This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa File: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (raw, json) Hash identifier: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM= Subject key identifier: F8:40:B8:83:5C:FB:4C:A9:8A:0C:2E:81:30:92:95:81:C5:F9:AE:A3 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB090C66622B4C107892C1DD9380C2 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41418 IP address blocks: 91.235.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:09:0c:66:62:2b:4c:10:78:92:c1:dd:93:80:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f840b8835cfb4ca98a0c2e8130929581c5f9aea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:b5:08:c7:f8:ea:5b:45:d5:92:0b:9a:66: 7e:78:72:aa:76:b2:e5:18:63:03:7a:47:c9:20:83: 4a:f7:bb:aa:5b:b4:39:ee:4c:66:7d:bd:44:f1:a7: e5:fc:00:a0:59:5f:77:e3:e1:64:c8:6b:76:d2:09: 4d:62:78:f8:bc:b5:66:97:89:32:d2:37:4f:90:cb: d5:14:c4:94:95:93:9d:7d:9b:a5:6b:bb:30:7c:54: 1e:fe:62:50:f6:15:be:2d:a8:ff:b4:1b:64:34:8b: 2b:7e:29:c5:24:27:fe:55:17:87:1b:64:d7:95:1e: 81:e0:77:39:55:c8:d0:e5:3d:7e:9f:1f:ce:58:3b: a6:c1:ab:e6:90:97:dc:8d:ed:5f:93:d6:6a:43:59: 80:9d:e0:24:82:f8:59:62:32:f3:f9:88:b9:1b:3f: a5:91:62:d7:5a:d3:95:8c:46:39:1e:cd:46:aa:93: c1:95:9a:75:69:5e:86:e8:1c:b6:4b:1a:be:59:55: 3d:f1:9b:5a:00:a2:f9:d3:82:32:4c:71:03:5d:6a: 74:8c:68:80:06:47:e1:0f:6f:8b:24:90:6e:d6:89: 6e:30:5b:9c:f6:5a:e6:8b:38:7c:2a:d6:af:ed:44: dc:75:10:dc:4b:2d:3f:a3:a9:9b:5a:fa:ed:91:42: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:40:B8:83:5C:FB:4C:A9:8A:0C:2E:81:30:92:95:81:C5:F9:AE:A3 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.48.0/22 Signature Algorithm: sha256WithRSAEncryption 38:34:30:32:60:da:44:99:22:87:08:21:35:09:70:a1:4e:ef: d3:2a:50:6d:70:4d:6f:1f:87:74:6a:80:6a:a2:4d:20:07:59: 3a:ef:68:b5:bf:59:cd:3f:8d:42:4c:14:e9:d2:fa:68:6e:f3: 49:28:46:49:54:05:cf:31:34:b8:e8:c6:f6:c7:5f:94:95:4e: 5e:b0:a6:f6:8f:a5:f8:d4:73:35:62:df:89:73:c8:e8:d7:0b: dd:c5:3a:ae:13:ff:93:a2:a9:c5:38:8d:b7:42:f0:c5:35:ee: b4:25:c6:37:27:40:93:86:a3:57:1f:0b:dc:3e:55:d7:82:f2: 9e:5f:65:17:b8:df:af:da:1a:10:50:62:cc:3e:44:80:7c:3f: fa:f7:a8:3e:44:5e:1f:ce:13:2e:e4:a0:cf:61:98:cf:28:34: fe:eb:78:bb:d9:ad:40:2e:fc:90:73:6c:52:63:11:7a:5a:88: 7c:d9:f2:01:c3:2e:25:38:4d:c0:ef:9e:9d:0c:5e:33:5d:f7: ae:c9:f8:5b:47:d1:c6:d0:20:74:1a:ce:3f:80:e2:a6:e2:d6: 37:35:02:a1:7f:14:7a:ef:15:6e:42:e1:74:03:ae:a7:0d:84: 9c:43:20:5e:80:bb:89:30:df:61:81:01:d3:eb:f3:2d:28:05: 49:63:e1:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26wkMZmIrTBB4ksHdk4DCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODQwYjg4MzVjZmI0Y2E5OGEwYzJlODEzMDkyOTU4MWM1ZjlhZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApza1CMf46ltF1ZILmmZ+eHKqdrLl GGMDekfJIINK97uqW7Q57kxmfb1E8afl/ACgWV934+FkyGt20glNYnj4vLVml4ky 0jdPkMvVFMSUlZOdfZula7swfFQe/mJQ9hW+Laj/tBtkNIsrfinFJCf+VReHG2TX lR6B4Hc5VcjQ5T1+nx/OWDumwavmkJfcje1fk9ZqQ1mAneAkgvhZYjLz+Yi5Gz+l kWLXWtOVjEY5Hs1GqpPBlZp1aV6G6By2Sxq+WVU98ZtaAKL504IyTHEDXWp0jGiA BkfhD2+LJJBu1oluMFuc9lrmizh8Ktav7UTcdRDcSy0/o6mbWvrtkUIPFQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhAuINc+0ypigwugTCSlYHF+a6jMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMS1FQzRnMXo3VEttS0RDNkJNSktWZ2NYNXJxTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzgvYmZmNGFhLTRmMDctNDEyOS04YWQ2LWM3OTE0YWI2NDI3 My8xLzFIWDdDVFRQYWxqY3p2RVFoMTItWGo2TGEzVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvrMDAN BgkqhkiG9w0BAQsFAAOCAQEAODQwMmDaRJkihwghNQlwoU7v0ypQbXBNbx+HdGqA aqJNIAdZOu9otb9ZzT+NQkwU6dL6aG7zSShGSVQFzzE0uOjG9sdflJVOXrCm9o+l +NRzNWLfiXPI6NcL3cU6rhP/k6KpxTiNt0LwxTXutCXGNydAk4ajVx8L3D5V14Ly nl9lF7jfr9oaEFBizD5EgHw/+veoPkReH84TLuSgz2GYzyg0/ut4u9mtQC78kHNs UmMRelqIfNnyAcMuJThNwO+enQxeM133rsn4W0fRxtAgdBrOP4DipuLWNzUCoX8U eu8VbkLhdAOupw2EnEMgXoC7iTDfYYEB0+vzLSgFSWPhTg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:37 2026 by rpki-client