This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa File: U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa (raw, json) Hash identifier: jc+b8+PFodDUod3IoDVdMM++eET9wVKeCNE2IXdwBOs= Subject key identifier: 53:BA:14:23:0A:8D:90:07:16:9E:0D:40:A1:0D:B2:46:E3:4C:C1:1A Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Certificate serial: 019B7911492311F4DADC8A17B438803B780E Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa Signing time: Thu 01 Jan 2026 10:18:54 +0000 ROA not before: Thu 01 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50942 IP address blocks: 91.207.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:49:23:11:f4:da:dc:8a:17:b4:38:80:3b:78:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53ba14230a8d9007169e0d40a10db246e34cc11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:86:10:3c:dd:ce:ec:34:9c:32:23:b5:6e: 49:82:36:98:01:c7:ed:55:37:cc:61:2f:54:2b:b7: 1b:16:cf:44:3b:29:f4:0a:45:ea:f5:0e:ed:b4:bb: ef:86:c7:14:48:24:59:6a:6c:87:9d:cd:30:10:eb: 1f:ed:95:cb:82:ad:5b:bb:c0:20:e7:97:c5:e8:d2: bf:89:09:f8:11:50:99:f0:91:fa:51:73:d0:dc:de: fe:10:9f:6d:3d:0d:92:26:2d:d7:47:2c:1d:06:32: f9:fc:61:a7:ff:91:b7:40:a5:49:05:98:50:c8:4a: e4:d1:f5:78:1b:a0:bb:11:40:56:de:9a:04:f6:91: 6d:5c:08:45:24:71:10:69:ee:0c:8b:6e:d8:b3:59: e5:db:3a:ee:1d:32:a4:4d:1d:d6:a5:81:91:39:1f: 1d:45:c9:f2:35:1c:f4:ed:8f:73:d7:c6:b7:4a:58: 2a:08:99:e1:c7:de:58:05:cf:82:e4:22:5f:7d:d7: 0a:6a:0b:f9:5a:9a:fc:19:9a:da:15:ec:ca:ad:38: f1:90:ea:8e:7f:bb:3d:b4:53:b1:ae:d0:02:d2:43: bd:33:6a:88:7c:b1:3d:ba:6c:c0:9b:11:1f:e1:07: bf:fb:7a:07:82:58:c3:3a:96:3b:6c:9a:9a:67:8d: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BA:14:23:0A:8D:90:07:16:9E:0D:40:A1:0D:B2:46:E3:4C:C1:1A X509v3 Authority Key Identifier: keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.26.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:be:8b:eb:7c:70:ce:32:3d:b6:dd:0d:12:f6:3e:fc:26:a9: 20:c3:bc:f7:18:c7:ae:54:45:5f:10:3f:f3:65:dd:e5:1d:e6: 3d:32:5c:21:af:f6:15:0d:05:07:64:8d:21:cc:c8:de:53:4c: 2e:75:92:e5:7e:d8:1f:69:09:70:89:f3:86:56:07:47:22:2a: 40:01:a4:21:11:dd:3b:cb:d0:05:e8:0d:0b:ae:e4:54:81:9e: 09:f3:b5:3f:fb:4f:79:00:ee:b9:46:45:b0:87:11:f3:10:e8: e5:34:94:37:85:65:55:1b:7f:66:7e:bb:7e:f3:09:b0:5c:a1: 4f:04:6b:45:44:8a:25:cd:47:54:f0:89:5c:2f:14:10:71:f3: 23:e9:f2:09:3a:59:0c:49:aa:07:cc:0a:9e:7e:6f:cf:7a:af: 74:07:19:fd:f1:51:ef:4d:f6:34:6a:70:fd:67:bc:ea:0b:47: df:c5:fa:86:98:a2:08:c6:99:26:31:22:89:c0:29:a6:3d:c8: 39:86:f5:e6:f9:3e:e0:a5:38:52:7d:46:52:72:11:c2:59:16: 9e:97:e9:88:13:89:63:09:e1:a8:e2:9b:8a:3d:a4:82:c3:9f: 00:91:1c:34:0c:94:68:d5:ea:72:d1:9e:6e:69:3d:51:af:cf: 87:b1:61:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUkjEfTa3IoXtDiAO3gOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl ZmU2MjIwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2JhMTQyMzBhOGQ5MDA3MTY5ZTBkNDBhMTBkYjI0NmUzNGNjMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfKGEDzdzuw0nDIjtW5JgjaYAcft VTfMYS9UK7cbFs9EOyn0CkXq9Q7ttLvvhscUSCRZamyHnc0wEOsf7ZXLgq1bu8Ag 55fF6NK/iQn4EVCZ8JH6UXPQ3N7+EJ9tPQ2SJi3XRywdBjL5/GGn/5G3QKVJBZhQ yErk0fV4G6C7EUBW3poE9pFtXAhFJHEQae4Mi27Ys1nl2zruHTKkTR3WpYGROR8d RcnyNRz07Y9z18a3SlgqCJnhx95YBc+C5CJffdcKagv5Wpr8GZraFezKrTjxkOqO f7s9tFOxrtAC0kO9M2qIfLE9umzAmxEf4Qe/+3oHgljDOpY7bJqaZ40LXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFO6FCMKjZAHFp4NQKENskbjTMEaMB8GA1UdIwQY MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt OGMyZGY1YTVjNmQ3LzEvVTdvVUl3cU5rQWNXbmcxQW9RMnlSdU5Nd1JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3 LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW88aMA0G CSqGSIb3DQEBCwUAA4IBAQBvvovrfHDOMj223Q0S9j78Jqkgw7z3GMeuVEVfED/z Zd3lHeY9Mlwhr/YVDQUHZI0hzMjeU0wudZLlftgfaQlwifOGVgdHIipAAaQhEd07 y9AF6A0LruRUgZ4J87U/+095AO65RkWwhxHzEOjlNJQ3hWVVG39mfrt+8wmwXKFP BGtFRIolzUdU8IlcLxQQcfMj6fIJOlkMSaoHzAqefm/Peq90Bxn98VHvTfY0anD9 Z7zqC0ffxfqGmKIIxpkmMSKJwCmmPcg5hvXm+T7gpThSfUZSchHCWRael+mIE4lj CeGo4puKPaSCw58AkRw0DJRo1epy0Z5uaT1Rr8+HsWEz -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:06 2026 by rpki-client