This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/SN7iUL1ZTDZriT9WldHFs3bgME4.roa File: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (raw, json) Hash identifier: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw= Subject key identifier: 48:DE:E2:50:BD:59:4C:36:6B:89:3F:56:95:D1:C5:B3:76:E0:30:4E Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Certificate serial: 019B7759080FD4048DAE5A9F1E15C1595B44 Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/SN7iUL1ZTDZriT9WldHFs3bgME4.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 86.106.24.0/24 maxlen: 24 91.205.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:0f:d4:04:8d:ae:5a:9f:1e:15:c1:59:5b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48dee250bd594c366b893f5695d1c5b376e0304e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:fb:79:72:31:d4:5c:d1:a6:b9:19:1c:f9: 5b:1b:a9:aa:3f:28:2f:f1:96:dc:bf:15:3a:7b:4b: cd:69:d5:29:4f:57:7a:ca:09:06:af:cc:0d:15:e6: b9:a4:8b:a5:5d:cc:89:c4:d3:a9:f1:f9:f8:0a:38: 45:d4:f1:ec:b8:e8:eb:b2:cd:6a:9f:38:04:1a:50: cf:cb:6c:4b:f7:91:60:c9:06:d2:2f:b3:3e:da:37: 88:89:c9:73:09:9d:84:f1:63:7f:a9:e5:de:4d:e5: 42:2b:a6:a5:61:4d:61:d6:25:b9:79:19:fb:8c:7f: 4d:09:f7:c9:f2:00:4f:81:5b:f1:d8:34:0e:df:4f: 84:38:5d:11:c7:67:48:1f:b6:d4:ee:55:90:b7:a9: cb:5d:99:9e:ad:63:40:1b:09:a7:07:a7:c0:cf:39: 69:a9:c2:25:3b:d4:29:81:e0:eb:22:b9:b9:1f:c1: 17:a1:22:d9:0e:e2:b3:0e:00:7d:97:4c:8f:b8:f2: 3b:92:bf:72:d5:a5:88:5f:8f:95:bf:64:a6:c8:47: 20:9d:a4:b4:58:1a:31:3b:c8:14:34:62:3b:c1:8c: 45:3c:70:3f:e5:41:c8:c1:27:25:69:94:92:2a:fe: 59:4b:94:33:42:eb:9c:1e:6a:0f:a2:32:d0:26:8b: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:E2:50:BD:59:4C:36:6B:89:3F:56:95:D1:C5:B3:76:E0:30:4E X509v3 Authority Key Identifier: keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/SN7iUL1ZTDZriT9WldHFs3bgME4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.24.0/24 91.205.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:64:fa:63:89:2a:08:13:9b:10:aa:29:6e:fc:69:1c:62:56: 44:6f:a2:bb:2b:25:97:c8:20:02:a1:a3:c5:0c:62:94:62:a8: 15:a3:25:30:9a:e2:3d:ba:45:0d:96:ec:9c:4c:82:4d:e4:11: 1a:4a:aa:df:32:ac:71:b4:3b:ce:41:7f:35:72:05:56:ec:92: 0b:b5:46:68:9a:15:01:c5:c9:6a:4a:2e:7d:08:16:f8:f4:81: a4:1a:18:1a:27:bf:50:49:ab:dc:7c:09:53:8f:41:fe:d1:9c: 5b:d4:ea:21:4d:60:b1:bf:37:8e:22:ee:90:1e:37:d3:66:25: 4f:4d:7d:af:2b:ec:2d:05:c7:33:7c:f2:53:60:f4:76:7a:f4: 40:9a:73:95:32:93:c1:e2:f3:2d:93:63:04:94:1a:b6:52:f5: 07:84:57:88:43:52:cf:8b:2f:75:ac:52:ce:91:4e:ab:d1:8b: d4:68:b4:d5:13:43:f9:e4:e2:8c:60:fa:59:76:bc:8b:b0:a1: 23:fd:12:d9:66:07:92:70:78:43:ed:5d:b8:e0:2b:e2:ee:1a: bf:13:0a:88:62:f0:61:4c:4c:20:80:8d:3b:5f:6e:0c:44:ea: 1d:fd:3c:59:6f:9c:54:09:13:47:0b:2f:69:50:96:86:66:74: 3a:44:54:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WQgP1ASNrlqfHhXBWVtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm MDIxOTYwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGRlZTI1MGJkNTk0YzM2NmI4OTNmNTY5NWQxYzViMzc2ZTAzMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjr7eXIx1FzRprkZHPlbG6mqPygv 8ZbcvxU6e0vNadUpT1d6ygkGr8wNFea5pIulXcyJxNOp8fn4CjhF1PHsuOjrss1q nzgEGlDPy2xL95FgyQbSL7M+2jeIiclzCZ2E8WN/qeXeTeVCK6alYU1h1iW5eRn7 jH9NCffJ8gBPgVvx2DQO30+EOF0Rx2dIH7bU7lWQt6nLXZmerWNAGwmnB6fAzzlp qcIlO9QpgeDrIrm5H8EXoSLZDuKzDgB9l0yPuPI7kr9y1aWIX4+Vv2SmyEcgnaS0 WBoxO8gUNGI7wYxFPHA/5UHIwSclaZSSKv5ZS5QzQuucHmoPojLQJotwfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEje4lC9WUw2a4k/VpXRxbN24DBOMB8GA1UdIwQY MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt NTIwMWEyM2Q3YTQ5LzEvU043aVVMMVpURFpyaVQ5V2xkSEZzM2JnTUU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5 LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmoYAwQA W83dMA0GCSqGSIb3DQEBCwUAA4IBAQAaZPpjiSoIE5sQqilu/GkcYlZEb6K7KyWX yCACoaPFDGKUYqgVoyUwmuI9ukUNluycTIJN5BEaSqrfMqxxtDvOQX81cgVW7JIL tUZomhUBxclqSi59CBb49IGkGhgaJ79QSavcfAlTj0H+0Zxb1OohTWCxvzeOIu6Q HjfTZiVPTX2vK+wtBcczfPJTYPR2evRAmnOVMpPB4vMtk2MElBq2UvUHhFeIQ1LP iy91rFLOkU6r0YvUaLTVE0P55OKMYPpZdryLsKEj/RLZZgeScHhD7V244Cvi7hq/ EwqIYvBhTEwggI07X24MROod/TxZb5xUCRNHCy9pUJaGZnQ6RFSY -----END CERTIFICATE-----Generated at Fri Jan 23 02:01:31 2026 by rpki-client