This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/1-0EnCQalliPsgsGf-YDpvuy83p8.roa File: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (raw, json) Hash identifier: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU= Subject key identifier: FB:41:27:09:06:A5:96:23:EC:82:C1:9F:F9:80:E9:BE:EC:BC:DE:9F Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d Certificate serial: 019B7B36677EBA58C1003620D29C0C89C9D0 Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/1-0EnCQalliPsgsGf-YDpvuy83p8.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216458 IP address blocks: 91.229.202.0/24 maxlen: 24 2a13:ce40:6666::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:67:7e:ba:58:c1:00:36:20:d2:9c:0c:89:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb41270906a59623ec82c19ff980e9beecbcde9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:06:a3:41:88:a8:0a:c8:19:fe:42:bd:c8: d1:f3:a0:6a:b6:e6:17:1d:39:31:92:f8:71:94:d0: 56:64:16:9b:0f:fc:75:26:f7:93:4b:c7:43:18:19: 5b:2a:c1:36:96:d6:90:cd:d4:04:60:78:92:fe:bb: 78:8d:0b:13:d3:67:b9:2c:83:fb:49:8a:de:91:d1: 55:da:39:1c:16:4a:97:fc:c5:05:a3:54:e8:3f:10: a3:89:b0:80:83:35:32:19:90:62:08:d4:a5:3f:80: 74:0e:08:8b:72:17:83:02:15:8b:f5:6c:ff:3a:f2: f4:49:d3:b7:4b:4f:ea:b2:f0:3b:0e:24:55:db:4c: e6:68:6c:cc:3c:db:ca:f5:3f:86:61:03:a5:3f:da: fc:62:1b:9d:4c:24:84:65:26:dc:20:b5:18:ac:5c: 9a:93:1e:b1:c9:94:46:26:b5:13:50:63:ce:94:ca: f5:24:92:f9:7b:36:11:31:bf:41:96:d9:07:7a:ca: 92:f3:48:8a:be:29:33:9e:98:8b:47:a0:fe:f8:de: 88:c2:ac:72:a9:4e:ea:47:88:1f:af:00:2e:80:95: 8c:95:07:63:c4:41:da:6b:dc:c7:27:a5:6c:2a:55: c3:08:74:8a:10:14:e1:e3:e1:ee:ab:3a:00:bd:8c: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:41:27:09:06:A5:96:23:EC:82:C1:9F:F9:80:E9:BE:EC:BC:DE:9F X509v3 Authority Key Identifier: keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/1-0EnCQalliPsgsGf-YDpvuy83p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.202.0/24 IPv6: 2a13:ce40:6666::/48 Signature Algorithm: sha256WithRSAEncryption 3a:11:ae:3d:0b:4a:fb:57:47:1b:c2:39:fb:ea:ea:1c:3d:99: 77:2e:90:7d:3e:b5:7e:d2:0d:09:b2:8c:ae:43:9d:5c:ef:c5: 04:08:92:c9:38:70:c7:c3:26:c5:ac:98:58:18:c5:2e:be:23: 1a:53:42:30:44:07:c6:30:a4:08:38:76:06:90:55:6c:0c:33: a8:37:b0:28:b9:87:c7:29:86:d9:d9:4f:c3:a9:60:f4:05:5d: d3:0c:eb:0d:70:16:26:28:8d:9e:d9:d8:2c:cb:03:b1:84:f5: 52:90:f9:b1:0e:14:15:fb:8a:46:43:9a:d2:2b:66:19:82:a2: ac:ef:74:7b:d5:67:99:99:4e:42:ad:8d:94:51:53:63:19:8c: 3e:86:4a:41:fb:a7:2d:00:33:94:c0:9e:a8:bd:1c:9e:0a:66: e0:7e:f8:42:24:00:f7:e0:70:da:1e:65:06:51:65:93:cb:2b: ad:17:0b:0c:24:a6:97:7d:87:41:ae:f9:6e:c0:da:d9:54:09: 05:55:38:4e:d8:7a:bc:ca:86:41:30:da:d9:cf:64:c3:9f:ae: fa:5d:de:25:6d:e6:b7:6b:9f:65:0f:eb:8d:35:12:65:1f:df: 56:f1:12:06:ac:61:cd:d6:73:ca:8b:db:5b:2f:d8:25:9c:b4: 5b:80:71:23 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7Nmd+uljBADYg0pwMicnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5 NDlhMGQwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjQxMjcwOTA2YTU5NjIzZWM4MmMxOWZmOTgwZTliZWVjYmNkZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03sGo0GIqArIGf5CvcjR86BqtuYX HTkxkvhxlNBWZBabD/x1JveTS8dDGBlbKsE2ltaQzdQEYHiS/rt4jQsT02e5LIP7 SYrekdFV2jkcFkqX/MUFo1ToPxCjibCAgzUyGZBiCNSlP4B0DgiLcheDAhWL9Wz/ OvL0SdO3S0/qsvA7DiRV20zmaGzMPNvK9T+GYQOlP9r8YhudTCSEZSbcILUYrFya kx6xyZRGJrUTUGPOlMr1JJL5ezYRMb9BltkHesqS80iKvikznpiLR6D++N6Iwqxy qU7qR4gfrwAugJWMlQdjxEHaa9zHJ6VsKlXDCHSKEBTh4+HuqzoAvYyHWQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPtBJwkGpZYj7ILBn/mA6b7svN6fMB8GA1UdIwQY MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt OWM4YmJhNjY0ZmYwLzEvMS0wRW5DUWFsbGlQc2dzR2YtWURwdnV5ODNwOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2EvM2NjYjg1LTkxOGItNGRlOC1iZGEyLTljOGJiYTY2NGZm MC8xL3JJbXZZSmh1YlpXREl2c0NiR3RscnV5VW1nMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFvlyjAP BAIAAjAJAwcAKhPOQGZmMA0GCSqGSIb3DQEBCwUAA4IBAQA6Ea49C0r7V0cbwjn7 6uocPZl3LpB9PrV+0g0JsoyuQ51c78UECJLJOHDHwybFrJhYGMUuviMaU0IwRAfG MKQIOHYGkFVsDDOoN7AouYfHKYbZ2U/DqWD0BV3TDOsNcBYmKI2e2dgsywOxhPVS kPmxDhQV+4pGQ5rSK2YZgqKs73R71WeZmU5CrY2UUVNjGYw+hkpB+6ctADOUwJ6o vRyeCmbgfvhCJAD34HDaHmUGUWWTyyutFwsMJKaXfYdBrvluwNrZVAkFVThO2Hq8 yoZBMNrZz2TDn676Xd4lbea3a59lD+uNNRJlH99W8RIGrGHN1nPKi9tbL9glnLRb gHEj -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:37 2026 by rpki-client