This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/1uDiO66z4_GJhppKD5iOYZne4xo.roa File: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (raw, json) Hash identifier: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0= Subject key identifier: D6:E0:E2:3B:AE:B3:E3:F1:89:86:9A:4A:0F:98:8E:61:99:DE:E3:1A Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Certificate serial: 019B7F848CCB1E4E0332A9B70A0C19169BC0 Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/1uDiO66z4_GJhppKD5iOYZne4xo.roa Signing time: Fri 02 Jan 2026 16:22:31 +0000 ROA not before: Fri 02 Jan 2026 16:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50448 IP address blocks: 91.219.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8c:cb:1e:4e:03:32:a9:b7:0a:0c:19:16:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc Validity Not Before: Jan 2 16:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6e0e23baeb3e3f189869a4a0f988e6199dee31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:c5:50:07:83:b9:56:c7:35:d9:da:36:ab: e5:8b:0c:b1:eb:c9:20:78:b5:1b:b8:49:95:2a:af: 90:e4:e2:5d:32:68:c5:71:22:2c:46:cd:53:59:b7: 38:80:f0:56:25:d7:e2:8f:36:3a:f4:c1:78:61:59: 57:aa:65:58:1b:15:c4:f3:2c:2c:bf:f7:7a:0b:ef: 1e:33:0f:91:9e:ff:6a:87:54:17:6a:bc:d5:18:d2: c3:bf:c1:ec:e6:49:a6:29:20:d4:e6:4f:85:a2:df: a0:1b:2f:d7:75:a5:c6:91:cc:f8:42:97:ed:fd:c8: c1:b8:f6:68:da:10:12:d0:6a:e7:a7:5e:fc:7c:5e: dd:64:5f:6c:19:a6:31:a5:bc:6d:28:ca:e2:64:eb: 93:d4:65:74:29:09:6f:63:d7:3f:7f:6c:b6:f3:b8: 23:b9:21:9c:92:b9:72:44:6f:cf:f0:a8:ae:e9:d8: f5:4e:13:11:2d:3c:57:f2:c8:b6:c7:14:1b:3a:54: 36:af:ce:3c:5b:f8:f5:30:d2:ef:91:a7:cd:bd:22: 25:de:49:aa:d9:be:19:4d:68:ac:be:b5:f1:04:31: 1f:3c:43:7a:ea:05:a1:52:12:2c:3f:c8:bb:a1:7a: 64:72:ac:4e:eb:74:e8:21:7a:40:9c:6d:b9:c3:c3: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E0:E2:3B:AE:B3:E3:F1:89:86:9A:4A:0F:98:8E:61:99:DE:E3:1A X509v3 Authority Key Identifier: keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/1uDiO66z4_GJhppKD5iOYZne4xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.24.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:d6:5e:75:57:3b:49:a1:89:d3:d3:f5:17:bf:b1:77:09:62: f3:32:9b:7a:f7:4c:87:ed:e6:28:ba:bd:93:b4:64:28:70:06: 06:94:be:22:b4:ca:2b:6f:78:ac:45:28:8f:34:a3:5c:e8:0b: 6f:97:c1:c4:98:46:83:b4:3f:67:6a:90:9f:b9:56:8a:0d:bc: 39:4a:d4:0d:23:99:d7:27:4e:a5:36:08:95:bb:34:94:cb:73: 1a:94:c9:aa:27:7d:bc:39:45:24:7a:d0:e5:a8:dd:85:c9:b5: ac:84:a1:ea:be:65:10:aa:e1:cf:a5:9b:bc:5c:e3:87:a8:80: c4:e2:d1:04:75:cc:b4:64:18:c0:66:04:4a:b0:c8:8c:9c:06: 0e:5c:df:bd:53:7b:56:5d:18:81:21:cb:6e:3e:ef:f4:c1:09: 70:ea:99:cf:20:a9:1d:fe:a3:76:df:3a:09:f7:a3:96:fe:8a: d4:e9:b4:e1:ff:b8:23:53:e0:8e:64:49:d5:48:fd:1a:e5:00: 78:be:d1:6d:92:88:d5:bf:65:1a:6a:8a:ab:cd:6c:2d:1d:9a: 73:56:c6:a6:47:28:12:77:96:77:f7:79:ea:33:cb:de:2f:32: 51:48:3d:2c:3c:cf:85:87:cb:b5:56:22:bb:91:50:c4:cf:08: 24:3b:c5:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIzLHk4DMqm3CgwZFpvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1 NTQ2Y2MwHhcNMjYwMTAyMTYyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmUwZTIzYmFlYjNlM2YxODk4NjlhNGEwZjk4OGU2MTk5ZGVlMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjDFUAeDuVbHNdnaNqvliwyx68kg eLUbuEmVKq+Q5OJdMmjFcSIsRs1TWbc4gPBWJdfijzY69MF4YVlXqmVYGxXE8yws v/d6C+8eMw+Rnv9qh1QXarzVGNLDv8Hs5kmmKSDU5k+Fot+gGy/XdaXGkcz4Qpft /cjBuPZo2hAS0Grnp178fF7dZF9sGaYxpbxtKMriZOuT1GV0KQlvY9c/f2y287gj uSGckrlyRG/P8Kiu6dj1ThMRLTxX8si2xxQbOlQ2r848W/j1MNLvkafNvSIl3kmq 2b4ZTWisvrXxBDEfPEN66gWhUhIsP8i7oXpkcqxO63ToIXpAnG25w8OcGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbg4juus+PxiYaaSg+YjmGZ3uMaMB8GA1UdIwQY MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt NDRkMWUyNGI3YjI1LzEvMXVEaU82Nno0X0dKaHBwS0Q1aU9ZWm5lNHhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1 LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9sYMA0G CSqGSIb3DQEBCwUAA4IBAQBN1l51VztJoYnT0/UXv7F3CWLzMpt690yH7eYour2T tGQocAYGlL4itMorb3isRSiPNKNc6Atvl8HEmEaDtD9napCfuVaKDbw5StQNI5nX J06lNgiVuzSUy3MalMmqJ328OUUketDlqN2FybWshKHqvmUQquHPpZu8XOOHqIDE 4tEEdcy0ZBjAZgRKsMiMnAYOXN+9U3tWXRiBIctuPu/0wQlw6pnPIKkd/qN23zoJ 96OW/orU6bTh/7gjU+COZEnVSP0a5QB4vtFtkojVv2UaaoqrzWwtHZpzVsamRygS d5Z393nqM8veLzJRSD0sPM+Fh8u1ViK7kVDEzwgkO8VL -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:06 2026 by rpki-client