This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/cP1GSkrPpumyz1fbQhtF__y9oKM.roa File: cP1GSkrPpumyz1fbQhtF__y9oKM.roa (raw, json) Hash identifier: MBJZqys4MB938y3xdVGjcJOvSN3lSPQWfJqtj51k6+E= Subject key identifier: 70:FD:46:4A:4A:CF:A6:E9:B2:CF:57:DB:42:1B:45:FF:FC:BD:A0:A3 Certificate issuer: /CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e Certificate serial: 019BC5B0D4BA62126473533156889BEC85DC Authority key identifier: BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/cP1GSkrPpumyz1fbQhtF__y9oKM.roa Signing time: Fri 16 Jan 2026 07:24:18 +0000 ROA not before: Fri 16 Jan 2026 07:24:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202594 IP address blocks: 91.244.244.0/24 maxlen: 24 185.156.0.0/22 maxlen: 22 185.156.0.0/23 maxlen: 23 185.156.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:b0:d4:ba:62:12:64:73:53:31:56:88:9b:ec:85:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e Validity Not Before: Jan 16 07:24:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70fd464a4acfa6e9b2cf57db421b45fffcbda0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:3f:19:12:60:bd:d8:28:eb:25:2b:f7:bb: 70:ac:aa:bc:b1:a5:9b:9e:29:c1:99:f0:6a:51:88: 3d:30:4e:95:c3:0f:5b:22:6b:f7:8c:4a:95:86:e5: db:be:3f:da:45:1a:ab:b6:fd:4e:0e:eb:e2:cf:b0: fc:22:f6:18:34:8b:1f:6a:ff:28:c1:f8:7c:fa:47: 71:e3:f4:da:c9:5a:8a:2f:15:f6:8e:f5:c7:85:25: 99:b2:6f:53:06:19:47:ae:fa:3a:54:19:95:f9:88: 67:4a:66:ef:88:c5:b1:d5:ea:aa:f3:17:ce:e6:54: 3e:18:92:16:29:f2:07:83:c7:b0:98:aa:ed:f9:d1: 90:4d:5f:b7:8e:d2:60:bb:0a:ba:de:02:f6:53:8d: c6:9a:5a:5f:a1:dc:83:f1:02:66:ae:59:cd:10:fb: 62:96:e8:3c:77:89:5d:c7:4b:93:4a:d4:2c:0e:bb: 5a:4c:6a:f7:fe:99:33:70:6c:be:b2:a7:a7:45:33: 81:6d:e1:4f:59:ea:26:1d:39:eb:6d:42:2c:6b:bc: 42:57:36:ef:64:38:9e:33:c4:c3:0b:9e:03:33:cd: 43:d1:3b:bd:f5:53:f0:63:8f:3e:45:47:e6:06:f5: 7f:fb:0e:82:5e:ed:e6:86:4e:ad:c1:46:b9:03:e6: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:46:4A:4A:CF:A6:E9:B2:CF:57:DB:42:1B:45:FF:FC:BD:A0:A3 X509v3 Authority Key Identifier: keyid:BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/cP1GSkrPpumyz1fbQhtF__y9oKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.244.0/24 185.156.0.0/22 Signature Algorithm: sha256WithRSAEncryption 67:ce:2a:11:7e:d0:06:fe:10:51:f5:9d:ca:89:31:0d:72:37: 88:8f:6e:ac:3c:b0:d3:a5:06:8d:9f:f1:81:e5:36:14:6a:19: e2:de:20:3c:18:37:cc:48:b9:2f:eb:82:d6:60:a8:f6:e4:96: cb:d7:28:a9:14:d5:f1:df:f3:5b:02:00:a9:50:e2:44:c1:c5: 77:08:97:81:f0:21:5e:18:71:9e:ba:12:43:a7:7c:94:eb:45: d9:7e:53:b1:2e:8e:20:43:c0:84:c1:b6:f9:c2:e5:bf:b6:14: c6:ec:5f:9a:21:af:ad:96:9a:22:e2:4d:bf:2c:9d:bd:1b:f6: d3:6f:e8:aa:c1:3c:2f:11:33:3d:5c:cd:d0:fe:be:70:8a:f4: ae:a7:7f:48:ba:5e:6a:9a:a3:fd:3f:7b:26:4b:59:f0:aa:02: 82:48:04:c4:0a:38:8e:5c:b9:06:61:b8:e2:23:45:e4:22:57: dc:10:76:9f:c6:35:6d:65:26:c9:a3:ca:af:a5:7e:a0:48:0e: 09:e4:30:35:42:e4:30:61:93:bd:76:8d:87:58:5d:e8:d9:dd: 7e:69:ab:2f:27:55:c4:81:82:32:c5:db:d7:ae:3d:6a:bb:b7: b1:1a:b5:4c:c5:a3:1e:4c:27:da:8d:6a:f5:45:ae:1b:01:f7: 4a:29:77:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvFsNS6YhJkc1MxVoib7IXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTA1ZmEzMmIyYjE3NWYxOGRkNTkwOGRkMjcxOTE1YmJm NGUzOGUwHhcNMjYwMTE2MDcyNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGZkNDY0YTRhY2ZhNmU5YjJjZjU3ZGI0MjFiNDVmZmZjYmRhMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCk/GRJgvdgo6yUr97twrKq8saWb ninBmfBqUYg9ME6Vww9bImv3jEqVhuXbvj/aRRqrtv1ODuviz7D8IvYYNIsfav8o wfh8+kdx4/TayVqKLxX2jvXHhSWZsm9TBhlHrvo6VBmV+YhnSmbviMWx1eqq8xfO 5lQ+GJIWKfIHg8ewmKrt+dGQTV+3jtJguwq63gL2U43GmlpfodyD8QJmrlnNEPti lug8d4ldx0uTStQsDrtaTGr3/pkzcGy+sqenRTOBbeFPWeomHTnrbUIsa7xCVzbv ZDieM8TDC54DM81D0Tu99VPwY48+RUfmBvV/+w6CXu3mhk6twUa5A+aWfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHD9RkpKz6bpss9X20IbRf/8vaCjMB8GA1UdIwQY MBaAFLsQX6MrKxdfGN1ZCN0nGRW79OOOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zYjJiYjMtZmRiNi00NmFmLWIzZDIt YmUxMWMxNGRiNmUwLzEvY1AxR1NrclBwdW15ejFmYlFodEZfX3k5b0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zYjJiYjMtZmRiNi00NmFmLWIzZDItYmUxMWMxNGRiNmUw LzEvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/T0AwQC uZwAMA0GCSqGSIb3DQEBCwUAA4IBAQBnzioRftAG/hBR9Z3KiTENcjeIj26sPLDT pQaNn/GB5TYUahni3iA8GDfMSLkv64LWYKj25JbL1yipFNXx3/NbAgCpUOJEwcV3 CJeB8CFeGHGeuhJDp3yU60XZflOxLo4gQ8CEwbb5wuW/thTG7F+aIa+tlpoi4k2/ LJ29G/bTb+iqwTwvETM9XM3Q/r5wivSup39Iul5qmqP9P3smS1nwqgKCSATECjiO XLkGYbjiI0XkIlfcEHafxjVtZSbJo8qvpX6gSA4J5DA1QuQwYZO9do2HWF3o2d1+ aasvJ1XEgYIyxdvXrj1qu7exGrVMxaMeTCfajWr1Ra4bAfdKKXe+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:43 2026 by rpki-client