This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa File: gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa (raw, json) Hash identifier: UejuYxPlvqYqOEh9OQ46XPeNSYssNDcfHiTgcJb7toI= Subject key identifier: 80:91:56:5C:F0:3F:24:75:F3:BC:E2:89:DF:23:CF:F8:5A:57:AC:85 Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd Certificate serial: 019B78A3072647193B0AEDE301DEBF45AD0A Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197684 IP address blocks: 91.201.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:07:26:47:19:3b:0a:ed:e3:01:de:bf:45:ad:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8091565cf03f2475f3bce289df23cff85a57ac85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:b7:1d:d1:b5:a5:8e:86:98:2e:8a:69:ae: 79:75:f3:2b:75:31:e7:62:82:1e:5d:1b:81:74:34: 74:ae:fd:c3:0b:66:ac:f2:25:65:72:a1:cc:e6:75: b4:bf:71:5e:30:df:c8:da:f3:94:43:58:a6:bf:c7: 00:07:ee:e6:aa:d8:31:78:c1:fe:ef:63:66:23:e3: e0:cf:f2:5f:cd:2e:e1:8d:39:cc:c4:c9:03:8e:a6: 02:e8:9b:60:ca:35:80:b8:da:10:0e:d4:cb:07:d3: c5:7c:14:fe:54:4d:07:d7:62:5e:89:6a:a8:4d:0a: b0:34:1b:2d:c5:f9:7b:b2:23:66:af:1b:7f:d7:33: 34:ca:a4:af:01:b2:36:4c:d8:78:4d:50:a9:5d:8e: d6:fd:1c:a6:00:ee:e7:31:b0:5d:f9:5c:db:8e:2a: 47:0c:ec:53:e4:7d:00:4c:53:c8:6e:15:c1:0e:2b: 1b:8f:92:5e:83:22:d1:98:71:0f:5e:fa:14:c8:bd: d3:22:63:95:37:66:39:02:07:01:11:4e:be:a4:d3: 6d:8b:76:0f:96:c6:ff:55:bc:86:56:02:33:ef:1a: 67:0c:bd:f6:63:f8:89:3f:41:85:d0:18:fe:c5:9c: 9c:d3:13:64:70:30:3b:05:31:eb:93:06:16:e8:30: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:91:56:5C:F0:3F:24:75:F3:BC:E2:89:DF:23:CF:F8:5A:57:AC:85 X509v3 Authority Key Identifier: keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.202.0/23 Signature Algorithm: sha256WithRSAEncryption 70:a3:5f:64:f4:32:97:e9:45:09:15:3a:42:c1:09:3d:5d:4d: 49:66:e2:57:df:2b:c5:6b:b0:76:17:b7:b8:2f:14:d0:11:94: 22:d9:b9:60:78:08:2a:b7:e7:06:d1:95:2c:bb:71:4d:5d:1d: 37:dd:c3:c8:dd:ad:50:25:28:9c:95:93:bf:83:df:19:9f:cd: 6d:f0:92:5a:d9:56:bd:3e:90:8f:53:8a:51:7d:35:89:28:e6: 02:56:f0:ed:c1:e6:35:5b:a4:84:81:14:96:c9:e1:26:95:99: 70:51:4e:80:f1:b6:da:8a:ed:58:1e:ea:6e:cf:21:a6:66:89: 84:bc:48:e8:14:b9:f2:c1:ad:c4:ba:ee:bb:d1:f3:b9:49:bf: 0f:b7:a4:9f:1f:06:38:a7:70:e8:99:b8:e9:62:b0:30:37:59: 7b:21:43:1f:1c:00:a3:04:9f:60:67:d1:2b:77:66:41:f3:09: a3:2e:a0:3f:51:c3:5d:20:dc:6a:c9:5c:37:b7:a1:c3:9d:d6: 15:8d:5a:47:90:e2:a9:4f:4d:87:71:4a:eb:ad:47:d8:c0:fe: 83:25:0d:3c:d1:ac:90:12:58:0e:30:f8:30:49:a9:7c:29:54: 1a:48:08:e2:41:99:c6:78:21:56:ac:59:83:8e:d6:f2:41:e6: 25:93:ec:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owcmRxk7Cu3jAd6/Ra0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFiYjExNGYzMjU3MGM1ZGQ1MjA2NjI1OWJkYzgwYzk4 NzY4ZmQwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDkxNTY1Y2YwM2YyNDc1ZjNiY2UyODlkZjIzY2ZmODVhNTdhYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y+3HdG1pY6GmC6Kaa55dfMrdTHn YoIeXRuBdDR0rv3DC2as8iVlcqHM5nW0v3FeMN/I2vOUQ1imv8cAB+7mqtgxeMH+ 72NmI+Pgz/JfzS7hjTnMxMkDjqYC6JtgyjWAuNoQDtTLB9PFfBT+VE0H12JeiWqo TQqwNBstxfl7siNmrxt/1zM0yqSvAbI2TNh4TVCpXY7W/RymAO7nMbBd+VzbjipH DOxT5H0ATFPIbhXBDisbj5JegyLRmHEPXvoUyL3TImOVN2Y5AgcBEU6+pNNti3YP lsb/VbyGVgIz7xpnDL32Y/iJP0GF0Bj+xZyc0xNkcDA7BTHrkwYW6DBLFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICRVlzwPyR187ziid8jz/haV6yFMB8GA1UdIwQY MBaAFEEquxFPMlcMXdUgZiWb3IDJh2j9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEt YTM1MDdkYzY3NGMyLzEvZ0pGV1hQQV9KSFh6dk9LSjN5UFAtRnBYcklVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEtYTM1MDdkYzY3NGMy LzEvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8nKMA0G CSqGSIb3DQEBCwUAA4IBAQBwo19k9DKX6UUJFTpCwQk9XU1JZuJX3yvFa7B2F7e4 LxTQEZQi2blgeAgqt+cG0ZUsu3FNXR033cPI3a1QJSiclZO/g98Zn81t8JJa2Va9 PpCPU4pRfTWJKOYCVvDtweY1W6SEgRSWyeEmlZlwUU6A8bbaiu1YHupuzyGmZomE vEjoFLnywa3Euu670fO5Sb8Pt6SfHwY4p3DombjpYrAwN1l7IUMfHACjBJ9gZ9Er d2ZB8wmjLqA/UcNdINxqyVw3t6HDndYVjVpHkOKpT02HcUrrrUfYwP6DJQ080ayQ ElgOMPgwSal8KVQaSAjiQZnGeCFWrFmDjtbyQeYlk+wH -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:01 2026 by rpki-client