This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/1-vAv7boKnKFGqUtej2dbY5hC7Hs.roa File: 1-vAv7boKnKFGqUtej2dbY5hC7Hs.roa (raw, json) Hash identifier: ywVBqxZJbaC/gTJw5HcGVqUqNC/LAhl2yA0LoFiUvhc= Subject key identifier: FA:F0:2F:ED:BA:0A:9C:A1:46:A9:4B:5E:8F:67:5B:63:98:42:EC:7B Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C70BADA5C67886E4C16BECA6BB22D4 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/1-vAv7boKnKFGqUtej2dbY5hC7Hs.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60713 IP address blocks: 91.236.131.0/24 maxlen: 24 212.7.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0b:ad:a5:c6:78:86:e4:c1:6b:ec:a6:bb:22:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faf02fedba0a9ca146a94b5e8f675b639842ec7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:b4:82:15:ce:e5:e3:29:49:0a:69:78:6a: d9:6a:1a:0c:bd:18:7e:d3:c2:ac:44:4d:4c:cc:d3: 37:e5:78:0b:fe:43:6e:60:48:33:8b:a4:db:2b:6a: d1:79:4f:7b:66:d0:b1:a0:16:92:52:a1:48:1b:63: bf:8e:56:df:8c:c2:cc:f7:f8:25:c9:10:0b:a2:1c: a1:58:f7:2d:3b:48:46:cb:50:d0:34:39:c3:61:76: 5c:d8:f0:cf:e9:98:36:e9:5c:a4:16:85:43:9e:15: 0c:63:d9:f3:8f:ad:43:42:e9:14:11:f8:7e:70:a8: 85:49:0a:5f:bd:06:6d:83:e7:05:6a:a4:f7:9a:a4: cf:b6:89:48:8b:34:8b:ce:f2:ef:b9:d8:83:94:ce: 0e:95:f5:cb:a6:0a:5d:60:ff:35:ca:a9:e9:66:b4: 52:ad:b4:a9:c0:0f:90:0f:5a:72:3f:4f:c6:9d:ae: 0b:54:e4:17:eb:37:1f:64:a5:be:b1:69:2a:16:7e: c1:5a:83:af:f0:79:c8:ec:4a:99:d2:c5:b7:f1:37: 9f:69:b3:df:f5:c8:3a:81:18:1a:ed:e6:c9:bc:62: 0a:1c:7d:02:df:32:c3:ed:4d:2b:c3:50:29:10:37: ca:3c:b3:84:a1:e4:be:b7:93:85:18:34:72:db:51: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F0:2F:ED:BA:0A:9C:A1:46:A9:4B:5E:8F:67:5B:63:98:42:EC:7B X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/1-vAv7boKnKFGqUtej2dbY5hC7Hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.131.0/24 212.7.212.0/24 Signature Algorithm: sha256WithRSAEncryption 47:a3:4b:a6:99:b8:d3:94:b8:69:a6:6b:04:75:0c:a7:72:85: b5:05:16:f5:a3:4c:bc:30:4b:6c:73:bd:a4:15:6e:65:7f:b0: ef:58:ca:0e:d1:18:45:d6:fd:c1:d7:b8:09:1d:d2:81:fd:ed: f8:df:57:6f:8a:05:f7:62:e4:29:9e:7a:13:d7:7b:89:d6:a5: 47:e3:cf:f0:17:e5:1d:65:8d:64:d2:46:19:fc:49:f4:a6:b0: 05:99:6a:6a:e4:53:1c:0c:70:1a:44:b6:bc:85:09:0f:77:db: 5e:08:76:2c:81:37:9b:c0:da:6b:31:6a:5f:06:84:08:da:4e: 8d:1d:1a:b8:5b:c2:d2:4f:ce:c8:a5:8f:bf:a9:0e:bb:72:f4: 26:36:e3:c3:23:0c:b9:4b:40:5e:18:11:9a:62:2e:d8:6f:12: e6:29:36:7a:4f:e2:2c:74:19:77:42:02:3e:66:96:ff:61:ab: 33:79:bd:88:36:b8:73:f6:67:62:5f:30:36:f1:3e:79:93:6d: c7:c6:4f:cf:03:ab:8b:b3:5d:ce:32:c4:0d:5c:f1:77:ca:95: fa:72:da:0f:97:d2:06:18:cc:ee:a4:94:1c:70:f5:9c:94:d7: 7c:4a:30:08:a6:40:52:73:96:9a:6c:b7:fa:05:71:5f:fd:cd: 00:5b:55:fb -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt3xwutpcZ4huTBa+ymuyLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWYwMmZlZGJhMGE5Y2ExNDZhOTRiNWU4ZjY3NWI2Mzk4NDJlYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHi0ghXO5eMpSQppeGrZahoMvRh+ 08KsRE1MzNM35XgL/kNuYEgzi6TbK2rReU97ZtCxoBaSUqFIG2O/jlbfjMLM9/gl yRALohyhWPctO0hGy1DQNDnDYXZc2PDP6Zg26VykFoVDnhUMY9nzj61DQukUEfh+ cKiFSQpfvQZtg+cFaqT3mqTPtolIizSLzvLvudiDlM4OlfXLpgpdYP81yqnpZrRS rbSpwA+QD1pyP0/Gna4LVOQX6zcfZKW+sWkqFn7BWoOv8HnI7EqZ0sW38TefabPf 9cg6gRga7ebJvGIKHH0C3zLD7U0rw1ApEDfKPLOEoeS+t5OFGDRy21EIWwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPrwL+26CpyhRqlLXo9nW2OYQux7MB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvMS12QXY3Ym9LbktGR3FVdGVqMmRiWTVoQzdIcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvNDk4NGRmLTZkYjItNGUwYS05MWY4LWJmMDVhY2M4MmJk MS8xL0NvSC1rRm4yZ2d2Qml0V0FMeThmeW5mU1ZMYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvsgwME ANQH1DANBgkqhkiG9w0BAQsFAAOCAQEAR6NLppm405S4aaZrBHUMp3KFtQUW9aNM vDBLbHO9pBVuZX+w71jKDtEYRdb9wde4CR3Sgf3t+N9Xb4oF92LkKZ56E9d7idal R+PP8BflHWWNZNJGGfxJ9KawBZlqauRTHAxwGkS2vIUJD3fbXgh2LIE3m8DaazFq XwaECNpOjR0auFvC0k/OyKWPv6kOu3L0JjbjwyMMuUtAXhgRmmIu2G8S5ik2ek/i LHQZd0ICPmaW/2GrM3m9iDa4c/ZnYl8wNvE+eZNtx8ZPzwOri7NdzjLEDVzxd8qV +nLaD5fSBhjM7qSUHHD1nJTXfEowCKZAUnOWmmy3+gVxX/3NAFtV+w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:12 2026 by rpki-client