This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/IajIOki8N-Tfh1ubDWlzntjVI-4.roa File: IajIOki8N-Tfh1ubDWlzntjVI-4.roa (raw, json) Hash identifier: LVVvbRrnTDOYtO0x8wssTk+uRYbqHCBuMGCLmMJuSJY= Subject key identifier: 21:A8:C8:3A:48:BC:37:E4:DF:87:5B:9B:0D:69:73:9E:D8:D5:23:EE Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e Certificate serial: 019B7834F04E9263F1C79A48B1BB0C35A670 Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/IajIOki8N-Tfh1ubDWlzntjVI-4.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56565 IP address blocks: 91.208.238.0/24 maxlen: 24 91.230.251.0/24 maxlen: 24 91.236.205.0/24 maxlen: 24 194.0.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f0:4e:92:63:f1:c7:9a:48:b1:bb:0c:35:a6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21a8c83a48bc37e4df875b9b0d69739ed8d523ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:82:9f:c7:8a:30:96:93:db:e7:28:5e:f8: 80:4d:e3:14:e0:5d:c4:52:7f:e3:46:0d:82:86:99: 34:70:7a:bb:4a:e1:15:bb:38:09:2f:cf:55:af:9b: 9b:10:3f:26:67:6f:7a:dd:75:5e:5b:94:b7:fd:89: a1:93:1d:6f:93:a8:4c:3d:af:c6:e4:10:3a:f6:bb: 7d:12:44:4f:8e:1c:6a:e2:7b:b0:60:66:7b:59:59: 3f:36:d3:0e:70:b7:d0:94:5b:e4:b2:58:aa:55:e6: d5:19:d9:a4:77:46:1f:f6:5b:e9:26:14:f1:33:62: 00:f2:36:a4:53:59:b7:43:5e:1f:62:56:28:53:f9: 0a:cd:d6:e8:c5:58:b1:98:d7:b9:ca:b4:19:a0:2f: 16:e9:8e:e9:fb:78:e3:83:0b:dc:b7:62:83:fb:5e: 44:c1:45:ff:ae:f2:77:84:48:b1:f5:fa:36:86:8f: 5d:ad:fd:7c:55:e9:b4:bf:bf:a2:83:b1:30:c1:a9: d3:55:59:6b:72:a9:ac:98:1f:ee:b5:8c:d0:47:4d: 9b:57:40:d8:2a:fd:29:ac:6a:2d:32:1e:21:d7:fc: e6:69:98:82:bd:3f:8d:b0:3d:73:30:3b:4d:8f:12: 2b:52:10:64:83:2d:f3:ad:48:e4:8e:02:cb:7e:57: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:C8:3A:48:BC:37:E4:DF:87:5B:9B:0D:69:73:9E:D8:D5:23:EE X509v3 Authority Key Identifier: keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/IajIOki8N-Tfh1ubDWlzntjVI-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.238.0/24 91.230.251.0/24 91.236.205.0/24 194.0.209.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:28:0a:d8:ab:2e:85:65:99:16:7f:86:ba:98:d5:33:c4:24: 40:29:c8:1b:1a:eb:b1:6a:72:7e:db:dc:32:73:ff:6a:bc:cd: 2f:4f:e9:2b:6b:4c:77:48:f8:68:b2:44:f8:54:31:22:86:29: b6:61:5a:aa:05:85:f0:01:1e:34:e5:76:aa:a6:21:6d:12:4d: cf:c0:db:81:8f:78:f5:8f:8f:1a:01:e7:f0:26:a0:54:58:94: af:f9:af:80:5f:1a:c1:00:02:b5:f8:49:5d:69:ee:d7:a1:ee: 48:36:e4:8b:7c:c3:49:a1:5d:03:8c:98:8b:d3:8b:89:b3:29: e4:2e:b3:35:37:f5:eb:ea:1b:6b:1a:de:23:fe:e8:13:b5:ea: ae:90:84:83:38:df:64:47:b5:00:e8:45:0e:85:b5:d2:5d:f0: 53:4d:62:f3:5e:d5:a8:84:1f:9f:3a:8c:2a:84:f4:d9:6c:21: 47:1f:1e:9c:02:54:9e:90:78:9d:04:48:d0:66:aa:89:f8:db: 60:8d:80:ee:27:4f:fd:d4:9c:56:ec:1d:65:c6:25:32:e5:91: 27:96:3d:a4:a9:6b:d8:07:57:0e:ad:62:8a:c6:11:bc:f1:92: 88:27:1b:d5:79:bf:39:f2:ff:b8:ce:da:14:04:1c:7c:63:1d: bf:8a:22:7a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NPBOkmPxx5pIsbsMNaZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODFjNzUzYjc3NjY1ZTdhNTlmOGU1MDgzMTRmMTU5MzU2 YzIyOGUwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWE4YzgzYTQ4YmMzN2U0ZGY4NzViOWIwZDY5NzM5ZWQ4ZDUyM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJuCn8eKMJaT2+coXviATeMU4F3E Un/jRg2Chpk0cHq7SuEVuzgJL89Vr5ubED8mZ2963XVeW5S3/Ymhkx1vk6hMPa/G 5BA69rt9EkRPjhxq4nuwYGZ7WVk/NtMOcLfQlFvksliqVebVGdmkd0Yf9lvpJhTx M2IA8jakU1m3Q14fYlYoU/kKzdboxVixmNe5yrQZoC8W6Y7p+3jjgwvct2KD+15E wUX/rvJ3hEix9fo2ho9drf18Vem0v7+ig7EwwanTVVlrcqmsmB/utYzQR02bV0DY Kv0prGotMh4h1/zmaZiCvT+NsD1zMDtNjxIrUhBkgy3zrUjkjgLLflcQKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCGoyDpIvDfk34dbmw1pc57Y1SPuMB8GA1UdIwQY MBaAFCuBx1O3dmXnpZ+OUIMU8Vk1bCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmIt NTg3YWVmNmRjMjg1LzEvSWFqSU9raThOLVRmaDF1YkRXbHpudGpWSS00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmItNTg3YWVmNmRjMjg1 LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW9DuAwQA W+b7AwQAW+zNAwQAwgDRMA0GCSqGSIb3DQEBCwUAA4IBAQBeKArYqy6FZZkWf4a6 mNUzxCRAKcgbGuuxanJ+29wyc/9qvM0vT+kra0x3SPhoskT4VDEihim2YVqqBYXw AR405XaqpiFtEk3PwNuBj3j1j48aAefwJqBUWJSv+a+AXxrBAAK1+Eldae7Xoe5I NuSLfMNJoV0DjJiL04uJsynkLrM1N/Xr6htrGt4j/ugTtequkISDON9kR7UA6EUO hbXSXfBTTWLzXtWohB+fOowqhPTZbCFHHx6cAlSekHidBEjQZqqJ+NtgjYDuJ0/9 1JxW7B1lxiUy5ZEnlj2kqWvYB1cOrWKKxhG88ZKIJxvVeb858v+4ztoUBBx8Yx2/ iiJ6 -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:53 2026 by rpki-client