b:50:00:64:e7: a4:61:3d:3d:67:b2:66:e2:92:77:4a:1a:6d:8a:8f: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:14:51:17:AB:7A:28:67:56:31:47:0A:18:0F:78:81:55:58:06:DE X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:de:42:36:55:15:85:f3:86:44:ff:2a:c2:63:a7:aa:cd:e3: 47:57:31:d6:15:4a:a9:e0:26:85:96:da:7d:cc:34:e3:5a:36: 01:fe:9a:10:3f:4a:96:44:2e:ac:fa:ae:28:30:b1:41:b8:fe: 7a:5b:49:fe:a4:7f:ce:1d:d0:53:a1:1f:88:86:f0:b8:31:af: 69:d2:05:f2:18:23:e6:69:50:1d:0f:99:98:be:58:35:d6:cb: ca:df:b4:d5:fd:95:6d:5d:ec:84:2e:27:49:4f:49:b2:6c:8b: 71:7e:48:9a:ac:46:f0:b2:5a:80:a9:b0:8b:24:70:6f:a5:b6: c2:af:54:2a:09:83:d4:2e:39:4e:01:67:d7:2c:75:d8:ae:fb: 9a:6a:a2:de:43:20:bd:08:fc:b9:1b:73:39:e8:c7:41:ec:f0: db:6b:78:8b:4a:0e:51:d1:de:5b:18:41:60:6a:e9:59:88:56: 90:a2:d3:ce:b1:49:9c:20:cc:31:69:ac:93:70:05:0f:5e:e5: f8:98:67:73:e8:83:89:04:52:e9:be:c4:93:d2:0f:6f:01:ca: 7e:0b:12:d4:64:3c:27:2e:2e:7f:3f:16:99:c9:a8:0d:5e:20: 1b:87:00:cf:ab:fe:86:c6:9b:45:df:27:0a:4f:56:e9:f3:dd: 64:ea:b9:c2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4omcPdvmd6UGCT1eZIbdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjE0NTExN2FiN2EyODY3NTYzMTQ3MGExODBmNzg4MTU1NTgwNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mZRgo66oxn0Y1zuwe2dlHHZXCra R2Ao+RIgYdw/7p4Z4VfGzcuT0D+NynKCMcR6MKbXJD5XrFrajlX/8vPt+nU1lUVv oe4ymB9gKlonr5CgvlRs2KluuJQVBbGmrUfAibXLSphADicxffIju8wPrLU+JB18 7ccejQiPB15+YlBdX39jOy3i0J6J1lgeM6sQbpx3su7L4nekl84wwuz2a7mPDbLr tbTQcMtB0k+8OmYU79pL9X19+/SCaTg7NOcQOuGc1ucMZszZiQZ+U+dRGMMZurOd CXMiPkj/xvpakYEKfTGO8a0VVcx4W1AAZOekYT09Z7Jm4pJ3Shptio+CVQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsUURereihnVjFHChgPeIFVWAbeMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvMS14UlJGNnQ2S0dkV01VY0tHQTk0Z1ZWWUJ0NC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjMvOTkyZDAzLTg4M2ItNDA0ZC04ODdlLWYyNDM1ZDVjZjM3 Yi8xL2NBSGtJaUpfcEV6Rnk1WFNxZHpPRDZXNG5BYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvi3TAN BgkqhkiG9w0BAQsFAAOCAQEAGt5CNlUVhfOGRP8qwmOnqs3jR1cx1hVKqeAmhZba fcw041o2Af6aED9KlkQurPquKDCxQbj+eltJ/qR/zh3QU6EfiIbwuDGvadIF8hgj 5mlQHQ+ZmL5YNdbLyt+01f2VbV3shC4nSU9JsmyLcX5ImqxG8LJagKmwiyRwb6W2 wq9UKgmD1C45TgFn1yx12K77mmqi3kMgvQj8uRtzOejHQezw22t4i0oOUdHeWxhB YGrpWYhWkKLTzrFJnCDMMWmsk3AFD17l+Jhnc+iDiQRS6b7Ek9IPbwHKfgsS1GQ8 Jy4ufz8WmcmoDV4gG4cAz6v+hsabRd8nCk9W6fPdZOq5wg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:18 2026 by rpki-client