This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa File: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (raw, json) Hash identifier: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo= Subject key identifier: F8:DA:63:F6:E1:F6:94:D5:98:A6:56:BB:31:3A:A0:AB:0B:7C:DE:24 Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Certificate serial: 019B7F80D02E95AA8592BFBCA636852E93B3 Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa Signing time: Fri 02 Jan 2026 16:18:26 +0000 ROA not before: Fri 02 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 91.138.64.0/18 maxlen: 18 185.206.244.0/22 maxlen: 22 2a0a:d1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d0:2e:95:aa:85:92:bf:bc:a6:36:85:2e:93:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Validity Not Before: Jan 2 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8da63f6e1f694d598a656bb313aa0ab0b7cde24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:00:e3:e7:0b:53:c8:26:b6:a1:8c:a0:9b: ff:2a:28:9a:4d:61:7a:fd:01:79:4f:7e:1d:dd:0e: 9e:46:80:2e:a1:93:df:90:b0:42:be:08:89:60:61: 8d:6f:4f:4c:9c:21:34:06:6c:9f:dd:aa:de:2e:b6: 56:9c:e1:5f:ed:5f:15:ea:0b:29:3e:95:ef:a1:62: 20:cb:cc:bd:28:80:27:12:0d:0b:39:37:60:64:a1: 7f:96:db:09:8e:be:ad:c2:10:90:1a:d7:f5:07:fb: 4e:99:06:2e:f2:7e:45:59:5e:33:c9:99:b4:19:6f: 76:7e:9e:43:91:c4:17:72:40:08:36:8f:7a:8f:0f: fd:bf:a1:36:8f:b0:6a:b0:12:e6:55:ad:23:63:16: 9f:40:21:bd:5e:d6:71:84:e4:53:fd:7a:3b:05:16: 4f:a7:ba:cc:b3:7e:63:58:0c:5d:62:e5:6c:5a:f0: 0e:6e:4b:ba:0d:4f:19:35:bd:2f:24:34:d0:96:00: 61:0a:d0:47:89:67:0c:af:17:28:e9:52:a7:9f:e6: 87:90:91:90:39:f2:fd:21:df:ce:d9:ad:f5:8b:ec: 91:15:39:e9:d9:64:19:a6:e3:45:e1:52:75:f8:d9: fa:76:1e:38:2a:cf:ec:ac:72:5d:30:95:79:86:95: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:63:F6:E1:F6:94:D5:98:A6:56:BB:31:3A:A0:AB:0B:7C:DE:24 X509v3 Authority Key Identifier: keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.138.64.0/18 185.206.244.0/22 IPv6: 2a0a:d1c0::/29 Signature Algorithm: sha256WithRSAEncryption 03:98:13:de:3f:d3:40:74:74:30:47:ea:6b:5c:71:6d:f6:20: 6e:a3:c3:31:ee:3f:27:aa:9f:33:60:d1:c2:43:ba:92:9f:24: 72:10:66:91:61:cb:d6:30:19:65:27:4c:a4:70:59:46:89:eb: 07:41:61:d4:01:53:69:d5:4b:7a:92:c8:23:26:5b:ce:ff:53: 57:6a:40:f7:79:52:bf:56:df:f4:c9:e0:84:20:58:ad:ff:9c: d6:94:18:dd:79:28:0f:77:e9:65:e1:34:c0:f2:d8:97:a2:b2: 98:df:d1:13:90:1b:ef:6a:77:99:2d:33:8f:69:ef:59:5e:9d: 98:f3:8e:11:35:ff:f4:77:64:89:7a:97:78:93:1e:5f:2f:3f: d6:4d:ff:23:b9:8f:2f:a7:7f:fe:30:31:7c:e8:a3:14:08:f0: 18:83:17:4f:a1:d5:6a:8c:14:38:a0:60:5d:34:8b:e6:03:4c: 95:0f:39:9a:72:d1:52:65:4b:24:e5:15:f2:42:44:b2:e9:ce: 61:c0:77:76:43:1c:60:c6:4e:c8:ac:8b:ea:7c:85:83:23:98: f2:b3:11:0e:74:ca:09:29:01:2e:e3:59:ff:ee:f4:46:75:55: c2:79:de:8c:f6:ba:13:36:ac:37:b7:29:81:a5:58:7f:ae:f8: 82:4a:80:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/gNAulaqFkr+8pjaFLpOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDI3YzUzNTg3M2U0YzRlYWQ4MDQyZDY3YmJmM2YxZjQ3 YjI2YjEwHhcNMjYwMTAyMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGRhNjNmNmUxZjY5NGQ1OThhNjU2YmIzMTNhYTBhYjBiN2NkZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBIA4+cLU8gmtqGMoJv/KiiaTWF6 /QF5T34d3Q6eRoAuoZPfkLBCvgiJYGGNb09MnCE0Bmyf3areLrZWnOFf7V8V6gsp PpXvoWIgy8y9KIAnEg0LOTdgZKF/ltsJjr6twhCQGtf1B/tOmQYu8n5FWV4zyZm0 GW92fp5DkcQXckAINo96jw/9v6E2j7BqsBLmVa0jYxafQCG9XtZxhORT/Xo7BRZP p7rMs35jWAxdYuVsWvAObku6DU8ZNb0vJDTQlgBhCtBHiWcMrxco6VKnn+aHkJGQ OfL9Id/O2a31i+yRFTnp2WQZpuNF4VJ1+Nn6dh44Ks/srHJdMJV5hpWs3wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPjaY/bh9pTVmKZWuzE6oKsLfN4kMB8GA1UdIwQY MBaAFGNCfFNYc+TE6tgELWe78/H0eyaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEt YjI5OTdiYzYxNDc0LzEvMS1OcGo5dUgybE5XWXBsYTdNVHFncXd0ODNpUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTAvNjEwODNjLTRiM2QtNDZkOC04MmFhLWIyOTk3YmM2MTQ3 NC8xL1kwSjhVMWh6NU1UcTJBUXRaN3Z6OGZSN0pyRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBluKQAME ArnO9DANBAIAAjAHAwUDKgrRwDANBgkqhkiG9w0BAQsFAAOCAQEAA5gT3j/TQHR0 MEfqa1xxbfYgbqPDMe4/J6qfM2DRwkO6kp8kchBmkWHL1jAZZSdMpHBZRonrB0Fh 1AFTadVLepLIIyZbzv9TV2pA93lSv1bf9MnghCBYrf+c1pQY3XkoD3fpZeE0wPLY l6KymN/RE5Ab72p3mS0zj2nvWV6dmPOOETX/9HdkiXqXeJMeXy8/1k3/I7mPL6d/ /jAxfOijFAjwGIMXT6HVaowUOKBgXTSL5gNMlQ85mnLRUmVLJOUV8kJEsunOYcB3 dkMcYMZOyKyL6nyFgyOY8rMRDnTKCSkBLuNZ/+70RnVVwnnejPa6EzasN7cpgaVY f674gkqAMA== -----END CERTIFICATE-----Generated at Tue Jan 13 01:18:18 2026 by rpki-client