This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa File: cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa (raw, json) Hash identifier: MkPveRr894uZyzuwskwU/N/yd8dG5AWBq5BdDGSD2o4= Subject key identifier: 70:94:6D:74:4D:C6:0F:14:72:BE:0F:D8:F5:3C:77:C2:E5:A3:65:F3 Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501 Certificate serial: 019B775885309035C935E8F6B29D16A2F042 Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207307 IP address blocks: 91.205.159.0/24 maxlen: 24 2a05:b380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:85:30:90:35:c9:35:e8:f6:b2:9d:16:a2:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70946d744dc60f1472be0fd8f53c77c2e5a365f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:25:8c:43:cf:9e:ce:bf:24:bc:bc:1b:c9: 74:f1:92:56:73:0a:eb:5b:3b:05:97:38:e9:f5:f8: e7:b9:80:03:de:e0:d5:9e:5f:22:83:f7:2d:dc:b3: 03:62:e4:06:14:a6:7c:b1:e4:f1:be:86:25:c1:cf: 2e:54:88:81:31:f5:e0:cf:9d:91:97:ea:4a:7c:95: af:81:ee:c7:1d:13:de:5d:33:ce:14:92:a6:db:82: 41:e4:7c:e0:06:3b:80:d3:dc:01:36:00:11:fc:fe: d4:ec:13:11:85:6f:04:88:34:9f:67:88:e5:2e:0b: 5f:ef:c4:fa:7b:32:b8:85:c4:05:33:4c:ba:75:ce: 6e:b5:33:b3:0d:9f:fc:19:5b:63:ab:d1:04:c6:2a: f0:68:fe:a5:2d:f9:de:e7:e1:d5:ae:97:98:78:12: df:1f:e3:d8:35:ef:17:0c:cf:2f:f9:75:83:62:48: 71:87:7f:ed:12:1e:db:00:26:f7:88:08:40:b5:3d: 1e:28:74:e9:14:b1:b2:83:2d:b6:04:23:70:2b:d5: b4:78:d3:3b:eb:69:8e:1e:e1:54:9a:a7:54:69:19: f5:da:15:d9:22:3b:5b:22:f2:63:63:b3:c8:43:63: 15:b8:30:48:a0:c1:b7:ee:67:c5:55:39:91:06:13: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:6D:74:4D:C6:0F:14:72:BE:0F:D8:F5:3C:77:C2:E5:A3:65:F3 X509v3 Authority Key Identifier: keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.159.0/24 IPv6: 2a05:b380::/29 Signature Algorithm: sha256WithRSAEncryption 5e:8d:15:e8:63:a1:e5:8b:43:f5:ef:06:96:e1:7b:10:78:4f: 9f:ed:c6:00:5d:e2:0f:38:53:96:6f:20:ee:0c:85:6e:60:ba: 60:c3:4c:cb:a0:a3:ad:21:b9:8c:9f:4b:04:4f:5f:d5:7c:de: 73:0f:b8:24:0e:66:3b:33:b9:b1:ff:95:61:64:86:b6:09:01: f2:d0:36:ca:e8:e9:61:b1:3c:6f:2c:6b:51:30:0a:29:f9:8e: ca:26:e7:fd:9d:cb:98:c0:8b:73:e7:64:50:a0:f4:45:b7:34: 5f:d2:1e:1f:0e:79:aa:3a:a6:be:89:89:b7:ba:4d:fb:d5:05: cf:56:90:5a:74:28:b0:fb:74:71:46:ac:4a:00:c3:b7:33:f6: 35:13:60:88:28:f6:ef:dc:f1:0d:62:c6:e2:0b:2a:e0:bd:bc: bf:fe:65:d6:66:3f:22:20:b9:a8:f4:4d:39:38:a0:a0:ca:f0: 2f:57:d0:ba:a6:17:c9:e9:93:0d:21:3a:eb:8d:e4:9f:46:6f: f2:80:67:61:b4:4c:79:10:f4:3d:e1:7c:2b:04:74:26:c0:07: e9:b2:43:2b:aa:62:7b:23:36:0b:ed:73:b8:09:92:c7:8c:56: c0:57:44:d3:fb:03:63:7e:22:99:c1:91:3c:6c:54:d5:ae:8d: a9:17:eb:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WIUwkDXJNej2sp0WovBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM0MTI3MjFjMGM2ZTdhNGM1NzY3YWU5OGM0NTIxZGVm NTE1MDEwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk0NmQ3NDRkYzYwZjE0NzJiZTBmZDhmNTNjNzdjMmU1YTM2NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqAljEPPns6/JLy8G8l08ZJWcwrr WzsFlzjp9fjnuYAD3uDVnl8ig/ct3LMDYuQGFKZ8seTxvoYlwc8uVIiBMfXgz52R l+pKfJWvge7HHRPeXTPOFJKm24JB5HzgBjuA09wBNgAR/P7U7BMRhW8EiDSfZ4jl Lgtf78T6ezK4hcQFM0y6dc5utTOzDZ/8GVtjq9EExirwaP6lLfne5+HVrpeYeBLf H+PYNe8XDM8v+XWDYkhxh3/tEh7bACb3iAhAtT0eKHTpFLGygy22BCNwK9W0eNM7 62mOHuFUmqdUaRn12hXZIjtbIvJjY7PIQ2MVuDBIoMG37mfFVTmRBhNHgQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHCUbXRNxg8Ucr4P2PU8d8Llo2XzMB8GA1UdIwQY MBaAFD/8QSchwMbnpMV2eumMRSHe9RUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUt MjIxMThiMzYxNDkwLzEvY0pSdGRFM0dEeFJ5dmdfWTlUeDN3dVdqWmZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZDkwYjktZmE4OC00YmQ5LWE3ZDUtMjIxMThiMzYxNDkw LzEvUF94Qkp5SEF4dWVreFhaNjZZeEZJZDcxRlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW82fMA0E AgACMAcDBQMqBbOAMA0GCSqGSIb3DQEBCwUAA4IBAQBejRXoY6Hli0P17waW4XsQ eE+f7cYAXeIPOFOWbyDuDIVuYLpgw0zLoKOtIbmMn0sET1/VfN5zD7gkDmY7M7mx /5VhZIa2CQHy0DbK6OlhsTxvLGtRMAop+Y7KJuf9ncuYwItz52RQoPRFtzRf0h4f DnmqOqa+iYm3uk371QXPVpBadCiw+3RxRqxKAMO3M/Y1E2CIKPbv3PENYsbiCyrg vby//mXWZj8iILmo9E05OKCgyvAvV9C6phfJ6ZMNITrrjeSfRm/ygGdhtEx5EPQ9 4XwrBHQmwAfpskMrqmJ7IzYL7XO4CZLHjFbAV0TT+wNjfiKZwZE8bFTVro2pF+s+ -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:44 2026 by rpki-client