This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/kDYFCwOTqCtWju9awtc-WWDQSp4.roa File: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (raw, json) Hash identifier: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU= Subject key identifier: 90:36:05:0B:03:93:A8:2B:56:8E:EF:5A:C2:D7:3E:59:60:D0:4A:9E Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Certificate serial: 019B7DCA15B30EA35AC80DF4DAFC51E70F8E Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/kDYFCwOTqCtWju9awtc-WWDQSp4.roa Signing time: Fri 02 Jan 2026 08:19:14 +0000 ROA not before: Fri 02 Jan 2026 08:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57508 IP address blocks: 91.220.110.0/24 maxlen: 24 185.221.232.0/22 maxlen: 22 2001:67c:2aac::/48 maxlen: 48 2a0c:7000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:15:b3:0e:a3:5a:c8:0d:f4:da:fc:51:e7:0f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Validity Not Before: Jan 2 08:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9036050b0393a82b568eef5ac2d73e5960d04a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:e4:d2:0f:a6:70:86:28:bc:75:1e:27:11: f9:f8:9a:a7:ba:1a:0f:a8:7e:0a:fe:94:10:87:c3: d8:8c:20:20:34:5b:2c:ad:49:da:25:37:e0:2a:6c: e1:70:60:3e:3c:55:6d:ab:9e:d0:95:e1:0d:a6:e8: 1d:44:a4:61:35:41:a1:ab:76:0c:1b:cd:b1:40:4a: 00:90:11:b9:8b:94:60:82:4b:9b:e5:41:ee:30:10: 62:45:d5:0b:2d:00:79:a3:c0:62:28:f7:23:38:d7: 5e:71:45:64:43:aa:7c:7d:0f:b0:3e:3c:36:ef:b2: 55:4f:9d:55:6d:c0:c4:7d:fb:dc:f6:78:a9:b6:7a: d7:bc:29:0d:9b:28:28:05:14:aa:a3:6c:a1:7e:2f: e8:b4:b9:01:a3:60:4b:5e:8f:0d:bf:62:b5:62:d5: 8a:8b:03:60:53:7f:78:b2:6b:fd:18:6d:e6:56:bf: d0:6a:d2:92:32:c2:18:cc:9c:e7:0c:d1:2c:fb:d5: 2e:89:55:e0:6e:cc:54:f2:eb:43:b2:2c:fe:17:87: f1:91:30:4a:a1:9f:f4:e5:30:be:e3:7e:ff:a1:58: c1:ac:f5:69:8f:3a:5a:85:e6:d0:32:ad:9f:83:26: 7c:74:81:a5:eb:80:59:9c:de:d9:10:64:3a:3c:d3: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:36:05:0B:03:93:A8:2B:56:8E:EF:5A:C2:D7:3E:59:60:D0:4A:9E X509v3 Authority Key Identifier: keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/kDYFCwOTqCtWju9awtc-WWDQSp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.110.0/24 185.221.232.0/22 IPv6: 2001:67c:2aac::/48 2a0c:7000::/29 Signature Algorithm: sha256WithRSAEncryption 38:0d:47:a7:8b:00:bc:dc:e2:31:b5:e4:40:23:41:12:cf:9b: 1d:c2:97:06:98:51:85:fa:e4:8f:23:71:bb:ae:dc:e4:67:f7: 48:bd:db:cf:0a:c6:82:97:6f:f7:68:c7:5a:9e:5e:ed:26:88: 97:96:2f:99:47:33:b6:3c:b1:dc:2b:5d:3d:5d:b4:8a:5e:c1: 44:06:44:ec:5a:5a:96:9d:24:ea:7c:1b:6c:9c:a8:67:9e:3f: 5b:67:1e:8b:3d:e5:0a:38:da:94:a1:d8:a4:b9:74:28:b3:36: ef:06:d1:40:c7:b5:0c:2c:fe:71:92:e7:52:fb:96:9d:a3:da: 2a:cf:13:35:b6:3d:9f:af:67:f7:dc:47:43:03:0e:c3:1b:5b: 31:fc:ea:96:61:e3:c2:2c:a4:ed:1d:a2:43:73:11:9d:1e:c3: 8e:1f:e9:8b:e0:2d:a4:99:a7:e6:dc:4a:fc:d0:55:bd:ff:a8: 99:eb:75:f8:5b:cf:39:48:a5:a3:58:92:6e:1d:98:b1:a5:a7: c0:32:ab:c0:86:24:e0:f9:a2:b5:f8:23:0f:b0:7b:5b:79:7d: 72:05:e8:f5:ee:ad:e3:1e:1e:9d:26:37:12:6c:41:50:f1:a3: 1d:33:f7:e1:c1:3f:82:89:ac:2f:4c:f3:e0:e5:89:3c:cd:5a: 5a:8c:c5:28 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9yhWzDqNayA302vxR5w+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx MTg2ZGQwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDM2MDUwYjAzOTNhODJiNTY4ZWVmNWFjMmQ3M2U1OTYwZDA0YTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx77k0g+mcIYovHUeJxH5+JqnuhoP qH4K/pQQh8PYjCAgNFssrUnaJTfgKmzhcGA+PFVtq57QleENpugdRKRhNUGhq3YM G82xQEoAkBG5i5Rggkub5UHuMBBiRdULLQB5o8BiKPcjONdecUVkQ6p8fQ+wPjw2 77JVT51VbcDEffvc9niptnrXvCkNmygoBRSqo2yhfi/otLkBo2BLXo8Nv2K1YtWK iwNgU394smv9GG3mVr/QatKSMsIYzJznDNEs+9UuiVXgbsxU8utDsiz+F4fxkTBK oZ/05TC+437/oVjBrPVpjzpahebQMq2fgyZ8dIGl64BZnN7ZEGQ6PNNhIwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJA2BQsDk6grVo7vWsLXPllg0EqeMB8GA1UdIwQY MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt YmM1MTA0YTM4NWUyLzEva0RZRkN3T1RxQ3RXanU5YXd0Yy1XV0RRU3A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW9xuAwQC ud3oMBYEAgACMBADBwAgAQZ8KqwDBQMqDHAAMA0GCSqGSIb3DQEBCwUAA4IBAQA4 DUeniwC83OIxteRAI0ESz5sdwpcGmFGF+uSPI3G7rtzkZ/dIvdvPCsaCl2/3aMda nl7tJoiXli+ZRzO2PLHcK109XbSKXsFEBkTsWlqWnSTqfBtsnKhnnj9bZx6LPeUK ONqUodikuXQoszbvBtFAx7UMLP5xkudS+5ado9oqzxM1tj2fr2f33EdDAw7DG1sx /OqWYePCLKTtHaJDcxGdHsOOH+mL4C2kmafm3Er80FW9/6iZ63X4W885SKWjWJJu HZixpafAMqvAhiTg+aK1+CMPsHtbeX1yBej17q3jHh6dJjcSbEFQ8aMdM/fhwT+C iawvTPPg5Yk8zVpajMUo -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:48 2026 by rpki-client