This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/74CsHa1gIlR63JIzjhQivmcI93g.roa File: 74CsHa1gIlR63JIzjhQivmcI93g.roa (raw, json) Hash identifier: C1WaPS/UW69Pt4QRIwyedYxNzPaQEVQGboXKkZyZxnU= Subject key identifier: EF:80:AC:1D:AD:60:22:54:7A:DC:92:33:8E:14:22:BE:67:08:F7:78 Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce Certificate serial: 019B7910F9AB1D81CC262AA6F2240624A061 Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/74CsHa1gIlR63JIzjhQivmcI93g.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49589 IP address blocks: 91.214.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f9:ab:1d:81:cc:26:2a:a6:f2:24:06:24:a0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef80ac1dad6022547adc92338e1422be6708f778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:c8:05:78:c9:d4:7f:c7:28:be:97:e8:b7: 87:cb:14:f1:52:c8:2f:27:7a:e8:bc:05:81:e0:5d: 40:60:bb:e4:eb:f9:9d:94:b6:6f:34:d8:bb:14:29: a8:99:a6:a2:04:9b:6b:28:e0:bc:7c:df:44:b3:21: 46:af:4a:c5:14:8e:7e:d8:2f:1c:c7:37:0d:29:6d: 55:b4:18:9f:a1:4e:7a:3c:95:32:f9:fa:46:2c:78: be:37:43:ab:ff:40:bd:69:8b:80:70:fe:f5:82:6d: 3b:75:72:71:31:e7:7e:57:6c:3d:4f:45:e2:93:f0: f5:fa:08:4a:78:71:95:40:69:7f:9d:85:41:64:ee: ed:50:d3:1d:74:a9:f7:8b:49:bd:31:65:0b:24:32: 7e:47:02:01:bd:c7:7e:ee:95:0c:bb:52:7a:f3:b5: 6b:7d:17:63:8a:ed:ba:38:44:3b:ee:35:5c:03:cf: f9:32:fe:92:5b:e7:95:22:0a:a4:81:ee:0c:44:17: 42:ac:a9:8c:b1:2e:0a:38:85:58:27:c3:00:53:76: 74:50:c3:82:ee:4c:12:62:55:38:a3:19:1d:96:1e: a9:63:32:77:50:3e:55:be:4e:bf:8e:50:bf:bd:2d: b8:2d:b8:74:d5:82:73:2e:ed:1f:1e:6c:db:01:bb: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:80:AC:1D:AD:60:22:54:7A:DC:92:33:8E:14:22:BE:67:08:F7:78 X509v3 Authority Key Identifier: keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/74CsHa1gIlR63JIzjhQivmcI93g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.244.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:99:22:44:c7:6f:53:30:a4:ab:94:39:86:6d:13:06:c2:b2: d4:34:a5:28:f4:e7:ef:3b:52:f2:0e:19:97:27:66:64:e3:d2: 05:5f:bf:59:02:92:1f:5c:12:21:88:31:5d:5f:cd:d3:6b:d2: eb:30:02:b3:fe:11:71:d3:4d:56:cd:98:ea:b2:68:f8:97:d9: 7c:67:ab:d4:6b:f2:56:ea:77:88:92:2c:16:4b:63:8a:3b:e8: 2e:cb:e2:6b:e0:61:74:ad:47:ea:fa:73:65:88:f5:d2:5f:63: 86:95:af:10:4e:ec:83:76:65:23:56:4b:60:0b:7f:ac:27:2b: 5b:b1:1e:9a:45:5c:c3:14:95:f3:45:b5:92:3c:a7:c8:28:8b: 34:70:76:5f:cd:e4:53:d4:ba:f7:39:e9:1a:7a:17:ef:cf:31: f7:da:5a:5c:87:5f:4d:6d:d8:07:90:04:13:06:3d:ab:44:0d: ff:96:f5:76:ad:ae:ba:0b:79:e8:fd:be:1b:b0:89:12:30:41: 3e:2d:7f:fb:4b:ea:2f:21:98:52:50:98:7f:db:d3:b2:4b:eb: 4e:e2:5c:b9:0e:ec:24:1f:25:1d:86:24:de:cb:a0:13:de:f2: c3:0a:6a:67:92:6d:2f:63:f0:97:42:15:5a:70:a5:51:ef:64: c7:6f:c8:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPmrHYHMJiqm8iQGJKBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGZjMGZiYTFiODM2YzIzZmY2ZGY0NjhjOGFiZjdkM2E4 MjE2Y2UwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjgwYWMxZGFkNjAyMjU0N2FkYzkyMzM4ZTE0MjJiZTY3MDhmNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8XIBXjJ1H/HKL6X6LeHyxTxUsgv J3rovAWB4F1AYLvk6/mdlLZvNNi7FCmomaaiBJtrKOC8fN9EsyFGr0rFFI5+2C8c xzcNKW1VtBifoU56PJUy+fpGLHi+N0Or/0C9aYuAcP71gm07dXJxMed+V2w9T0Xi k/D1+ghKeHGVQGl/nYVBZO7tUNMddKn3i0m9MWULJDJ+RwIBvcd+7pUMu1J687Vr fRdjiu26OEQ77jVcA8/5Mv6SW+eVIgqkge4MRBdCrKmMsS4KOIVYJ8MAU3Z0UMOC 7kwSYlU4oxkdlh6pYzJ3UD5Vvk6/jlC/vS24Lbh01YJzLu0fHmzbAbtPxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+ArB2tYCJUetySM44UIr5nCPd4MB8GA1UdIwQY MBaAFIdPwPuhuDbCP/bfRoyKv306ghbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMt MmQ1NGU1ODJiNWUwLzEvNzRDc0hhMWdJbFI2M0pJempoUWl2bWNJOTNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMtMmQ1NGU1ODJiNWUw LzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9b0MA0G CSqGSIb3DQEBCwUAA4IBAQA+mSJEx29TMKSrlDmGbRMGwrLUNKUo9OfvO1LyDhmX J2Zk49IFX79ZApIfXBIhiDFdX83Ta9LrMAKz/hFx001WzZjqsmj4l9l8Z6vUa/JW 6neIkiwWS2OKO+guy+Jr4GF0rUfq+nNliPXSX2OGla8QTuyDdmUjVktgC3+sJytb sR6aRVzDFJXzRbWSPKfIKIs0cHZfzeRT1Lr3OekaehfvzzH32lpch19NbdgHkAQT Bj2rRA3/lvV2ra66C3no/b4bsIkSMEE+LX/7S+ovIZhSUJh/29OyS+tO4ly5Duwk HyUdhiTey6AT3vLDCmpnkm0vY/CXQhVacKVR72THb8jh -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:01 2026 by rpki-client