This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/abv9rWoa4hyIv9tqrFHF_b8F0JY.roa File: abv9rWoa4hyIv9tqrFHF_b8F0JY.roa (raw, json) Hash identifier: LIv9WGzH0KXzQv/Kg1sz7/kVRe9FXifI/ssFCscX5ik= Subject key identifier: 69:BB:FD:AD:6A:1A:E2:1C:88:BF:DB:6A:AC:51:C5:FD:BF:05:D0:96 Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40 Certificate serial: 019B7AC82FF6F22BA42DAC6A58BCBB43A12C Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/abv9rWoa4hyIv9tqrFHF_b8F0JY.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48748 IP address blocks: 91.214.132.0/22 maxlen: 22 193.107.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2f:f6:f2:2b:a4:2d:ac:6a:58:bc:bb:43:a1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69bbfdad6a1ae21c88bfdb6aac51c5fdbf05d096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:34:54:a3:29:f2:ee:b8:63:28:37:54:90: ae:4b:09:0f:49:f7:44:4b:32:80:26:a6:66:30:40: 6b:84:c9:f0:5f:0f:3f:71:39:3f:52:e1:86:7f:9c: ab:e5:d9:e0:5c:c1:27:0f:c9:d2:01:b7:ee:5d:15: 44:97:b7:45:09:9e:93:0a:2d:cd:57:e8:0c:3c:d3: 52:65:4b:bd:f9:cb:7e:36:48:4b:63:22:db:1b:42: 44:5a:e6:04:f3:4f:fb:24:2f:79:94:22:33:35:a5: 1a:01:63:b9:2a:02:90:bd:ed:e2:1c:78:37:46:b7: 21:a4:da:c9:26:9d:94:6f:f2:1e:58:a4:97:da:0d: 7a:8b:9b:31:83:e2:68:c5:88:d8:ce:1f:93:d8:f2: c9:8d:00:5a:40:b9:eb:f2:b6:e4:1f:6f:a1:a6:a6: 90:68:34:fe:bc:a0:90:8e:0f:e1:45:da:72:df:a5: 17:90:49:ec:cc:05:fb:26:75:db:3f:73:5a:92:f7: 40:ff:2d:ab:f6:90:94:36:8d:0c:f9:4e:bd:12:6e: 73:62:9a:75:56:12:83:09:32:9d:fd:2a:87:bb:62: ac:45:5f:7a:d9:92:86:27:1b:6a:9b:0e:ba:9f:bd: c8:51:ce:4e:6e:d4:c6:0d:19:fc:dc:12:af:c1:a0: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BB:FD:AD:6A:1A:E2:1C:88:BF:DB:6A:AC:51:C5:FD:BF:05:D0:96 X509v3 Authority Key Identifier: keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/abv9rWoa4hyIv9tqrFHF_b8F0JY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.132.0/22 193.107.132.0/22 Signature Algorithm: sha256WithRSAEncryption 03:67:c2:bf:88:68:37:e8:8c:0e:75:ba:85:0b:d6:90:0e:6a: 56:fb:1e:cc:9b:e9:bc:0a:f1:00:19:5f:19:53:77:e2:e1:a7: 0a:e3:4e:f8:ae:dc:74:ca:6e:d1:24:99:ad:c6:f1:38:6c:59: 01:9e:8c:76:77:cd:73:be:50:02:e7:11:b1:e0:b8:e7:35:0f: 3e:a0:b7:8a:13:22:78:ab:22:eb:76:21:f4:e8:1c:33:ef:47: e4:08:aa:b9:b1:8e:9e:f5:58:f3:ca:a9:d4:a8:0c:d8:80:c9: d7:0d:b7:ed:e8:89:44:fa:fb:43:fb:62:43:a4:72:39:7f:73: 79:c1:3e:37:64:5a:28:a2:8f:42:64:b3:c3:4f:54:33:8a:5a: de:f5:75:8f:64:cd:7a:35:b1:68:db:e6:f8:4a:1a:2a:a9:b8: 2b:54:49:35:cd:3f:87:6e:25:5f:5c:d3:51:d0:f8:67:52:d3: 50:8c:63:d0:42:69:34:aa:db:01:65:40:80:32:3c:b5:5d:1a: 62:b4:62:e0:a1:29:97:06:a0:61:d5:4b:64:eb:7e:8d:97:e4: 92:13:64:d9:35:99:e6:28:fc:f8:b8:ce:12:6b:23:fb:8a:c2: af:73:4a:8b:99:b3:d3:d7:ba:d3:3a:41:a3:b5:2e:44:a8:d6: ba:92:e9:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yC/28iukLaxqWLy7Q6EsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjU2ZWNkM2Y0YjFkNmU4ZDY2OWVhZDBlMDMzZmRhZjBi ZTRmNDAwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWJiZmRhZDZhMWFlMjFjODhiZmRiNmFhYzUxYzVmZGJmMDVkMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTI0VKMp8u64Yyg3VJCuSwkPSfdE SzKAJqZmMEBrhMnwXw8/cTk/UuGGf5yr5dngXMEnD8nSAbfuXRVEl7dFCZ6TCi3N V+gMPNNSZUu9+ct+NkhLYyLbG0JEWuYE80/7JC95lCIzNaUaAWO5KgKQve3iHHg3 RrchpNrJJp2Ub/IeWKSX2g16i5sxg+JoxYjYzh+T2PLJjQBaQLnr8rbkH2+hpqaQ aDT+vKCQjg/hRdpy36UXkEnszAX7JnXbP3NakvdA/y2r9pCUNo0M+U69Em5zYpp1 VhKDCTKd/SqHu2KsRV962ZKGJxtqmw66n73IUc5ObtTGDRn83BKvwaDcxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGm7/a1qGuIciL/baqxRxf2/BdCWMB8GA1UdIwQY MBaAFET1bs0/Sx1ujWaerQ4DP9rwvk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8wZTAxZGUtY2RlMy00NDdmLWI1ZGMt MDM2MzU0YTJjMjJmLzEvYWJ2OXJXb2E0aHlJdjl0cXJGSEZfYjhGMEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8wZTAxZGUtY2RlMy00NDdmLWI1ZGMtMDM2MzU0YTJjMjJm LzEvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9aEAwQC wWuEMA0GCSqGSIb3DQEBCwUAA4IBAQADZ8K/iGg36IwOdbqFC9aQDmpW+x7Mm+m8 CvEAGV8ZU3fi4acK4074rtx0ym7RJJmtxvE4bFkBnox2d81zvlAC5xGx4LjnNQ8+ oLeKEyJ4qyLrdiH06Bwz70fkCKq5sY6e9VjzyqnUqAzYgMnXDbft6IlE+vtD+2JD pHI5f3N5wT43ZFoooo9CZLPDT1Qzilre9XWPZM16NbFo2+b4ShoqqbgrVEk1zT+H biVfXNNR0PhnUtNQjGPQQmk0qtsBZUCAMjy1XRpitGLgoSmXBqBh1Utk636Nl+SS E2TZNZnmKPz4uM4SayP7isKvc0qLmbPT17rTOkGjtS5EqNa6kunh -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:41 2026 by rpki-client