This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/14LKfzEcyprlucXZUzPgqnyuaSo.roa File: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (raw, json) Hash identifier: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI= Subject key identifier: D7:82:CA:7F:31:1C:CA:9A:E5:B9:C5:D9:53:33:E0:AA:7C:AE:69:2A Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Certificate serial: 019B7FF28BCC29FEBA47236A10AC80E7A081 Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/14LKfzEcyprlucXZUzPgqnyuaSo.roa Signing time: Fri 02 Jan 2026 18:22:40 +0000 ROA not before: Fri 02 Jan 2026 18:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209738 IP address blocks: 91.226.84.0/22 maxlen: 24 91.226.84.0/24 maxlen: 24 91.226.85.0/24 maxlen: 24 91.226.86.0/24 maxlen: 24 91.226.87.0/24 maxlen: 24 109.202.232.0/22 maxlen: 24 109.202.232.0/24 maxlen: 24 109.202.233.0/24 maxlen: 24 109.202.234.0/24 maxlen: 24 109.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8b:cc:29:fe:ba:47:23:6a:10:ac:80:e7:a0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Validity Not Before: Jan 2 18:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d782ca7f311cca9ae5b9c5d95333e0aa7cae692a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:81:e0:05:17:9d:24:b6:34:36:19:88:27: 60:80:fa:de:08:22:33:69:a3:dd:1d:c4:00:96:c0: 6b:73:41:b4:03:88:d8:a6:13:6e:c0:44:40:e2:b7: 4b:b0:72:f5:ab:78:95:0e:14:b7:7a:b5:a9:ab:2f: f3:41:80:00:1d:3d:94:ba:c5:02:9b:21:7e:66:aa: c0:a2:1e:c4:ab:4e:cb:ef:87:52:81:81:5d:2d:09: 7e:a0:b6:dc:db:58:ae:2b:77:4a:dc:dc:4d:b5:33: f8:87:6b:67:7a:32:d9:74:71:53:cb:e3:99:2b:0f: a3:f7:57:35:17:a3:ee:92:90:dd:e3:54:41:06:f6: 2d:cb:a7:7d:81:21:f4:59:30:ca:73:e8:b2:ce:0f: 07:62:93:29:dc:06:ef:53:8c:f9:b4:34:a0:2c:51: 80:e1:04:50:2b:63:82:d2:41:e7:8f:49:68:ca:83: 27:fe:5a:e3:aa:66:21:1e:bc:65:dc:20:03:90:2d: 0f:07:ab:10:a6:ef:e5:44:b3:e7:07:e5:3c:ad:76: 7d:ce:de:36:9a:80:03:d2:43:36:dc:42:5e:76:dc: 0f:7b:f3:64:44:68:48:39:3d:70:41:b7:04:61:e2: 2c:5f:fe:95:24:15:85:29:3e:be:b7:93:21:4d:df: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:82:CA:7F:31:1C:CA:9A:E5:B9:C5:D9:53:33:E0:AA:7C:AE:69:2A X509v3 Authority Key Identifier: keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/14LKfzEcyprlucXZUzPgqnyuaSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.84.0/22 109.202.232.0/22 Signature Algorithm: sha256WithRSAEncryption 01:c8:85:84:4f:31:e8:21:99:0d:bd:cc:8a:4d:79:52:84:54: c5:db:d4:49:2f:3b:9d:e1:4a:91:f7:b2:2f:e7:e2:27:a1:64: 1e:50:fc:e1:9b:9d:22:a2:7b:ce:d3:65:5a:d5:40:a3:17:c0: 5f:c7:aa:e2:86:d0:0c:ea:97:07:4b:3d:7e:1a:6f:d3:ff:4e: 44:fc:d3:77:11:fd:0a:f8:b9:4a:8d:2e:28:a4:68:04:94:57: a0:3e:db:06:f3:13:2a:7f:6c:56:9b:30:99:f6:d1:2f:54:77: f8:e9:9a:d4:a8:c9:01:7d:37:a1:9c:00:5c:d3:51:c6:e6:47: d4:11:41:cc:09:aa:67:db:29:05:04:9c:cb:97:94:7c:54:26: e3:37:10:24:93:4a:7c:7f:57:cc:97:ea:76:4a:40:4e:ab:fd: ae:83:f5:32:75:41:cf:d4:bf:87:2a:bc:7c:43:20:16:6d:1c: 10:75:13:ad:ba:62:bb:8f:b2:f1:e9:4e:8b:03:8f:bd:c4:5a: 43:26:54:e4:a3:61:ec:ee:5e:74:cc:9b:c1:46:05:e6:26:c8: f4:b5:d9:e3:1c:29:38:0d:ba:5d:c4:4e:77:40:db:45:e4:47: ff:1c:23:57:bb:cb:9d:b2:e8:37:b4:96:b0:59:e0:49:7c:99: 44:68:73:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8ovMKf66RyNqEKyA56CBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx YzM3MjAwHhcNMjYwMTAyMTgyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzgyY2E3ZjMxMWNjYTlhZTViOWM1ZDk1MzMzZTBhYTdjYWU2OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcaB4AUXnSS2NDYZiCdggPreCCIz aaPdHcQAlsBrc0G0A4jYphNuwERA4rdLsHL1q3iVDhS3erWpqy/zQYAAHT2UusUC myF+ZqrAoh7Eq07L74dSgYFdLQl+oLbc21iuK3dK3NxNtTP4h2tnejLZdHFTy+OZ Kw+j91c1F6PukpDd41RBBvYty6d9gSH0WTDKc+iyzg8HYpMp3AbvU4z5tDSgLFGA 4QRQK2OC0kHnj0loyoMn/lrjqmYhHrxl3CADkC0PB6sQpu/lRLPnB+U8rXZ9zt42 moAD0kM23EJedtwPe/NkRGhIOT1wQbcEYeIsX/6VJBWFKT6+t5MhTd8aswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNeCyn8xHMqa5bnF2VMz4Kp8rmkqMB8GA1UdIwQY MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct ZWY3MTBlYzdiMmZlLzEvMTRMS2Z6RWN5cHJsdWNYWlV6UGdxbnl1YVNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+JUAwQC bcroMA0GCSqGSIb3DQEBCwUAA4IBAQAByIWETzHoIZkNvcyKTXlShFTF29RJLzud 4UqR97Iv5+InoWQeUPzhm50ionvO02Va1UCjF8Bfx6rihtAM6pcHSz1+Gm/T/05E /NN3Ef0K+LlKjS4opGgElFegPtsG8xMqf2xWmzCZ9tEvVHf46ZrUqMkBfTehnABc 01HG5kfUEUHMCapn2ykFBJzLl5R8VCbjNxAkk0p8f1fMl+p2SkBOq/2ug/UydUHP 1L+HKrx8QyAWbRwQdROtumK7j7Lx6U6LA4+9xFpDJlTko2Hs7l50zJvBRgXmJsj0 tdnjHCk4DbpdxE53QNtF5Ef/HCNXu8udsug3tJawWeBJfJlEaHNd -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:24 2026 by rpki-client