This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa File: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (raw, json) Hash identifier: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4= Subject key identifier: D0:2B:C8:5E:81:EC:BC:8B:35:07:F6:0E:17:8B:83:87:D2:69:4B:11 Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c Certificate serial: 019B7E387C9FEC767267741D0C5BD37BE05C Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201446 IP address blocks: 91.126.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7c:9f:ec:76:72:67:74:1d:0c:5b:d3:7b:e0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d02bc85e81ecbc8b3507f60e178b8387d2694b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:7c:a5:c0:dc:0b:23:00:c3:7d:2f:5c:97: 64:4d:c0:59:bb:37:07:e4:fe:82:3e:02:08:1d:4f: fc:9f:e1:65:15:3f:10:13:c9:fa:76:bf:4b:c0:25: 53:9d:e2:6c:76:ce:43:80:42:47:a4:46:89:b1:94: 44:39:2a:b9:db:80:ae:ec:ea:d9:c4:9e:4b:21:33: 55:ca:ae:de:73:a0:a4:f3:3c:cc:59:fd:38:ac:0d: 69:0c:3f:90:d3:0d:54:3c:bc:89:86:ad:5d:93:12: 47:0b:c9:21:44:d4:a0:a1:3e:81:12:b4:5e:31:7c: 08:53:fe:b2:c3:48:4b:68:67:eb:13:6e:7b:f5:79: 3f:d8:00:46:c4:1a:6e:67:23:ce:db:4d:c6:d4:61: 3f:f3:d8:8b:72:09:96:f3:9f:9f:e7:3b:2d:34:4a: 87:57:c4:c8:77:f7:58:43:0c:e3:3e:2f:0a:3e:6f: 1e:2e:81:dd:8d:11:9c:f2:8d:03:5c:08:24:07:54: c4:c8:d6:38:38:05:6a:69:4d:76:38:fb:53:de:23: 2a:fb:7b:6f:ff:f0:9e:d4:4a:39:35:b2:7c:28:53: 9d:ba:9f:16:64:e8:f6:9a:e6:d9:3e:c9:b0:a4:0f: f5:4e:ff:b3:a3:5b:fc:ca:d1:f5:ce:64:8e:d0:f6: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2B:C8:5E:81:EC:BC:8B:35:07:F6:0E:17:8B:83:87:D2:69:4B:11 X509v3 Authority Key Identifier: keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.126.176.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:0b:1c:66:c6:42:fa:91:95:f0:19:1a:8a:73:da:06:8e:aa: 6b:c3:a4:c5:cc:3c:dd:12:83:34:c7:8d:20:56:c6:8a:42:49: f4:5c:b8:fe:dd:bb:4f:c7:53:21:59:65:63:29:23:c3:ea:89: 3f:c5:5a:ab:ba:96:a4:a8:2b:88:1d:01:85:62:f5:d2:98:6e: f8:97:1d:12:e0:fb:b7:65:97:fe:69:42:b3:2f:8c:6a:50:63: 15:b7:84:ef:9b:51:6e:e8:eb:25:36:65:5c:93:71:76:91:4b: fb:ba:75:a8:0d:89:0e:11:65:7d:6b:26:a1:bd:cd:3f:a0:5d: d7:fc:ab:d7:a7:e4:b0:ba:f6:39:96:cc:53:8d:00:70:50:57: b1:ff:47:84:2d:e1:8d:30:27:37:a2:74:1b:cd:51:1a:34:18: 5f:41:84:79:36:ce:ad:aa:37:28:f7:6d:fd:01:6d:61:77:7a: 21:62:a1:85:e2:ee:0e:ee:e0:6b:24:5c:87:57:87:37:22:80: c5:5e:28:e0:d4:62:fd:ca:08:9b:e3:64:f3:13:7e:c2:b9:26: 9e:dc:3a:8c:f6:3c:df:f7:9c:25:8e:81:1c:dc:53:a6:0b:c5: de:a4:92:05:7b:58:cc:03:90:a6:a8:cb:b2:be:ee:3e:46:e4: ba:6f:23:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHyf7HZyZ3QdDFvTe+BcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1 NGFiMWMwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDJiYzg1ZTgxZWNiYzhiMzUwN2Y2MGUxNzhiODM4N2QyNjk0YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHR8pcDcCyMAw30vXJdkTcBZuzcH 5P6CPgIIHU/8n+FlFT8QE8n6dr9LwCVTneJsds5DgEJHpEaJsZREOSq524Cu7OrZ xJ5LITNVyq7ec6Ck8zzMWf04rA1pDD+Q0w1UPLyJhq1dkxJHC8khRNSgoT6BErRe MXwIU/6yw0hLaGfrE2579Xk/2ABGxBpuZyPO203G1GE/89iLcgmW85+f5zstNEqH V8TId/dYQwzjPi8KPm8eLoHdjRGc8o0DXAgkB1TEyNY4OAVqaU12OPtT3iMq+3tv //Ce1Eo5NbJ8KFOdup8WZOj2mubZPsmwpA/1Tv+zo1v8ytH1zmSO0PZy0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNAryF6B7LyLNQf2DheLg4fSaUsRMB8GA1UdIwQY MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt N2Q0YmIyMzgwNDg3LzEvMEN2SVhvSHN2SXMxQl9ZT0Y0dURoOUpwU3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3 LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW36wMA0G CSqGSIb3DQEBCwUAA4IBAQB9CxxmxkL6kZXwGRqKc9oGjqprw6TFzDzdEoM0x40g VsaKQkn0XLj+3btPx1MhWWVjKSPD6ok/xVqrupakqCuIHQGFYvXSmG74lx0S4Pu3 ZZf+aUKzL4xqUGMVt4Tvm1Fu6OslNmVck3F2kUv7unWoDYkOEWV9ayahvc0/oF3X /KvXp+SwuvY5lsxTjQBwUFex/0eELeGNMCc3onQbzVEaNBhfQYR5Ns6tqjco9239 AW1hd3ohYqGF4u4O7uBrJFyHV4c3IoDFXijg1GL9ygib42TzE37CuSae3DqM9jzf 95wljoEc3FOmC8XepJIFe1jMA5CmqMuyvu4+RuS6byMj -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:56 2026 by rpki-client