This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/7LWHjRPRc5Mqc6PjEVvxHU9li60.roa File: 7LWHjRPRc5Mqc6PjEVvxHU9li60.roa (raw, json) Hash identifier: rkyd9gjKfsmzi2GqgoHu5uafY8E9ecEWsP84KwNsmfU= Subject key identifier: EC:B5:87:8D:13:D1:73:93:2A:73:A3:E3:11:5B:F1:1D:4F:65:8B:AD Certificate issuer: /CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae Certificate serial: 019B797F39032B9BA025A935703D4917529A Authority key identifier: 90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/7LWHjRPRc5Mqc6PjEVvxHU9li60.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56914 IP address blocks: 91.228.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:39:03:2b:9b:a0:25:a9:35:70:3d:49:17:52:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecb5878d13d173932a73a3e3115bf11d4f658bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:dc:00:ad:e9:b6:92:af:cc:ae:50:54:f7: f3:d2:0b:24:34:65:ea:9b:f8:16:73:51:fd:30:46: ac:7b:76:3b:af:44:95:a4:dd:32:e3:ec:3b:26:7c: 80:4f:1b:9a:11:6e:c0:09:10:8a:29:4d:28:79:e9: 29:80:64:7f:30:7c:80:f3:96:a2:d4:1a:8f:73:92: 5b:ac:1d:a8:ba:36:53:75:b5:b1:c6:7b:16:71:31: aa:d8:ad:e5:c2:98:e7:2c:9b:98:5e:6b:ca:89:08: 05:fc:3d:5d:bb:41:30:5b:94:02:d9:c9:02:c9:23: 06:d7:81:f7:92:94:90:69:59:f9:fe:61:12:94:96: f5:7d:26:e1:98:f3:4b:8c:89:14:87:bf:f5:ad:8a: b4:13:26:e5:80:c9:01:7d:04:aa:57:b4:61:70:67: 02:0f:bf:a8:05:a6:4f:1d:23:24:70:bb:17:f0:aa: b3:68:98:5b:48:9b:16:75:8d:83:4b:e1:02:26:6b: bd:45:10:dd:ba:f9:e3:a2:a2:f5:2e:f4:33:e0:68: cc:38:ce:95:7c:d7:46:8b:3b:5c:8f:a1:4c:91:d1: 08:ce:f9:80:e0:b5:8f:85:f4:68:44:b0:e1:5e:dd: c2:86:94:7d:f5:72:87:4f:74:f2:72:d7:e0:7a:cb: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B5:87:8D:13:D1:73:93:2A:73:A3:E3:11:5B:F1:1D:4F:65:8B:AD X509v3 Authority Key Identifier: keyid:90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/7LWHjRPRc5Mqc6PjEVvxHU9li60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.248.0/24 Signature Algorithm: sha256WithRSAEncryption 28:8c:99:f9:dc:32:43:b4:5a:28:d9:a2:e8:f0:56:c4:cc:2f: 4a:a3:60:dd:ce:e5:9b:66:75:95:c9:12:38:b4:c5:6b:7a:e8: 72:d2:25:25:9c:12:2d:b5:28:52:d5:43:cc:82:fc:c7:8f:dc: 1a:bb:ce:56:aa:93:7e:66:69:67:dd:d1:45:1c:66:3a:7e:9f: f0:e3:a0:bb:19:3a:e1:c8:83:5c:ef:8d:03:f3:0a:6e:ee:98: 52:ec:dd:d8:56:d3:4c:3b:51:78:87:38:9e:a4:e0:18:3c:f2: 84:5f:10:7d:be:5e:b8:d1:9d:d9:7f:0d:b8:42:66:80:f9:08: ab:19:dc:5f:ae:d4:95:42:49:a6:c1:53:a1:75:54:43:4b:b1: 5c:cb:83:d0:81:e5:62:1e:22:61:30:b3:0b:71:d6:a8:ee:97: df:f5:f8:ad:fb:6d:b7:8c:bf:89:f7:95:eb:fd:89:0f:bd:6f: 0e:d6:36:98:01:35:1d:46:ff:d7:b1:fa:2f:b6:7e:28:28:b6: b0:74:b1:3e:2e:4b:02:9d:cb:d2:c7:7b:58:9c:c7:93:8e:cc: 77:0f:69:22:90:d1:41:51:c4:1a:d4:21:00:27:3a:6e:ae:c1: 39:5e:0c:06:97:ae:a6:f6:54:f5:95:73:07:26:96:c6:bd:56: cf:c9:b3:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzkDK5ugJak1cD1JF1KaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYzBmMTU1YzgyNjdlYzgxZTEwODNiN2RmYjkzZjM0ZTli OTAxYWUwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2I1ODc4ZDEzZDE3MzkzMmE3M2EzZTMxMTViZjExZDRmNjU4YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFLcAK3ptpKvzK5QVPfz0gskNGXq m/gWc1H9MEase3Y7r0SVpN0y4+w7JnyATxuaEW7ACRCKKU0oeekpgGR/MHyA85ai 1BqPc5JbrB2oujZTdbWxxnsWcTGq2K3lwpjnLJuYXmvKiQgF/D1du0EwW5QC2ckC ySMG14H3kpSQaVn5/mESlJb1fSbhmPNLjIkUh7/1rYq0EyblgMkBfQSqV7RhcGcC D7+oBaZPHSMkcLsX8KqzaJhbSJsWdY2DS+ECJmu9RRDduvnjoqL1LvQz4GjMOM6V fNdGiztcj6FMkdEIzvmA4LWPhfRoRLDhXt3ChpR99XKHT3TyctfgestLsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOy1h40T0XOTKnOj4xFb8R1PZYutMB8GA1UdIwQY MBaAFJDA8VXIJn7IHhCDt9+5PzTpuQGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEt NTk2MWQzNDZhMTcyLzEvN0xXSGpSUFJjNU1xYzZQakVWdnhIVTlsaTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEtNTk2MWQzNDZhMTcy LzEva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+T4MA0G CSqGSIb3DQEBCwUAA4IBAQAojJn53DJDtFoo2aLo8FbEzC9Ko2DdzuWbZnWVyRI4 tMVreuhy0iUlnBIttShS1UPMgvzHj9wau85WqpN+Zmln3dFFHGY6fp/w46C7GTrh yINc740D8wpu7phS7N3YVtNMO1F4hziepOAYPPKEXxB9vl640Z3Zfw24QmaA+Qir GdxfrtSVQkmmwVOhdVRDS7Fcy4PQgeViHiJhMLMLcdao7pff9fit+223jL+J95Xr /YkPvW8O1jaYATUdRv/Xsfovtn4oKLawdLE+LksCncvSx3tYnMeTjsx3D2kikNFB UcQa1CEAJzpursE5XgwGl66m9lT1lXMHJpbGvVbPybPN -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:01 2026 by rpki-client