This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa File: DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa (raw, json) Hash identifier: 0d9H9Swwc6nGZfIaFZU+ZW5R7VglLxDawLaZ1amO0uI= Subject key identifier: 0E:22:61:1B:D5:00:7F:90:2A:E8:BC:A0:86:82:BE:B2:03:D4:C3:FF Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7 Certificate serial: 019B7BA3DE4AAE9FB5107BDE5BC890749335 Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51735 IP address blocks: 91.220.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:de:4a:ae:9f:b5:10:7b:de:5b:c8:90:74:93:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e22611bd5007f902ae8bca08682beb203d4c3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:52:4d:85:3e:ab:5a:68:12:4e:c1:da:54: cb:c0:d0:a3:8a:9a:d4:1e:c2:12:34:88:17:f7:5e: 7e:b2:a3:87:1d:5a:79:0f:05:a4:7a:8a:e1:8a:3e: cb:b7:51:3e:0d:06:05:94:c7:9c:9b:df:d5:d6:22: c6:3a:a2:14:3a:e0:41:c4:e4:b6:db:6b:26:d6:63: 12:6b:79:ad:2c:e3:3b:2d:53:b0:1d:2f:ae:da:38: 82:ff:8e:b9:f1:85:f5:e9:45:eb:bc:79:2a:9a:ac: a9:8e:31:75:1e:ff:d8:52:cb:74:15:5d:68:bf:0a: e4:86:6a:5a:ec:01:70:93:7a:70:a2:fe:bf:8f:f9: b4:6e:80:e6:cb:e7:60:db:41:3b:9c:5e:83:4a:69: 31:ea:5c:54:86:4a:60:24:38:d2:b7:f5:e7:94:c2: 80:bf:b6:05:4a:1b:00:fa:1f:5a:4f:5c:90:2b:c6: e5:54:5d:e0:60:bd:7f:2f:40:04:b8:05:76:02:c4: 2a:ac:f9:40:61:3f:b4:cb:56:27:5c:f2:26:e8:b5: e9:b4:0c:53:b5:a2:ee:ea:3d:c6:76:93:ac:2d:dd: e7:f0:66:cd:6c:10:9a:d7:99:79:c0:3a:a3:2e:62: 09:b0:1d:c1:42:7f:8e:4c:be:13:e9:bd:9d:35:f7: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:22:61:1B:D5:00:7F:90:2A:E8:BC:A0:86:82:BE:B2:03:D4:C3:FF X509v3 Authority Key Identifier: keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.78.0/24 Signature Algorithm: sha256WithRSAEncryption b1:97:8c:3c:08:99:bb:09:2a:8b:34:81:0b:dd:c4:65:6c:f6: d1:f4:26:c7:17:e2:65:05:2c:fc:68:d3:a7:36:e9:88:aa:74: e2:90:e5:43:c9:d7:da:fb:af:ff:6a:7d:2d:ab:dc:b2:c6:a6: 93:66:8a:e9:01:ca:0f:bb:9a:56:21:a3:44:aa:04:3a:62:25: 95:11:4d:a8:68:92:07:fa:c1:42:54:90:75:7d:d3:71:60:d9: 73:df:14:2e:08:25:1b:af:f7:20:7e:bf:82:59:4f:cd:4c:77: 53:0d:ed:86:9d:76:f2:f9:c6:0e:87:fd:36:28:a3:9b:48:7c: 9f:16:77:e9:48:ce:14:55:25:10:33:f5:11:aa:a9:fa:0c:57: cc:d4:99:83:1a:75:12:c0:b4:f1:bc:56:b1:a7:53:68:86:22: 85:ec:d3:28:0e:45:78:91:d4:ce:b7:39:8c:88:3a:54:f0:00: 92:57:6e:62:3e:77:d2:ce:7c:00:5a:6a:48:7b:9c:b6:59:83: 9b:90:39:57:fa:38:a2:6f:5c:c7:b2:2d:45:ed:c1:ea:05:84: 0d:cd:3b:46:4c:5c:33:5d:ba:92:47:55:54:70:a6:4e:51:78: bb:35:ed:86:d4:12:86:40:2d:6f:81:44:b4:a6:e7:92:35:31: a2:6f:67:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o95Krp+1EHveW8iQdJM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTQ4OGM2NDAxYzhmNWU5NjllMTVkNjQ2NTFmYjRiMmQy ZGNkZjcwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTIyNjExYmQ1MDA3ZjkwMmFlOGJjYTA4NjgyYmViMjAzZDRjM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdBSTYU+q1poEk7B2lTLwNCjiprU HsISNIgX915+sqOHHVp5DwWkeorhij7Lt1E+DQYFlMecm9/V1iLGOqIUOuBBxOS2 22sm1mMSa3mtLOM7LVOwHS+u2jiC/4658YX16UXrvHkqmqypjjF1Hv/YUst0FV1o vwrkhmpa7AFwk3pwov6/j/m0boDmy+dg20E7nF6DSmkx6lxUhkpgJDjSt/XnlMKA v7YFShsA+h9aT1yQK8blVF3gYL1/L0AEuAV2AsQqrPlAYT+0y1YnXPIm6LXptAxT taLu6j3GdpOsLd3n8GbNbBCa15l5wDqjLmIJsB3BQn+OTL4T6b2dNfdykQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4iYRvVAH+QKui8oIaCvrID1MP/MB8GA1UdIwQY MBaAFEzkiMZAHI9elp4V1kZR+0stLc33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUt YWU4YzgxZjk2ZjQyLzEvRGlKaEc5VUFmNUFxNkx5Z2hvSy1zZ1BVd184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUtYWU4YzgxZjk2ZjQy LzEvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xOMA0G CSqGSIb3DQEBCwUAA4IBAQCxl4w8CJm7CSqLNIEL3cRlbPbR9CbHF+JlBSz8aNOn NumIqnTikOVDydfa+6//an0tq9yyxqaTZorpAcoPu5pWIaNEqgQ6YiWVEU2oaJIH +sFCVJB1fdNxYNlz3xQuCCUbr/cgfr+CWU/NTHdTDe2GnXby+cYOh/02KKObSHyf FnfpSM4UVSUQM/URqqn6DFfM1JmDGnUSwLTxvFaxp1NohiKF7NMoDkV4kdTOtzmM iDpU8ACSV25iPnfSznwAWmpIe5y2WYObkDlX+jiib1zHsi1F7cHqBYQNzTtGTFwz XbqSR1VUcKZOUXi7Ne2G1BKGQC1vgUS0pueSNTGib2em -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:11 2026 by rpki-client