This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/rHP4WUAqcSQvgCZtg8_htfcNuko.roa File: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (raw, json) Hash identifier: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ= Subject key identifier: AC:73:F8:59:40:2A:71:24:2F:80:26:6D:83:CF:E1:B5:F7:0D:BA:4A Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Certificate serial: 019B7DF57C73ADC6E0893B55C66468CF2637 Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/rHP4WUAqcSQvgCZtg8_htfcNuko.roa Signing time: Fri 02 Jan 2026 09:06:38 +0000 ROA not before: Fri 02 Jan 2026 09:06:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56702 IP address blocks: 91.226.222.0/23 maxlen: 23 91.226.222.0/24 maxlen: 24 91.226.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:f5:7c:73:ad:c6:e0:89:3b:55:c6:64:68:cf:26:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Validity Not Before: Jan 2 09:06:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac73f859402a71242f80266d83cfe1b5f70dba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:db:51:9e:6f:4d:ed:94:3d:f7:c6:c4:75: fe:b7:38:c5:03:b4:84:f8:2a:b7:e5:ca:34:9c:e6: 79:87:8d:e1:71:3d:e1:82:b9:e7:3b:1b:34:b1:5e: 8d:8c:11:68:ba:d3:a0:4e:3b:41:a4:50:94:83:67: 85:98:27:39:64:3d:b6:fc:31:3d:2b:62:98:cf:76: cf:fa:28:e5:8a:88:d1:bc:65:27:e8:a5:f8:ac:78: 33:34:23:13:26:1a:5b:6c:1e:d8:04:c4:dd:3d:93: b2:1c:f2:78:83:af:b2:58:50:78:db:1e:4b:75:19: a4:7e:51:28:c1:c4:ba:96:3b:e2:9d:14:c7:e5:ae: e9:4e:29:92:11:dc:4f:f2:87:fe:d5:28:6c:50:93: b1:69:20:cf:2d:98:5b:4b:5a:74:58:9b:53:ff:04: 99:cb:35:39:4e:70:ed:ad:1e:af:12:2d:05:51:9e: 94:73:a3:2a:9a:ab:ce:08:1e:ab:1b:b6:ea:08:c6: 88:be:8c:69:e1:96:c8:dd:1f:7d:2e:9b:33:67:af: 74:a8:71:f8:89:5a:a9:d6:d7:c5:65:16:ff:8b:72: 18:ac:22:14:0b:f5:cc:5a:1f:72:b4:f7:69:ee:2e: 74:79:5c:95:c3:70:4c:dd:36:89:e1:1c:e4:a1:44: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:73:F8:59:40:2A:71:24:2F:80:26:6D:83:CF:E1:B5:F7:0D:BA:4A X509v3 Authority Key Identifier: keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/rHP4WUAqcSQvgCZtg8_htfcNuko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.222.0/23 Signature Algorithm: sha256WithRSAEncryption 09:44:10:33:69:2d:a7:05:25:a8:b8:bc:ec:20:66:76:70:fb: 49:1c:86:a5:04:3a:ec:eb:be:e6:f9:77:cf:c1:31:38:80:84: 17:20:e9:ba:62:99:69:59:a8:9c:ea:0a:fe:15:f0:32:e3:04: 4c:04:f9:4a:b6:ee:ea:4d:c7:0b:09:30:c6:8b:3b:f7:13:f6: 05:35:aa:25:49:32:ab:40:d9:e4:fb:ae:56:93:50:cd:c1:92: 9e:99:88:96:82:8d:cd:75:ec:8c:02:99:5e:69:3e:ee:81:28: 1c:c6:58:7e:73:3a:4a:1e:20:b3:f4:b6:b3:15:9b:4e:99:e6: 01:04:d4:66:89:1f:92:49:23:ad:de:c3:a4:dc:9a:04:f1:5b: 8d:5e:b6:1b:6f:b8:06:a6:02:d1:fa:62:d1:61:2a:8c:15:78: a6:43:d5:5a:46:e2:1b:22:ff:b7:b2:ee:5f:aa:64:77:9d:03: 3b:cc:bf:09:4b:96:89:e6:d2:2f:13:de:42:51:cb:8f:25:42: ae:e2:d2:b0:d3:89:05:c2:44:69:7f:a4:8e:7f:a7:f8:42:32: b6:48:6b:93:72:9e:62:84:42:95:dc:a5:0c:a6:fb:e1:e5:9d: b2:6d:f8:3a:9f:8a:58:4e:73:42:38:17:56:8b:f1:4e:39:3c: df:ba:66:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt99XxzrcbgiTtVxmRozyY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1 MzFkNmEwHhcNMjYwMTAyMDkwNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzczZjg1OTQwMmE3MTI0MmY4MDI2NmQ4M2NmZTFiNWY3MGRiYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U3bUZ5vTe2UPffGxHX+tzjFA7SE +Cq35co0nOZ5h43hcT3hgrnnOxs0sV6NjBFoutOgTjtBpFCUg2eFmCc5ZD22/DE9 K2KYz3bP+ijliojRvGUn6KX4rHgzNCMTJhpbbB7YBMTdPZOyHPJ4g6+yWFB42x5L dRmkflEowcS6ljvinRTH5a7pTimSEdxP8of+1ShsUJOxaSDPLZhbS1p0WJtT/wSZ yzU5TnDtrR6vEi0FUZ6Uc6MqmqvOCB6rG7bqCMaIvoxp4ZbI3R99LpszZ690qHH4 iVqp1tfFZRb/i3IYrCIUC/XMWh9ytPdp7i50eVyVw3BM3TaJ4RzkoUTyUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxz+FlAKnEkL4AmbYPP4bX3DbpKMB8GA1UdIwQY MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct OGFkNmZmYjI2MTdkLzEvckhQNFdVQXFjU1F2Z0NadGc4X2h0ZmNOdWtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+LeMA0G CSqGSIb3DQEBCwUAA4IBAQAJRBAzaS2nBSWouLzsIGZ2cPtJHIalBDrs677m+XfP wTE4gIQXIOm6YplpWaic6gr+FfAy4wRMBPlKtu7qTccLCTDGizv3E/YFNaolSTKr QNnk+65Wk1DNwZKemYiWgo3NdeyMApleaT7ugSgcxlh+czpKHiCz9LazFZtOmeYB BNRmiR+SSSOt3sOk3JoE8VuNXrYbb7gGpgLR+mLRYSqMFXimQ9VaRuIbIv+3su5f qmR3nQM7zL8JS5aJ5tIvE95CUcuPJUKu4tKw04kFwkRpf6SOf6f4QjK2SGuTcp5i hEKV3KUMpvvh5Z2ybfg6n4pYTnNCOBdWi/FOOTzfumZK -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:29 2026 by rpki-client