This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D1EnaHTj-AJNUSG4LTsC1UQ4qk8.roa File: D1EnaHTj-AJNUSG4LTsC1UQ4qk8.roa (raw, json) Hash identifier: WC0GFesLWZ4czPu/IpF6t8u9F9QhVLHf9b3CwH0ZjjQ= Subject key identifier: 0F:51:27:68:74:E3:F8:02:4D:51:21:B8:2D:3B:02:D5:44:38:AA:4F Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019B7A5AAFBE7B1CF7A121CD2F9033A8BFA7 Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D1EnaHTj-AJNUSG4LTsC1UQ4qk8.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50098 IP address blocks: 91.192.80.0/24 maxlen: 24 195.211.220.0/24 maxlen: 24 195.211.221.0/24 maxlen: 24 195.211.222.0/24 maxlen: 24 195.211.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:af:be:7b:1c:f7:a1:21:cd:2f:90:33:a8:bf:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f51276874e3f8024d5121b82d3b02d54438aa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:45:24:04:7c:08:cb:c7:d4:7f:d1:b9:96: 79:6c:48:df:a0:c4:8e:c8:5d:fb:cf:d4:ef:fa:83: e6:d6:3a:af:12:8f:5d:41:5c:22:6f:60:68:19:5a: a2:63:ae:96:75:a7:ba:2a:b7:22:5f:13:24:e9:a4: ee:24:95:6f:a4:74:38:4b:ea:ea:49:87:b7:97:80: 49:b1:74:63:89:ca:f7:9e:b6:8a:62:15:0d:94:ec: 09:5e:6b:7e:f6:3a:2b:03:9a:1a:b3:88:55:d8:71: 83:b5:37:1e:38:c4:22:15:95:ee:e7:c9:6a:39:d0: 98:4c:82:27:10:ea:eb:93:d0:29:3e:2e:6e:0f:f4: 3b:f1:44:a7:0d:d7:1a:ae:0d:8d:03:84:21:a1:65: 50:7b:50:16:5d:0f:2d:38:b5:a2:57:a4:b2:ea:e8: 56:29:90:e4:ff:0f:d3:24:9d:8b:9e:9e:b2:cb:af: 8c:0b:a5:bd:56:d3:9c:b8:15:3d:e5:63:71:2f:b9: a7:44:52:6d:a1:7c:2b:33:a2:52:12:ac:9d:ba:7e: 98:35:5a:69:e8:b9:57:b1:f7:6e:ac:fd:9a:ee:01: 9e:bf:62:71:26:8f:4e:53:a4:a9:cc:b9:83:32:3b: 65:cd:b6:86:7d:b7:ae:b5:3f:29:c1:d3:82:4d:4e: d5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:27:68:74:E3:F8:02:4D:51:21:B8:2D:3B:02:D5:44:38:AA:4F X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D1EnaHTj-AJNUSG4LTsC1UQ4qk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.80.0/24 195.211.220.0/22 Signature Algorithm: sha256WithRSAEncryption ce:20:21:56:84:f9:f6:66:95:42:fe:48:20:ad:e3:4f:c3:3e: 18:45:e0:05:ea:a2:8a:91:13:3f:31:f4:17:69:e5:55:6b:1f: 69:f3:87:e2:93:1b:c5:2e:f7:96:7c:77:54:d4:50:ef:4b:16: 92:d0:6b:87:de:56:f2:42:ec:ad:05:81:ed:37:0b:d2:21:af: 55:05:77:3b:a3:3e:d0:37:f0:66:c0:95:49:db:ca:3b:7f:f5: 1d:fc:13:7b:90:99:d4:41:40:5a:af:15:1e:92:f6:ff:4a:6e: 33:2c:24:6d:a1:8c:64:9b:c6:10:87:24:bd:25:c1:b8:6a:63: e2:fd:c0:08:fb:15:b2:43:87:f5:d0:fe:a9:fb:17:19:33:bb: 99:d7:40:c1:47:6f:e9:00:0d:39:28:fb:01:18:6e:09:f9:df: 01:4a:f7:80:d8:c5:12:4e:10:c4:e6:47:40:7e:e8:63:80:c4: 93:b2:ba:27:98:00:c0:fa:56:49:61:8b:bc:28:82:49:14:ae: 8f:2e:20:cc:85:56:e0:6c:14:38:c6:ee:e1:bf:07:3d:4a:25: 67:76:14:ec:d0:88:41:56:04:d1:09:42:48:de:29:b4:68:c3: 60:03:1a:20:41:22:e2:90:ac:c3:31:6b:ab:27:68:4d:76:27: 2e:5b:21:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wq++exz3oSHNL5AzqL+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjUxMjc2ODc0ZTNmODAyNGQ1MTIxYjgyZDNiMDJkNTQ0MzhhYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYRFJAR8CMvH1H/RuZZ5bEjfoMSO yF37z9Tv+oPm1jqvEo9dQVwib2BoGVqiY66Wdae6KrciXxMk6aTuJJVvpHQ4S+rq SYe3l4BJsXRjicr3nraKYhUNlOwJXmt+9jorA5oas4hV2HGDtTceOMQiFZXu58lq OdCYTIInEOrrk9ApPi5uD/Q78USnDdcarg2NA4QhoWVQe1AWXQ8tOLWiV6Sy6uhW KZDk/w/TJJ2Lnp6yy6+MC6W9VtOcuBU95WNxL7mnRFJtoXwrM6JSEqydun6YNVpp 6LlXsfdurP2a7gGev2JxJo9OU6SpzLmDMjtlzbaGfbeutT8pwdOCTU7VNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA9RJ2h04/gCTVEhuC07AtVEOKpPMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvRDFFbmFIVGotQUpOVVNHNExUc0MxVVE0cWs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8BQAwQC w9PcMA0GCSqGSIb3DQEBCwUAA4IBAQDOICFWhPn2ZpVC/kggreNPwz4YReAF6qKK kRM/MfQXaeVVax9p84fikxvFLveWfHdU1FDvSxaS0GuH3lbyQuytBYHtNwvSIa9V BXc7oz7QN/BmwJVJ28o7f/Ud/BN7kJnUQUBarxUekvb/Sm4zLCRtoYxkm8YQhyS9 JcG4amPi/cAI+xWyQ4f10P6p+xcZM7uZ10DBR2/pAA05KPsBGG4J+d8BSveA2MUS ThDE5kdAfuhjgMSTsronmADA+lZJYYu8KIJJFK6PLiDMhVbgbBQ4xu7hvwc9SiVn dhTs0IhBVgTRCUJI3im0aMNgAxogQSLikKzDMWurJ2hNdicuWyEN -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:14 2026 by rpki-client