This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/1-aNnq3G-3Uph4CDICNHGtMEexzM.roa File: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (raw, json) Hash identifier: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M= Subject key identifier: F9:A3:67:AB:71:BE:DD:4A:61:E0:20:C8:08:D1:C6:B4:C1:1E:C7:33 Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d Certificate serial: 019B7CEDDA7A5AE6A8D9EA438524143A58BB Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/1-aNnq3G-3Uph4CDICNHGtMEexzM.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 91.245.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:da:7a:5a:e6:a8:d9:ea:43:85:24:14:3a:58:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a367ab71bedd4a61e020c808d1c6b4c11ec733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:ee:66:9a:49:60:2b:ed:cf:b9:1d:c3:25: 2a:e3:25:3d:f0:42:67:aa:0d:f1:27:e5:27:83:8c: f4:6c:d3:ee:dd:00:98:91:74:44:99:77:2e:d3:ac: c8:cb:6c:f2:93:9e:0a:8e:48:b6:3b:ab:51:9f:5f: 5d:c8:bf:38:2d:0d:5a:3c:de:a3:cd:40:0f:c5:43: b4:f9:ec:75:d8:91:c5:02:63:df:da:b8:61:da:bb: b5:2c:95:3c:87:16:e0:00:3f:50:32:9e:a9:38:1b: 32:b4:99:54:ab:3f:35:10:c3:79:51:d4:2b:5c:0e: ab:8c:1d:46:d5:77:8d:f5:cf:8c:7f:3c:51:2d:31: 71:7b:62:8d:e7:bb:48:31:03:45:70:2d:f1:43:34: 50:27:38:85:6c:d9:d6:6b:50:1b:99:91:e9:91:14: 2d:27:1c:2f:35:cc:54:68:27:8a:20:88:b8:1d:f5: 81:42:3c:fa:47:e5:40:f4:37:37:52:35:e9:e0:3b: a9:60:98:f6:6f:ba:48:65:13:28:b9:9f:c0:d7:1d: c9:d6:ae:97:28:d6:a4:f5:b4:18:79:4d:a5:e9:27: 49:70:62:2d:27:ab:4d:27:d5:60:87:bd:65:43:75: 79:b0:67:c5:89:8d:49:38:53:92:33:ac:0b:92:e9: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A3:67:AB:71:BE:DD:4A:61:E0:20:C8:08:D1:C6:B4:C1:1E:C7:33 X509v3 Authority Key Identifier: keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/1-aNnq3G-3Uph4CDICNHGtMEexzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.220.0/24 Signature Algorithm: sha256WithRSAEncryption 87:67:78:ce:c7:f9:cd:51:40:37:c0:e2:2c:34:75:64:a3:71: 51:e0:ef:17:91:f2:ae:fd:7f:0e:0f:db:88:42:99:09:2a:e6: f5:e5:b4:8a:4e:6a:9c:b8:6b:ad:ac:73:4c:45:08:d9:09:33: e6:11:e2:2c:de:5f:e8:41:23:c3:b5:6d:19:42:22:be:45:2e: c0:92:f7:23:66:f9:ef:87:39:eb:66:e5:84:8e:22:dd:70:be: 07:ea:7a:4c:1b:9e:a9:9b:e5:2d:e1:d2:00:92:29:44:8a:a7: 36:bb:48:37:46:59:8c:b1:6d:26:4a:e3:a6:18:13:d5:fd:8c: 1a:8f:2b:df:3b:01:83:23:a7:81:32:80:4a:2a:13:6d:d4:05: 11:3b:4e:0f:18:4e:cc:70:45:54:82:f1:7c:06:42:10:91:76: 48:41:f6:aa:4d:f3:dd:6b:1a:b0:9a:dc:90:eb:51:11:38:f2: 29:1b:34:50:39:1b:7b:c0:0e:d4:6c:08:b3:0b:aa:42:0c:fe: 76:58:c5:c7:bb:4b:3c:e6:f3:38:83:e4:f1:f3:4e:f4:e3:ce: bd:27:70:5e:ab:63:ad:f1:fd:23:57:53:f5:1d:f9:e9:e3:89: ae:34:46:97:4b:d1:b5:66:90:63:ac:2d:1f:b5:a2:c4:33:4f: 8b:4d:c6:47 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87dp6Wuao2epDhSQUOli7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4 MzYzNmQwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWEzNjdhYjcxYmVkZDRhNjFlMDIwYzgwOGQxYzZiNGMxMWVjNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNnuZppJYCvtz7kdwyUq4yU98EJn qg3xJ+Ung4z0bNPu3QCYkXREmXcu06zIy2zyk54Kjki2O6tRn19dyL84LQ1aPN6j zUAPxUO0+ex12JHFAmPf2rhh2ru1LJU8hxbgAD9QMp6pOBsytJlUqz81EMN5UdQr XA6rjB1G1XeN9c+MfzxRLTFxe2KN57tIMQNFcC3xQzRQJziFbNnWa1AbmZHpkRQt JxwvNcxUaCeKIIi4HfWBQjz6R+VA9Dc3UjXp4DupYJj2b7pIZRMouZ/A1x3J1q6X KNak9bQYeU2l6SdJcGItJ6tNJ9Vgh71lQ3V5sGfFiY1JOFOSM6wLkumZIwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmjZ6txvt1KYeAgyAjRxrTBHsczMB8GA1UdIwQY MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt NjVhNDZjOGU0MWU5LzEvMS1hTm5xM0ctM1VwaDRDRElDTkhHdE1FZXh6TS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTUvZTEwNmMzLTBiMWYtNDAxMC04NmYxLTY1YTQ2YzhlNDFl OS8xL1BRU0RVNGMzUlQ0dlZfLTFkSm5Ea2k2RFkyMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFv13DAN BgkqhkiG9w0BAQsFAAOCAQEAh2d4zsf5zVFAN8DiLDR1ZKNxUeDvF5Hyrv1/Dg/b iEKZCSrm9eW0ik5qnLhrraxzTEUI2Qkz5hHiLN5f6EEjw7VtGUIivkUuwJL3I2b5 74c562blhI4i3XC+B+p6TBueqZvlLeHSAJIpRIqnNrtIN0ZZjLFtJkrjphgT1f2M Go8r3zsBgyOngTKASioTbdQFETtODxhOzHBFVILxfAZCEJF2SEH2qk3z3WsasJrc kOtRETjyKRs0UDkbe8AO1GwIswuqQgz+dljFx7tLPObzOIPk8fNO9OPOvSdwXqtj rfH9I1dT9R356eOJrjRGl0vRtWaQY6wtH7WixDNPi03GRw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:17 2026 by rpki-client