This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/d7QLV60EzdcK6Z9SHb-OI9Vui7M.roa File: d7QLV60EzdcK6Z9SHb-OI9Vui7M.roa (raw, json) Hash identifier: rchiT/bvXuEanUa+M3WmCKgTEc1BUzo1gca2cFJPRLs= Subject key identifier: 77:B4:0B:57:AD:04:CD:D7:0A:E9:9F:52:1D:BF:8E:23:D5:6E:8B:B3 Certificate issuer: /CN=71d8b09757333126dfb583480ea8e2d3d346c08d Certificate serial: 019B7834D08ED107D10FC98D9DFDC3B8D615 Authority key identifier: 71:D8:B0:97:57:33:31:26:DF:B5:83:48:0E:A8:E2:D3:D3:46:C0:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdiwl1czMSbftYNIDqji09NGwI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/d7QLV60EzdcK6Z9SHb-OI9Vui7M.roa Signing time: Thu 01 Jan 2026 06:18:05 +0000 ROA not before: Thu 01 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204949 IP address blocks: 91.220.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.mft rsync://rpki.ripe.net/repository/DEFAULT/cdiwl1czMSbftYNIDqji09NGwI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d0:8e:d1:07:d1:0f:c9:8d:9d:fd:c3:b8:d6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d8b09757333126dfb583480ea8e2d3d346c08d Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77b40b57ad04cdd70ae99f521dbf8e23d56e8bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:12:57:bb:09:af:ed:e1:f8:cf:15:c5:ec: 46:f9:56:40:0e:38:4c:7b:48:ea:c3:e9:4b:30:37: a2:e0:9f:18:c2:43:c7:1f:10:c6:9b:28:48:56:4c: c2:db:0d:49:0a:90:ac:97:84:ae:16:42:d8:4a:d7: ea:db:ac:bd:fb:28:d5:a9:63:03:cd:81:5e:ac:23: ba:18:a1:7b:e2:dc:7b:57:6d:db:a2:0f:a4:ef:ee: b1:d8:77:a1:2d:8d:74:81:9a:aa:0b:ab:c0:48:ae: 83:e2:e0:74:27:6c:44:17:71:eb:5b:ac:ca:b7:59: 3f:75:94:59:d5:ab:10:80:93:60:81:db:75:8d:76: 8e:90:bb:e7:f8:8b:ab:65:a3:0c:7f:9c:43:d1:86: c6:11:f1:37:11:06:ce:50:2e:a9:d9:0e:9e:6a:ce: ec:43:6f:1a:37:38:8b:1c:32:76:5c:5d:63:0c:83: f6:87:a4:e3:0d:76:f8:13:d2:c8:30:49:14:ea:6a: 82:a8:91:01:27:66:62:48:57:3a:10:cd:3b:bb:af: a4:cf:07:f3:d7:37:cd:54:e1:c9:23:ea:1a:3d:ae: af:88:3a:75:19:c9:21:dc:cf:a6:2a:bd:31:19:3c: b3:dc:27:a7:bf:16:be:04:d6:65:35:02:14:28:ba: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B4:0B:57:AD:04:CD:D7:0A:E9:9F:52:1D:BF:8E:23:D5:6E:8B:B3 X509v3 Authority Key Identifier: keyid:71:D8:B0:97:57:33:31:26:DF:B5:83:48:0E:A8:E2:D3:D3:46:C0:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdiwl1czMSbftYNIDqji09NGwI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/d7QLV60EzdcK6Z9SHb-OI9Vui7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6b9626-fb1a-445e-b95a-b002f35be739/1/cdiwl1czMSbftYNIDqji09NGwI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.20.0/24 Signature Algorithm: sha256WithRSAEncryption 87:9e:9e:42:9a:97:6c:a6:6f:9f:0e:b0:35:80:ce:f5:b7:5d: 65:c6:8a:07:b3:dd:33:5e:49:1e:26:20:4e:1a:b0:87:cd:a5: 37:ad:d8:06:95:a5:07:ea:44:f0:45:e7:9a:67:a0:8b:68:e7: b1:f0:d6:75:1e:1c:92:e0:82:41:3c:a6:42:f0:1e:9b:77:61: 9b:e6:9e:b5:c3:4c:be:4a:1e:d7:90:2d:36:03:de:18:42:7b: 97:50:74:70:f5:92:a2:a8:9b:0c:68:67:a3:2c:f6:20:db:ce: 9b:83:2e:e1:fe:ce:fd:98:f6:0d:93:18:c8:d8:26:87:7e:ad: 6a:60:95:5d:c5:71:8f:16:e8:5a:52:1c:eb:f9:6f:fd:73:fc: 6e:c2:c4:16:eb:a1:3f:a1:cd:2d:1d:21:dc:39:04:d1:a2:71: 5f:3b:ce:72:95:9d:02:e4:a1:80:06:ca:50:d0:39:a8:db:9e: 84:45:1a:43:41:47:3c:01:d1:3f:ce:5f:76:d7:4e:85:dd:de: 14:b9:72:e6:d6:13:f9:5f:a2:4e:9b:ea:f4:5f:a2:10:ef:06: ff:0e:72:d1:5d:24:22:49:e8:ee:44:e1:bd:90:03:a6:f2:40: f1:a7:9f:64:f3:f9:ea:54:7b:57:03:65:56:6e:36:60:50:4d: a1:0f:e6:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNCO0QfRD8mNnf3DuNYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDhiMDk3NTczMzMxMjZkZmI1ODM0ODBlYThlMmQzZDM0 NmMwOGQwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2I0MGI1N2FkMDRjZGQ3MGFlOTlmNTIxZGJmOGUyM2Q1NmU4YmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgESV7sJr+3h+M8VxexG+VZADjhM e0jqw+lLMDei4J8YwkPHHxDGmyhIVkzC2w1JCpCsl4SuFkLYStfq26y9+yjVqWMD zYFerCO6GKF74tx7V23bog+k7+6x2HehLY10gZqqC6vASK6D4uB0J2xEF3HrW6zK t1k/dZRZ1asQgJNggdt1jXaOkLvn+IurZaMMf5xD0YbGEfE3EQbOUC6p2Q6eas7s Q28aNziLHDJ2XF1jDIP2h6TjDXb4E9LIMEkU6mqCqJEBJ2ZiSFc6EM07u6+kzwfz 1zfNVOHJI+oaPa6viDp1Gckh3M+mKr0xGTyz3Cenvxa+BNZlNQIUKLpanQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHe0C1etBM3XCumfUh2/jiPVbouzMB8GA1UdIwQY MBaAFHHYsJdXMzEm37WDSA6o4tPTRsCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2Rpd2wxY3pNU2JmdFlOSURxamkwOU5Hd0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82Yjk2MjYtZmIxYS00NDVlLWI5NWEt YjAwMmYzNWJlNzM5LzEvZDdRTFY2MEV6ZGNLNlo5U0hiLU9JOVZ1aTdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82Yjk2MjYtZmIxYS00NDVlLWI5NWEtYjAwMmYzNWJlNzM5 LzEvY2Rpd2wxY3pNU2JmdFlOSURxamkwOU5Hd0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wUMA0G CSqGSIb3DQEBCwUAA4IBAQCHnp5Cmpdspm+fDrA1gM71t11lxooHs90zXkkeJiBO GrCHzaU3rdgGlaUH6kTwReeaZ6CLaOex8NZ1HhyS4IJBPKZC8B6bd2Gb5p61w0y+ Sh7XkC02A94YQnuXUHRw9ZKiqJsMaGejLPYg286bgy7h/s79mPYNkxjI2CaHfq1q YJVdxXGPFuhaUhzr+W/9c/xuwsQW66E/oc0tHSHcOQTRonFfO85ylZ0C5KGABspQ 0Dmo256ERRpDQUc8AdE/zl92106F3d4UuXLm1hP5X6JOm+r0X6IQ7wb/DnLRXSQi SejuROG9kAOm8kDxp59k8/nqVHtXA2VWbjZgUE2hD+aZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:30 2026 by rpki-client