This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/on30vP_7lhEk_ANI-hC7N7ncjQc.roa File: on30vP_7lhEk_ANI-hC7N7ncjQc.roa (raw, json) Hash identifier: IwqyrOOuo/a85bmmWLflGufy3ZaNAVPI0XCwr1Nb6qU= Subject key identifier: A2:7D:F4:BC:FF:FB:96:11:24:FC:03:48:FA:10:BB:37:B9:DC:8D:07 Certificate issuer: /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad Certificate serial: 019B7E38D23389B4A61599782085E0D9BA56 Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/on30vP_7lhEk_ANI-hC7N7ncjQc.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41064 IP address blocks: 91.203.184.0/22 maxlen: 22 193.93.124.0/22 maxlen: 22 2001:678:bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d2:33:89:b4:a6:15:99:78:20:85:e0:d9:ba:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a27df4bcfffb961124fc0348fa10bb37b9dc8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:ee:a3:2c:10:37:86:95:b6:33:b5:7c:aa: 34:b5:9d:ec:71:c2:62:1c:88:a4:06:f6:2e:7d:0a: e6:23:b6:f0:b0:4d:f9:95:94:b0:cf:2d:d1:61:51: 52:20:c8:d9:67:bc:34:7d:c5:9c:ba:f2:11:4a:95: 94:48:3c:91:63:bf:dd:df:9a:29:7d:7d:7d:87:99: 14:74:eb:4f:6f:eb:8f:c6:2e:2e:58:09:c1:83:94: a4:28:70:7a:af:19:48:ca:f2:c7:d6:8c:1a:40:36: 6a:ed:6c:5b:8a:61:cc:ad:31:41:29:38:68:b5:a6: d6:4a:5d:c4:83:1b:3d:52:a8:a4:e5:3c:9b:e5:5c: b9:85:5e:59:68:3e:a1:44:21:c9:e8:fa:4b:57:cb: 41:5d:0e:03:68:95:7b:3f:40:ed:92:92:f8:09:68: 4e:0d:ae:d7:77:02:a2:73:0b:33:3d:0a:f6:70:26: c7:37:dc:a5:33:32:f9:23:f4:5e:8a:b2:54:60:70: eb:32:3f:e3:e6:30:80:6f:d0:01:43:f3:93:f7:6d: 55:17:55:82:34:bb:ca:46:77:44:df:65:42:4a:e1: d3:12:ba:6b:c9:8c:fe:ab:3f:18:69:18:7b:6b:98: 02:d6:6c:0c:71:4c:7b:e3:ab:6a:45:ac:90:b4:0a: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:F4:BC:FF:FB:96:11:24:FC:03:48:FA:10:BB:37:B9:DC:8D:07 X509v3 Authority Key Identifier: keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/on30vP_7lhEk_ANI-hC7N7ncjQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.184.0/22 193.93.124.0/22 IPv6: 2001:678:bc0::/48 Signature Algorithm: sha256WithRSAEncryption 2e:b9:f3:b2:b5:fe:53:4e:28:c7:24:35:83:6f:8b:a8:22:d9: 0f:a3:8b:0e:86:28:11:d1:97:fe:58:a7:3e:f1:50:c7:09:e9: 05:30:e5:ee:27:ae:8b:aa:dc:af:e0:78:07:c4:d6:47:40:a4: f6:f5:b3:a2:00:a4:42:3c:62:40:f8:1a:96:30:2b:a9:05:27: 98:b7:2f:89:be:56:6c:c3:70:90:6c:f2:07:65:8d:af:cb:0a: 62:fe:0f:32:12:b3:24:83:1b:cf:ba:55:5e:42:51:46:b6:0b: 6e:c4:41:21:e9:0c:1b:4f:44:b0:71:47:55:74:63:d6:07:81: 02:51:e1:c9:ff:b4:95:da:8a:e1:89:5f:53:73:33:2d:be:c3: 92:f1:b6:b5:9c:35:c7:06:d1:23:c1:dc:55:7c:1c:dd:98:01: 3a:cb:cb:1f:f0:b9:e9:07:0b:70:d7:8e:0b:2e:0a:ec:1c:7c: 29:a8:e6:02:ff:9a:ae:20:c8:c5:79:92:5c:2f:0f:8f:22:e7: 45:92:47:a0:67:24:22:74:60:80:92:d3:77:04:ce:47:5d:d3: 1f:8c:70:e9:3d:a4:43:52:98:f7:6c:10:87:59:fe:88:d5:10: 75:3e:1b:e6:9f:f0:68:ff:f5:5c:a6:ec:9e:9b:cd:42:db:20: af:de:f4:5f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+ONIzibSmFZl4IIXg2bpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZTFhZmI1NWQ4YmIzZGZmMWYwZmU2MzA2ZjNlZjIwNzk1 ODVhYWQwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjdkZjRiY2ZmZmI5NjExMjRmYzAzNDhmYTEwYmIzN2I5ZGM4ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOzuoywQN4aVtjO1fKo0tZ3sccJi HIikBvYufQrmI7bwsE35lZSwzy3RYVFSIMjZZ7w0fcWcuvIRSpWUSDyRY7/d35op fX19h5kUdOtPb+uPxi4uWAnBg5SkKHB6rxlIyvLH1owaQDZq7WxbimHMrTFBKTho tabWSl3Egxs9Uqik5Tyb5Vy5hV5ZaD6hRCHJ6PpLV8tBXQ4DaJV7P0DtkpL4CWhO Da7XdwKicwszPQr2cCbHN9ylMzL5I/ReirJUYHDrMj/j5jCAb9ABQ/OT921VF1WC NLvKRndE32VCSuHTErpryYz+qz8YaRh7a5gC1mwMcUx746tqRayQtAorhQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKJ99Lz/+5YRJPwDSPoQuze53I0HMB8GA1UdIwQY MBaAFP3hr7Vdi7Pf8fD+Ywbz7yB5WFqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VHdnRWMkxzOV94OFA1akJ2UHZJSGxZV3EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lZDVjZTctMmUyYS00ZTBlLTk5ZDIt MTk2MmMxZDhjYmIzLzEvb24zMHZQXzdsaEVrX0FOSS1oQzdON25jalFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lZDVjZTctMmUyYS00ZTBlLTk5ZDItMTk2MmMxZDhjYmIz LzEvX2VHdnRWMkxzOV94OFA1akJ2UHZJSGxZV3EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCW8u4AwQC wV18MA8EAgACMAkDBwAgAQZ4C8AwDQYJKoZIhvcNAQELBQADggEBAC6587K1/lNO KMckNYNvi6gi2Q+jiw6GKBHRl/5Ypz7xUMcJ6QUw5e4nrouq3K/geAfE1kdApPb1 s6IApEI8YkD4GpYwK6kFJ5i3L4m+VmzDcJBs8gdlja/LCmL+DzISsySDG8+6VV5C UUa2C27EQSHpDBtPRLBxR1V0Y9YHgQJR4cn/tJXaiuGJX1NzMy2+w5LxtrWcNccG 0SPB3FV8HN2YATrLyx/wuekHC3DXjgsuCuwcfCmo5gL/mq4gyMV5klwvD48i50WS R6BnJCJ0YICS03cEzkdd0x+McOk9pENSmPdsEIdZ/ojVEHU+G+af8Gj/9Vym7J6b zULbIK/e9F8= -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:04 2026 by rpki-client