This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/1-Gi0WglfPEDkKdexDXnKU5N07dg.roa File: 1-Gi0WglfPEDkKdexDXnKU5N07dg.roa (raw, json) Hash identifier: 6gCrfLIveiynT67NWLBkqnoTcS/eVVpbgxDQ/v8TVK4= Subject key identifier: F8:68:B4:5A:09:5F:3C:40:E4:29:D7:B1:0D:79:CA:53:93:74:ED:D8 Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e Certificate serial: 019B7CED277CE3A1AB3DF8117BA8608CC5AC Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/1-Gi0WglfPEDkKdexDXnKU5N07dg.roa Signing time: Fri 02 Jan 2026 04:17:55 +0000 ROA not before: Fri 02 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44050 IP address blocks: 91.203.152.0/22 maxlen: 22 176.123.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:27:7c:e3:a1:ab:3d:f8:11:7b:a8:60:8c:c5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16914c51d031411c1340171593603163c3d4a08e Validity Not Before: Jan 2 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f868b45a095f3c40e429d7b10d79ca539374edd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:3e:f6:6d:05:f6:17:9d:d8:58:a9:03:ab: 16:51:b7:8a:d6:bf:84:79:86:09:4d:0a:f1:4b:a5: 07:31:a6:bd:21:d9:59:d8:3b:c3:b1:81:e0:8c:ee: 66:00:ae:6e:7e:d1:48:85:ab:a1:61:29:6b:fc:fa: 67:3b:fc:37:27:6e:11:bb:cb:18:a7:9e:c3:dd:16: 05:e8:7c:f5:8a:9e:e1:3c:d4:ab:3c:8d:14:3d:32: 62:a0:63:3d:e8:d8:a1:55:9b:3c:35:cf:54:d6:34: a9:c6:43:78:af:b4:d2:4c:c5:c5:eb:9f:c3:5d:3c: 3f:fd:29:80:d3:0d:7e:98:d7:33:2d:24:4a:f5:c4: e5:4e:25:fe:aa:e8:f7:08:5e:d7:a4:ed:4f:06:f9: 8e:0e:e4:4e:47:59:c3:19:90:21:d1:06:48:8d:20: ea:28:e3:78:84:f7:ee:e3:06:9b:26:bd:e7:01:9a: cc:55:51:5a:aa:a5:89:3b:62:c4:f5:69:7f:ea:f7: 5b:c3:dc:ba:5d:cb:70:62:a6:06:af:06:bd:e4:c0: 17:14:4b:7b:c1:29:3d:08:04:b0:03:e5:e9:0d:d0: a6:a3:70:84:c3:7f:7b:fc:34:11:e9:d4:36:0a:6e: bd:92:bc:92:20:52:67:ab:32:55:ce:57:61:b1:61: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:B4:5A:09:5F:3C:40:E4:29:D7:B1:0D:79:CA:53:93:74:ED:D8 X509v3 Authority Key Identifier: keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/1-Gi0WglfPEDkKdexDXnKU5N07dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.152.0/22 176.123.128.0/19 Signature Algorithm: sha256WithRSAEncryption 13:10:f9:69:cf:2b:3e:03:c9:60:b4:96:38:02:c7:e2:2a:e0: a0:0a:cf:e8:e7:fb:64:c4:ed:12:c5:e9:ca:97:82:49:eb:09: 15:fa:0e:75:5f:82:20:c4:fd:fd:d7:c2:5e:c3:2e:d7:f3:5c: e2:87:fa:6d:02:c9:c0:91:2e:a0:23:14:52:a6:1b:1c:4f:d9: b9:a9:a6:c2:a6:aa:6a:05:7d:b2:42:35:1a:29:ac:2e:e3:e0: 1b:e1:55:2c:ed:bb:bd:e2:91:06:e9:ee:07:e1:19:53:b6:29: c7:4c:fc:23:17:62:d9:57:20:16:3a:54:a5:98:bd:b8:5f:40: cb:8a:9c:bd:6e:b4:f5:33:5d:ac:f1:5f:42:e6:f9:74:a3:a0: 48:e6:ab:be:b6:69:94:e9:c6:9a:60:ce:b4:44:31:a1:2b:eb: 0e:d7:df:60:99:4c:d6:b5:5c:e0:82:4d:b2:10:2b:ac:1f:6f: 04:d4:79:60:00:ab:9a:38:48:1d:0f:75:65:d3:48:93:a3:59: 88:69:06:66:65:b2:24:24:6f:67:45:31:05:81:fc:63:92:db: 68:30:1b:17:96:92:ee:cd:41:10:18:12:92:4b:2c:d7:93:f1: 78:b0:da:00:ca:d5:c1:cf:47:05:7a:68:af:61:2c:4b:8a:43: f5:96:39:3d -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt87Sd846GrPfgRe6hgjMWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTE0YzUxZDAzMTQxMWMxMzQwMTcxNTkzNjAzMTYzYzNk NGEwOGUwHhcNMjYwMTAyMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODY4YjQ1YTA5NWYzYzQwZTQyOWQ3YjEwZDc5Y2E1MzkzNzRlZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqY+9m0F9hed2FipA6sWUbeK1r+E eYYJTQrxS6UHMaa9IdlZ2DvDsYHgjO5mAK5uftFIhauhYSlr/PpnO/w3J24Ru8sY p57D3RYF6Hz1ip7hPNSrPI0UPTJioGM96NihVZs8Nc9U1jSpxkN4r7TSTMXF65/D XTw//SmA0w1+mNczLSRK9cTlTiX+quj3CF7XpO1PBvmODuROR1nDGZAh0QZIjSDq KON4hPfu4wabJr3nAZrMVVFaqqWJO2LE9Wl/6vdbw9y6XctwYqYGrwa95MAXFEt7 wSk9CASwA+XpDdCmo3CEw397/DQR6dQ2Cm69krySIFJnqzJVzldhsWGUrQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPhotFoJXzxA5CnXsQ15ylOTdO3YMB8GA1UdIwQY MBaAFBaRTFHQMUEcE0AXFZNgMWPD1KCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmIt MDlmMTljNmU1MWIyLzEvMS1HaTBXZ2xmUEVEa0tkZXhEWG5LVTVOMDdkZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2QvZjkwYTdkLThhMDUtNDc1NS1iNjZiLTA5ZjE5YzZlNTFi Mi8xL0ZwRk1VZEF4UVJ3VFFCY1ZrMkF4WThQVW9JNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvLmAME BbB7gDANBgkqhkiG9w0BAQsFAAOCAQEAExD5ac8rPgPJYLSWOALH4irgoArP6Of7 ZMTtEsXpypeCSesJFfoOdV+CIMT9/dfCXsMu1/Nc4of6bQLJwJEuoCMUUqYbHE/Z uammwqaqagV9skI1GimsLuPgG+FVLO27veKRBunuB+EZU7Ypx0z8Ixdi2VcgFjpU pZi9uF9Ay4qcvW609TNdrPFfQub5dKOgSOarvrZplOnGmmDOtEQxoSvrDtffYJlM 1rVc4IJNshArrB9vBNR5YACrmjhIHQ91ZdNIk6NZiGkGZmWyJCRvZ0UxBYH8Y5Lb aDAbF5aS7s1BEBgSkkss15PxeLDaAMrVwc9HBXpor2EsS4pD9ZY5PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:14 2026 by rpki-client