This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/v26IQtR4bPGmZEZAU7yCltTi890.roa File: v26IQtR4bPGmZEZAU7yCltTi890.roa (raw, json) Hash identifier: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y= Subject key identifier: BF:6E:88:42:D4:78:6C:F1:A6:64:46:40:53:BC:82:96:D4:E2:F3:DD Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Certificate serial: 019B7FF28FE0B2A657E9741AE5302750ADAB Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/v26IQtR4bPGmZEZAU7yCltTi890.roa Signing time: Fri 02 Jan 2026 18:22:41 +0000 ROA not before: Fri 02 Jan 2026 18:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208663 IP address blocks: 45.91.0.0/22 maxlen: 22 45.91.3.0/24 maxlen: 24 2a0e:840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8f:e0:b2:a6:57:e9:74:1a:e5:30:27:50:ad:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Validity Not Before: Jan 2 18:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf6e8842d4786cf1a664464053bc8296d4e2f3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:f3:d2:71:86:ed:1b:b4:da:b9:47:25:f4: d8:d5:1c:f0:94:2b:f9:b2:a7:62:01:d8:12:3f:58: 1b:86:ba:3e:9d:44:6b:21:97:93:86:f2:73:4e:a1: 76:88:1e:02:b5:77:66:25:77:38:22:d8:46:14:6a: 1f:a8:61:aa:40:15:d6:41:ca:f6:99:a2:cf:31:35: 43:83:ec:3e:34:2e:78:86:6f:49:2e:bb:47:7a:9c: 83:12:c7:17:60:17:df:3a:83:f2:82:2d:64:d7:73: 1b:78:01:85:be:cc:cf:c6:92:c3:85:10:7f:ef:66: 3e:20:09:14:87:33:93:b4:41:22:d5:a2:6d:68:0f: 2c:0e:f0:88:73:6c:8a:0d:1d:3d:b2:7a:49:8d:1f: 90:cb:80:95:3b:a4:83:5e:47:b8:f0:5d:59:bb:96: b5:81:19:66:64:b1:c2:04:34:13:e7:a2:9f:40:94: d1:59:62:aa:d9:f9:61:8c:d7:9a:50:44:18:a1:34: 4a:6e:d0:95:b8:88:e3:4e:9c:59:b6:80:14:0f:3e: 15:0e:56:01:b7:ad:88:5c:06:39:53:d1:95:88:9d: 18:8f:90:7a:cc:bf:11:dd:b8:cd:51:7a:04:19:41: f6:78:3b:31:0d:42:07:a2:38:1a:cf:15:d8:21:85: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:88:42:D4:78:6C:F1:A6:64:46:40:53:BC:82:96:D4:E2:F3:DD X509v3 Authority Key Identifier: keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/v26IQtR4bPGmZEZAU7yCltTi890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.0.0/22 IPv6: 2a0e:840::/29 Signature Algorithm: sha256WithRSAEncryption 5d:eb:51:92:f3:3a:f3:59:f9:3c:26:1b:40:bc:f3:0a:8b:91: f8:f9:c3:4d:78:a2:d5:92:9d:80:99:d2:05:c6:65:8b:99:9b: f0:fc:58:89:1a:22:e1:ce:b5:c9:3f:fe:f9:28:a7:0b:29:4a: f7:00:77:66:fa:d1:94:5d:b1:70:ff:96:6a:80:66:c3:ca:47: da:00:38:ac:9f:8e:7b:dd:25:68:1e:19:23:d0:3f:ba:f5:68: 1f:58:d1:a6:5a:c1:97:33:9a:24:32:f7:05:6a:ce:4a:ef:8d: 7d:c2:46:92:b3:db:b2:bc:c5:bf:24:5a:d1:8c:c9:c1:38:1f: 7d:50:23:fb:03:9f:8c:ab:b7:a3:1e:a3:7f:54:c4:67:9b:ed: 85:f7:df:1e:db:3c:e8:99:f7:92:7b:55:e2:c9:9f:6c:e2:b2: 7f:81:8b:15:8d:bf:6a:d8:da:ea:26:34:39:50:21:b4:05:a1: 02:8c:a1:83:94:62:10:03:af:f7:89:a4:d6:08:22:4c:ec:6a: aa:2e:ba:f0:81:03:f8:4c:56:b2:86:1b:b7:05:e0:07:db:85: ef:53:22:01:4b:d9:32:27:32:3f:62:ff:40:42:d0:66:55:c4: 43:68:d6:f3:91:37:65:7b:7d:ca:6f:4e:d7:78:05:fa:3d:97: 32:8b:a2:4d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8o/gsqZX6XQa5TAnUK2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm OTdhMjEwHhcNMjYwMTAyMTgyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjZlODg0MmQ0Nzg2Y2YxYTY2NDQ2NDA1M2JjODI5NmQ0ZTJmM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryvz0nGG7Ru02rlHJfTY1RzwlCv5 sqdiAdgSP1gbhro+nURrIZeThvJzTqF2iB4CtXdmJXc4IthGFGofqGGqQBXWQcr2 maLPMTVDg+w+NC54hm9JLrtHepyDEscXYBffOoPygi1k13MbeAGFvszPxpLDhRB/ 72Y+IAkUhzOTtEEi1aJtaA8sDvCIc2yKDR09snpJjR+Qy4CVO6SDXke48F1Zu5a1 gRlmZLHCBDQT56KfQJTRWWKq2flhjNeaUEQYoTRKbtCVuIjjTpxZtoAUDz4VDlYB t62IXAY5U9GViJ0Yj5B6zL8R3bjNUXoEGUH2eDsxDUIHojgazxXYIYXUCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL9uiELUeGzxpmRGQFO8gpbU4vPdMB8GA1UdIwQY MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt ZTdmZGY3NzQxYTY1LzEvdjI2SVF0UjRiUEdtWkVaQVU3eUNsdFRpODkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1 LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVsAMA0E AgACMAcDBQMqDghAMA0GCSqGSIb3DQEBCwUAA4IBAQBd61GS8zrzWfk8JhtAvPMK i5H4+cNNeKLVkp2AmdIFxmWLmZvw/FiJGiLhzrXJP/75KKcLKUr3AHdm+tGUXbFw /5ZqgGbDykfaADisn4573SVoHhkj0D+69WgfWNGmWsGXM5okMvcFas5K7419wkaS s9uyvMW/JFrRjMnBOB99UCP7A5+Mq7ejHqN/VMRnm+2F998e2zzomfeSe1XiyZ9s 4rJ/gYsVjb9q2NrqJjQ5UCG0BaECjKGDlGIQA6/3iaTWCCJM7GqqLrrwgQP4TFay hhu3BeAH24XvUyIBS9kyJzI/Yv9AQtBmVcRDaNbzkTdle33Kb07XeAX6PZcyi6JN -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:38 2026 by rpki-client