This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/c1j_Ntxt0vF2XxXakym9pzmqT8U.roa File: c1j_Ntxt0vF2XxXakym9pzmqT8U.roa (raw, json) Hash identifier: NtJ20wkny+6L1WgOtbTMTtrN9ryJMWog9peCwYFE2oU= Subject key identifier: 73:58:FF:36:DC:6D:D2:F1:76:5F:15:DA:93:29:BD:A7:39:AA:4F:C5 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805BAC5DC33E90F58FEE4CB914162E Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/c1j_Ntxt0vF2XxXakym9pzmqT8U.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 91.234.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5b:ac:5d:c3:3e:90:f5:8f:ee:4c:b9:14:16:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7358ff36dc6dd2f1765f15da9329bda739aa4fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:35:39:1b:f6:57:3b:bb:74:7b:9b:f6:61: b7:49:b3:ca:b8:d6:c8:dc:c9:7b:8b:5a:c9:c3:8f: 01:93:dc:9b:b8:82:51:cc:b9:58:78:16:7d:c2:5e: 73:32:18:7c:66:3e:2f:67:ed:e0:68:60:db:ad:6a: f8:b6:59:89:0a:f4:f2:11:97:ab:9a:84:f1:69:fb: b2:18:41:88:53:8c:a2:e1:39:4c:dd:f6:a5:f4:5c: 24:27:92:2d:df:41:00:50:7b:27:76:16:ae:ae:2c: 6a:57:4e:96:b9:1c:c8:41:dd:f1:1d:4e:93:88:31: 07:08:29:3c:ee:fc:77:4d:bd:2f:cf:ee:c1:0c:ac: b8:9c:c0:c1:88:60:b3:0c:4d:af:a5:ff:10:b3:88: 60:b0:7b:6c:e1:5a:4f:30:03:aa:c8:c4:23:7f:7f: de:87:79:1c:3b:87:53:87:25:8d:91:92:2d:8c:da: cd:bc:7e:96:3a:04:80:4f:58:73:98:be:b1:11:32: 83:63:38:80:fa:cc:52:ff:61:50:50:db:9a:02:86: 35:31:9b:c1:4e:bc:99:de:6d:8b:e5:2c:58:e9:f3: 15:4b:92:da:80:74:ea:18:f9:3d:5b:0e:50:58:5b: 1e:ff:ef:c2:0c:4a:9e:65:c2:3c:12:88:7b:1a:da: cb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:FF:36:DC:6D:D2:F1:76:5F:15:DA:93:29:BD:A7:39:AA:4F:C5 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/c1j_Ntxt0vF2XxXakym9pzmqT8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.254.0/24 Signature Algorithm: sha256WithRSAEncryption 92:f7:18:96:3d:4f:01:f1:b0:1e:ee:d6:48:b0:71:53:45:f4: 6b:e3:d5:7c:1b:41:a7:3a:92:ca:42:39:d8:06:d5:5f:96:81: 39:e1:ef:6a:98:f2:79:4a:dc:18:8a:06:03:a6:b3:12:07:cc: 19:74:4e:77:fa:ea:21:54:7a:13:c3:da:89:2c:00:cd:62:18: b4:c8:83:68:26:a4:42:20:f4:e8:6c:ee:b2:7a:90:55:41:21: 3f:81:97:9a:12:12:c1:e0:97:96:22:d5:18:2f:0f:58:dd:7f: 53:56:40:a5:ba:26:b9:1a:df:99:bd:5e:f9:e9:f1:79:06:09: 82:7a:32:92:97:62:a2:5c:78:71:ec:8c:74:6d:f0:03:a4:08: ff:5b:9c:b3:57:36:fb:88:e7:5c:16:0d:cc:98:95:a7:51:05: cc:9b:e8:9c:30:63:34:45:3b:63:12:38:90:6a:ee:fa:92:6c: 76:c7:94:10:47:bd:ba:20:b7:93:76:f5:a0:9d:55:b9:98:aa: 9c:1e:71:d6:40:aa:62:6f:4c:5d:b2:86:58:29:a5:2c:54:1d: 7d:f0:ec:5a:cd:d9:15:84:03:1c:eb:0c:1c:4a:cb:12:9e:96: 58:2a:91:09:32:99:5e:09:7b:bb:0b:4e:8e:2e:94:9a:f8:62: 64:c5:82:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFusXcM+kPWP7ky5FBYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzU4ZmYzNmRjNmRkMmYxNzY1ZjE1ZGE5MzI5YmRhNzM5YWE0ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5o1ORv2Vzu7dHub9mG3SbPKuNbI 3Ml7i1rJw48Bk9ybuIJRzLlYeBZ9wl5zMhh8Zj4vZ+3gaGDbrWr4tlmJCvTyEZer moTxafuyGEGIU4yi4TlM3fal9FwkJ5It30EAUHsndhaurixqV06WuRzIQd3xHU6T iDEHCCk87vx3Tb0vz+7BDKy4nMDBiGCzDE2vpf8Qs4hgsHts4VpPMAOqyMQjf3/e h3kcO4dThyWNkZItjNrNvH6WOgSAT1hzmL6xETKDYziA+sxS/2FQUNuaAoY1MZvB TryZ3m2L5SxY6fMVS5LagHTqGPk9Ww5QWFse/+/CDEqeZcI8Eoh7GtrLIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHNY/zbcbdLxdl8V2pMpvac5qk/FMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvYzFqX050eHQwdkYyWHhYYWt5bTlwem1xVDhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+r+MA0G CSqGSIb3DQEBCwUAA4IBAQCS9xiWPU8B8bAe7tZIsHFTRfRr49V8G0GnOpLKQjnY BtVfloE54e9qmPJ5StwYigYDprMSB8wZdE53+uohVHoTw9qJLADNYhi0yINoJqRC IPTobO6yepBVQSE/gZeaEhLB4JeWItUYLw9Y3X9TVkCluia5Gt+ZvV756fF5BgmC ejKSl2KiXHhx7Ix0bfADpAj/W5yzVzb7iOdcFg3MmJWnUQXMm+icMGM0RTtjEjiQ au76kmx2x5QQR726ILeTdvWgnVW5mKqcHnHWQKpib0xdsoZYKaUsVB198OxazdkV hAMc6wwcSssSnpZYKpEJMpleCXu7C06OLpSa+GJkxYJG -----END CERTIFICATE-----Generated at Sat Jan 10 03:56:10 2026 by rpki-client