This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/93pMZoa0O8JF8W2B8fMzXHgzuAA.roa File: 93pMZoa0O8JF8W2B8fMzXHgzuAA.roa (raw, json) Hash identifier: Der6QIVmi20xW0sX1w5roYc7B6JH+1QL85yVpKpJ+7I= Subject key identifier: F7:7A:4C:66:86:B4:3B:C2:45:F1:6D:81:F1:F3:33:5C:78:33:B8:00 Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89 Certificate serial: 019B7F15A31CDE3CFA191189524A737A6035 Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/93pMZoa0O8JF8W2B8fMzXHgzuAA.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59772 IP address blocks: 91.239.209.0/24 maxlen: 24 159.255.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a3:1c:de:3c:fa:19:11:89:52:4a:73:7a:60:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f77a4c6686b43bc245f16d81f1f3335c7833b800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:08:10:73:3a:65:38:f6:e6:14:18:31:1e: 2b:76:ff:f0:3d:6f:6a:76:5c:f3:86:66:9c:42:9d: bf:02:4c:af:3e:13:59:c8:77:63:6e:9e:d3:dc:af: a3:86:63:2a:dc:93:48:be:8c:ca:79:69:a7:1b:1d: 11:d0:f8:d3:67:ad:74:b8:0e:98:68:b7:06:a6:d4: 4e:91:08:fc:4b:61:4d:c5:fc:9b:2c:0c:17:1b:ea: 34:c7:27:94:46:2f:ae:47:5f:cf:38:f3:86:c5:58: e4:da:a6:e6:e1:e9:37:ae:5e:cd:ab:9d:71:d7:90: 9d:b3:c2:1b:1f:7a:35:8e:0a:db:a5:e7:dc:ed:f8: 50:66:69:ca:05:6d:99:b1:bd:37:a8:f9:fa:7c:f9: 3a:8f:75:4f:b6:fe:7e:97:9c:97:33:75:42:fb:b4: 70:e0:80:26:cb:14:34:de:51:cf:30:0b:9a:e1:2f: 0c:03:38:19:3d:f6:a8:70:34:14:0c:f4:b0:ed:db: e0:12:49:f9:77:2b:b0:1d:50:e6:97:4c:33:e8:f4: 1b:8b:50:ef:40:88:b5:41:c6:10:ff:e3:5c:7b:3b: b8:57:46:b0:17:8e:ec:dc:ea:9e:60:c3:7d:b9:c0: 19:7f:5c:10:c0:bb:16:2d:ef:09:e2:1e:8a:03:9d: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7A:4C:66:86:B4:3B:C2:45:F1:6D:81:F1:F3:33:5C:78:33:B8:00 X509v3 Authority Key Identifier: keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/93pMZoa0O8JF8W2B8fMzXHgzuAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.209.0/24 159.255.150.0/24 Signature Algorithm: sha256WithRSAEncryption 72:19:8a:01:16:82:f5:36:7a:14:48:50:e6:88:8c:1c:46:b4: e4:ff:85:a7:82:21:bc:db:26:ba:6f:73:e0:ae:aa:f1:fb:84: 6c:41:9f:1e:45:b5:3c:6e:0f:74:9f:5f:44:3c:c3:3b:9d:07: 06:d8:3a:e0:8e:28:40:a3:e6:cb:9b:bf:f6:37:56:3a:47:c4: c4:72:4c:74:a9:c5:04:9d:6b:33:33:ad:39:a6:4b:e9:39:43: 11:d9:19:90:da:5b:fb:36:73:63:ae:31:4f:e2:a3:00:da:96: 89:da:d5:99:5f:07:f8:b3:65:0c:6b:46:c6:84:ff:f2:f9:94: 33:90:be:35:29:2d:3e:0c:35:5d:b0:d8:99:e1:64:09:1d:60: 68:1d:68:13:23:f2:7c:f7:85:fe:15:6d:6d:85:75:ad:34:fc: dc:e8:00:7b:f2:11:b4:49:4b:e8:ce:69:3c:59:43:22:83:06: 1d:80:af:b5:62:74:3f:b2:eb:e8:2d:ee:a4:85:59:1a:f9:0c: 4f:73:f5:08:c5:b5:79:bb:32:50:ad:b0:f3:37:da:e0:39:18: 0f:1b:d1:a2:de:73:10:77:98:39:a7:ef:f5:79:6f:01:ee:87: a7:44:b1:f0:a0:73:ff:90:07:dd:4b:e7:ad:e7:11:06:cf:20: 4d:f5:88:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FaMc3jz6GRGJUkpzemA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmRlZjNiZWI0MTE0Y2ZjYmZlYjlmYjRlZDhkYTk4ZmFm NGZhODkwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzdhNGM2Njg2YjQzYmMyNDVmMTZkODFmMWYzMzM1Yzc4MzNiODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/gIEHM6ZTj25hQYMR4rdv/wPW9q dlzzhmacQp2/AkyvPhNZyHdjbp7T3K+jhmMq3JNIvozKeWmnGx0R0PjTZ610uA6Y aLcGptROkQj8S2FNxfybLAwXG+o0xyeURi+uR1/POPOGxVjk2qbm4ek3rl7Nq51x 15Cds8IbH3o1jgrbpefc7fhQZmnKBW2Zsb03qPn6fPk6j3VPtv5+l5yXM3VC+7Rw 4IAmyxQ03lHPMAua4S8MAzgZPfaocDQUDPSw7dvgEkn5dyuwHVDml0wz6PQbi1Dv QIi1QcYQ/+Ncezu4V0awF47s3OqeYMN9ucAZf1wQwLsWLe8J4h6KA52YGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPd6TGaGtDvCRfFtgfHzM1x4M7gAMB8GA1UdIwQY MBaAFCC97zvrQRTPy/65+07Y2pj69PqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTkt MWQ4MmFiMTVjNDE1LzEvOTNwTVpvYTBPOEpGOFcyQjhmTXpYSGd6dUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTktMWQ4MmFiMTVjNDE1 LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+/RAwQA n/+WMA0GCSqGSIb3DQEBCwUAA4IBAQByGYoBFoL1NnoUSFDmiIwcRrTk/4WngiG8 2ya6b3Pgrqrx+4RsQZ8eRbU8bg90n19EPMM7nQcG2DrgjihAo+bLm7/2N1Y6R8TE ckx0qcUEnWszM605pkvpOUMR2RmQ2lv7NnNjrjFP4qMA2paJ2tWZXwf4s2UMa0bG hP/y+ZQzkL41KS0+DDVdsNiZ4WQJHWBoHWgTI/J894X+FW1thXWtNPzc6AB78hG0 SUvozmk8WUMigwYdgK+1YnQ/suvoLe6khVka+QxPc/UIxbV5uzJQrbDzN9rgORgP G9Gi3nMQd5g5p+/1eW8B7oenRLHwoHP/kAfdS+et5xEGzyBN9Yit -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:26 2026 by rpki-client