This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/fT61awwkD08cT0v6ICZahtW3HFI.roa File: fT61awwkD08cT0v6ICZahtW3HFI.roa (raw, json) Hash identifier: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE= Subject key identifier: 7D:3E:B5:6B:0C:24:0F:4F:1C:4F:4B:FA:20:26:5A:86:D5:B7:1C:52 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B7E388D007A249148B7BD01EF495F46DE Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/fT61awwkD08cT0v6ICZahtW3HFI.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204804 IP address blocks: 91.231.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8d:00:7a:24:91:48:b7:bd:01:ef:49:5f:46:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d3eb56b0c240f4f1c4f4bfa20265a86d5b71c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:ff:6b:8d:61:63:b9:ee:71:97:36:50:42: e0:d1:4c:a4:2a:bc:ff:91:dc:fa:66:6e:d2:7c:14: 37:8b:52:e4:69:dd:7a:e5:b8:85:33:31:7a:a1:a5: 93:a5:d5:ae:ad:6c:b7:57:6d:23:20:4d:86:0d:b8: d9:7e:45:d0:91:f2:11:4f:7e:c2:da:2a:e0:5e:c3: e5:c4:b6:eb:2d:ad:76:b8:83:aa:2e:96:66:22:d5: 13:1b:81:39:e0:8a:e2:78:52:fd:78:a9:40:70:a6: 78:4a:c3:46:43:b3:b9:06:5e:b1:9e:f3:c2:0d:23: a6:71:72:3a:66:27:37:8b:eb:22:e6:d0:2e:ab:fe: 6f:9b:12:2d:0b:85:b9:57:3d:87:8f:e3:64:5e:c8: 50:20:1e:fb:a2:25:11:14:55:a1:e6:72:c9:72:69: 16:19:d2:57:bf:7b:fa:f1:08:e8:27:60:05:7b:c1: 91:1d:b6:5a:f9:2c:40:55:de:32:18:63:cc:0a:d4: 58:0a:8c:9d:87:6e:42:94:76:4b:b2:de:ee:91:c2: 82:6a:59:64:da:65:59:c2:9f:28:07:85:c2:bb:72: eb:fc:4b:27:9b:fe:70:af:bc:6b:04:0a:69:65:a6: 55:dc:00:fe:94:6f:ff:2e:9e:8f:4c:3d:a2:17:c2: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3E:B5:6B:0C:24:0F:4F:1C:4F:4B:FA:20:26:5A:86:D5:B7:1C:52 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/fT61awwkD08cT0v6ICZahtW3HFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.66.0/24 Signature Algorithm: sha256WithRSAEncryption 26:7f:90:34:db:f9:4b:07:d0:b8:e4:bd:59:ec:4b:ef:7d:e6: f9:4b:59:4f:0a:5b:ab:33:0e:c9:3a:c1:b2:10:7b:cb:78:3e: b3:00:a8:ff:aa:d2:8d:28:01:13:b4:a1:35:05:65:4e:72:e0: df:10:f8:7f:9a:e1:fc:b3:5f:3b:28:11:05:7e:07:67:8b:f6: c0:61:d2:2f:81:14:e9:7b:1a:48:a7:ac:87:76:47:6a:1a:49: 06:67:4a:81:ec:3d:f3:7e:6e:bf:8a:11:c4:4e:0a:c7:5a:bd: 00:60:5f:b2:03:cb:6c:e3:6f:28:ba:92:bf:5d:3a:b4:6e:84: d0:00:6f:fd:60:4b:88:6e:60:d5:48:63:5a:7a:11:03:43:33: 25:39:af:35:81:ff:b0:d6:74:58:98:63:7a:22:7b:73:eb:5c: 7f:f3:91:5d:9d:ae:21:eb:6f:5c:84:bf:97:3d:5c:af:ea:23: 33:56:7f:7f:ae:19:e0:77:e5:7b:39:08:b3:5e:be:39:cf:a1: 9f:83:c9:0a:ce:35:d1:f7:d7:cd:66:d7:e3:b1:34:18:b4:7c: a2:86:fb:65:33:c1:18:ee:62:eb:1c:30:80:b8:8a:0b:c6:9f: ee:45:3d:ba:4f:c4:cd:f2:91:d4:c9:6f:f0:8f:69:b8:18:dd: b9:2f:26:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI0AeiSRSLe9Ae9JX0beMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDNlYjU2YjBjMjQwZjRmMWM0ZjRiZmEyMDI2NWE4NmQ1YjcxYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJn/a41hY7nucZc2UELg0UykKrz/ kdz6Zm7SfBQ3i1Lkad165biFMzF6oaWTpdWurWy3V20jIE2GDbjZfkXQkfIRT37C 2irgXsPlxLbrLa12uIOqLpZmItUTG4E54IrieFL9eKlAcKZ4SsNGQ7O5Bl6xnvPC DSOmcXI6Zic3i+si5tAuq/5vmxItC4W5Vz2Hj+NkXshQIB77oiURFFWh5nLJcmkW GdJXv3v68QjoJ2AFe8GRHbZa+SxAVd4yGGPMCtRYCoydh25ClHZLst7ukcKCallk 2mVZwp8oB4XCu3Lr/Esnm/5wr7xrBAppZaZV3AD+lG//Lp6PTD2iF8JQJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0+tWsMJA9PHE9L+iAmWobVtxxSMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvZlQ2MWF3d2tEMDhjVDB2NklDWmFodFczSEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+dCMA0G CSqGSIb3DQEBCwUAA4IBAQAmf5A02/lLB9C45L1Z7Evvfeb5S1lPClurMw7JOsGy EHvLeD6zAKj/qtKNKAETtKE1BWVOcuDfEPh/muH8s187KBEFfgdni/bAYdIvgRTp expIp6yHdkdqGkkGZ0qB7D3zfm6/ihHETgrHWr0AYF+yA8ts428oupK/XTq0boTQ AG/9YEuIbmDVSGNaehEDQzMlOa81gf+w1nRYmGN6Intz61x/85Fdna4h629chL+X PVyv6iMzVn9/rhngd+V7OQizXr45z6Gfg8kKzjXR99fNZtfjsTQYtHyihvtlM8EY 7mLrHDCAuIoLxp/uRT26T8TN8pHUyW/wj2m4GN25LyaD -----END CERTIFICATE-----Generated at Mon Jan 12 16:07:29 2026 by rpki-client