This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/1-_xreJrOs3w9ZGU1IhIWpYpavKY.roa File: 1-_xreJrOs3w9ZGU1IhIWpYpavKY.roa (raw, json) Hash identifier: cDUbfiWVCS31IunzF5QHEKWOVDVj3fc59oC6ui5b0TI= Subject key identifier: FB:FC:6B:78:9A:CE:B3:7C:3D:64:65:35:22:12:16:A5:8A:5A:BC:A6 Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611 Certificate serial: 019B79ED0EC24AC6ACFE73CD98531F771672 Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/1-_xreJrOs3w9ZGU1IhIWpYpavKY.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 91.198.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0e:c2:4a:c6:ac:fe:73:cd:98:53:1f:77:16:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611 Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbfc6b789aceb37c3d646535221216a58a5abca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:e9:57:7f:7e:42:65:f6:0b:b2:1f:71:88: 17:28:4b:d4:69:9b:9d:96:a7:39:75:d6:b6:81:76: 8a:80:37:40:d5:43:4d:10:93:9d:cc:ba:45:01:a5: a1:f6:c0:9d:bb:8a:1f:54:02:2f:30:04:20:c5:09: 9a:82:b2:01:ef:f4:78:09:76:2d:c6:ad:d0:ec:df: 2b:43:6a:13:69:73:e0:54:93:8e:57:55:c3:7a:a3: cf:00:af:93:e9:49:d3:9b:6f:8e:0c:12:3d:04:3e: 45:d1:15:b0:db:85:99:3f:fb:00:5d:a7:0a:11:9e: 04:de:ff:ea:1d:db:2e:aa:fe:d1:ad:c2:d6:f3:33: 0a:e0:65:40:dd:7c:75:0c:a9:68:bd:a1:83:fd:f2: 5a:0b:ce:d8:8e:0d:74:90:9a:07:ce:eb:15:c6:53: 21:01:17:71:40:64:9c:2b:ce:90:a8:6b:04:27:c5: db:f4:33:1f:44:ec:ad:47:3c:f5:af:7e:87:ef:dc: 64:ca:83:c7:5e:69:e3:be:3b:a0:6f:c7:76:79:0d: f2:40:04:e6:b9:cb:cf:9a:08:cb:f2:64:91:80:d1: 70:04:4d:e5:fc:35:f3:cb:6c:e3:f4:90:35:76:48: 02:e9:0b:9d:bd:39:10:89:21:54:81:cf:58:b7:0c: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:6B:78:9A:CE:B3:7C:3D:64:65:35:22:12:16:A5:8A:5A:BC:A6 X509v3 Authority Key Identifier: keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/1-_xreJrOs3w9ZGU1IhIWpYpavKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.142.0/24 Signature Algorithm: sha256WithRSAEncryption 22:a4:a0:ff:ef:42:5f:74:2b:1e:df:b1:32:e3:d7:b4:90:a2: 39:e8:33:a8:23:f7:72:f3:fb:a0:d9:28:56:16:57:3a:65:a0: dc:07:d7:3f:ae:f8:9a:3a:70:17:f2:23:69:43:6f:23:73:8c: 4b:80:79:25:bb:4d:5e:e1:01:53:88:3d:c4:dd:65:47:49:25: bd:30:92:3b:f8:21:58:58:1f:45:25:0c:89:76:fc:7b:e3:ee: 27:af:6c:a1:8b:eb:c7:65:25:26:0e:ad:7b:e2:a2:2b:65:15: 3b:26:9d:f8:7f:1b:5b:c4:18:1c:84:f7:da:dd:56:bb:6e:f2: 54:c6:a2:ca:09:c7:d5:8c:32:a4:53:7d:3d:71:d3:f7:0e:19: 72:6f:0a:9e:78:7f:b6:2b:45:90:24:75:aa:fa:b7:4d:c9:b4: 8a:76:8b:6e:e1:e6:3b:eb:33:1a:ea:5b:9c:70:4b:a5:61:54: 6c:46:6f:6c:86:a2:f9:7a:70:8c:66:1d:e3:e2:81:90:be:69: 22:4d:44:e3:f2:8d:05:52:32:e8:6a:cf:87:31:73:c5:7d:d5: 06:02:5c:b7:08:f3:0f:2b:70:33:a2:14:84:aa:94:23:75:44: cf:d3:5b:79:fb:f2:46:53:85:06:30:1e:d4:64:43:ce:20:1f: 0d:4c:a7:22 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57Q7CSsas/nPNmFMfdxZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmM1ODg3NTYwODk3MGQ5YTcyODM0N2QwNWVmMDBkMGYx ZDU2MTEwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmZjNmI3ODlhY2ViMzdjM2Q2NDY1MzUyMjEyMTZhNThhNWFiY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsHpV39+QmX2C7IfcYgXKEvUaZud lqc5dda2gXaKgDdA1UNNEJOdzLpFAaWh9sCdu4ofVAIvMAQgxQmagrIB7/R4CXYt xq3Q7N8rQ2oTaXPgVJOOV1XDeqPPAK+T6UnTm2+ODBI9BD5F0RWw24WZP/sAXacK EZ4E3v/qHdsuqv7RrcLW8zMK4GVA3Xx1DKlovaGD/fJaC87Yjg10kJoHzusVxlMh ARdxQGScK86QqGsEJ8Xb9DMfROytRzz1r36H79xkyoPHXmnjvjugb8d2eQ3yQATm ucvPmgjL8mSRgNFwBE3l/DXzy2zj9JA1dkgC6QudvTkQiSFUgc9YtwzewQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPv8a3iazrN8PWRlNSISFqWKWrymMB8GA1UdIwQY MBaAFIj8WIdWCJcNmnKDR9Be8A0PHVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9hMmRmNzktZDRmZi00MGM3LWI0YTQt N2FlYzU1OGViNDBkLzEvMS1feHJlSnJPczN3OVpHVTFJaElXcFlwYXZLWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzYvYTJkZjc5LWQ0ZmYtNDBjNy1iNGE0LTdhZWM1NThlYjQw ZC8xL2lQeFloMVlJbHcyYWNvTkgwRjd3RFE4ZFZoRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvGjjAN BgkqhkiG9w0BAQsFAAOCAQEAIqSg/+9CX3QrHt+xMuPXtJCiOegzqCP3cvP7oNko VhZXOmWg3AfXP674mjpwF/IjaUNvI3OMS4B5JbtNXuEBU4g9xN1lR0klvTCSO/gh WFgfRSUMiXb8e+PuJ69soYvrx2UlJg6te+KiK2UVOyad+H8bW8QYHIT32t1Wu27y VMaiygnH1YwypFN9PXHT9w4Zcm8Knnh/titFkCR1qvq3Tcm0inaLbuHmO+szGupb nHBLpWFUbEZvbIai+XpwjGYd4+KBkL5pIk1E4/KNBVIy6GrPhzFzxX3VBgJctwjz DytwM6IUhKqUI3VEz9NbefvyRlOFBjAe1GRDziAfDUynIg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:00 2026 by rpki-client