This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/vk5Y2YJ09rjiWROVoHQwodUn4yU.roa File: vk5Y2YJ09rjiWROVoHQwodUn4yU.roa (raw, json) Hash identifier: vpQeQxzEnsV7qHV8y9P4IV2nzoCx88/TOJF++oD3hVE= Subject key identifier: BE:4E:58:D9:82:74:F6:B8:E2:59:13:95:A0:74:30:A1:D5:27:E3:25 Certificate issuer: /CN=40aa949d31c66888cb4758f23dd5f312141dec4a Certificate serial: 019B77C6C98D321D00A3DEBD90D3615009DB Authority key identifier: 40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/vk5Y2YJ09rjiWROVoHQwodUn4yU.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47811 IP address blocks: 91.208.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c9:8d:32:1d:00:a3:de:bd:90:d3:61:50:09:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40aa949d31c66888cb4758f23dd5f312141dec4a Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be4e58d98274f6b8e2591395a07430a1d527e325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:cf:6b:02:ff:cb:0f:39:a3:c3:c8:d6:22: 59:9c:2c:fc:8c:75:15:fd:3a:56:d5:85:2f:7c:cc: 80:fa:81:60:94:99:1f:3f:dc:4e:72:7a:ec:f6:34: ab:62:ae:6d:fd:1c:a2:fc:7d:89:46:34:5d:cb:12: 80:38:ab:94:11:4d:4a:fd:54:0f:18:cc:93:c3:23: a3:34:6d:ca:e4:f3:92:53:ea:60:e8:36:88:2b:04: 01:86:65:ad:62:7d:01:51:4e:2d:fe:c2:fd:a1:bc: cb:bd:de:b9:e8:9d:e4:e4:dd:38:f1:e5:6c:71:63: 6d:b8:c1:e6:9d:e0:df:b7:00:38:ab:e4:1a:48:8e: cf:ab:5d:13:cf:9c:3f:c7:b8:c7:e0:c5:ce:8e:c3: d7:10:ae:4c:df:ee:c5:3c:09:2d:a1:5f:8c:cd:62: ba:3e:aa:e3:5d:18:61:99:6b:49:00:86:a0:0d:b4: 41:2e:9e:fa:05:35:ca:32:fe:44:ab:40:4a:4b:81: 97:f4:01:07:59:aa:6b:89:9c:12:22:c9:44:80:29: aa:c0:71:19:64:b6:42:d2:35:8e:b1:b4:dc:e9:81: 54:5d:fc:31:c2:f7:ac:f8:5d:29:80:d0:2e:26:dc: 20:a2:96:bc:0a:df:41:79:1e:e0:07:87:9d:8b:ab: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4E:58:D9:82:74:F6:B8:E2:59:13:95:A0:74:30:A1:D5:27:E3:25 X509v3 Authority Key Identifier: keyid:40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/vk5Y2YJ09rjiWROVoHQwodUn4yU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.154.0/24 Signature Algorithm: sha256WithRSAEncryption 53:db:ab:a1:2d:89:ba:21:86:0e:c5:54:bc:3c:de:81:11:b1: b9:c3:9e:85:9f:52:9b:f2:f6:89:21:e9:4d:c7:65:40:70:d5: 7e:e6:e2:6b:50:51:a8:a4:f6:31:fe:ac:a3:c0:22:ad:82:6f: ba:65:4b:a6:1c:f9:7d:a2:f3:65:9a:78:f8:72:49:eb:0e:07: c9:67:b2:f2:cb:68:f4:f9:ec:2f:d8:a2:15:bf:2d:71:18:fc: be:e8:01:95:65:df:0c:71:9f:03:7a:a7:a5:cf:7d:61:21:5a: dc:72:9d:15:cf:56:75:c1:61:0e:de:b4:81:17:20:86:51:93: f0:84:32:58:f6:e2:1f:63:33:37:72:98:88:28:e9:e2:b9:5b: f6:81:d7:e5:b8:ce:44:27:77:4c:98:29:e6:91:2b:d3:17:eb: 08:d3:85:7b:ed:15:08:e8:9c:ae:3c:d2:1b:1c:2d:1e:3d:b5: 15:15:57:2d:f1:45:86:48:8c:c5:0e:ce:7c:33:7a:e9:e8:88: 07:a6:6b:ac:f2:43:cc:3a:f8:42:81:42:c7:ef:4d:39:df:6f: 29:43:75:51:2d:54:23:6a:65:6d:ba:97:b9:ef:6e:b1:f8:c6: d1:0c:05:36:e8:e4:36:6a:aa:15:a9:5a:bd:50:d3:71:3f:44: 7d:17:1d:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsmNMh0Ao969kNNhUAnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYWE5NDlkMzFjNjY4ODhjYjQ3NThmMjNkZDVmMzEyMTQx ZGVjNGEwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTRlNThkOTgyNzRmNmI4ZTI1OTEzOTVhMDc0MzBhMWQ1MjdlMzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmXPawL/yw85o8PI1iJZnCz8jHUV /TpW1YUvfMyA+oFglJkfP9xOcnrs9jSrYq5t/Ryi/H2JRjRdyxKAOKuUEU1K/VQP GMyTwyOjNG3K5POSU+pg6DaIKwQBhmWtYn0BUU4t/sL9obzLvd656J3k5N048eVs cWNtuMHmneDftwA4q+QaSI7Pq10Tz5w/x7jH4MXOjsPXEK5M3+7FPAktoV+MzWK6 PqrjXRhhmWtJAIagDbRBLp76BTXKMv5Eq0BKS4GX9AEHWapriZwSIslEgCmqwHEZ ZLZC0jWOsbTc6YFUXfwxwves+F0pgNAuJtwgopa8Ct9BeR7gB4edi6sZ7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5OWNmCdPa44lkTlaB0MKHVJ+MlMB8GA1UdIwQY MBaAFECqlJ0xxmiIy0dY8j3V8xIUHexKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUtxVW5USEdhSWpMUjFqeVBkWHpFaFFkN0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kZTk0MDEtNTZiYi00ODEzLThmODgt ZmQxMWJiMWNjODJkLzEvdms1WTJZSjA5cmppV1JPVm9IUXdvZFVuNHlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kZTk0MDEtNTZiYi00ODEzLThmODgtZmQxMWJiMWNjODJk LzEvUUtxVW5USEdhSWpMUjFqeVBkWHpFaFFkN0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CaMA0G CSqGSIb3DQEBCwUAA4IBAQBT26uhLYm6IYYOxVS8PN6BEbG5w56Fn1Kb8vaJIelN x2VAcNV+5uJrUFGopPYx/qyjwCKtgm+6ZUumHPl9ovNlmnj4cknrDgfJZ7Lyy2j0 +ewv2KIVvy1xGPy+6AGVZd8McZ8Deqelz31hIVrccp0Vz1Z1wWEO3rSBFyCGUZPw hDJY9uIfYzM3cpiIKOniuVv2gdfluM5EJ3dMmCnmkSvTF+sI04V77RUI6JyuPNIb HC0ePbUVFVct8UWGSIzFDs58M3rp6IgHpmus8kPMOvhCgULH7005328pQ3VRLVQj amVtupe5726x+MbRDAU26OQ2aqoVqVq9UNNxP0R9Fx0x -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:34 2026 by rpki-client