This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-6pTVhKpU3Sk-lD2DMuErutsZFk.roa File: 1-6pTVhKpU3Sk-lD2DMuErutsZFk.roa (raw, json) Hash identifier: nWZLb1utTjLYpnQeYw9Zd6QKVfsReFbLprb3lkSWIS0= Subject key identifier: FB:AA:53:56:12:A9:53:74:A4:FA:50:F6:0C:CB:84:AE:EB:6C:64:59 Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019B350D68DDB3D135B27244280CBD4C3AFA Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-6pTVhKpU3Sk-lD2DMuErutsZFk.roa Signing time: Fri 19 Dec 2025 05:20:29 +0000 ROA not before: Fri 19 Dec 2025 05:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 91.221.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:0d:68:dd:b3:d1:35:b2:72:44:28:0c:bd:4c:3a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Dec 19 05:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbaa535612a95374a4fa50f60ccb84aeeb6c6459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:88:fd:c7:c3:2c:db:f2:35:cd:2e:24:5a: d0:86:ba:16:a4:64:e3:2d:1b:9e:57:89:c7:1c:a8: 94:eb:cd:8a:6e:7c:93:8a:9e:d4:c4:01:fb:03:b7: aa:a9:7e:5f:61:1f:d6:32:87:45:79:e7:cd:19:8e: 28:57:1e:98:93:e2:9c:2e:f5:5f:f8:b9:a8:71:eb: 44:4d:86:57:85:12:81:83:fa:42:45:0e:8c:dd:7a: cb:ea:3f:6f:4b:88:b2:6a:bf:d0:a1:91:67:e5:f2: 53:f8:3e:1a:7a:6f:60:a7:88:ea:f8:8a:5a:a0:6a: 66:3f:a6:a3:67:c1:29:b8:90:fe:bb:68:cc:a5:37: e0:a4:df:09:bc:3f:a4:47:e0:89:7e:00:9a:d8:7c: b8:36:8a:0c:52:6b:e6:94:2f:7f:cc:d6:d1:27:21: 36:87:b3:3e:c4:a0:ad:01:75:66:61:6c:34:ab:c8: ae:f6:6f:32:38:5f:3b:ab:8b:af:25:93:17:0e:42: 11:d5:df:62:45:d6:0e:86:92:24:ad:3d:77:13:f3: 94:d7:83:e4:33:48:a6:40:90:47:91:ca:5f:1a:90: 4e:ee:34:71:3e:4d:b9:24:6c:7d:aa:bb:84:88:01: ba:02:1b:ee:5f:12:cb:37:98:3c:43:44:11:6b:31: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AA:53:56:12:A9:53:74:A4:FA:50:F6:0C:CB:84:AE:EB:6C:64:59 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-6pTVhKpU3Sk-lD2DMuErutsZFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.117.0/24 Signature Algorithm: sha256WithRSAEncryption 05:a6:a7:a2:20:8e:1b:14:c5:f6:78:9c:59:0b:a0:b1:09:3f: ba:8a:17:7a:ae:58:d9:e1:d1:19:79:94:f0:54:31:f5:d3:40: d2:e7:7a:d8:1b:7f:d1:62:94:a5:a7:24:3e:e6:e7:b8:24:c1: 95:f5:00:64:a0:9f:4a:a6:b9:ac:7a:81:62:73:2d:35:06:be: bb:35:b5:ef:eb:af:b1:1c:c3:76:31:4e:b6:90:37:77:77:c3: c2:7c:1c:a0:8b:6d:ae:0c:b1:39:3c:9e:23:05:c3:8c:c6:76: c7:79:c6:93:12:c7:e7:d8:7e:36:2f:26:29:5d:22:90:27:1a: 01:8a:32:68:43:f0:0b:c4:36:a6:8c:95:1c:c0:38:2c:14:c4: 98:6b:8b:bf:47:20:fa:21:5b:29:ec:70:ed:5e:6b:4e:c2:49: 99:c3:c3:c4:67:cd:67:52:92:b8:48:08:3f:93:44:54:dd:6f: d2:4e:f2:c3:b6:a4:a4:36:37:3c:6f:45:7a:e3:d8:2e:93:70: 64:1c:13:ab:1d:75:3f:ce:d9:a3:69:93:e3:db:d3:56:3f:43: 7c:2d:95:16:1e:ab:7e:15:4e:8e:22:52:c0:a3:87:94:21:f3: 2e:ac:d3:e9:bc:6b:5c:9f:e0:a1:12:3a:1f:a7:29:ca:09:4f: ee:68:a4:6d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZs1DWjds9E1snJEKAy9TDr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjUxMjE5MDUyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmFhNTM1NjEyYTk1Mzc0YTRmYTUwZjYwY2NiODRhZWViNmM2NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9qI/cfDLNvyNc0uJFrQhroWpGTj LRueV4nHHKiU682KbnyTip7UxAH7A7eqqX5fYR/WModFeefNGY4oVx6Yk+KcLvVf +LmocetETYZXhRKBg/pCRQ6M3XrL6j9vS4iyar/QoZFn5fJT+D4aem9gp4jq+Ipa oGpmP6ajZ8EpuJD+u2jMpTfgpN8JvD+kR+CJfgCa2Hy4NooMUmvmlC9/zNbRJyE2 h7M+xKCtAXVmYWw0q8iu9m8yOF87q4uvJZMXDkIR1d9iRdYOhpIkrT13E/OU14Pk M0imQJBHkcpfGpBO7jRxPk25JGx9qruEiAG6AhvuXxLLN5g8Q0QRazFpKwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuqU1YSqVN0pPpQ9gzLhK7rbGRZMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvMS02cFRWaEtwVTNTay1sRDJETXVFcnV0c1pGay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTcvZGI5YmYxLWUwMTktNDVhNC04NjYzLWE2Y2E0NTRkYjJk Ny8xL1kyTzdaWWxmT2xTa3N5U2hESG1zbU9faW9jby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvddTAN BgkqhkiG9w0BAQsFAAOCAQEABaanoiCOGxTF9nicWQugsQk/uooXeq5Y2eHRGXmU 8FQx9dNA0ud62Bt/0WKUpackPubnuCTBlfUAZKCfSqa5rHqBYnMtNQa+uzW17+uv sRzDdjFOtpA3d3fDwnwcoIttrgyxOTyeIwXDjMZ2x3nGkxLH59h+Ni8mKV0ikCca AYoyaEPwC8Q2poyVHMA4LBTEmGuLv0cg+iFbKexw7V5rTsJJmcPDxGfNZ1KSuEgI P5NEVN1v0k7yw7akpDY3PG9FeuPYLpNwZBwTqx11P87Zo2mT49vTVj9DfC2VFh6r fhVOjiJSwKOHlCHzLqzT6bxrXJ/goRI6H6cpyglP7mikbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:35:10 2025 by rpki-client