This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/sR4ns811nFIbjvjg3wltUzH6BEI.roa File: sR4ns811nFIbjvjg3wltUzH6BEI.roa (raw, json) Hash identifier: ZbJugbRHpIt2Y4hqLk7H0rTD6BGfncHuX2f1Y5HnqGU= Subject key identifier: B1:1E:27:B3:CD:75:9C:52:1B:8E:F8:E0:DF:09:6D:53:31:FA:04:42 Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324 Certificate serial: 019B7F15AC001F3A218C2DE9F5709783FF36 Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/sR4ns811nFIbjvjg3wltUzH6BEI.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44351 IP address blocks: 91.199.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ac:00:1f:3a:21:8c:2d:e9:f5:70:97:83:ff:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b11e27b3cd759c521b8ef8e0df096d5331fa0442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:be:ca:57:6f:88:dc:bb:3f:3b:36:eb:54: 06:a9:54:80:a5:ad:1f:36:2d:1e:db:52:f0:ac:d3: 61:5f:86:74:27:50:ea:59:82:76:f6:10:73:a2:2b: c8:c4:58:48:86:42:00:a1:54:eb:2a:4e:d4:c0:64: ee:16:20:fa:8a:2a:31:bc:d6:7c:d7:d1:09:cb:0e: 8a:5f:c8:f0:b5:d0:60:7f:d7:4c:69:1f:72:bd:27: bb:25:ab:28:d4:96:a9:d4:4f:10:0f:61:cd:22:5d: 08:c2:45:b7:8c:38:e1:e9:7b:91:9a:f1:8e:79:02: d7:1b:c5:c3:d2:f0:80:7a:43:ff:7c:eb:4f:b8:8d: b2:19:28:9c:64:a3:24:bc:32:5e:16:c7:fd:a2:57: 44:71:cf:8a:66:79:fe:e8:02:19:e3:c4:2f:d0:aa: a7:81:c9:59:ae:d2:cf:73:89:7a:f3:f2:6b:0f:ba: 82:3d:4d:b3:28:1a:98:8d:ad:32:15:ea:4d:85:8d: bd:54:bd:3b:b3:32:36:71:dc:8b:de:51:90:03:c2: 6c:d5:7b:75:b7:34:f9:bc:fe:0d:7e:29:bb:f9:47: 4a:94:e6:a4:dc:38:86:75:ab:36:cd:17:2e:6c:ee: dd:75:2f:65:f6:78:e5:2c:c1:5b:b7:84:1f:d5:f8: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1E:27:B3:CD:75:9C:52:1B:8E:F8:E0:DF:09:6D:53:31:FA:04:42 X509v3 Authority Key Identifier: keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/sR4ns811nFIbjvjg3wltUzH6BEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.92.0/24 Signature Algorithm: sha256WithRSAEncryption c3:47:18:a1:6c:44:07:c8:76:8c:9f:6c:31:29:93:83:c4:dd: 06:0b:40:ab:9b:b9:71:c1:3a:9f:86:11:3b:0d:92:b6:4b:82: 2f:e6:e1:30:c2:69:de:98:02:d0:db:c5:87:49:cd:94:0e:4d: b1:91:09:ac:b0:0c:84:4e:36:c7:e2:c6:e1:e9:dc:9a:74:93: 8f:14:6e:c9:48:6a:41:75:6e:b3:12:59:88:ac:9d:f1:48:b0: e9:25:0c:b9:3b:12:5a:cf:a6:a1:36:0e:e8:e7:e0:07:8f:46: fe:fe:2b:e5:6e:5d:7f:f2:7f:63:a6:a3:5c:f7:29:a9:3b:c7: 6c:78:58:dc:17:5e:a0:02:48:7c:d4:47:14:9a:e5:b5:82:a7: a1:78:1f:cd:cb:6b:cc:01:3a:f8:35:58:28:27:92:f0:9d:29: 09:f0:be:db:18:a9:77:91:7a:75:cc:94:96:fb:88:fe:36:9f: a3:e2:30:e1:95:70:8d:4e:66:00:d5:60:1c:ba:aa:ea:c1:f6: ba:fb:b7:98:c3:fa:24:c0:af:1c:66:41:0e:ee:20:31:65:d5: da:81:54:06:d4:e7:e1:3d:89:d7:24:0e:a0:32:66:b9:ba:f5: cb:ba:4b:f3:0a:de:f2:12:1e:26:ad:25:19:31:f2:d3:72:83: f7:e6:b4:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FawAHzohjC3p9XCXg/82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OThkYjhjYjg2MWJiYmRkMWZiNzU2MmRlZjRkNzdkODY0 MmMzMjQwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTFlMjdiM2NkNzU5YzUyMWI4ZWY4ZTBkZjA5NmQ1MzMxZmEwNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pO+yldviNy7Pzs261QGqVSApa0f Ni0e21LwrNNhX4Z0J1DqWYJ29hBzoivIxFhIhkIAoVTrKk7UwGTuFiD6iioxvNZ8 19EJyw6KX8jwtdBgf9dMaR9yvSe7Jaso1Jap1E8QD2HNIl0IwkW3jDjh6XuRmvGO eQLXG8XD0vCAekP/fOtPuI2yGSicZKMkvDJeFsf9oldEcc+KZnn+6AIZ48Qv0Kqn gclZrtLPc4l68/JrD7qCPU2zKBqYja0yFepNhY29VL07szI2cdyL3lGQA8Js1Xt1 tzT5vP4Nfim7+UdKlOak3DiGdas2zRcubO7ddS9l9njlLMFbt4Qf1fg8IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLEeJ7PNdZxSG4744N8JbVMx+gRCMB8GA1UdIwQY MBaAFIiY24y4Ybu90ft1Yt70132GQsMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYt MTYwYzI0YzY2NjMwLzEvc1I0bnM4MTFuRklianZqZzN3bHRVekg2QkVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYtMTYwYzI0YzY2NjMw LzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dcMA0G CSqGSIb3DQEBCwUAA4IBAQDDRxihbEQHyHaMn2wxKZODxN0GC0Crm7lxwTqfhhE7 DZK2S4Iv5uEwwmnemALQ28WHSc2UDk2xkQmssAyETjbH4sbh6dyadJOPFG7JSGpB dW6zElmIrJ3xSLDpJQy5OxJaz6ahNg7o5+AHj0b+/ivlbl1/8n9jpqNc9ympO8ds eFjcF16gAkh81EcUmuW1gqeheB/Ny2vMATr4NVgoJ5LwnSkJ8L7bGKl3kXp1zJSW +4j+Np+j4jDhlXCNTmYA1WAcuqrqwfa6+7eYw/okwK8cZkEO7iAxZdXagVQG1Ofh PYnXJA6gMma5uvXLukvzCt7yEh4mrSUZMfLTcoP35rQB -----END CERTIFICATE-----Generated at Mon Feb 9 21:13:38 2026 by rpki-client