This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/1-L1nuEVviWFgiIBgYUbXcn7cU88.roa File: 1-L1nuEVviWFgiIBgYUbXcn7cU88.roa (raw, json) Hash identifier: xNFaKqgVfS5ot3fyXEaMEA/Kf4UyeT0PWW6D7lED2Ns= Subject key identifier: F8:BD:67:B8:45:6F:89:61:60:88:80:60:61:46:D7:72:7E:DC:53:CF Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a Certificate serial: 019B11F8FFA59E3A1ED10E63D8FCFCAA5C6B Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/1-L1nuEVviWFgiIBgYUbXcn7cU88.roa Signing time: Fri 12 Dec 2025 09:51:29 +0000 ROA not before: Fri 12 Dec 2025 09:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41960 IP address blocks: 91.202.210.0/24 maxlen: 24 151.248.16.0/22 maxlen: 24 185.112.73.0/24 maxlen: 24 212.18.105.0/24 maxlen: 24 2a05:ccc0::/29 maxlen: 48 2a10:c080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:f8:ff:a5:9e:3a:1e:d1:0e:63:d8:fc:fc:aa:5c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a Validity Not Before: Dec 12 09:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8bd67b8456f8961608880606146d7727edc53cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:80:75:a0:41:80:76:4a:df:cb:db:b9:62: b2:3c:f9:ca:58:8c:12:5c:c9:c7:d1:71:84:e7:cf: 30:82:70:fe:b3:32:94:41:1a:14:7b:69:90:6e:cf: a4:2d:1c:6d:f8:b3:af:05:89:f2:c3:50:ef:4e:8e: d4:c3:7b:7a:05:a6:ed:46:60:00:bb:8c:bc:37:e7: 67:e3:68:0f:c1:72:8c:73:5b:c9:82:9d:f3:da:c7: c2:05:11:27:4f:7b:fc:f2:c0:e8:ff:47:7f:a0:de: 48:50:cf:0c:68:89:0e:0b:50:fd:da:bb:60:b9:e9: 4b:92:5b:10:26:fe:64:87:77:ad:4d:1a:2b:e5:e9: e9:b8:13:07:0a:b8:6a:9d:23:55:06:f5:37:a3:b8: 32:b7:4c:b5:04:8d:b9:24:ff:f3:97:1e:40:76:c7: 92:d4:30:41:57:f0:62:7c:00:ec:b5:3c:20:d0:a7: 6a:54:c4:8d:e6:32:30:7e:37:54:77:6e:f7:3d:25: 0a:55:a3:f1:80:2c:d8:cb:b3:79:69:3e:dd:4a:3d: b0:76:ce:1b:36:93:ac:dd:a6:ab:d9:1a:40:50:1e: f6:21:48:03:18:e8:bd:3c:12:ee:94:bc:91:de:5b: 39:23:62:f5:0f:48:f5:ee:45:37:41:cf:14:7e:30: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BD:67:B8:45:6F:89:61:60:88:80:60:61:46:D7:72:7E:DC:53:CF X509v3 Authority Key Identifier: keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/1-L1nuEVviWFgiIBgYUbXcn7cU88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.210.0/24 151.248.16.0/22 185.112.73.0/24 212.18.105.0/24 IPv6: 2a05:ccc0::/29 2a10:c080::/29 Signature Algorithm: sha256WithRSAEncryption 1f:17:6e:38:0f:fe:b4:bd:e3:1e:f4:6c:c7:ff:3a:f9:87:0b: 1f:8e:11:3f:ae:a8:f0:8e:68:b8:c4:52:7f:c6:7b:f7:3d:1f: 87:0a:af:62:26:e7:cd:e1:8d:d0:f5:51:94:0b:04:b0:af:ae: 5b:4c:4f:77:7f:3c:41:fb:d8:4f:b7:c7:c8:2a:e5:cb:59:ad: 8d:7e:33:fe:e5:fa:18:2e:c2:42:1b:24:fe:8d:7c:59:d1:b8: 93:46:74:57:75:b9:07:9b:4f:19:9f:5d:20:72:4c:35:27:16: 1d:8a:b0:c6:2c:cd:3b:c0:7e:03:c9:a8:4f:08:bd:8b:a6:71: f4:8a:7c:1a:15:fe:51:7d:15:6f:46:d7:3d:ff:e9:bc:dd:93: 7f:c0:95:2d:ef:7e:9d:7c:0b:e5:aa:c9:24:80:cc:05:ad:83: 56:58:ba:82:c0:c6:c3:42:39:83:9f:0c:50:5d:32:62:69:7a: df:3f:52:e7:39:55:a2:33:be:95:5d:d9:9a:77:f6:a8:da:c7: 44:f5:73:f4:38:f1:af:be:44:6c:e2:8a:3a:b8:96:9a:62:fa: 53:fb:2e:70:6a:e6:6f:d6:90:76:1e:7a:6d:c1:fb:36:cf:a5: 3d:0d:ff:e8:46:ab:6e:48:f2:47:f5:2b:63:86:82:13:f9:a6: c0:13:a1:b8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZsR+P+lnjoe0Q5j2Pz8qlxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2 Mjg5N2EwHhcNMjUxMjEyMDk1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGJkNjdiODQ1NmY4OTYxNjA4ODgwNjA2MTQ2ZDc3MjdlZGM1M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeeAdaBBgHZK38vbuWKyPPnKWIwS XMnH0XGE588wgnD+szKUQRoUe2mQbs+kLRxt+LOvBYnyw1DvTo7Uw3t6BabtRmAA u4y8N+dn42gPwXKMc1vJgp3z2sfCBREnT3v88sDo/0d/oN5IUM8MaIkOC1D92rtg uelLklsQJv5kh3etTRor5enpuBMHCrhqnSNVBvU3o7gyt0y1BI25JP/zlx5AdseS 1DBBV/BifADstTwg0KdqVMSN5jIwfjdUd273PSUKVaPxgCzYy7N5aT7dSj2wds4b NpOs3aar2RpAUB72IUgDGOi9PBLulLyR3ls5I2L1D0j17kU3Qc8UfjD6JQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPi9Z7hFb4lhYIiAYGFG13J+3FPPMB8GA1UdIwQY MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt YmViYTc1NGFkZDU3LzEvMS1MMW51RVZ2aVdGZ2lJQmdZVWJYY243Y1U4OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTMvYjcwNDkwLWZjYWUtNDhlYy05MjQ5LWJlYmE3NTRhZGQ1 Ny8xL19tMUtOalFNUGEySG9Ea2gwUGlQOWxGaWlYby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBHBggrBgEFBQcBBwEB/wQ4MDYwHgQCAAEwGAMEAFvK0gME Apf4EAMEALlwSQMEANQSaTAUBAIAAjAOAwUDKgXMwAMFAyoQwIAwDQYJKoZIhvcN AQELBQADggEBAB8XbjgP/rS94x70bMf/OvmHCx+OET+uqPCOaLjEUn/Ge/c9H4cK r2Im583hjdD1UZQLBLCvrltMT3d/PEH72E+3x8gq5ctZrY1+M/7l+hguwkIbJP6N fFnRuJNGdFd1uQebTxmfXSByTDUnFh2KsMYszTvAfgPJqE8IvYumcfSKfBoV/lF9 FW9G1z3/6bzdk3/AlS3vfp18C+WqySSAzAWtg1ZYuoLAxsNCOYOfDFBdMmJpet8/ Uuc5VaIzvpVd2Zp39qjax0T1c/Q48a++RGziijq4lppi+lP7LnBq5m/WkHYeem3B +zbPpT0N/+hGq25I8kf1K2OGghP5psATobg= -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:06 2025 by rpki-client