This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/p1SWpdWXGLbEBPrhZY5QfK82wIw.roa File: p1SWpdWXGLbEBPrhZY5QfK82wIw.roa (raw, json) Hash identifier: VfVL2JfcEVzWDqasnouu2XzXkqrAe9JpcBaMStaIF8Y= Subject key identifier: A7:54:96:A5:D5:97:18:B6:C4:04:FA:E1:65:8E:50:7C:AF:36:C0:8C Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E391AB3B263AC800844A5BEA6B8BD42 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/p1SWpdWXGLbEBPrhZY5QfK82wIw.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48648 IP address blocks: 91.198.233.0/24 maxlen: 24 91.211.120.0/24 maxlen: 24 91.211.122.0/24 maxlen: 24 185.190.151.0/24 maxlen: 24 193.107.80.0/24 maxlen: 24 194.28.100.0/24 maxlen: 24 194.28.103.0/24 maxlen: 24 195.12.56.0/22 maxlen: 22 2a0a:2c0::/48 maxlen: 48 2a0a:2c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1a:b3:b2:63:ac:80:08:44:a5:be:a6:b8:bd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a75496a5d59718b6c404fae1658e507caf36c08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:66:39:c2:f2:d5:d7:91:5b:a4:a7:42:2a: 97:3e:cb:39:97:32:43:54:68:04:95:ae:4f:f1:ad: aa:87:d1:c0:cc:1c:e1:9c:22:3b:aa:58:9a:4c:f9: 02:68:c7:4a:fd:03:bd:3e:26:7b:0e:1e:73:d6:ec: 46:e4:11:15:95:97:2f:9b:21:f2:01:94:26:44:92: 5b:17:08:38:f4:ac:cf:af:2f:90:60:0e:65:d9:94: b3:4d:ea:24:c1:41:72:0f:1d:2f:4b:29:fb:52:70: 5b:12:ea:a3:19:91:f6:92:67:4c:46:a9:d1:08:ea: 9a:37:b6:19:96:86:77:05:ca:8a:34:28:b7:1b:0a: 12:f1:1d:31:b1:e0:8a:1e:a4:f4:c7:dd:03:00:be: 30:97:11:77:ff:c4:dd:50:57:f9:03:46:3e:28:ef: 57:6b:88:f2:41:25:df:e6:cb:9c:8a:3b:72:12:a9: 34:cc:f3:74:71:a8:f4:74:fc:c5:0f:6f:79:46:77: 46:4d:f3:d0:0d:b7:26:23:d9:94:6d:8a:a3:a5:24: 3e:94:74:d1:63:92:d7:09:e3:ff:ea:8b:56:25:64: ce:cc:6a:48:80:79:00:55:09:6a:3d:79:20:2b:99: 17:b6:8e:a8:fa:fd:03:66:dd:03:85:c1:11:19:16: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:54:96:A5:D5:97:18:B6:C4:04:FA:E1:65:8E:50:7C:AF:36:C0:8C X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/p1SWpdWXGLbEBPrhZY5QfK82wIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.233.0/24 91.211.120.0/24 91.211.122.0/24 185.190.151.0/24 193.107.80.0/24 194.28.100.0/24 194.28.103.0/24 195.12.56.0/22 IPv6: 2a0a:2c0::/48 2a0a:2c0:2::/48 Signature Algorithm: sha256WithRSAEncryption 0b:18:1f:fc:50:e4:0a:f2:5c:a7:1a:c4:66:8e:13:f2:92:d8: d8:9a:15:ab:d7:5d:12:18:53:c8:ce:c5:a1:a4:c6:d7:17:86: bc:c8:be:96:f0:24:95:b8:16:75:32:0a:53:c1:2d:60:02:e5: 76:95:f7:d1:1e:e6:82:e7:82:6b:d8:98:eb:63:56:14:a5:52: 30:de:b4:97:11:78:6c:30:7c:f5:bc:e7:e7:12:ea:e3:e7:d2: 20:bd:1b:82:ce:04:c0:b3:3c:c0:92:93:5a:96:61:4f:6a:0d: 42:7a:26:60:a7:40:aa:ec:c5:fd:bb:64:a9:84:cb:90:6b:80: 49:f8:c8:94:0f:0f:65:cc:9b:79:98:18:b4:7c:63:cd:ff:ad: 0b:74:a9:41:f1:8b:b2:37:99:33:e0:b7:77:fc:5b:12:f3:6b: 5c:fd:fb:c7:3f:b4:99:a3:05:05:74:28:6f:70:59:a7:f1:8e: e9:b2:9b:a1:81:69:31:7a:6a:fc:83:be:68:77:a8:cb:34:90: 9f:ab:09:11:07:9f:97:13:45:58:c3:31:c5:5a:6c:9a:19:18: df:7a:99:3e:cf:dd:2f:ad:40:90:41:d8:2b:f6:a7:f4:d8:be: 32:11:62:c1:98:27:51:6f:fa:9c:60:8c:d9:56:a2:13:d7:40: 7b:f7:93:03 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt+ORqzsmOsgAhEpb6muL1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzU0OTZhNWQ1OTcxOGI2YzQwNGZhZTE2NThlNTA3Y2FmMzZjMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20RmOcLy1deRW6SnQiqXPss5lzJD VGgEla5P8a2qh9HAzBzhnCI7qliaTPkCaMdK/QO9PiZ7Dh5z1uxG5BEVlZcvmyHy AZQmRJJbFwg49KzPry+QYA5l2ZSzTeokwUFyDx0vSyn7UnBbEuqjGZH2kmdMRqnR COqaN7YZloZ3BcqKNCi3GwoS8R0xseCKHqT0x90DAL4wlxF3/8TdUFf5A0Y+KO9X a4jyQSXf5sucijtyEqk0zPN0caj0dPzFD295RndGTfPQDbcmI9mUbYqjpSQ+lHTR Y5LXCeP/6otWJWTOzGpIgHkAVQlqPXkgK5kXto6o+v0DZt0DhcERGRbIHQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFKdUlqXVlxi2xAT64WWOUHyvNsCMMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvcDFTV3BkV1hHTGJFQlByaFpZNVFmSzgyd0l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjA2BAIAATAwAwQAW8bpAwQA W9N4AwQAW9N6AwQAub6XAwQAwWtQAwQAwhxkAwQAwhxnAwQCwww4MBgEAgACMBID BwAqCgLAAAADBwAqCgLAAAIwDQYJKoZIhvcNAQELBQADggEBAAsYH/xQ5AryXKca xGaOE/KS2NiaFavXXRIYU8jOxaGkxtcXhrzIvpbwJJW4FnUyClPBLWAC5XaV99Ee 5oLngmvYmOtjVhSlUjDetJcReGwwfPW85+cS6uPn0iC9G4LOBMCzPMCSk1qWYU9q DUJ6JmCnQKrsxf27ZKmEy5BrgEn4yJQPD2XMm3mYGLR8Y83/rQt0qUHxi7I3mTPg t3f8WxLza1z9+8c/tJmjBQV0KG9wWafxjumym6GBaTF6avyDvmh3qMs0kJ+rCREH n5cTRVjDMcVabJoZGN96mT7P3S+tQJBB2Cv2p/TYvjIRYsGYJ1Fv+pxgjNlWohPX QHv3kwM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:26 2026 by rpki-client