This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa File: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (raw, json) Hash identifier: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw= Subject key identifier: 20:2A:E2:CD:91:F3:43:FE:1D:39:3C:C6:E5:18:EB:32:2D:A0:DE:A1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF3AB7490F21CD1096DF516AE2295 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa Signing time: Thu 01 Jan 2026 14:17:44 +0000 ROA not before: Thu 01 Jan 2026 14:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35594 IP address blocks: 91.149.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f3:ab:74:90:f2:1c:d1:09:6d:f5:16:ae:22:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=202ae2cd91f343fe1d393cc6e518eb322da0dea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:5b:34:b3:a3:08:4c:b7:b4:3a:53:e5:39: 3f:e4:1e:39:e4:c8:45:d0:7e:bf:4c:f8:fb:fb:d5: 41:d6:46:53:1a:2d:2b:d1:8f:37:6b:f1:dd:ba:9e: 69:73:cb:46:f0:c4:96:64:7a:6f:ff:14:cc:f8:3f: a7:9a:5d:1b:a9:df:81:ed:91:e7:09:d4:8f:67:01: b2:64:ec:fa:2f:c2:69:69:2c:fb:10:ef:e7:de:37: 2b:ce:73:90:18:87:93:65:c7:0c:f7:0b:47:f2:3d: 8f:b0:9c:b9:a3:f8:92:32:7e:66:a5:b9:fc:f4:a1: ec:58:2e:83:58:df:1a:bb:5d:ef:88:25:f6:b7:a4: 4c:c5:37:09:93:56:d5:96:a4:49:0d:57:64:f7:fe: a1:1a:06:07:fb:35:cc:e8:73:1d:2a:a7:7e:13:cd: 86:d5:96:bb:2f:10:35:fe:6e:0d:c6:5d:97:83:53: 3a:cb:ed:27:11:48:e2:92:5c:66:06:49:50:75:66: c3:9e:e4:58:4b:93:e1:fc:d0:ab:d8:75:fa:8e:83: a0:d5:43:e5:7c:eb:50:8c:05:da:44:84:fa:d2:6f: 35:67:2e:b1:05:97:be:0d:d3:3c:eb:7b:57:dc:fc: ab:8a:32:5d:9d:af:70:b7:98:a3:25:09:dd:9f:0b: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2A:E2:CD:91:F3:43:FE:1D:39:3C:C6:E5:18:EB:32:2D:A0:DE:A1 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.189.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:ee:f5:42:9e:73:df:69:f7:ef:64:bc:6c:3c:c8:a6:45:f6: 21:40:b0:f8:f4:11:08:ff:c9:76:76:7b:d7:5a:20:79:9c:c1: df:4e:86:91:d1:cd:08:a9:6b:aa:33:a9:c1:88:6e:ea:a8:22: 2c:52:02:2e:b2:86:2f:f8:14:e5:70:87:45:56:38:dd:1c:3a: 36:73:99:2e:fc:aa:cb:cb:e8:64:5b:a1:d4:b0:a9:37:b0:5e: eb:6e:85:1b:7c:43:b6:48:6a:42:92:de:de:26:ef:a5:19:e7: c9:98:20:f3:fb:d9:cf:1f:85:48:b9:68:d3:0c:5d:01:5b:e5: 5b:68:7f:a9:b9:f7:f0:bc:8a:28:3e:fb:c7:f5:9b:20:2f:ca: 25:90:66:b3:30:bf:67:54:7f:52:32:96:db:42:bd:4a:71:4f: 0c:8b:ce:72:74:46:c2:5f:0a:bf:8d:52:75:80:e0:11:74:ff: 00:6b:be:0b:03:5d:58:29:2b:6c:fa:67:0f:ca:e9:d5:70:3d: 5d:c3:8b:06:41:4c:2d:9f:97:8f:14:2b:6f:02:32:41:66:d2: 0e:8d:7f:2e:ae:63:6d:26:a0:5e:7b:1b:99:59:43:1d:7f:0f: 45:32:24:ad:f6:2d:83:cb:9c:98:3f:31:0a:30:ae:39:84:21: 88:47:1a:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56/OrdJDyHNEJbfUWriKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDJhZTJjZDkxZjM0M2ZlMWQzOTNjYzZlNTE4ZWIzMjJkYTBkZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0pbNLOjCEy3tDpT5Tk/5B455MhF 0H6/TPj7+9VB1kZTGi0r0Y83a/Hdup5pc8tG8MSWZHpv/xTM+D+nml0bqd+B7ZHn CdSPZwGyZOz6L8JpaSz7EO/n3jcrznOQGIeTZccM9wtH8j2PsJy5o/iSMn5mpbn8 9KHsWC6DWN8au13viCX2t6RMxTcJk1bVlqRJDVdk9/6hGgYH+zXM6HMdKqd+E82G 1Za7LxA1/m4Nxl2Xg1M6y+0nEUjiklxmBklQdWbDnuRYS5Ph/NCr2HX6joOg1UPl fOtQjAXaRIT60m81Zy6xBZe+DdM863tX3PyrijJdna9wt5ijJQndnws2kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAq4s2R80P+HTk8xuUY6zItoN6hMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvSUNyaXpaSHpRXzRkT1R6RzVSanJNaTJnM3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5W9MA0G CSqGSIb3DQEBCwUAA4IBAQBK7vVCnnPfaffvZLxsPMimRfYhQLD49BEI/8l2dnvX WiB5nMHfToaR0c0IqWuqM6nBiG7qqCIsUgIusoYv+BTlcIdFVjjdHDo2c5ku/KrL y+hkW6HUsKk3sF7rboUbfEO2SGpCkt7eJu+lGefJmCDz+9nPH4VIuWjTDF0BW+Vb aH+puffwvIooPvvH9ZsgL8olkGazML9nVH9SMpbbQr1KcU8Mi85ydEbCXwq/jVJ1 gOARdP8Aa74LA11YKSts+mcPyunVcD1dw4sGQUwtn5ePFCtvAjJBZtIOjX8urmNt JqBeexuZWUMdfw9FMiSt9i2Dy5yYPzEKMK45hCGIRxqR -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:20 2026 by rpki-client