This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/t0X5t_3y1eMrgSVfnROrir2IJb4.roa File: t0X5t_3y1eMrgSVfnROrir2IJb4.roa (raw, json) Hash identifier: BPcyM2IeAIooAh+FVKFVf4qaLxjgFOkdsiFt2kQ2Eag= Subject key identifier: B7:45:F9:B7:FD:F2:D5:E3:2B:81:25:5F:9D:13:AB:8A:BD:88:25:BE Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be Certificate serial: 019B76EB18B8A07B3CA688884E11FEC6046B Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/t0X5t_3y1eMrgSVfnROrir2IJb4.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43487 IP address blocks: 91.240.180.0/22 maxlen: 22 91.240.180.0/24 maxlen: 24 91.240.181.0/24 maxlen: 24 91.240.182.0/24 maxlen: 24 91.240.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:18:b8:a0:7b:3c:a6:88:88:4e:11:fe:c6:04:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b745f9b7fdf2d5e32b81255f9d13ab8abd8825be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:bf:88:c7:80:66:6b:fa:ce:f9:38:a0:10: 84:e2:8b:cc:83:f2:13:f0:bb:fe:d0:31:59:10:73: 64:ec:07:e0:d4:91:87:97:24:5d:8d:5a:a5:44:c4: ec:24:52:e0:ba:b5:ff:fd:47:f0:1f:1c:8a:df:3b: e6:2a:8c:d6:56:83:95:94:94:53:d9:6e:4e:a0:14: 35:d3:d1:6d:7e:dc:f9:ee:ce:99:fe:4d:bc:64:ce: a2:ee:72:4b:59:88:eb:3b:4a:98:b8:e8:61:86:30: 7e:40:f9:56:d5:a0:f7:f3:c8:b1:cc:1f:c2:67:3e: c2:64:aa:f0:a2:5c:33:eb:8b:1b:a3:31:52:50:f7: 47:0b:09:e2:1a:11:94:e0:05:b4:f4:79:19:1a:7e: 9c:b0:55:b3:b2:ed:17:b3:9d:e7:4f:e5:75:c3:03: a3:52:cd:f1:8e:27:79:6b:6e:e7:d7:7d:9f:2c:94: d8:79:cf:56:ae:79:27:f9:86:bb:67:99:5a:4d:c8: 89:ae:97:86:42:82:a7:fd:77:e2:16:86:8d:45:71: 4d:46:a6:c3:45:59:08:f6:2a:1c:8e:38:52:c4:04: 1d:34:18:29:6d:df:7d:18:ce:53:48:2d:74:44:2b: 95:ed:d7:7f:21:40:ee:33:f5:a5:fc:89:5b:a2:f9: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:45:F9:B7:FD:F2:D5:E3:2B:81:25:5F:9D:13:AB:8A:BD:88:25:BE X509v3 Authority Key Identifier: keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/t0X5t_3y1eMrgSVfnROrir2IJb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.180.0/22 Signature Algorithm: sha256WithRSAEncryption 74:80:6a:eb:fa:d9:2d:0b:8c:50:1b:f2:8b:57:06:5e:f1:86: 1a:0a:c9:a1:b8:70:91:82:c3:01:48:55:21:97:92:46:c5:6f: cb:1a:45:6a:1a:63:24:62:11:14:94:0e:00:96:6d:10:4b:c7: 41:2a:47:de:ae:63:d9:a6:57:74:bb:5a:20:01:6a:3b:57:42: 7a:44:5f:50:f8:23:2e:ae:27:3b:3b:46:6a:1b:44:7f:c9:4e: 19:05:bb:7b:c8:fd:9e:a2:23:cb:58:ab:5e:4f:f5:48:50:47: 43:86:a8:52:82:47:60:d5:ca:c8:80:b5:58:65:7b:cc:16:89: c1:d1:44:e3:43:d3:67:99:c3:75:2d:9a:59:4a:bb:84:7f:47: 8b:31:0a:51:a1:04:2c:f3:c7:1e:f7:db:d6:01:12:5e:19:82: 80:62:1c:8e:d5:1a:90:a9:30:6f:5e:e0:12:43:8c:59:9c:13: 9e:c5:5e:bb:75:6e:46:c7:b0:5b:3b:d3:4f:54:c1:4a:84:9f: 97:76:98:e2:cd:6c:4f:79:76:cd:9e:0a:db:13:bb:da:91:ae: 2f:fa:ec:83:71:f4:8f:58:f2:e0:64:ba:bd:90:64:82:a4:1c: 45:f5:75:82:cc:3e:49:e4:96:01:a6:20:3d:1c:86:c0:78:df: 5d:17:1a:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xi4oHs8poiIThH+xgRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYjM2YWQyOGU1MjFlZGFiNGI0ZGVhMzQ5YTI3NzcyZDRi MmE3YmUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQ1ZjliN2ZkZjJkNWUzMmI4MTI1NWY5ZDEzYWI4YWJkODgyNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPK/iMeAZmv6zvk4oBCE4ovMg/IT 8Lv+0DFZEHNk7Afg1JGHlyRdjVqlRMTsJFLgurX//UfwHxyK3zvmKozWVoOVlJRT 2W5OoBQ109Ftftz57s6Z/k28ZM6i7nJLWYjrO0qYuOhhhjB+QPlW1aD388ixzB/C Zz7CZKrwolwz64sbozFSUPdHCwniGhGU4AW09HkZGn6csFWzsu0Xs53nT+V1wwOj Us3xjid5a27n132fLJTYec9Wrnkn+Ya7Z5laTciJrpeGQoKn/XfiFoaNRXFNRqbD RVkI9iocjjhSxAQdNBgpbd99GM5TSC10RCuV7dd/IUDuM/Wl/IlbovkNyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdF+bf98tXjK4ElX50Tq4q9iCW+MB8GA1UdIwQY MBaAFNKzatKOUh7atLTeo0mid3LUsqe+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zYTlhMGItZDQyNC00ZWNhLWE5Mzgt OTJhODc3YmIxOWY3LzEvdDBYNXRfM3kxZU1yZ1NWZm5ST3JpcjJJSmI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8zYTlhMGItZDQyNC00ZWNhLWE5MzgtOTJhODc3YmIxOWY3 LzEvMHJOcTBvNVNIdHEwdE42alNhSjNjdFN5cDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/C0MA0G CSqGSIb3DQEBCwUAA4IBAQB0gGrr+tktC4xQG/KLVwZe8YYaCsmhuHCRgsMBSFUh l5JGxW/LGkVqGmMkYhEUlA4Alm0QS8dBKkfermPZpld0u1ogAWo7V0J6RF9Q+CMu ric7O0ZqG0R/yU4ZBbt7yP2eoiPLWKteT/VIUEdDhqhSgkdg1crIgLVYZXvMFonB 0UTjQ9NnmcN1LZpZSruEf0eLMQpRoQQs88ce99vWARJeGYKAYhyO1RqQqTBvXuAS Q4xZnBOexV67dW5Gx7BbO9NPVMFKhJ+XdpjizWxPeXbNngrbE7vaka4v+uyDcfSP WPLgZLq9kGSCpBxF9XWCzD5J5JYBpiA9HIbAeN9dFxpx -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:20 2026 by rpki-client