This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa File: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (raw, json) Hash identifier: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU= Subject key identifier: F8:6C:17:71:F5:73:61:1F:19:ED:C9:07:2D:54:E8:2F:55:1A:AA:9B Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF4C8F15ED1568F00F914A75B40E8 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa Signing time: Thu 01 Jan 2026 14:17:45 +0000 ROA not before: Thu 01 Jan 2026 14:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49711 IP address blocks: 91.149.171.0/24 maxlen: 24 93.125.43.0/24 maxlen: 24 178.172.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f4:c8:f1:5e:d1:56:8f:00:f9:14:a7:5b:40:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f86c1771f573611f19edc9072d54e82f551aaa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:f7:d1:0a:6b:e3:13:75:79:21:cc:54:fa: f2:62:35:df:57:4b:c0:ea:c9:db:2b:5e:df:8c:e0: 0e:1b:ea:c1:46:26:c2:ac:34:50:07:57:b1:43:a1: 60:14:b3:a0:1e:df:ad:4a:dc:23:3c:e4:a6:0c:94: 8e:eb:9d:74:4c:40:6b:c3:40:2e:57:16:1c:51:85: 53:90:1b:db:f8:91:a9:80:0d:4f:c6:14:7c:00:39: 5b:de:7d:73:a1:88:59:53:53:11:40:e3:56:ad:be: bc:d2:fa:05:7f:c5:29:c3:92:45:3b:7e:3a:66:f7: af:27:70:17:5a:d6:cb:26:49:1c:be:45:60:81:78: 29:98:7f:5c:e0:40:ac:de:5e:76:9e:66:d2:a7:81: 78:5b:d2:99:90:36:78:7d:46:59:33:81:52:aa:a8: 1d:e4:ea:f3:0e:62:e6:bd:9c:1b:b6:99:75:52:af: 3c:66:dd:d8:08:49:47:63:61:74:34:77:56:20:3e: bf:7a:53:1f:2d:60:b4:a4:13:ec:e0:4d:5f:d5:fd: 98:8b:09:d5:e5:34:94:04:f1:75:cf:d2:3f:e5:c2: c7:c7:d2:a7:45:55:1e:4c:7e:fe:8b:be:04:d2:71: fb:89:ab:9b:53:9c:47:b2:1f:cc:c8:24:32:0d:0e: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6C:17:71:F5:73:61:1F:19:ED:C9:07:2D:54:E8:2F:55:1A:AA:9B X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.171.0/24 93.125.43.0/24 178.172.133.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:d4:7b:de:51:45:29:52:c9:71:3d:2c:bc:06:97:1c:49:f1: 33:07:cc:66:50:55:ca:bd:10:fe:ac:6f:34:3e:08:af:82:7f: e3:cb:8b:f8:d8:08:fb:62:14:fb:d3:91:74:c9:e2:3d:07:1a: 2e:de:e0:71:56:e5:29:06:55:75:d1:5f:2a:fb:f8:9e:64:a0: 85:a9:6e:3f:c5:0d:4a:95:25:8e:ed:90:d7:6f:85:84:ab:92: 9e:80:00:1f:de:e2:5d:96:f7:73:64:dd:15:86:9e:f7:e9:31: 11:d8:a7:2f:f2:6a:1a:2c:83:72:ce:58:83:c3:dc:c8:7d:31: e6:d8:0c:17:95:16:e0:aa:6c:de:75:5e:61:3e:a4:ca:31:76: d9:57:85:6c:24:71:99:4e:62:2d:7f:d0:7a:eb:f2:37:d5:26: 25:49:ad:67:30:96:c1:c2:24:2e:9b:cb:8e:bd:ba:cb:f3:ff: 92:2a:a8:c6:cd:e4:fa:43:07:a3:a7:84:c9:3c:1c:f6:17:7d: b9:fd:a0:58:87:d0:8d:63:54:57:c8:1e:ab:ef:86:d5:f9:7d: 2c:e1:59:ca:27:ee:41:be:73:af:d9:1d:b9:50:8f:5d:d5:f9: 16:02:e4:0e:b7:48:d6:d7:ca:6d:af:8d:b9:8d:27:60:b9:ea: 31:86:42:35 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt56/TI8V7RVo8A+RSnW0DoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODZjMTc3MWY1NzM2MTFmMTllZGM5MDcyZDU0ZTgyZjU1MWFhYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsP30Qpr4xN1eSHMVPryYjXfV0vA 6snbK17fjOAOG+rBRibCrDRQB1exQ6FgFLOgHt+tStwjPOSmDJSO6510TEBrw0Au VxYcUYVTkBvb+JGpgA1PxhR8ADlb3n1zoYhZU1MRQONWrb680voFf8Upw5JFO346 ZvevJ3AXWtbLJkkcvkVggXgpmH9c4ECs3l52nmbSp4F4W9KZkDZ4fUZZM4FSqqgd 5OrzDmLmvZwbtpl1Uq88Zt3YCElHY2F0NHdWID6/elMfLWC0pBPs4E1f1f2YiwnV 5TSUBPF1z9I/5cLHx9KnRVUeTH7+i74E0nH7iaubU5xHsh/MyCQyDQ458QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPhsF3H1c2EfGe3JBy1U6C9VGqqbMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvMS1Hd1hjZlZ6WVI4Wjdja0hMVlRvTDFVYXFwcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2QvNmE1NGJmLWYwMGYtNDY3YS1iZjU3LWFhYjBlNDE0Y2M2 My8xL2ZSU2ZZa1I0VTJpY0V2c29pdjYydG9IUDY4RS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFuVqwME AF19KwMEALKshTANBgkqhkiG9w0BAQsFAAOCAQEAa9R73lFFKVLJcT0svAaXHEnx MwfMZlBVyr0Q/qxvND4Ir4J/48uL+NgI+2IU+9ORdMniPQcaLt7gcVblKQZVddFf Kvv4nmSghaluP8UNSpUlju2Q12+FhKuSnoAAH97iXZb3c2TdFYae9+kxEdinL/Jq GiyDcs5Yg8PcyH0x5tgMF5UW4Kps3nVeYT6kyjF22VeFbCRxmU5iLX/QeuvyN9Um JUmtZzCWwcIkLpvLjr26y/P/kiqoxs3k+kMHo6eEyTwc9hd9uf2gWIfQjWNUV8ge q++G1fl9LOFZyifuQb5zr9kduVCPXdX5FgLkDrdI1tfKba+NuY0nYLnqMYZCNQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:23 2026 by rpki-client