This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J9v7IiuRP1pbAznPUNvJOlnWfvg.roa File: J9v7IiuRP1pbAznPUNvJOlnWfvg.roa (raw, json) Hash identifier: EYQYgTyVzWI0iNgScvYcbg1KIwbJ7qZmmAC63DQl9Q0= Subject key identifier: 27:DB:FB:22:2B:91:3F:5A:5B:03:39:CF:50:DB:C9:3A:59:D6:7E:F8 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019BD2C13DC3CB5279F71776EF04B913D560 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J9v7IiuRP1pbAznPUNvJOlnWfvg.roa Signing time: Sun 18 Jan 2026 20:17:18 +0000 ROA not before: Sun 18 Jan 2026 20:17:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 91.109.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:c1:3d:c3:cb:52:79:f7:17:76:ef:04:b9:13:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 18 20:17:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27dbfb222b913f5a5b0339cf50dbc93a59d67ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:2c:d3:4e:c2:8f:d3:08:d3:d0:4e:4d:94: 79:5a:e9:3e:22:88:03:50:05:09:94:4f:c4:ce:69: e1:bf:3d:0d:f7:70:6e:29:0a:9e:28:8e:74:2b:ad: 49:c9:da:65:92:64:8b:ec:68:11:87:74:b8:66:16: 73:01:de:dc:8a:e2:19:b7:f5:1c:0d:a5:32:b4:1e: ab:cf:1f:5f:47:58:5b:41:46:32:df:35:27:65:e7: fd:c1:da:95:d4:a7:31:78:6d:8d:97:08:0b:77:a5: 60:73:52:7e:e7:ab:05:bb:34:1c:f9:44:d3:9e:2f: cd:a3:61:e7:3a:5d:62:e0:14:50:e8:17:d5:2f:66: 4c:a0:7a:e1:f8:13:ad:8e:63:c5:d7:bb:30:ae:66: fc:07:c0:38:35:5e:f9:75:24:24:27:27:6f:a9:0c: cf:4b:e2:2a:e8:81:76:2c:56:00:c5:86:9e:15:17: de:78:14:bc:89:48:bd:82:60:10:45:b0:7d:ad:20: 62:a2:5c:9d:7f:ff:9b:35:8a:97:85:38:9e:15:b6: 39:63:50:90:40:1d:c6:8a:9a:14:97:de:31:dd:10: d2:22:eb:b4:ec:12:f4:6e:49:28:21:d3:ea:66:be: 75:32:ae:26:a2:52:c6:9d:08:5e:d1:6a:bc:c4:5f: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DB:FB:22:2B:91:3F:5A:5B:03:39:CF:50:DB:C9:3A:59:D6:7E:F8 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J9v7IiuRP1pbAznPUNvJOlnWfvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.46.0/24 Signature Algorithm: sha256WithRSAEncryption 88:aa:bd:2c:f5:72:16:a1:62:b1:d1:38:0a:e3:34:8b:cc:1e: c9:87:c9:ca:a6:7c:9a:b4:3b:1f:80:3c:ca:cd:02:cc:3f:a8: 60:b7:45:eb:f9:91:a0:27:9b:ac:14:7d:f6:b9:52:ea:50:c4: 78:6e:7a:26:0d:43:18:13:f9:78:f3:fe:94:d3:a4:23:df:9a: 04:4c:77:8c:b3:2e:7e:a9:ea:77:60:15:11:0c:94:31:a0:a3: 79:07:2a:b0:47:56:49:99:a9:de:98:83:db:4c:74:dc:75:2c: 18:a8:2a:cc:21:7e:e7:7c:8a:78:26:1f:51:86:25:e5:aa:af: a6:2a:7d:73:72:4c:9c:b6:10:e5:bb:71:28:fd:b1:3b:46:9b: 3b:e7:e7:7e:2a:44:6f:9b:17:3d:b0:77:67:8e:cb:d3:91:ba: 26:66:64:83:95:79:14:42:44:a7:76:02:89:dd:e8:00:9e:37: 78:59:bd:8a:d2:db:5a:51:c6:eb:81:df:8b:c4:ef:72:ba:90: a9:e2:12:cd:46:21:bc:79:dc:c7:e5:b9:96:c2:a8:0f:c6:be: 48:27:be:21:12:cc:87:df:50:f0:b6:8c:03:06:35:ff:cd:b9: 82:38:70:ae:31:92:b3:0a:47:c3:69:64:9e:1d:f7:1f:f4:d7: 2a:32:f0:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvSwT3Dy1J59xd27wS5E9VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTE4MjAxNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2RiZmIyMjJiOTEzZjVhNWIwMzM5Y2Y1MGRiYzkzYTU5ZDY3ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm0s007Cj9MI09BOTZR5Wuk+IogD UAUJlE/Ezmnhvz0N93BuKQqeKI50K61JydplkmSL7GgRh3S4ZhZzAd7ciuIZt/Uc DaUytB6rzx9fR1hbQUYy3zUnZef9wdqV1KcxeG2NlwgLd6Vgc1J+56sFuzQc+UTT ni/No2HnOl1i4BRQ6BfVL2ZMoHrh+BOtjmPF17swrmb8B8A4NV75dSQkJydvqQzP S+Iq6IF2LFYAxYaeFRfeeBS8iUi9gmAQRbB9rSBiolydf/+bNYqXhTieFbY5Y1CQ QB3GipoUl94x3RDSIuu07BL0bkkoIdPqZr51Mq4molLGnQhe0Wq8xF/P5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCfb+yIrkT9aWwM5z1DbyTpZ1n74MB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvSjl2N0lpdVJQMXBiQXpuUFVOdkpPbG5XZnZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW20uMA0G CSqGSIb3DQEBCwUAA4IBAQCIqr0s9XIWoWKx0TgK4zSLzB7Jh8nKpnyatDsfgDzK zQLMP6hgt0Xr+ZGgJ5usFH32uVLqUMR4bnomDUMYE/l48/6U06Qj35oETHeMsy5+ qep3YBURDJQxoKN5ByqwR1ZJmanemIPbTHTcdSwYqCrMIX7nfIp4Jh9RhiXlqq+m Kn1zckycthDlu3Eo/bE7Rps75+d+KkRvmxc9sHdnjsvTkbomZmSDlXkUQkSndgKJ 3egAnjd4Wb2K0ttaUcbrgd+LxO9yupCp4hLNRiG8edzH5bmWwqgPxr5IJ74hEsyH 31DwtowDBjX/zbmCOHCuMZKzCkfDaWSeHfcf9NcqMvAr -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:30 2026 by rpki-client