This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/1_qKx7XK-VslkQaQcY5wLcf-kY4.roa File: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (raw, json) Hash identifier: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8= Subject key identifier: D7:FA:8A:C7:B5:CA:F9:5B:25:91:06:90:71:8E:70:2D:C7:FE:91:8E Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89 Certificate serial: 019B7DCACCCE500CAA4BF8B781CE466BD055 Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/1_qKx7XK-VslkQaQcY5wLcf-kY4.roa Signing time: Fri 02 Jan 2026 08:20:01 +0000 ROA not before: Fri 02 Jan 2026 08:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24819 IP address blocks: 91.216.7.0/24 maxlen: 24 193.111.104.0/22 maxlen: 22 2001:67c:1778::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cc:ce:50:0c:aa:4b:f8:b7:81:ce:46:6b:d0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7fa8ac7b5caf95b25910690718e702dc7fe918e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:85:5a:66:a0:3e:03:d1:ca:99:03:a8:28: 15:32:02:b6:9e:01:7e:45:39:be:34:80:71:56:69: 23:a5:cf:f9:74:d0:e2:d8:91:5a:d5:3a:31:e1:fe: a5:b1:16:5d:6a:e2:78:8f:c4:8f:e0:fb:a6:ad:d6: 77:a2:82:21:6b:d4:be:eb:2f:1e:3b:6d:c2:24:44: 8a:6e:a7:8f:9b:dc:ef:fb:d1:c2:dd:87:c7:ae:fa: b6:0a:de:b8:7e:15:57:66:04:dd:a1:9f:ad:1a:3b: 96:a8:05:2e:3c:c5:c1:45:58:b0:d5:07:c7:42:88: 25:60:f4:13:5f:62:66:7a:b5:34:82:5a:58:dc:e0: cf:df:40:c7:21:a0:e9:96:13:2c:d9:d1:fe:e7:59: 30:87:9b:10:12:65:7b:4a:e7:d6:f8:e4:2c:43:d5: 12:8b:9d:ca:96:a2:89:a0:0a:1b:1b:e5:b7:7f:69: bf:65:73:0c:2d:07:5a:8f:fc:d4:09:2f:7a:ca:e0: 94:f0:51:6f:41:e8:84:7d:88:70:79:1b:84:1a:d3: bb:be:dc:bb:82:7b:1c:a3:8f:87:64:5d:13:78:71: 68:46:46:2f:1e:c3:0b:24:3a:82:93:5a:e5:bb:9c: bf:c2:a3:a1:e1:c0:b5:7a:56:22:da:27:c7:2d:d8: 43:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FA:8A:C7:B5:CA:F9:5B:25:91:06:90:71:8E:70:2D:C7:FE:91:8E X509v3 Authority Key Identifier: keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/1_qKx7XK-VslkQaQcY5wLcf-kY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.7.0/24 193.111.104.0/22 IPv6: 2001:67c:1778::/48 Signature Algorithm: sha256WithRSAEncryption 9d:b4:82:bb:3c:47:d9:37:d8:ac:1e:d9:3a:7e:7d:52:8a:13: 43:4d:73:71:50:12:f6:38:9d:a3:ac:b2:a1:01:f0:3d:1f:b2: e3:d3:22:e3:7e:cc:00:47:89:e2:26:6c:46:10:66:85:f4:ca: 7d:df:54:23:14:1b:58:b2:27:9d:e9:cc:92:ad:4a:77:17:b0: 93:6d:ee:4f:af:54:fd:9b:2b:86:d8:74:5f:75:7e:30:6c:1c: 80:0d:b0:a1:7f:70:92:7e:80:c7:b9:8c:e2:e4:3f:b6:bf:1e: f1:dc:b2:7e:43:e8:b6:87:8d:9b:84:16:c7:b7:cd:ab:5d:97: 2c:74:bb:ef:17:26:92:eb:ae:fa:c3:c3:45:d4:9e:08:de:fc: a2:d7:cc:86:39:63:79:b1:1a:57:d9:6e:e5:53:d4:2e:1d:d2: 47:da:ef:dd:49:c4:db:d1:46:c1:42:6b:d3:1d:f5:e7:c9:04: dc:d4:23:b5:f9:97:34:5e:60:a3:cb:fd:0f:ad:f0:69:02:d4: 6a:86:d5:e1:91:b7:bc:8a:ea:5b:a9:71:8f:22:51:84:5e:c9: 51:16:cf:53:bd:26:4a:bf:f3:64:10:e3:b7:06:c7:af:05:26: 64:c3:14:8b:76:d2:e9:54:75:42:ec:c3:29:bb:8c:b7:cf:d5: ab:9f:5a:38 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9yszOUAyqS/i3gc5Ga9BVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1 MTVmODkwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2ZhOGFjN2I1Y2FmOTViMjU5MTA2OTA3MThlNzAyZGM3ZmU5MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbaFWmagPgPRypkDqCgVMgK2ngF+ RTm+NIBxVmkjpc/5dNDi2JFa1Tox4f6lsRZdauJ4j8SP4PumrdZ3ooIha9S+6y8e O23CJESKbqePm9zv+9HC3YfHrvq2Ct64fhVXZgTdoZ+tGjuWqAUuPMXBRViw1QfH QoglYPQTX2JmerU0glpY3ODP30DHIaDplhMs2dH+51kwh5sQEmV7SufW+OQsQ9US i53KlqKJoAobG+W3f2m/ZXMMLQdaj/zUCS96yuCU8FFvQeiEfYhweRuEGtO7vty7 gnsco4+HZF0TeHFoRkYvHsMLJDqCk1rlu5y/wqOh4cC1elYi2ifHLdhDmwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNf6ise1yvlbJZEGkHGOcC3H/pGOMB8GA1UdIwQY MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt MGJkMDk1ZGE3OGVmLzEvMV9xS3g3WEstVnNsa1FhUWNZNXdMY2Yta1k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9gHAwQC wW9oMA8EAgACMAkDBwAgAQZ8F3gwDQYJKoZIhvcNAQELBQADggEBAJ20grs8R9k3 2Kwe2Tp+fVKKE0NNc3FQEvY4naOssqEB8D0fsuPTIuN+zABHieImbEYQZoX0yn3f VCMUG1iyJ53pzJKtSncXsJNt7k+vVP2bK4bYdF91fjBsHIANsKF/cJJ+gMe5jOLk P7a/HvHcsn5D6LaHjZuEFse3zatdlyx0u+8XJpLrrvrDw0XUngje/KLXzIY5Y3mx GlfZbuVT1C4d0kfa791JxNvRRsFCa9Md9efJBNzUI7X5lzReYKPL/Q+t8GkC1GqG 1eGRt7yK6lupcY8iUYReyVEWz1O9Jkq/82QQ47cGx68FJmTDFIt20ulUdULswym7 jLfP1aufWjg= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:25 2026 by rpki-client