This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa File: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (raw, json) Hash identifier: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U= Subject key identifier: 8A:09:E6:5A:A5:4C:8E:39:03:40:DE:58:E2:A0:DE:C9:EB:99:FC:07 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379ACFA10D6B4454602B23907473B1 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21743 IP address blocks: 91.234.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9a:cf:a1:0d:6b:44:54:60:2b:23:90:74:73:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a09e65aa54c8e390340de58e2a0dec9eb99fc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:23:f4:fe:d2:49:f6:69:7c:dc:ba:02:78: 44:9e:b3:5e:09:f4:7b:a0:df:34:ce:c8:f8:83:6b: 24:42:59:8b:ee:33:73:cf:f8:82:d4:e4:1f:0b:6e: f8:4b:45:46:16:ce:06:1f:37:10:5a:95:ee:0e:74: 7a:8d:79:53:5f:c3:b6:73:b2:a8:dc:cd:35:44:2b: da:77:5d:22:63:b1:6b:01:98:b6:1b:06:bf:3c:c6: ec:7b:ea:d2:65:33:97:c0:61:c8:4a:43:78:a0:ed: e4:9c:db:f9:f2:4b:41:81:6a:d1:27:0c:ec:9a:3e: 65:09:e8:92:be:a5:bf:80:ed:3e:1b:a6:76:0c:58: 9d:08:58:e3:15:d9:7c:fe:4b:f2:c4:83:cf:71:75: fe:f4:ab:ec:34:27:26:e8:41:2c:cd:ea:cc:ba:cd: 5c:9c:d9:ee:6d:c8:50:c2:b6:7a:7f:55:6d:bd:88: d2:53:dc:e1:4d:c7:0e:11:81:c6:2e:36:8b:4e:ac: 12:22:cb:66:ae:2c:2e:cb:e6:45:94:08:c8:58:ab: 31:d3:05:a0:c1:b9:5b:1f:aa:e3:14:7a:00:2a:21: 2c:d3:86:b1:2f:4f:24:8d:a1:cd:52:1d:dd:81:7c: 30:83:1c:b8:30:32:79:75:03:ae:6d:0c:28:92:b5: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:09:E6:5A:A5:4C:8E:39:03:40:DE:58:E2:A0:DE:C9:EB:99:FC:07 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.156.0/22 Signature Algorithm: sha256WithRSAEncryption 32:10:be:43:57:7c:14:a4:e4:36:5c:08:92:c0:91:e9:a6:6e: a7:d8:74:a3:14:82:bf:e5:dd:6e:fb:0d:4e:ea:2a:ad:53:aa: 7b:71:82:7c:6c:b9:b5:6b:02:e1:8c:fa:0a:7d:53:d9:5a:b1: 50:c3:5d:10:04:04:4f:41:99:46:f6:47:a0:41:0b:0f:04:70: 3e:bb:f6:59:6c:9d:15:63:62:d0:8b:ba:45:e3:59:a3:88:e6: ca:ec:f2:71:13:8c:3b:2e:96:ee:d1:b4:35:f0:c9:05:62:25: 43:38:a5:1f:d2:c9:00:2c:fa:72:f2:5f:3c:fd:22:9c:f0:48: 6b:cb:73:d5:03:7e:24:5e:bb:da:08:6a:44:5e:02:7d:f5:6f: 6a:0a:49:32:c0:22:0e:69:4f:a0:f3:a8:47:3a:d5:a8:79:ad: d1:82:6c:d2:89:31:fa:ed:64:98:e4:b5:e6:e9:b1:c0:cf:fa: 70:66:ad:3a:59:5d:79:04:a9:94:2d:f4:5a:b8:64:f0:ca:21: 2d:17:99:72:4b:90:fd:f3:2b:a7:f3:8c:c7:a4:71:e1:80:4a: 27:a0:6c:7f:79:98:99:93:2a:0a:c9:a6:4a:e5:c1:18:a9:b0: 12:13:fa:70:31:53:87:c6:f7:29:f6:e7:e5:45:10:b2:d8:c4: 2e:fc:54:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5rPoQ1rRFRgKyOQdHOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTA5ZTY1YWE1NGM4ZTM5MDM0MGRlNThlMmEwZGVjOWViOTlmYzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3cj9P7SSfZpfNy6AnhEnrNeCfR7 oN80zsj4g2skQlmL7jNzz/iC1OQfC274S0VGFs4GHzcQWpXuDnR6jXlTX8O2c7Ko 3M01RCvad10iY7FrAZi2Gwa/PMbse+rSZTOXwGHISkN4oO3knNv58ktBgWrRJwzs mj5lCeiSvqW/gO0+G6Z2DFidCFjjFdl8/kvyxIPPcXX+9KvsNCcm6EEszerMus1c nNnubchQwrZ6f1VtvYjSU9zhTccOEYHGLjaLTqwSIstmriwuy+ZFlAjIWKsx0wWg wblbH6rjFHoAKiEs04axL08kjaHNUh3dgXwwgxy4MDJ5dQOubQwokrUDjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIoJ5lqlTI45A0DeWOKg3snrmfwHMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvaWdubVdxVk1qamtEUU41WTRxRGV5ZXVaX0FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+qcMA0G CSqGSIb3DQEBCwUAA4IBAQAyEL5DV3wUpOQ2XAiSwJHppm6n2HSjFIK/5d1u+w1O 6iqtU6p7cYJ8bLm1awLhjPoKfVPZWrFQw10QBARPQZlG9kegQQsPBHA+u/ZZbJ0V Y2LQi7pF41mjiObK7PJxE4w7Lpbu0bQ18MkFYiVDOKUf0skALPpy8l88/SKc8Ehr y3PVA34kXrvaCGpEXgJ99W9qCkkywCIOaU+g86hHOtWoea3RgmzSiTH67WSY5LXm 6bHAz/pwZq06WV15BKmULfRauGTwyiEtF5lyS5D98yun84zHpHHhgEonoGx/eZiZ kyoKyaZK5cEYqbASE/pwMVOHxvcp9uflRRCy2MQu/FSk -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:59 2026 by rpki-client