This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/1M8IbtHxxoLwK6YRo1D_vDNEZk4.roa File: 1M8IbtHxxoLwK6YRo1D_vDNEZk4.roa (raw, json) Hash identifier: 18hDzxZD6W/2Cgc6fR050YsgjzIhOA4O135SZaLSjNQ= Subject key identifier: D4:CF:08:6E:D1:F1:C6:82:F0:2B:A6:11:A3:50:FF:BC:33:44:66:4E Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019BE0A0C7315261D1878EABE4212E9C5DEC Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/1M8IbtHxxoLwK6YRo1D_vDNEZk4.roa Signing time: Wed 21 Jan 2026 12:56:31 +0000 ROA not before: Wed 21 Jan 2026 12:56:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 91.214.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a0:c7:31:52:61:d1:87:8e:ab:e4:21:2e:9c:5d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Jan 21 12:56:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4cf086ed1f1c682f02ba611a350ffbc3344664e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:97:3e:a9:3d:62:aa:5f:ff:5c:27:37:dd: e8:da:31:4e:6c:85:12:2d:c8:4e:37:1d:2d:dd:8e: 19:be:91:98:70:85:2e:16:98:e7:2a:a8:b6:26:04: e9:70:24:01:37:3e:71:db:dd:4a:54:67:5f:c8:2f: c4:3d:c3:c6:a8:8c:ff:6d:16:05:05:6a:f7:d9:1f: 82:9b:2a:1d:6a:22:6f:1f:a6:f4:39:47:5b:2a:04: de:3d:c8:b2:6c:a7:e5:76:17:49:20:43:24:17:0d: 6b:84:fd:6b:15:70:44:68:f4:36:13:4c:3e:ba:e4: 6e:85:6d:7e:18:07:fa:f8:df:93:92:77:f3:79:df: 6b:81:53:0c:c3:a9:cd:a0:26:5f:32:1e:4b:6d:0c: 2d:d8:b1:1e:53:e8:00:a7:96:5e:19:a2:7a:7f:6b: f9:7f:42:46:35:e4:99:d0:f9:93:30:02:3b:14:5a: 80:d4:67:0b:b1:54:5a:ba:74:61:d3:a7:f3:68:15: 5e:62:ef:3e:53:2a:18:7f:e9:70:c3:79:0f:35:f5: 48:e8:e8:26:30:32:5b:8a:45:7e:9e:ec:35:9d:ea: d8:01:eb:d7:e6:82:5f:a2:86:ef:f5:9e:b7:86:ed: 55:d6:5b:d6:3e:74:f4:03:cb:9c:1d:0d:92:d8:77: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:08:6E:D1:F1:C6:82:F0:2B:A6:11:A3:50:FF:BC:33:44:66:4E X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/1M8IbtHxxoLwK6YRo1D_vDNEZk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.78.0/24 Signature Algorithm: sha256WithRSAEncryption 13:c8:bf:d6:17:3b:8c:5d:64:c1:59:46:1a:b4:fd:c5:82:2f: 6e:b5:b4:78:74:9c:70:9c:e7:c2:ee:7e:7e:67:9c:87:b6:a9: 52:23:5b:c4:dd:c3:50:88:26:64:5c:96:60:5d:38:39:a5:cb: 87:cb:17:c0:ff:1d:42:75:2a:ef:18:28:fd:49:21:44:6d:34: ea:8b:a2:a9:1e:9e:dc:48:b0:15:41:1c:3c:b7:12:85:4a:3a: b1:fa:5a:ac:5a:55:f0:e0:2f:86:8e:83:a3:e7:3a:5d:70:61: 99:6e:cd:4f:6e:50:d4:9a:f5:1f:24:c4:c6:2b:68:f3:13:01: 73:d0:69:eb:34:8a:9f:7a:b3:ca:44:f2:25:6e:a6:77:03:5f: 8b:74:74:1d:9e:19:c7:24:88:02:33:e8:d7:fd:dc:7b:ef:f1: e6:51:6e:98:46:e1:fc:af:70:08:9f:09:84:f4:02:fb:cf:3b: 92:68:a2:e2:e3:95:3a:0c:37:06:f8:05:49:b4:97:5e:e1:1d: f8:4c:4e:03:e9:7c:a1:64:2b:fb:65:61:f8:2b:bd:22:8e:c2: 0d:4f:6c:10:f8:82:a4:46:43:47:47:41:11:3c:42:be:87:ca: fa:14:fa:c4:74:b7:bf:a8:4c:aa:e7:8f:be:f7:0d:81:88:53: 76:24:bc:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgoMcxUmHRh46r5CEunF3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMTIxMTI1NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGNmMDg2ZWQxZjFjNjgyZjAyYmE2MTFhMzUwZmZiYzMzNDQ2NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl2XPqk9Yqpf/1wnN93o2jFObIUS LchONx0t3Y4ZvpGYcIUuFpjnKqi2JgTpcCQBNz5x291KVGdfyC/EPcPGqIz/bRYF BWr32R+CmyodaiJvH6b0OUdbKgTePciybKfldhdJIEMkFw1rhP1rFXBEaPQ2E0w+ uuRuhW1+GAf6+N+Tknfzed9rgVMMw6nNoCZfMh5LbQwt2LEeU+gAp5ZeGaJ6f2v5 f0JGNeSZ0PmTMAI7FFqA1GcLsVRaunRh06fzaBVeYu8+UyoYf+lww3kPNfVI6Ogm MDJbikV+nuw1nerYAevX5oJfoobv9Z63hu1V1lvWPnT0A8ucHQ2S2HfWsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTPCG7R8caC8CumEaNQ/7wzRGZOMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvMU04SWJ0SHh4b0x3SzZZUm8xRF92RE5FWms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9ZOMA0G CSqGSIb3DQEBCwUAA4IBAQATyL/WFzuMXWTBWUYatP3Fgi9utbR4dJxwnOfC7n5+ Z5yHtqlSI1vE3cNQiCZkXJZgXTg5pcuHyxfA/x1CdSrvGCj9SSFEbTTqi6KpHp7c SLAVQRw8txKFSjqx+lqsWlXw4C+GjoOj5zpdcGGZbs1PblDUmvUfJMTGK2jzEwFz 0GnrNIqferPKRPIlbqZ3A1+LdHQdnhnHJIgCM+jX/dx77/HmUW6YRuH8r3AInwmE 9AL7zzuSaKLi45U6DDcG+AVJtJde4R34TE4D6XyhZCv7ZWH4K70ijsINT2wQ+IKk RkNHR0ERPEK+h8r6FPrEdLe/qEyq54++9w2BiFN2JLyS -----END CERTIFICATE-----Generated at Sun Jan 25 16:16:45 2026 by rpki-client