This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/G5qi4rCJoI8AUX8isP7b0ojIn7g.roa File: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (raw, json) Hash identifier: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo= Subject key identifier: 1B:9A:A2:E2:B0:89:A0:8F:00:51:7F:22:B0:FE:DB:D2:88:C8:9F:B8 Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Certificate serial: 019B7FF28BA1109C5184BD5376D27E280F20 Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/G5qi4rCJoI8AUX8isP7b0ojIn7g.roa Signing time: Fri 02 Jan 2026 18:22:40 +0000 ROA not before: Fri 02 Jan 2026 18:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203397 IP address blocks: 91.226.84.0/22 maxlen: 24 91.226.84.0/24 maxlen: 24 91.226.85.0/24 maxlen: 24 91.226.86.0/24 maxlen: 24 91.226.87.0/24 maxlen: 24 109.202.232.0/22 maxlen: 24 109.202.232.0/24 maxlen: 24 109.202.233.0/24 maxlen: 24 109.202.234.0/24 maxlen: 24 109.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8b:a1:10:9c:51:84:bd:53:76:d2:7e:28:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Validity Not Before: Jan 2 18:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b9aa2e2b089a08f00517f22b0fedbd288c89fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:9f:5e:c5:4b:b9:13:98:6a:ba:1e:bc:cd: 18:86:d9:59:80:86:3c:3f:41:4f:d8:d5:25:a3:7a: 70:7c:30:07:7e:98:ff:7c:9b:ea:9b:48:88:04:14: 23:24:e2:ec:c4:4c:ee:38:7a:71:87:7c:f9:25:9d: fa:3b:bc:66:63:33:07:27:6f:78:d0:76:d9:03:44: 45:7b:22:e4:5e:43:cd:c3:ba:30:2f:9e:c8:dd:72: 52:a5:8e:fd:c7:ce:fd:db:47:19:f5:86:8c:5b:20: 29:a9:9d:26:4b:b9:a4:16:0e:93:72:11:76:dc:c9: 96:06:0f:75:4d:07:00:c2:28:f5:50:b3:41:f1:99: 0e:e3:e4:a4:85:e9:2a:4b:65:af:2c:8d:7d:91:d4: 48:4a:48:8e:78:cc:9e:f2:06:61:ad:9c:81:1a:8d: db:05:2b:7d:c6:7f:0c:a9:ae:11:7b:56:1c:70:4d: f0:46:e1:2b:e0:ca:f7:41:5a:03:47:4f:7b:62:2d: a5:aa:77:83:2f:3b:b5:eb:12:51:14:7d:a9:aa:1e: c4:e1:63:be:5d:12:0f:55:50:bb:52:d1:a6:4f:65: f9:bf:32:2b:60:81:2b:24:c6:7e:02:cd:ca:51:c8: 63:f4:30:32:18:33:5a:f3:bf:d2:a7:bb:2f:ee:52: 5b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9A:A2:E2:B0:89:A0:8F:00:51:7F:22:B0:FE:DB:D2:88:C8:9F:B8 X509v3 Authority Key Identifier: keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/G5qi4rCJoI8AUX8isP7b0ojIn7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.84.0/22 109.202.232.0/22 Signature Algorithm: sha256WithRSAEncryption 62:d3:d7:2b:3e:d5:a5:ad:eb:b4:60:4a:4a:22:c4:ee:3e:79: 63:4e:4f:d3:5e:d7:60:3d:6b:3a:f4:87:29:c0:68:ad:2b:44: 72:b4:97:bd:b3:e7:5b:3b:f1:26:27:bd:82:bf:6a:57:6c:5f: 4b:99:63:58:ba:6b:ed:5c:20:ff:65:8e:34:67:c7:14:b3:ec: 60:0e:55:c2:8b:33:9b:20:31:fa:2b:37:3b:09:90:3b:2a:10: 74:6b:28:c5:0c:80:4a:74:26:f1:cc:f9:44:e9:50:97:22:fa: 03:4b:b9:ca:d7:0e:cd:42:a1:4f:72:dc:66:6e:85:d8:e9:32: 60:ac:19:c5:f9:45:95:37:bd:34:fc:0f:0a:e9:20:02:fd:e4: 8b:cc:1a:6b:21:cc:9d:6c:05:6f:f7:f4:c2:a6:23:c6:70:1a: 93:96:b4:a2:46:8e:24:9d:50:19:1c:62:dc:c6:53:e8:ac:07: 40:9f:dc:d4:7c:c2:9e:67:42:c4:6e:fe:05:3f:55:7c:c6:61: 60:3c:e9:cf:02:00:d5:e1:2d:f7:75:64:26:73:21:b2:85:76: f7:87:90:60:c2:4d:19:6c:bc:09:2a:0d:cf:6e:49:5c:2b:76: be:cc:57:7c:b9:78:43:bb:89:47:47:24:9d:c2:8b:21:3f:23: 81:5b:86:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8ouhEJxRhL1TdtJ+KA8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx YzM3MjAwHhcNMjYwMTAyMTgyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjlhYTJlMmIwODlhMDhmMDA1MTdmMjJiMGZlZGJkMjg4Yzg5ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAGfXsVLuROYaroevM0YhtlZgIY8 P0FP2NUlo3pwfDAHfpj/fJvqm0iIBBQjJOLsxEzuOHpxh3z5JZ36O7xmYzMHJ294 0HbZA0RFeyLkXkPNw7owL57I3XJSpY79x87920cZ9YaMWyApqZ0mS7mkFg6TchF2 3MmWBg91TQcAwij1ULNB8ZkO4+SkhekqS2WvLI19kdRISkiOeMye8gZhrZyBGo3b BSt9xn8Mqa4Re1YccE3wRuEr4Mr3QVoDR097Yi2lqneDLzu16xJRFH2pqh7E4WO+ XRIPVVC7UtGmT2X5vzIrYIErJMZ+As3KUchj9DAyGDNa87/Sp7sv7lJbGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBuaouKwiaCPAFF/IrD+29KIyJ+4MB8GA1UdIwQY MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct ZWY3MTBlYzdiMmZlLzEvRzVxaTRyQ0pvSThBVVg4aXNQN2Iwb2pJbjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+JUAwQC bcroMA0GCSqGSIb3DQEBCwUAA4IBAQBi09crPtWlreu0YEpKIsTuPnljTk/TXtdg PWs69IcpwGitK0RytJe9s+dbO/EmJ72Cv2pXbF9LmWNYumvtXCD/ZY40Z8cUs+xg DlXCizObIDH6Kzc7CZA7KhB0ayjFDIBKdCbxzPlE6VCXIvoDS7nK1w7NQqFPctxm boXY6TJgrBnF+UWVN700/A8K6SAC/eSLzBprIcydbAVv9/TCpiPGcBqTlrSiRo4k nVAZHGLcxlPorAdAn9zUfMKeZ0LEbv4FP1V8xmFgPOnPAgDV4S33dWQmcyGyhXb3 h5Bgwk0ZbLwJKg3PbklcK3a+zFd8uXhDu4lHRySdwoshPyOBW4aE -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:56 2026 by rpki-client