This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/gJbsOyypAmklfS6fGeH-_QYDJ-U.roa File: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (raw, json) Hash identifier: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg= Subject key identifier: 80:96:EC:3B:2C:A9:02:69:25:7D:2E:9F:19:E1:FE:FD:06:03:27:E5 Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a Certificate serial: 019B7C13444811B7667E735B78FCEFBD0B91 Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/gJbsOyypAmklfS6fGeH-_QYDJ-U.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197978 IP address blocks: 91.198.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:44:48:11:b7:66:7e:73:5b:78:fc:ef:bd:0b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8096ec3b2ca90269257d2e9f19e1fefd060327e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:eb:d0:51:a6:d9:26:b9:6d:dc:1d:8a:51: 92:3e:d3:19:19:b5:e3:3b:52:a4:bc:28:20:9d:cf: 19:96:d3:34:82:9c:b7:c3:61:63:2c:e8:4f:f4:22: 69:56:bf:cd:bd:0b:fa:9b:62:48:0f:49:0d:2c:48: 34:c4:c9:55:62:55:4c:e4:f1:a9:3c:f2:83:28:e2: 7c:68:36:b0:67:f6:84:24:3b:f9:af:5b:06:b8:77: f0:8b:23:9c:62:7c:eb:59:02:64:32:2f:81:1e:59: 9a:6d:d9:d6:78:82:6b:72:93:7a:24:da:5f:93:20: 75:8f:6f:87:6e:4d:1b:0e:c2:33:2e:72:ba:79:9f: 72:65:e5:6a:05:20:10:54:9a:14:5d:6c:ff:90:1d: d9:d0:00:e0:e6:28:c4:17:88:25:9d:c0:81:87:22: 70:60:94:a5:2b:0d:d5:26:c6:1e:cb:fe:fd:52:bb: 10:a0:b9:a3:3b:59:c8:1b:b8:01:d7:8e:07:58:49: e1:9a:31:50:8e:35:3f:4e:4e:79:10:bb:4d:fd:7b: d5:69:80:5f:8d:15:67:49:4a:a0:bb:10:aa:eb:16: 9e:86:00:4e:9e:8a:dc:9f:de:fe:bb:0b:47:8e:6c: c5:6f:b8:e1:cb:8f:e0:df:26:ef:e1:2b:8a:44:13: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:96:EC:3B:2C:A9:02:69:25:7D:2E:9F:19:E1:FE:FD:06:03:27:E5 X509v3 Authority Key Identifier: keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/gJbsOyypAmklfS6fGeH-_QYDJ-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.247.0/24 Signature Algorithm: sha256WithRSAEncryption 60:70:eb:9c:c4:c5:ee:c6:69:8b:86:9c:74:96:b4:ef:b9:f1: 6d:7f:25:4a:51:c8:38:d5:cb:21:dd:af:f1:1f:45:8b:d1:6f: 9c:73:76:a4:63:e2:19:6c:82:42:f2:ca:ad:e5:2d:4b:2c:b3: 93:b8:4a:93:e2:3b:08:c3:a2:47:96:df:ef:61:fb:39:0a:70: 68:28:e1:6a:5c:47:8a:aa:87:53:d4:75:c9:fd:95:f7:b8:2f: ee:bc:80:38:45:11:f6:6c:6a:7a:a2:17:92:8b:7f:7d:ac:06: 99:43:0c:af:ef:ef:9a:05:b6:cb:32:0d:5c:3c:59:96:6d:fa: 46:28:ac:df:3b:1e:a7:52:76:6f:6e:be:99:02:b8:83:38:c2: cd:f9:41:b7:f1:d6:73:cd:a8:38:55:06:e0:2a:90:3e:8a:72: 64:a7:49:96:16:56:dd:3e:fa:4f:00:dd:f7:f2:f6:65:19:3a: 37:89:69:b5:9d:13:de:b2:84:7c:85:d4:c3:25:03:ca:b6:42: b7:96:7b:ff:96:70:84:d6:32:52:d8:df:29:43:b6:81:6d:14: 11:99:90:43:1c:2a:5f:a8:b9:40:f1:f1:ce:87:c7:fd:26:da: 4c:51:50:b0:51:1a:24:a3:96:fc:31:a3:77:a3:04:ab:40:ff: b1:20:8f:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0RIEbdmfnNbePzvvQuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1 MDc0MmEwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDk2ZWMzYjJjYTkwMjY5MjU3ZDJlOWYxOWUxZmVmZDA2MDMyN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Hvr0FGm2Sa5bdwdilGSPtMZGbXj O1KkvCggnc8ZltM0gpy3w2FjLOhP9CJpVr/NvQv6m2JID0kNLEg0xMlVYlVM5PGp PPKDKOJ8aDawZ/aEJDv5r1sGuHfwiyOcYnzrWQJkMi+BHlmabdnWeIJrcpN6JNpf kyB1j2+Hbk0bDsIzLnK6eZ9yZeVqBSAQVJoUXWz/kB3Z0ADg5ijEF4glncCBhyJw YJSlKw3VJsYey/79UrsQoLmjO1nIG7gB144HWEnhmjFQjjU/Tk55ELtN/XvVaYBf jRVnSUqguxCq6xaehgBOnorcn97+uwtHjmzFb7jhy4/g3ybv4SuKRBOgSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICW7DssqQJpJX0unxnh/v0GAyflMB8GA1UdIwQY MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt N2IyOTA5ZjRmNTdhLzEvZ0pic095eXBBbWtsZlM2ZkdlSC1fUVlESi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8b3MA0G CSqGSIb3DQEBCwUAA4IBAQBgcOucxMXuxmmLhpx0lrTvufFtfyVKUcg41csh3a/x H0WL0W+cc3akY+IZbIJC8sqt5S1LLLOTuEqT4jsIw6JHlt/vYfs5CnBoKOFqXEeK qodT1HXJ/ZX3uC/uvIA4RRH2bGp6oheSi399rAaZQwyv7++aBbbLMg1cPFmWbfpG KKzfOx6nUnZvbr6ZAriDOMLN+UG38dZzzag4VQbgKpA+inJkp0mWFlbdPvpPAN33 8vZlGTo3iWm1nRPesoR8hdTDJQPKtkK3lnv/lnCE1jJS2N8pQ7aBbRQRmZBDHCpf qLlA8fHOh8f9JtpMUVCwURoko5b8MaN3owSrQP+xII+Z -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:44 2026 by rpki-client