This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9lcnu8wyjs4LbTkWQN1lC3JlmjQ.roa File: 9lcnu8wyjs4LbTkWQN1lC3JlmjQ.roa (raw, json) Hash identifier: 0v3dlES9/nmEkLaJKQv/BjTD5ugXnOfmjmVCnWmU+A8= Subject key identifier: F6:57:27:BB:CC:32:8E:CE:0B:6D:39:16:40:DD:65:0B:72:65:9A:34 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E673ADF2699DEE504080ABA006C75 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9lcnu8wyjs4LbTkWQN1lC3JlmjQ.roa Signing time: Thu 01 Jan 2026 12:18:05 +0000 ROA not before: Thu 01 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.200.223.0/24 maxlen: 24 91.226.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:67:3a:df:26:99:de:e5:04:08:0a:ba:00:6c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f65727bbcc328ece0b6d391640dd650b72659a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:a6:6d:92:22:8d:16:ea:e4:ba:5a:56:08: 88:89:4b:19:9c:f2:5e:a3:53:d8:b5:bd:55:75:97: 9b:13:29:d3:ac:df:c9:3d:e1:86:4e:5e:6b:73:d0: 7c:9d:b7:53:9c:bf:73:7d:21:a8:b3:04:8b:93:e1: 58:6e:28:02:87:0a:01:37:63:7e:de:e0:8e:d6:af: 8a:ea:10:44:c4:67:40:ba:cb:33:00:d8:5a:92:f3: de:e0:53:37:99:1b:ac:22:7d:6e:fe:d6:9f:4a:95: fb:f2:62:a0:9e:ea:12:5f:d8:2b:cb:a1:de:5a:ae: 0b:e8:28:c3:ea:93:9d:e9:8e:99:04:33:c8:9a:66: 84:a6:56:70:d7:6c:7f:6b:8f:6f:ab:68:81:9b:13: af:e8:ec:ee:5c:8d:0a:87:3c:bb:02:bf:01:bd:46: d1:e6:89:ff:be:c3:f3:0b:4a:c3:b3:ee:02:c3:9a: 4b:7d:fb:72:95:14:b1:9d:1e:28:ec:b5:84:1b:67: 41:6b:74:85:e6:bf:97:d9:13:3e:f8:15:b2:bb:48: 3d:52:cf:0f:dd:25:31:a8:f4:21:44:b7:21:0a:e7: af:7f:c1:b2:7d:da:d4:95:b7:19:69:98:ae:9e:eb: 25:8a:5b:24:01:95:98:92:b8:07:3d:69:0d:14:9f: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:57:27:BB:CC:32:8E:CE:0B:6D:39:16:40:DD:65:0B:72:65:9A:34 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9lcnu8wyjs4LbTkWQN1lC3JlmjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.223.0/24 91.226.56.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:b6:c1:d3:6e:d8:8d:81:d1:4f:e4:85:9a:e8:bd:c5:6c:6c: 9d:0c:5f:62:aa:d4:1e:97:8d:04:2f:eb:9b:c7:96:a0:42:7c: 0c:14:f7:3c:90:25:a9:45:f7:90:6a:70:7e:9b:af:54:c8:12: ac:70:c1:3c:0c:8b:44:1b:9a:cb:84:a8:19:21:16:72:d0:51: 1b:8d:37:15:ad:11:f3:05:73:6f:8a:25:36:78:25:50:ee:f2: 35:bb:42:fe:49:43:15:c6:e1:33:40:f0:bf:49:0e:e2:51:3f: 67:d9:94:bd:6b:13:d4:8c:f0:ec:c2:75:12:0c:15:41:a9:cd: c8:bd:aa:dd:b5:82:4e:65:68:79:84:af:55:7d:09:f6:65:49: 46:c7:43:c9:d2:87:b5:9a:16:17:f0:46:32:d9:dc:c1:d2:8a: 8c:d6:45:87:d0:d4:16:0d:53:ca:90:c8:f2:a5:98:40:f0:0f: 1d:9c:15:71:0d:75:2e:60:61:9c:dd:4d:3a:80:5e:fd:b7:a1: 3b:45:86:e8:75:ee:0c:e6:0f:83:34:2d:6a:01:de:d8:32:1f: 93:b0:3c:a5:ba:93:5d:b0:bc:af:7b:f8:c6:b5:44:99:68:a1: cf:9e:35:ee:7d:32:c6:2e:35:2e:08:66:0f:fc:ae:9f:59:81: 57:36:f4:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fmc63yaZ3uUECAq6AGx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjU3MjdiYmNjMzI4ZWNlMGI2ZDM5MTY0MGRkNjUwYjcyNjU5YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrembZIijRbq5LpaVgiIiUsZnPJe o1PYtb1VdZebEynTrN/JPeGGTl5rc9B8nbdTnL9zfSGoswSLk+FYbigChwoBN2N+ 3uCO1q+K6hBExGdAusszANhakvPe4FM3mRusIn1u/tafSpX78mKgnuoSX9gry6He Wq4L6CjD6pOd6Y6ZBDPImmaEplZw12x/a49vq2iBmxOv6OzuXI0Khzy7Ar8BvUbR 5on/vsPzC0rDs+4Cw5pLfftylRSxnR4o7LWEG2dBa3SF5r+X2RM++BWyu0g9Us8P 3SUxqPQhRLchCuevf8GyfdrUlbcZaZiunuslilskAZWYkrgHPWkNFJ9eSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPZXJ7vMMo7OC205FkDdZQtyZZo0MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvOWxjbnU4d3lqczRMYlRrV1FOMWxDM0psbWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8jfAwQA W+I4MA0GCSqGSIb3DQEBCwUAA4IBAQAatsHTbtiNgdFP5IWa6L3FbGydDF9iqtQe l40EL+ubx5agQnwMFPc8kCWpRfeQanB+m69UyBKscME8DItEG5rLhKgZIRZy0FEb jTcVrRHzBXNviiU2eCVQ7vI1u0L+SUMVxuEzQPC/SQ7iUT9n2ZS9axPUjPDswnUS DBVBqc3IvardtYJOZWh5hK9VfQn2ZUlGx0PJ0oe1mhYX8EYy2dzB0oqM1kWH0NQW DVPKkMjypZhA8A8dnBVxDXUuYGGc3U06gF79t6E7RYbode4M5g+DNC1qAd7YMh+T sDylupNdsLyve/jGtUSZaKHPnjXufTLGLjUuCGYP/K6fWYFXNvQX -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:58 2026 by rpki-client