This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa File: 1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa (raw, json) Hash identifier: HTFIVkm2pfbCpKdVoGWwpPhxe9WRjwNhw3rsgiBHLbE= Subject key identifier: F8:D9:57:A5:2F:2A:3A:6C:C9:43:1B:E1:DD:57:A6:BF:A1:9F:6A:51 Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636 Certificate serial: 019B7DCA61BFE2879F79AA7AEF222F04745E Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200168 IP address blocks: 185.35.212.0/22 maxlen: 24 195.254.172.0/23 maxlen: 23 2a04:6540::/32 maxlen: 32 2a04:6543::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:61:bf:e2:87:9f:79:aa:7a:ef:22:2f:04:74:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8d957a52f2a3a6cc9431be1dd57a6bfa19f6a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:0f:5e:23:96:57:c0:18:e8:d1:58:c8:ce: b2:bb:1c:1f:47:ea:5b:10:48:50:01:a9:95:da:6a: c3:9f:f8:bc:65:5a:4d:93:9a:4d:4a:7a:9e:69:ba: 6f:76:aa:b1:7d:1b:47:48:0a:f8:f4:f8:72:6e:97: 3d:cb:a4:2c:ce:e0:a2:40:ce:b7:d0:3a:57:be:cf: 26:0b:2e:7c:b7:7f:fd:90:9f:41:d1:e7:23:e5:b4: 54:4d:ae:89:6c:95:80:80:3b:c7:4a:cb:df:18:91: c6:ce:0e:bf:61:05:8c:ae:08:9b:7f:e6:4a:20:67: 58:81:1d:16:59:d5:37:4c:b8:d7:80:70:97:5c:b5: a6:8d:24:79:79:98:28:a5:fa:1f:5c:9e:05:9f:00: be:4b:fb:2b:9c:58:e8:39:10:b3:6a:17:35:46:27: e2:1a:aa:4c:70:23:62:75:6a:19:fd:f6:c0:be:df: 90:23:a0:ea:fa:ff:6f:4f:d3:f8:dc:cf:a6:a9:cb: a2:a0:b3:26:20:ff:89:fb:cb:47:d9:f7:d7:d7:ad: ec:1e:43:04:70:4b:25:4c:f0:b4:7a:1c:44:15:a9: f2:09:d9:bf:94:81:9a:41:05:de:51:b3:38:bf:83: f1:cb:35:4c:54:e9:36:04:12:82:4b:4e:fc:19:16: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D9:57:A5:2F:2A:3A:6C:C9:43:1B:E1:DD:57:A6:BF:A1:9F:6A:51 X509v3 Authority Key Identifier: keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.35.212.0/22 195.254.172.0/23 IPv6: 2a04:6540::/32 2a04:6543::/32 Signature Algorithm: sha256WithRSAEncryption 7f:07:ad:09:63:c6:52:8d:5f:80:f4:2a:28:9e:db:99:b2:73: d7:0e:2d:9d:1b:03:ff:5f:8a:39:2c:4b:a9:94:21:45:a1:a0: 7a:4f:ab:4f:d1:26:db:e1:2b:81:98:f3:aa:de:6d:9d:25:3f: 9b:2f:51:c3:40:9e:d5:97:b2:6b:fa:c0:72:59:27:70:ab:b9: 14:14:5a:27:08:15:da:54:b8:ae:96:f9:5b:e9:17:62:d7:5d: 85:83:af:4d:06:d3:f7:bf:d3:55:ea:00:97:cf:11:27:05:16: 5f:b5:72:c8:1e:f6:9f:c0:d1:5b:fb:62:dd:96:e4:aa:48:db: ac:b2:94:14:2b:84:b8:00:97:0e:81:d6:de:d4:42:98:2a:6b: 29:be:dc:0e:12:3d:e4:e6:d1:da:d2:bb:31:21:78:4b:21:b5: 0e:61:26:89:bd:f5:bb:3b:57:7c:97:9f:d6:f3:70:47:22:5f: 79:fd:eb:92:a0:7a:8b:02:42:77:10:ab:7d:ea:af:3b:35:a1: bc:bb:6e:55:1c:6d:9a:d4:36:25:63:02:55:4b:f0:d9:2c:c3: 17:55:7e:bb:57:43:8c:5c:73:fd:c3:87:a6:dd:6b:95:b3:ac: 2c:62:f0:60:90:a1:81:a9:cd:3e:46:a1:eb:8b:05:19:0d:3b: 2b:35:cc:09 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9ymG/4oefeap67yIvBHReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl ZTQ2MzYwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQ5NTdhNTJmMmEzYTZjYzk0MzFiZTFkZDU3YTZiZmExOWY2YTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGMPXiOWV8AY6NFYyM6yuxwfR+pb EEhQAamV2mrDn/i8ZVpNk5pNSnqeabpvdqqxfRtHSAr49Phybpc9y6QszuCiQM63 0DpXvs8mCy58t3/9kJ9B0ecj5bRUTa6JbJWAgDvHSsvfGJHGzg6/YQWMrgibf+ZK IGdYgR0WWdU3TLjXgHCXXLWmjSR5eZgopfofXJ4FnwC+S/srnFjoORCzahc1Rifi GqpMcCNidWoZ/fbAvt+QI6Dq+v9vT9P43M+mqcuioLMmIP+J+8tH2ffX163sHkME cEslTPC0ehxEFanyCdm/lIGaQQXeUbM4v4PxyzVMVOk2BBKCS078GRaJ/QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFPjZV6UvKjpsyUMb4d1Xpr+hn2pRMB8GA1UdIwQY MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt Mjc1MjQyYWE2Nzc1LzEvMS1ObFhwUzhxT216SlF4dmgzVmVtdjZHZmFsRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjIvOTFlODgyLWJhOGEtNDRjNS05YjBkLTI3NTI0MmFhNjc3 NS8xL3E1SFZKaVZocWQxeFBmbzVGajNzaEpfdVJqWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowEgQCAAEwDAMEArkj1AME AcP+rDAUBAIAAjAOAwUAKgRlQAMFACoEZUMwDQYJKoZIhvcNAQELBQADggEBAH8H rQljxlKNX4D0Kiie25myc9cOLZ0bA/9fijksS6mUIUWhoHpPq0/RJtvhK4GY86re bZ0lP5svUcNAntWXsmv6wHJZJ3CruRQUWicIFdpUuK6W+VvpF2LXXYWDr00G0/e/ 01XqAJfPEScFFl+1csge9p/A0Vv7Yt2W5KpI26yylBQrhLgAlw6B1t7UQpgqaym+ 3A4SPeTm0drSuzEheEshtQ5hJom99bs7V3yXn9bzcEciX3n965KgeosCQncQq33q rzs1oby7blUcbZrUNiVjAlVL8NkswxdVfrtXQ4xcc/3Dh6bda5WzrCxi8GCQoYGp zT5GoeuLBRkNOys1zAk= -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:19 2026 by rpki-client