This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/4mkQMrlyEA5ZWh8SOWOIHRbBVXg.roa File: 4mkQMrlyEA5ZWh8SOWOIHRbBVXg.roa (raw, json) Hash identifier: QjIp1iiXD6vyZ0MdKvtInyszrVm18OrO8O3KBCQDfSQ= Subject key identifier: E2:69:10:32:B9:72:10:0E:59:5A:1F:12:39:63:88:1D:16:C1:55:78 Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26 Certificate serial: 019B79ECCD20FF94B4B94B1306AC6371A8F6 Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/4mkQMrlyEA5ZWh8SOWOIHRbBVXg.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57361 IP address blocks: 91.231.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cd:20:ff:94:b4:b9:4b:13:06:ac:63:71:a8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26 Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2691032b972100e595a1f123963881d16c15578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:b2:ee:db:d6:75:ca:d8:57:b9:78:8a:ec: 88:55:f9:72:21:dd:06:91:15:3e:f7:5a:e1:7b:4d: 29:c2:e2:31:ef:69:a8:ce:12:62:7a:b3:b5:ab:2f: 31:fe:54:b8:b2:fd:41:4d:61:af:ce:0e:d8:ad:54: 7b:1b:3d:8f:03:0a:55:40:6c:ba:8a:98:6b:03:f9: b9:3e:ec:84:ad:cb:af:89:f0:5d:2e:c1:11:79:b6: 12:c6:20:fb:5a:f9:71:ed:41:bc:dd:71:8f:9c:10: a8:2f:99:91:0f:6b:fe:ee:aa:0a:1a:53:eb:c9:1d: 43:b8:eb:4a:40:a7:b5:0f:e2:90:3f:01:40:6a:a9: 11:95:6b:32:79:fd:ce:7b:b1:01:a5:9b:3f:0c:77: f0:61:04:ae:65:31:6c:ef:cd:c3:41:e2:37:c5:e4: fc:49:7d:05:08:3c:5f:d8:c8:3b:6f:2a:96:d8:d3: d2:db:47:f4:ab:c8:69:e9:a4:a5:56:b0:78:bf:6f: 93:4b:f2:d3:a8:6c:82:7c:ef:cd:5c:19:ee:bb:77: 67:4b:2d:b8:71:ed:bb:5d:c9:69:a3:d4:23:7f:f9: fc:63:04:b9:d0:29:4f:67:b0:b9:27:95:e9:7b:a1: 52:37:2e:04:5e:0d:88:79:e7:99:b0:39:8d:55:e3: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:69:10:32:B9:72:10:0E:59:5A:1F:12:39:63:88:1D:16:C1:55:78 X509v3 Authority Key Identifier: keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/4mkQMrlyEA5ZWh8SOWOIHRbBVXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.229.0/24 Signature Algorithm: sha256WithRSAEncryption 31:0b:d2:d0:b1:17:7b:0a:1e:cb:2a:d8:6f:01:55:27:b7:20: 95:33:94:14:60:bf:dc:42:f2:38:5a:a8:77:a0:fb:88:70:30: 90:ae:d1:a9:ec:39:d5:c4:85:d1:df:7f:21:f9:9b:73:3a:df: bc:be:de:62:3e:87:69:01:d6:76:97:b8:4d:e8:43:ec:16:81: 4e:6a:3e:e3:21:de:98:0b:d9:eb:1e:2b:03:7e:07:82:d7:a0: 42:7f:7a:15:51:71:6b:5a:99:0c:49:bf:c7:c4:9a:73:24:f5: 08:93:da:32:fe:98:67:00:a1:b9:0f:7b:f6:a9:b8:48:f5:f4: 9f:ad:d2:c3:27:bd:68:08:b8:49:c3:ce:76:b8:a8:9d:3c:95: 6a:6c:a5:fa:e6:21:b8:d2:80:25:69:c1:d5:88:46:90:55:5c: 34:29:22:da:ba:3b:ff:ab:ad:5b:19:5b:c4:48:3b:a2:17:ab: 8b:09:b5:5d:19:e3:08:cd:e6:dc:73:18:6a:71:06:f2:97:18: 84:15:26:65:cd:a1:c0:4e:65:27:a2:69:b8:02:36:f5:6b:a8: c3:ca:5a:cc:d3:d8:df:2a:c2:f6:5e:ea:16:f5:22:45:98:53: c1:90:e6:b1:65:4a:f0:50:c8:10:82:c4:14:bd:22:ea:42:cf: 0a:bc:17:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57M0g/5S0uUsTBqxjcaj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OThkNzVlOGUzMmQ1ZTg0N2RmNGFhMWEzNWMyOTM0NGM5 NzZlMjYwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjY5MTAzMmI5NzIxMDBlNTk1YTFmMTIzOTYzODgxZDE2YzE1NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTiy7tvWdcrYV7l4iuyIVflyId0G kRU+91rhe00pwuIx72mozhJierO1qy8x/lS4sv1BTWGvzg7YrVR7Gz2PAwpVQGy6 iphrA/m5PuyErcuvifBdLsERebYSxiD7Wvlx7UG83XGPnBCoL5mRD2v+7qoKGlPr yR1DuOtKQKe1D+KQPwFAaqkRlWsyef3Oe7EBpZs/DHfwYQSuZTFs783DQeI3xeT8 SX0FCDxf2Mg7byqW2NPS20f0q8hp6aSlVrB4v2+TS/LTqGyCfO/NXBnuu3dnSy24 ce27Xclpo9Qjf/n8YwS50ClPZ7C5J5Xpe6FSNy4EXg2IeeeZsDmNVeOaRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJpEDK5chAOWVofEjljiB0WwVV4MB8GA1UdIwQY MBaAFBWY116OMtXoR99KoaNcKTRMl24mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGIt M2JjNmJjMzA2Zjg5LzEvNG1rUU1ybHlFQTVaV2g4U09XT0lIUmJCVlhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGItM2JjNmJjMzA2Zjg5 LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+flMA0G CSqGSIb3DQEBCwUAA4IBAQAxC9LQsRd7Ch7LKthvAVUntyCVM5QUYL/cQvI4Wqh3 oPuIcDCQrtGp7DnVxIXR338h+ZtzOt+8vt5iPodpAdZ2l7hN6EPsFoFOaj7jId6Y C9nrHisDfgeC16BCf3oVUXFrWpkMSb/HxJpzJPUIk9oy/phnAKG5D3v2qbhI9fSf rdLDJ71oCLhJw852uKidPJVqbKX65iG40oAlacHViEaQVVw0KSLaujv/q61bGVvE SDuiF6uLCbVdGeMIzebccxhqcQbylxiEFSZlzaHATmUnomm4Ajb1a6jDylrM09jf KsL2XuoW9SJFmFPBkOaxZUrwUMgQgsQUvSLqQs8KvBeA -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:22 2026 by rpki-client