This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/0QygA5EjmnNvfod7LRYIvHW6VOU.roa File: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (raw, json) Hash identifier: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI= Subject key identifier: D1:0C:A0:03:91:23:9A:73:6F:7E:87:7B:2D:16:08:BC:75:BA:54:E5 Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Certificate serial: 019B7F1489F232C2D22C51F944F5C732BFDA Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/0QygA5EjmnNvfod7LRYIvHW6VOU.roa Signing time: Fri 02 Jan 2026 14:20:11 +0000 ROA not before: Fri 02 Jan 2026 14:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43418 IP address blocks: 91.197.48.0/24 maxlen: 24 91.197.49.0/24 maxlen: 24 91.197.50.0/24 maxlen: 24 91.197.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:89:f2:32:c2:d2:2c:51:f9:44:f5:c7:32:bf:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Validity Not Before: Jan 2 14:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d10ca00391239a736f7e877b2d1608bc75ba54e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:80:b3:37:aa:b5:a1:59:bd:8e:83:c0:fa: 8f:b6:37:9e:d6:d1:bf:32:7e:0c:14:c1:16:35:31: 63:cf:cd:e6:55:4a:ee:4b:38:2b:d6:38:0a:3b:aa: 8f:26:fb:d7:e9:0d:92:44:d7:47:6a:92:5d:6e:b2: 01:d1:01:a4:c9:ef:7f:3d:7f:86:fe:9b:84:67:a1: 7f:da:3b:6c:4d:58:96:79:7e:40:39:07:e8:79:31: 03:df:62:af:27:b2:ab:64:f2:88:8d:e2:8c:69:ce: 39:1b:6c:b9:32:be:97:f2:27:56:54:09:1a:2e:7b: 8d:72:dd:bc:4a:55:ea:bf:13:f6:3d:b5:35:2f:08: 24:36:b8:10:bf:a2:66:49:2b:96:ac:72:1b:56:f3: 23:08:29:a6:13:ab:35:76:ee:89:84:64:07:e1:01: 41:41:6a:12:9b:bf:46:17:63:31:fd:5b:b9:ce:bd: d3:f5:4e:20:c3:92:a6:fc:7f:2e:90:2d:6b:63:26: d7:5f:b4:f7:57:83:a3:05:89:ba:fd:ae:7a:04:13: 8e:a1:63:63:ee:04:a2:cf:f1:d4:84:9f:3b:e5:23: 6d:0e:3b:b9:87:15:6b:2d:e9:93:86:56:6a:1d:ce: 17:0e:6d:f2:32:78:3a:b3:39:73:7a:d7:65:a9:2d: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0C:A0:03:91:23:9A:73:6F:7E:87:7B:2D:16:08:BC:75:BA:54:E5 X509v3 Authority Key Identifier: keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/0QygA5EjmnNvfod7LRYIvHW6VOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.48.0/22 Signature Algorithm: sha256WithRSAEncryption 02:5f:ea:6f:65:b4:dd:7f:dc:06:6e:13:dd:28:08:f0:06:97: 03:38:e9:b9:90:3b:55:97:9e:8d:39:ce:0d:aa:c4:cd:3e:4a: c0:35:3d:e3:ab:3f:10:34:a4:3b:c5:e6:a8:b7:57:0f:1d:16: 38:03:9a:24:3a:69:dc:e5:31:5a:64:bd:b5:a5:4b:b4:3f:07: 13:96:12:ba:d0:43:36:81:46:21:0e:50:19:9e:34:0f:9e:1d: 2e:46:e7:af:68:68:20:0e:9c:83:27:cb:04:38:a7:f0:d3:15: 9a:19:ba:a3:f6:a3:73:85:eb:a5:17:46:61:4a:9a:07:7f:d2: 4b:2e:8d:98:33:4d:9f:5c:81:03:31:e3:10:b6:0a:a7:e0:bf: 4e:cc:a5:31:4b:79:f1:9a:64:23:54:56:be:8f:89:94:61:ad: 38:eb:eb:1b:60:12:38:37:1d:da:bd:03:54:6a:9a:54:ae:8f: 78:14:89:2a:ec:92:e7:b5:e6:e7:1c:e0:07:4a:20:23:39:58: 70:13:1c:95:96:21:ca:3f:c9:a3:24:64:da:56:3a:2d:78:15: d8:fe:58:9d:5c:43:1b:6d:98:b6:9b:0a:b9:2e:2f:66:64:cb: 16:cf:03:80:1d:99:6f:62:4f:3d:41:78:97:1b:65:93:22:72: a5:67:7c:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FInyMsLSLFH5RPXHMr/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0 NWFkMDAwHhcNMjYwMTAyMTQyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTBjYTAwMzkxMjM5YTczNmY3ZTg3N2IyZDE2MDhiYzc1YmE1NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUSAszeqtaFZvY6DwPqPtjee1tG/ Mn4MFMEWNTFjz83mVUruSzgr1jgKO6qPJvvX6Q2SRNdHapJdbrIB0QGkye9/PX+G /puEZ6F/2jtsTViWeX5AOQfoeTED32KvJ7KrZPKIjeKMac45G2y5Mr6X8idWVAka LnuNct28SlXqvxP2PbU1LwgkNrgQv6JmSSuWrHIbVvMjCCmmE6s1du6JhGQH4QFB QWoSm79GF2Mx/Vu5zr3T9U4gw5Km/H8ukC1rYybXX7T3V4OjBYm6/a56BBOOoWNj 7gSiz/HUhJ875SNtDju5hxVrLemThlZqHc4XDm3yMng6szlzetdlqS2f3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEMoAORI5pzb36Hey0WCLx1ulTlMB8GA1UdIwQY MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt YTI0ZDY4ZTM2NzA1LzEvMFF5Z0E1RWptbk52Zm9kN0xSWUl2SFc2Vk9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1 LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8UwMA0G CSqGSIb3DQEBCwUAA4IBAQACX+pvZbTdf9wGbhPdKAjwBpcDOOm5kDtVl56NOc4N qsTNPkrANT3jqz8QNKQ7xeaot1cPHRY4A5okOmnc5TFaZL21pUu0PwcTlhK60EM2 gUYhDlAZnjQPnh0uRuevaGggDpyDJ8sEOKfw0xWaGbqj9qNzheulF0ZhSpoHf9JL Lo2YM02fXIEDMeMQtgqn4L9OzKUxS3nxmmQjVFa+j4mUYa046+sbYBI4Nx3avQNU appUro94FIkq7JLntebnHOAHSiAjOVhwExyVliHKP8mjJGTaVjoteBXY/lidXEMb bZi2mwq5Li9mZMsWzwOAHZlvYk89QXiXG2WTInKlZ3wA -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:00 2026 by rpki-client