This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/kN8hpyULYXpGgg0l4UycfzoLM_8.roa File: kN8hpyULYXpGgg0l4UycfzoLM_8.roa (raw, json) Hash identifier: p1hs9U044hjwHEauuvzM9PUu0iEmpC7Sk80cjjzAgHQ= Subject key identifier: 90:DF:21:A7:25:0B:61:7A:46:82:0D:25:E1:4C:9C:7F:3A:0B:33:FF Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6 Certificate serial: 019B7C1274E6F647CC3C04F2AB7A94721CA0 Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/kN8hpyULYXpGgg0l4UycfzoLM_8.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48419 IP address blocks: 91.209.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:74:e6:f6:47:cc:3c:04:f2:ab:7a:94:72:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90df21a7250b617a46820d25e14c9c7f3a0b33ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:27:d7:6a:37:6b:f1:02:14:da:72:08:00: cf:70:eb:af:80:e1:ff:4e:56:53:22:3d:b8:84:99: ca:2b:80:d8:95:8c:e0:00:01:9b:2e:74:74:fa:4d: d0:c2:95:67:ed:89:7e:fe:ab:b0:6d:aa:5e:1b:23: 61:0e:6d:9e:7c:83:0c:ce:cd:c8:06:03:b6:8e:2b: 3f:49:16:28:a9:8c:f6:da:fe:4b:0c:69:56:4b:5f: 55:ae:dc:a2:aa:02:87:e3:18:07:79:e6:d9:52:b0: db:7b:02:8f:bc:80:3a:4e:db:ee:e1:fa:17:19:6c: 5a:48:e9:7b:cb:0d:93:5f:97:07:db:29:0e:34:ae: 67:81:8a:2a:0b:63:40:65:f8:d6:0a:c1:61:a6:8d: 5b:29:71:51:db:c2:11:04:06:42:ff:94:7f:64:6b: 3b:cb:ba:83:d1:87:e3:31:d6:ed:02:bb:3c:da:ec: c2:b5:f2:ca:35:2c:f2:0d:b9:c5:b5:4d:44:0b:e1: f5:2e:7c:69:b8:d4:2b:ae:44:bb:2e:bc:53:41:83: fb:02:c9:6f:ae:dc:81:c5:34:cf:0c:ae:74:8e:09: 56:f0:d4:6a:f8:e1:cc:94:5d:89:2e:44:89:e3:11: 24:a0:3c:59:87:f1:6f:23:9a:05:7e:1d:c1:0c:3e: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DF:21:A7:25:0B:61:7A:46:82:0D:25:E1:4C:9C:7F:3A:0B:33:FF X509v3 Authority Key Identifier: keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/kN8hpyULYXpGgg0l4UycfzoLM_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.150.0/24 Signature Algorithm: sha256WithRSAEncryption 98:16:22:44:2e:62:6b:6d:a5:ba:16:a1:67:ce:c9:15:9e:81: cb:79:b6:31:f5:bf:ed:4e:99:a4:5b:99:b6:e1:45:a3:c5:b4: 86:f3:9f:8e:15:17:5a:16:97:4a:6a:09:4c:a4:f2:d3:74:3e: f8:fb:52:b5:2c:9d:25:d5:68:6c:b4:61:49:c2:d5:df:43:8c: 8c:0e:ec:3c:ac:a7:23:34:9c:53:af:46:a3:f4:28:40:4a:fc: 74:20:25:c3:ea:05:8b:6d:5b:36:c1:06:d2:ab:11:ec:f7:86: 65:54:5b:6c:c1:a7:e6:18:91:de:8f:3b:82:97:14:a4:6a:e2: 91:32:d5:06:9d:63:37:ac:97:24:fa:4b:99:0b:60:0c:97:0f: a7:b5:b2:c7:c6:be:d9:4d:e3:39:f6:c5:3b:cc:25:23:a3:f0: 22:c3:47:e8:cc:4a:b7:4a:6e:90:d3:df:55:2a:bc:48:06:d1: e8:c8:e1:c9:3a:22:b9:bb:81:3b:56:de:76:9a:fb:2c:80:3f: 72:a1:d2:93:28:6c:31:c2:77:0f:1d:c4:fb:d0:1b:6b:02:e0: d1:46:0e:03:1f:07:5e:2c:28:71:ae:a2:33:4a:0d:42:d0:14: ec:19:0a:69:0e:49:a0:8e:95:59:d3:aa:d5:a4:f3:03:76:08: 26:e4:c6:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnTm9kfMPATyq3qUchygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMzg0MTAzMzhlMjFlOGVhYjk0MTE5ZDgwZTQxYTM5NTg0 OTFkZTYwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGRmMjFhNzI1MGI2MTdhNDY4MjBkMjVlMTRjOWM3ZjNhMGIzM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCwn12o3a/ECFNpyCADPcOuvgOH/ TlZTIj24hJnKK4DYlYzgAAGbLnR0+k3QwpVn7Yl+/quwbapeGyNhDm2efIMMzs3I BgO2jis/SRYoqYz22v5LDGlWS19VrtyiqgKH4xgHeebZUrDbewKPvIA6Ttvu4foX GWxaSOl7yw2TX5cH2ykONK5ngYoqC2NAZfjWCsFhpo1bKXFR28IRBAZC/5R/ZGs7 y7qD0YfjMdbtArs82uzCtfLKNSzyDbnFtU1EC+H1LnxpuNQrrkS7LrxTQYP7Aslv rtyBxTTPDK50jglW8NRq+OHMlF2JLkSJ4xEkoDxZh/FvI5oFfh3BDD6+SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDfIaclC2F6RoINJeFMnH86CzP/MB8GA1UdIwQY MBaAFGI4QQM44h6Oq5QRnYDkGjlYSR3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQt MTNhNThlYjlkOGY1LzEva044aHB5VUxZWHBHZ2cwbDRVeWNmem9MTV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQtMTNhNThlYjlkOGY1 LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GWMA0G CSqGSIb3DQEBCwUAA4IBAQCYFiJELmJrbaW6FqFnzskVnoHLebYx9b/tTpmkW5m2 4UWjxbSG85+OFRdaFpdKaglMpPLTdD74+1K1LJ0l1WhstGFJwtXfQ4yMDuw8rKcj NJxTr0aj9ChASvx0ICXD6gWLbVs2wQbSqxHs94ZlVFtswafmGJHejzuClxSkauKR MtUGnWM3rJck+kuZC2AMlw+ntbLHxr7ZTeM59sU7zCUjo/Aiw0fozEq3Sm6Q099V KrxIBtHoyOHJOiK5u4E7Vt52mvssgD9yodKTKGwxwncPHcT70BtrAuDRRg4DHwde LChxrqIzSg1C0BTsGQppDkmgjpVZ06rVpPMDdggm5MZh -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:29 2026 by rpki-client