This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/a3hQkooCn8x46O_eURpLJRVcyg4.roa File: a3hQkooCn8x46O_eURpLJRVcyg4.roa (raw, json) Hash identifier: tnmlw5UaWszHoGLC/j+Q9KSkF66XylpC4Q+T0iyP6ac= Subject key identifier: 6B:78:50:92:8A:02:9F:CC:78:E8:EF:DE:51:1A:4B:25:15:5C:CA:0E Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a Certificate serial: 019B7A5A030E845A7C5EF159007663C9B1E8 Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/a3hQkooCn8x46O_eURpLJRVcyg4.roa Signing time: Thu 01 Jan 2026 16:17:57 +0000 ROA not before: Thu 01 Jan 2026 16:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198163 IP address blocks: 91.206.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:03:0e:84:5a:7c:5e:f1:59:00:76:63:c9:b1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a Validity Not Before: Jan 1 16:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7850928a029fcc78e8efde511a4b25155cca0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a0:3e:f4:c4:08:a7:54:33:4b:60:72:fa:c5: 70:d0:ce:6c:7b:39:79:76:75:73:3b:21:74:9c:2e: 8d:5e:ef:b7:57:38:ab:a5:a4:43:29:2a:41:e4:6b: b1:ef:3b:ec:ef:26:3c:f7:de:a7:e2:1b:7c:00:ba: 09:54:7c:1d:e3:e8:57:3b:5f:62:f9:1a:4d:d7:51: e3:cb:86:db:3e:e1:6b:5b:c4:bb:50:77:f7:bf:de: 05:3a:71:00:6e:e7:b9:69:b2:31:63:be:38:31:20: 4b:07:aa:b4:b8:1f:f4:59:74:be:a7:38:92:3c:df: 66:90:3f:d6:0a:67:6f:0c:8b:cf:c4:c9:11:b2:91: 50:46:3e:e3:dd:44:82:35:68:a2:1e:ef:97:8b:12: bd:8a:90:1e:b0:27:e1:92:a8:36:9a:14:d9:fa:f7: 07:07:8c:c7:0b:92:2e:32:cc:4f:a6:20:70:68:bc: 8e:49:ed:54:e6:93:22:33:e4:32:5f:9f:07:05:55: c4:a1:b1:4c:d3:4f:67:d3:fa:0e:2b:82:7f:83:5d: 73:81:8a:69:3d:8a:48:3e:f0:5e:91:ce:b4:d2:dd: 3b:bf:93:db:9c:68:d7:c7:6c:da:ab:fc:00:36:bb: c9:27:c1:76:ec:ba:fc:15:5f:f3:81:80:93:74:90: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:78:50:92:8A:02:9F:CC:78:E8:EF:DE:51:1A:4B:25:15:5C:CA:0E X509v3 Authority Key Identifier: keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/a3hQkooCn8x46O_eURpLJRVcyg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.90.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:52:67:7e:f9:b8:23:9e:c4:69:98:dd:7f:8d:ba:8d:fa:44: 88:ce:57:39:5f:88:af:d3:4c:25:39:60:e9:de:56:f8:31:fc: ae:33:b7:a6:47:39:96:a6:95:ce:01:29:18:f0:2f:43:59:c6: 48:05:9b:38:89:9a:94:db:d1:78:f8:dd:9a:75:d3:22:dd:e7: 5e:fe:76:78:f0:9a:ea:19:4d:42:bd:ad:f9:ab:e8:a8:0d:53: b9:f5:ea:de:4a:19:97:84:f6:32:8e:79:42:77:7a:7a:e5:dd: 11:ff:b7:76:ed:69:ce:3a:1c:a7:c2:cf:ff:4e:e6:78:9c:36: 7e:65:e4:d0:d6:36:9d:f3:cf:01:a0:05:24:81:7e:54:9b:70: 74:02:c7:a1:66:9d:2a:c8:84:73:cd:15:f9:6d:6f:49:d7:2f: ba:10:d9:0d:0a:54:cc:f7:8e:91:9c:c8:ed:95:af:ac:f7:7c: 69:08:b0:d3:26:f1:35:a2:0f:a7:98:dd:c4:7c:9d:ea:22:23: be:64:90:2b:a0:77:01:82:69:f5:5a:4b:08:05:a1:fa:23:f4: df:09:0f:db:f5:7a:e7:fe:e9:50:aa:fd:8d:ac:96:fd:1a:8a: 11:74:a1:c3:ef:94:af:70:d0:7d:78:38:ac:0f:c7:32:b6:de: e1:9a:8e:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WgMOhFp8XvFZAHZjybHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmM0OThlZGM0MTg5NTg0ODc0YjdjYjQ1MDI1ZWY1NDI0 ODFiNmEwHhcNMjYwMTAxMTYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yjc4NTA5MjhhMDI5ZmNjNzhlOGVmZGU1MTFhNGIyNTE1NWNjYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86A+9MQIp1QzS2By+sVw0M5sezl5 dnVzOyF0nC6NXu+3VzirpaRDKSpB5Gux7zvs7yY8996n4ht8ALoJVHwd4+hXO19i +RpN11Hjy4bbPuFrW8S7UHf3v94FOnEAbue5abIxY744MSBLB6q0uB/0WXS+pziS PN9mkD/WCmdvDIvPxMkRspFQRj7j3USCNWiiHu+XixK9ipAesCfhkqg2mhTZ+vcH B4zHC5IuMsxPpiBwaLyOSe1U5pMiM+QyX58HBVXEobFM009n0/oOK4J/g11zgYpp PYpIPvBekc600t07v5PbnGjXx2zaq/wANrvJJ8F27Lr8FV/zgYCTdJC+QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGt4UJKKAp/MeOjv3lEaSyUVXMoOMB8GA1UdIwQY MBaAFHm8SY7cQYlYSHS3y0UCXvVCSBtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDIt ZTNiNDA2Yzc5ODBlLzEvYTNoUWtvb0NuOHg0Nk9fZVVScExKUlZjeWc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDItZTNiNDA2Yzc5ODBl LzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85aMA0G CSqGSIb3DQEBCwUAA4IBAQArUmd++bgjnsRpmN1/jbqN+kSIzlc5X4iv00wlOWDp 3lb4MfyuM7emRzmWppXOASkY8C9DWcZIBZs4iZqU29F4+N2addMi3ede/nZ48Jrq GU1Cva35q+ioDVO59ereShmXhPYyjnlCd3p65d0R/7d27WnOOhynws//TuZ4nDZ+ ZeTQ1jad888BoAUkgX5Um3B0AsehZp0qyIRzzRX5bW9J1y+6ENkNClTM946RnMjt la+s93xpCLDTJvE1og+nmN3EfJ3qIiO+ZJAroHcBgmn1WksIBaH6I/TfCQ/b9Xrn /ulQqv2NrJb9GooRdKHD75SvcNB9eDisD8cytt7hmo7R -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:45 2026 by rpki-client