This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa File: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (raw, json) Hash identifier: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU= Subject key identifier: 93:BA:1E:21:5E:C7:80:5D:0C:75:2A:FD:C1:8E:D0:1F:59:E4:D4:FA Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Certificate serial: 019B783555B1946C7FC53DD6660E06A39458 Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34979 IP address blocks: 91.204.244.0/22 maxlen: 22 91.204.244.0/24 maxlen: 24 91.204.245.0/24 maxlen: 24 91.204.246.0/24 maxlen: 24 91.204.247.0/24 maxlen: 24 194.24.166.0/23 maxlen: 23 194.24.166.0/24 maxlen: 24 194.24.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:55:b1:94:6c:7f:c5:3d:d6:66:0e:06:a3:94:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93ba1e215ec7805d0c752afdc18ed01f59e4d4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:b4:9c:c0:7d:3d:7f:40:c0:6b:36:c2:f0: 5d:d2:de:e7:8b:57:1f:98:f8:cf:e0:43:aa:2a:08: 9e:2c:15:e4:c1:47:70:d9:af:9c:23:46:e6:71:2e: c5:5e:ee:0e:66:dd:1a:6a:64:17:21:e8:6e:bf:04: 11:9f:58:a5:b2:9a:2b:a4:2d:04:bf:8d:6c:17:23: ba:66:87:cf:ce:42:8a:ef:bb:13:52:65:48:68:b4: 4b:eb:86:83:ed:42:f1:e1:5e:ef:af:2a:23:02:e4: db:6e:e7:db:9e:cb:c9:94:63:e7:bb:3b:6c:b7:6c: 1e:f4:2f:fc:e6:a9:18:4e:f4:a6:4d:f6:a1:9a:ac: a0:71:d9:81:e8:09:ef:0f:e0:ec:77:7b:1c:0d:e7: 14:08:8a:6c:c5:28:00:f2:4b:88:0b:fe:71:17:c9: d6:47:d7:e7:10:80:aa:f9:7b:c5:7e:6e:22:ed:c5: d9:45:fe:47:a6:21:a2:ff:ea:e2:7e:5d:64:8b:9a: c9:ed:fa:ef:fc:ec:ce:9b:36:57:6f:de:e2:b8:1c: fc:f8:ce:af:ae:e9:70:4f:2e:c8:bc:ed:a3:8d:97: bd:4e:6c:d5:ba:5d:cd:88:70:8a:e5:17:1b:81:8f: 82:cc:d9:3f:32:4d:17:c5:c2:c6:cc:c2:65:9f:0e: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BA:1E:21:5E:C7:80:5D:0C:75:2A:FD:C1:8E:D0:1F:59:E4:D4:FA X509v3 Authority Key Identifier: keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.244.0/22 194.24.166.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:a3:93:d7:b5:d7:d2:56:4d:48:d4:9b:54:9f:f8:c7:b6:c3: 82:f6:9d:f5:cd:00:86:2f:05:c8:37:da:cc:13:c9:dc:6a:d2: fa:bb:bf:bf:e0:3b:b9:85:4c:6a:30:1d:08:62:26:59:49:7b: e3:fc:25:4d:41:16:72:cc:7d:f0:ab:34:69:cb:ee:ef:51:05: 7e:fa:4e:2f:26:23:65:48:cd:fc:ba:4d:b3:b2:9c:78:9c:82: dd:b8:ed:1e:69:b2:ab:20:f2:77:2d:bb:7e:d2:bd:ee:74:47: 4b:ce:90:85:4c:cb:90:36:b9:26:0c:d2:92:ce:e7:21:23:05: fa:26:38:ae:36:c9:af:ef:c4:8d:c7:53:04:a7:e8:76:dc:24: 6f:23:49:64:84:e0:a4:0e:a3:07:7c:e3:dc:91:91:34:40:6d: 45:62:a1:9f:2e:f7:ce:dc:0c:76:22:4d:f3:64:8d:9e:19:d9: e9:1e:4c:ed:d3:bc:b6:c4:9a:6e:9a:5c:6f:cb:c9:ef:cd:9b: 92:3c:48:48:d3:70:0e:32:4c:e2:7d:5b:2e:7b:fd:d6:90:8b: 50:d0:17:1c:3c:33:f4:84:ce:22:e7:2f:71:8e:e4:7d:41:36: 90:55:07:8a:59:22:1d:9f:b1:51:69:85:d3:4d:bf:db:02:e9: ca:f4:4d:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NVWxlGx/xT3WZg4Go5RYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5 ZTg2ZDUwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2JhMWUyMTVlYzc4MDVkMGM3NTJhZmRjMThlZDAxZjU5ZTRkNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7K0nMB9PX9AwGs2wvBd0t7ni1cf mPjP4EOqKgieLBXkwUdw2a+cI0bmcS7FXu4OZt0aamQXIehuvwQRn1ilsporpC0E v41sFyO6ZofPzkKK77sTUmVIaLRL64aD7ULx4V7vryojAuTbbufbnsvJlGPnuzts t2we9C/85qkYTvSmTfahmqygcdmB6AnvD+Dsd3scDecUCIpsxSgA8kuIC/5xF8nW R9fnEICq+XvFfm4i7cXZRf5HpiGi/+rifl1ki5rJ7frv/OzOmzZXb97iuBz8+M6v rulwTy7IvO2jjZe9TmzVul3NiHCK5RcbgY+CzNk/Mk0XxcLGzMJlnw4/5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJO6HiFex4BdDHUq/cGO0B9Z5NT6MB8GA1UdIwQY MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt YzMyMDM2NzUwZTM2LzEvazdvZUlWN0hnRjBNZFNyOXdZN1FIMW5rMVBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2 LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8z0AwQB whimMA0GCSqGSIb3DQEBCwUAA4IBAQBuo5PXtdfSVk1I1JtUn/jHtsOC9p31zQCG LwXIN9rME8ncatL6u7+/4Du5hUxqMB0IYiZZSXvj/CVNQRZyzH3wqzRpy+7vUQV+ +k4vJiNlSM38uk2zspx4nILduO0eabKrIPJ3Lbt+0r3udEdLzpCFTMuQNrkmDNKS zuchIwX6JjiuNsmv78SNx1MEp+h23CRvI0lkhOCkDqMHfOPckZE0QG1FYqGfLvfO 3Ax2Ik3zZI2eGdnpHkzt07y2xJpumlxvy8nvzZuSPEhI03AOMkzifVsue/3WkItQ 0BccPDP0hM4i5y9xjuR9QTaQVQeKWSIdn7FRaYXTTb/bAunK9E0R -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:04 2026 by rpki-client