This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa File: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (raw, json) Hash identifier: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c= Subject key identifier: FB:3F:A1:5F:9A:A5:09:FF:1A:1F:C9:EB:D9:7D:33:A4:97:44:D6:18 Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Certificate serial: 019B7DC9CB5AFD96E41F17043FC1C440563F Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa Signing time: Fri 02 Jan 2026 08:18:55 +0000 ROA not before: Fri 02 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24631 IP address blocks: 91.208.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:cb:5a:fd:96:e4:1f:17:04:3f:c1:c4:40:56:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Validity Not Before: Jan 2 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3fa15f9aa509ff1a1fc9ebd97d33a49744d618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2a:1d:15:4a:de:d9:4d:9b:a5:fc:a1:bb:b0: 9d:72:73:83:f8:8e:43:72:2b:5e:ff:bf:a1:23:fd: 18:6f:76:b4:8c:2e:06:1d:e6:c8:3c:ad:3b:ee:5f: 14:66:45:9c:85:a6:ef:28:7f:00:cf:d2:b5:be:a6: 02:21:ea:e9:fe:05:86:6e:cf:71:e2:4e:98:78:e3: c1:b3:87:d1:6a:09:95:10:ee:22:54:4b:75:67:92: 5f:41:a8:1a:45:07:31:02:28:12:5a:45:e6:0e:9d: 85:de:cf:5b:a5:29:39:56:a5:e8:6a:4f:9f:ca:67: 5f:6e:0c:01:02:e6:af:8a:33:ae:53:97:8b:8f:af: fe:b3:08:c6:94:77:89:03:f1:8d:7a:26:25:48:ff: ab:05:e1:da:ba:99:dd:47:69:a1:6c:9a:b3:82:ea: dd:7c:bc:7c:08:f9:d3:77:45:13:e9:07:41:2f:e6: 80:19:83:0c:7c:f0:51:4f:87:40:72:2d:70:79:26: 07:83:97:cf:6b:8c:64:73:72:c4:43:99:1f:c2:86: 2f:ce:e5:ec:3d:f8:ba:80:e8:4c:d4:5e:93:f7:74: ee:9e:77:fd:ea:8c:af:18:b6:de:03:84:fa:80:7b: 61:f4:38:36:80:39:e1:95:a4:66:8f:28:5e:94:d2: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:A1:5F:9A:A5:09:FF:1A:1F:C9:EB:D9:7D:33:A4:97:44:D6:18 X509v3 Authority Key Identifier: keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.165.0/24 Signature Algorithm: sha256WithRSAEncryption 83:1b:9a:0f:d0:20:5d:c4:82:17:6d:30:e2:45:97:d2:30:86: 2c:51:d2:78:f3:d6:a3:af:35:cf:ff:2d:49:9d:64:12:8b:79: 1c:34:b1:c9:9d:97:f6:84:3f:86:cf:fe:9b:c2:a9:39:a5:80: 96:c7:0c:fb:d7:c4:d5:c5:47:6e:15:cb:1b:70:f9:09:0e:ad: f3:92:57:45:34:fc:32:6c:90:f3:7b:de:4b:a4:b9:3c:6c:86: 6e:23:bb:3a:54:db:92:ed:f3:d3:4a:24:32:05:e1:26:07:a8: 8f:b2:d2:c8:c6:69:16:47:7d:4a:1a:3d:3e:b2:21:11:06:52: 56:49:04:af:15:51:d0:32:a4:c9:5b:f9:5f:19:ba:ae:c4:ad: 17:df:63:52:34:63:33:b4:f8:58:45:ae:51:e5:ac:51:c8:e2: c6:8f:d6:27:63:26:2a:a3:4a:13:3c:6b:b9:e5:34:03:86:d0: 20:21:0e:05:6f:06:6f:89:a4:08:b4:c3:6b:11:2a:f6:ed:f1: eb:53:80:4e:0a:53:a5:2c:33:cb:47:c6:ec:b6:6e:60:40:a0: 18:f3:c8:f0:d1:4e:7f:d7:11:e9:ee:40:7b:59:cb:7d:13:65: 15:72:07:90:a7:66:cd:87:3d:00:71:ab:53:e2:00:08:3f:8b: d5:f0:27:be -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9ycta/ZbkHxcEP8HEQFY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk Y2U1MTYwHhcNMjYwMTAyMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNmYTE1ZjlhYTUwOWZmMWExZmM5ZWJkOTdkMzNhNDk3NDRkNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SodFUre2U2bpfyhu7CdcnOD+I5D cite/7+hI/0Yb3a0jC4GHebIPK077l8UZkWchabvKH8Az9K1vqYCIerp/gWGbs9x 4k6YeOPBs4fRagmVEO4iVEt1Z5JfQagaRQcxAigSWkXmDp2F3s9bpSk5VqXoak+f ymdfbgwBAuavijOuU5eLj6/+swjGlHeJA/GNeiYlSP+rBeHaupndR2mhbJqzgurd fLx8CPnTd0UT6QdBL+aAGYMMfPBRT4dAci1weSYHg5fPa4xkc3LEQ5kfwoYvzuXs Pfi6gOhM1F6T93Tunnf96oyvGLbeA4T6gHth9Dg2gDnhlaRmjyhelNKsiwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPs/oV+apQn/Gh/J69l9M6SXRNYYMB8GA1UdIwQY MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt ZDU0OTU1NjQzY2Q5LzEvMS16LWhYNXFsQ2Y4YUg4bnIyWDB6cEpkRTFoZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjgvNGRhZWUwLTg0ZTItNDFlOS05NjQzLWQ1NDk1NTY0M2Nk OS8xL0huc3VKRC1LcVZSWmVUSzgzTm12WldEYzVSWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvQpTAN BgkqhkiG9w0BAQsFAAOCAQEAgxuaD9AgXcSCF20w4kWX0jCGLFHSePPWo681z/8t SZ1kEot5HDSxyZ2X9oQ/hs/+m8KpOaWAlscM+9fE1cVHbhXLG3D5CQ6t85JXRTT8 MmyQ83veS6S5PGyGbiO7OlTbku3z00okMgXhJgeoj7LSyMZpFkd9Sho9PrIhEQZS VkkErxVR0DKkyVv5Xxm6rsStF99jUjRjM7T4WEWuUeWsUcjixo/WJ2MmKqNKEzxr ueU0A4bQICEOBW8Gb4mkCLTDaxEq9u3x61OATgpTpSwzy0fG7LZuYECgGPPI8NFO f9cR6e5Ae1nLfRNlFXIHkKdmzYc9AHGrU+IACD+L1fAnvg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:08 2026 by rpki-client