This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/1Irv8E4u7UykS63xv-ROJgQRbvY.roa File: 1Irv8E4u7UykS63xv-ROJgQRbvY.roa (raw, json) Hash identifier: ONra4D/SwQN2JXNsh0SIHWZc56JHdpcbYmoF15rsgHw= Subject key identifier: D4:8A:EF:F0:4E:2E:ED:4C:A4:4B:AD:F1:BF:E4:4E:26:04:11:6E:F6 Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779 Certificate serial: 019B7AC7B3893523988AB9C8D366BBEB9D43 Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/1Irv8E4u7UykS63xv-ROJgQRbvY.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3246 IP address blocks: 91.142.112.0/20 maxlen: 20 185.143.148.0/22 maxlen: 22 2a00:17b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b3:89:35:23:98:8a:b9:c8:d3:66:bb:eb:9d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d48aeff04e2eed4ca44badf1bfe44e2604116ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:e8:6d:3e:38:2b:6e:04:36:73:52:a7:10: 72:09:aa:3e:a9:18:a1:ea:9d:8f:fe:a9:06:dd:5e: 43:39:86:18:eb:2a:fd:fd:2e:3c:46:a1:f7:ce:2b: d4:2b:fc:42:90:17:0a:8e:bf:9d:5c:4a:7b:32:b3: 0d:24:14:ba:af:52:4e:90:87:48:79:bc:46:05:e9: 45:4d:46:8d:04:f3:06:a3:54:2c:1d:86:25:ac:9f: d0:a1:32:7f:ef:0a:54:71:b7:59:e4:e2:50:37:de: dc:71:0b:10:5e:2e:bd:c9:ee:35:eb:97:5d:1a:a6: 06:f8:9f:53:88:8f:72:8b:1d:5d:d5:7d:53:3f:d9: 05:97:34:5c:2e:df:f7:97:93:5a:43:6b:2c:26:3b: 90:b3:e9:7c:2a:22:1c:9d:8d:3b:04:a4:53:e5:49: b0:86:fb:37:10:87:79:67:ab:ba:82:16:93:2c:50: b9:85:f9:dd:4d:69:ad:99:e1:a8:1e:c2:42:da:51: 27:d2:a1:88:5a:80:1c:0c:a1:3f:84:2e:d1:2a:86: b2:4b:12:ea:12:0e:ba:fd:2f:bd:c5:5e:74:37:73: 87:6c:91:b7:44:33:93:88:af:4e:17:77:cb:18:2a: b5:0c:73:0e:40:9a:4a:42:62:9a:c8:69:eb:e6:db: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8A:EF:F0:4E:2E:ED:4C:A4:4B:AD:F1:BF:E4:4E:26:04:11:6E:F6 X509v3 Authority Key Identifier: keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/1Irv8E4u7UykS63xv-ROJgQRbvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.112.0/20 185.143.148.0/22 IPv6: 2a00:17b0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:3f:cf:8a:2c:f0:15:0d:a5:7c:c1:93:3d:3e:6d:3e:92:a9: 0b:eb:5a:3f:9b:56:78:20:60:32:69:e2:0e:a5:e9:bb:45:1d: f9:ff:68:65:1a:0e:f9:fe:57:1a:b6:08:f7:1a:33:87:4c:15: e8:5f:82:c8:3b:fe:a0:21:0c:27:c9:ba:84:64:24:73:79:14: e5:30:27:42:3f:a9:0b:06:5f:49:a9:60:3e:96:b6:d4:2a:bd: 9c:bb:e9:c8:c1:ac:db:28:8e:c8:0b:a7:fb:2a:fb:d7:9c:f7: a2:55:96:fd:da:0d:8f:28:6e:35:80:6a:cf:fd:a5:2b:a3:59: 9b:48:a1:3e:44:71:92:8c:65:fc:a0:ba:d7:a8:1f:d7:af:e2: 9b:f6:8b:ae:42:8a:1e:9e:cc:ae:ae:2e:48:04:83:5f:4f:ad: 25:82:b2:99:2d:66:36:a9:c8:c2:59:cb:6b:a1:29:2d:e3:85: 7c:e4:97:93:70:8f:9a:a8:8c:4d:20:f0:e2:2e:ba:54:7c:5a: 1b:02:79:a9:af:fa:a1:cd:54:91:49:6e:19:c3:3c:5c:22:40: be:3b:34:1e:3f:4d:e4:c9:76:98:f2:18:94:fd:7f:9a:33:94: 17:af:d8:7f:95:e3:eb:b5:f2:56:1a:ee:2e:3b:67:84:9e:2b: 4c:a3:c5:07 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x7OJNSOYirnI02a7651DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTMyZThhNmFjNmY2ZWMzNzg2MGVlN2MwN2ViOGRmOTMx NDc3NzkwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDhhZWZmMDRlMmVlZDRjYTQ0YmFkZjFiZmU0NGUyNjA0MTE2ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysjobT44K24ENnNSpxByCao+qRih 6p2P/qkG3V5DOYYY6yr9/S48RqH3zivUK/xCkBcKjr+dXEp7MrMNJBS6r1JOkIdI ebxGBelFTUaNBPMGo1QsHYYlrJ/QoTJ/7wpUcbdZ5OJQN97ccQsQXi69ye4165dd GqYG+J9TiI9yix1d1X1TP9kFlzRcLt/3l5NaQ2ssJjuQs+l8KiIcnY07BKRT5Umw hvs3EId5Z6u6ghaTLFC5hfndTWmtmeGoHsJC2lEn0qGIWoAcDKE/hC7RKoaySxLq Eg66/S+9xV50N3OHbJG3RDOTiK9OF3fLGCq1DHMOQJpKQmKayGnr5tsI5wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNSK7/BOLu1MpEut8b/kTiYEEW72MB8GA1UdIwQY MBaAFOijLopqxvbsN4YO58B+uN+TFHd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEt NGZhNTM3ZGJlMmU5LzEvMUlydjhFNHU3VXlrUzYzeHYtUk9KZ1FSYnZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEtNGZhNTM3ZGJlMmU5 LzEvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEW45wAwQC uY+UMA0EAgACMAcDBQAqABewMA0GCSqGSIb3DQEBCwUAA4IBAQCcP8+KLPAVDaV8 wZM9Pm0+kqkL61o/m1Z4IGAyaeIOpem7RR35/2hlGg75/lcatgj3GjOHTBXoX4LI O/6gIQwnybqEZCRzeRTlMCdCP6kLBl9JqWA+lrbUKr2cu+nIwazbKI7IC6f7KvvX nPeiVZb92g2PKG41gGrP/aUro1mbSKE+RHGSjGX8oLrXqB/Xr+Kb9ouuQooensyu ri5IBINfT60lgrKZLWY2qcjCWctroSkt44V85JeTcI+aqIxNIPDiLrpUfFobAnmp r/qhzVSRSW4ZwzxcIkC+OzQeP03kyXaY8hiU/X+aM5QXr9h/lePrtfJWGu4uO2eE nitMo8UH -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:55 2026 by rpki-client