This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa File: i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa (raw, json) Hash identifier: KYoEYuLGKlqcsdZuYcCfv5Zk9kbtA+bdbC5coofITqM= Subject key identifier: 8B:5A:FD:4D:C5:CD:5E:C6:F3:68:C4:AA:7C:88:23:BF:1E:ED:21:47 Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c Certificate serial: 019B791035684C5F2D24F98C4F949C3BB335 Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29144 IP address blocks: 185.76.200.0/23 maxlen: 23 185.76.200.0/24 maxlen: 24 185.76.201.0/24 maxlen: 24 185.76.202.0/23 maxlen: 23 185.76.202.0/24 maxlen: 24 185.76.203.0/24 maxlen: 24 194.0.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:35:68:4c:5f:2d:24:f9:8c:4f:94:9c:3b:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b5afd4dc5cd5ec6f368c4aa7c8823bf1eed2147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:6b:f9:1a:e0:b0:6c:13:81:68:9b:d2:15: f1:65:28:44:89:b7:a2:8c:5d:ee:f5:9c:2a:ba:61: 67:6e:f1:45:16:5e:dd:00:48:ba:a5:4a:c7:7a:c1: 6f:ae:65:d6:2c:ea:3a:a7:0b:34:b5:a6:ac:78:df: b4:5d:aa:d6:b4:d2:b8:80:18:79:29:5c:15:06:c2: 92:6f:6b:b3:d4:9e:40:4e:d5:1e:41:a2:0e:0b:7c: c5:ac:88:63:93:ee:35:6c:2f:39:77:82:17:04:9b: ac:27:d6:7f:84:2a:76:e0:c7:de:f7:b3:a8:cd:f5: 29:51:d0:35:d5:67:02:5e:2f:68:e9:97:0c:87:8a: b9:f0:33:c8:3c:c9:c8:29:a5:4f:ef:00:2a:59:3a: e1:7c:b8:e2:84:b2:18:66:98:31:19:3c:c9:ef:a6: d3:4c:87:b8:de:1d:14:31:80:1b:9c:eb:b4:d8:5d: 41:5c:07:a3:9d:81:b3:fd:c5:65:22:c6:aa:11:e7: 2b:7e:79:93:78:0d:4e:96:f7:97:bc:50:8b:f5:2b: 20:d3:19:87:d6:ff:31:60:13:bd:fd:11:65:16:2b: d7:42:08:40:00:4c:7d:49:ce:37:e5:ed:78:db:89: 76:f1:fc:5a:51:a8:93:1d:9e:84:d3:2d:dc:bb:fb: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5A:FD:4D:C5:CD:5E:C6:F3:68:C4:AA:7C:88:23:BF:1E:ED:21:47 X509v3 Authority Key Identifier: keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.200.0/22 194.0.142.0/24 Signature Algorithm: sha256WithRSAEncryption 45:5e:8c:ed:51:9e:00:08:9e:2a:01:5c:7d:cb:e5:34:88:1f: 0b:ff:ba:d7:e0:dc:05:f5:57:ca:5b:7d:35:cd:f0:1e:9d:50: 90:f1:da:f6:63:67:ab:27:4d:26:73:05:8a:ee:7e:25:e4:e2: 14:f2:d0:7c:84:cf:b3:ee:95:d1:22:cf:85:9a:f0:48:e3:59: 16:14:00:45:f8:5e:cb:80:81:21:7f:80:29:93:e2:66:3d:02: c5:6f:e9:82:6a:2b:30:31:49:01:d1:0f:91:64:76:6c:ae:6b: 39:ff:f2:75:c8:b9:d5:36:03:f5:ee:7d:79:ac:4d:6c:0a:90: a1:b2:57:0f:11:36:3b:54:8d:06:73:ff:c8:a8:90:b6:fd:d9: b0:2e:84:42:2a:1e:57:a0:f9:98:42:6d:8e:14:c5:42:1c:82: 59:78:4f:82:75:aa:3e:72:e7:08:b6:43:3b:2d:5b:8a:a5:8f: 7f:7a:78:78:e9:dc:57:32:f6:e3:4e:bf:00:c1:f9:7e:d2:22: c6:73:c4:6e:e6:75:79:5f:10:b8:88:9d:9b:04:7f:ff:3b:32: a3:94:9c:ec:26:c9:a0:40:34:41:15:f3:ba:d7:0b:1f:f0:e2: 18:18:14:53:c3:3f:4f:2a:6f:a6:59:a8:92:de:5a:6c:3f:fb: 79:34:5d:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EDVoTF8tJPmMT5ScO7M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTI1MDllNGYyYTczMGUxNjk5MzdkNDA4MzNiYjg5M2Vl N2I5OGMwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjVhZmQ0ZGM1Y2Q1ZWM2ZjM2OGM0YWE3Yzg4MjNiZjFlZWQyMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHJr+RrgsGwTgWib0hXxZShEibei jF3u9ZwqumFnbvFFFl7dAEi6pUrHesFvrmXWLOo6pws0taaseN+0XarWtNK4gBh5 KVwVBsKSb2uz1J5ATtUeQaIOC3zFrIhjk+41bC85d4IXBJusJ9Z/hCp24Mfe97Oo zfUpUdA11WcCXi9o6ZcMh4q58DPIPMnIKaVP7wAqWTrhfLjihLIYZpgxGTzJ76bT TIe43h0UMYAbnOu02F1BXAejnYGz/cVlIsaqEecrfnmTeA1OlveXvFCL9Ssg0xmH 1v8xYBO9/RFlFivXQghAAEx9Sc435e1424l28fxaUaiTHZ6E0y3cu/tYUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIta/U3FzV7G82jEqnyII78e7SFHMB8GA1UdIwQY MBaAFBoSUJ5PKnMOFpk31Agzu4k+57mMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt NDE5NmIwZWFjZDI3LzEvaTFyOVRjWE5Yc2J6YU1TcWZJZ2p2eDd0SVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3 LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUzIAwQA wgCOMA0GCSqGSIb3DQEBCwUAA4IBAQBFXoztUZ4ACJ4qAVx9y+U0iB8L/7rX4NwF 9VfKW301zfAenVCQ8dr2Y2erJ00mcwWK7n4l5OIU8tB8hM+z7pXRIs+FmvBI41kW FABF+F7LgIEhf4Apk+JmPQLFb+mCaiswMUkB0Q+RZHZsrms5//J1yLnVNgP17n15 rE1sCpChslcPETY7VI0Gc//IqJC2/dmwLoRCKh5XoPmYQm2OFMVCHIJZeE+Cdao+ cucItkM7LVuKpY9/enh46dxXMvbjTr8Awfl+0iLGc8Ru5nV5XxC4iJ2bBH//OzKj lJzsJsmgQDRBFfO61wsf8OIYGBRTwz9PKm+mWaiS3lpsP/t5NF2u -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:30 2026 by rpki-client