This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa File: 4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa (raw, json) Hash identifier: kmfueJIenPQ4kLIaUYdb59+cHEhbnikmEU4eCsrl8uU= Subject key identifier: E0:76:C6:32:3F:BE:89:2B:85:1E:F6:F6:F0:63:A4:27:C4:5F:8F:D9 Certificate issuer: /CN=a219db5523bd391450a9dccf6d50ce59fb15dfad Certificate serial: 019BF98DFBA3D1AA1337256891FBC5014A67 Authority key identifier: A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa Signing time: Mon 26 Jan 2026 09:06:30 +0000 ROA not before: Mon 26 Jan 2026 09:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 91.194.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.mft rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:8d:fb:a3:d1:aa:13:37:25:68:91:fb:c5:01:4a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a219db5523bd391450a9dccf6d50ce59fb15dfad Validity Not Before: Jan 26 09:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e076c6323fbe892b851ef6f6f063a427c45f8fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:0c:9a:42:fc:11:ac:ea:32:f8:b7:6b:51: a0:a1:ae:4a:db:dc:5f:a5:86:c9:08:8e:7e:9d:e1: 33:6e:86:59:5a:2a:b2:b2:8d:ad:22:5a:f5:1a:6b: 2c:94:c0:67:50:a8:59:55:43:1d:b2:2c:b7:db:d0: e4:0e:74:b2:17:51:dc:a9:c3:34:dc:85:11:d4:75: 76:97:35:b8:aa:9f:7d:be:f7:5f:66:ce:c0:9c:b0: e5:36:b4:de:85:5a:e7:62:e6:e8:37:13:f9:c0:44: 78:5a:21:42:8c:dd:c0:f2:0e:67:8d:f0:0b:83:32: 9d:8a:ef:a0:15:47:51:94:c6:da:17:a2:b1:f9:02: 70:13:38:6a:2d:4c:13:63:0a:ea:4a:cf:45:4f:61: 1b:25:d9:bc:94:0a:6d:72:9c:96:71:fb:f5:f1:04: c3:ac:19:54:df:9f:d2:a7:ce:d0:cb:16:1d:eb:db: 09:f9:31:d1:25:a7:78:4f:2d:a4:22:11:5c:94:9c: a0:8d:09:24:fa:06:61:b2:d5:52:20:be:b7:ff:c6: 24:c6:b6:76:e3:60:36:de:9f:1a:3c:1d:64:19:b6: 04:da:f9:ec:02:b2:7f:28:0d:21:74:00:b9:64:70: ba:2c:c5:29:42:a9:38:dd:a1:cc:44:07:c0:79:be: 8a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:C6:32:3F:BE:89:2B:85:1E:F6:F6:F0:63:A4:27:C4:5F:8F:D9 X509v3 Authority Key Identifier: keyid:A2:19:DB:55:23:BD:39:14:50:A9:DC:CF:6D:50:CE:59:FB:15:DF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohnbVSO9ORRQqdzPbVDOWfsV360.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/4HbGMj--iSuFHvb28GOkJ8Rfj9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ce635c-7d2c-410c-96e2-7ccf936de89a/1/ohnbVSO9ORRQqdzPbVDOWfsV360.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.222.0/23 Signature Algorithm: sha256WithRSAEncryption 21:3f:b2:aa:14:a2:87:1b:31:c4:45:74:c2:25:2d:53:ac:a0: 6c:0f:38:09:59:b5:7b:4e:39:d2:d6:23:99:f0:ab:42:fa:c6: 6e:cd:6c:4c:f9:a2:1e:0c:3c:06:9a:15:6a:c0:d0:94:4d:e5: 8c:82:cb:ab:8b:59:81:0e:db:f1:d1:43:31:b7:e8:27:1c:4a: 7c:e4:49:cc:23:0f:88:dd:14:bc:b8:e8:a7:c6:49:69:84:54: 49:94:ec:44:d0:3e:09:1b:2d:83:f2:94:ea:6c:c0:4b:36:58: ed:46:1a:a8:35:e4:5a:60:15:5d:d4:58:1c:bc:fe:c0:46:cf: 98:cd:c6:56:74:d9:7c:69:cc:10:91:82:ab:8f:b0:5d:22:46: 27:a1:38:33:0d:f0:ef:23:b4:1f:a2:cf:61:90:38:b7:ad:82: 18:04:7f:27:b0:69:05:34:6d:1f:68:ec:8f:9c:d3:51:2b:c8: 03:ce:cb:04:07:f1:4b:02:cc:0f:3e:b0:9a:52:19:db:42:a4: 85:31:fe:97:3b:49:fe:bf:9b:36:76:0f:34:6b:99:94:cc:5c: 96:99:02:8c:1d:9b:3c:67:00:9c:0a:7c:64:d0:58:3b:e8:dd: cd:99:bf:a8:34:73:b1:9e:09:69:ae:c8:9c:bd:c5:87:33:72: 58:d0:9e:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv5jfuj0aoTNyVokfvFAUpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMTlkYjU1MjNiZDM5MTQ1MGE5ZGNjZjZkNTBjZTU5ZmIx NWRmYWQwHhcNMjYwMTI2MDkwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDc2YzYzMjNmYmU4OTJiODUxZWY2ZjZmMDYzYTQyN2M0NWY4ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsicMmkL8EazqMvi3a1Ggoa5K29xf pYbJCI5+neEzboZZWiqyso2tIlr1GmsslMBnUKhZVUMdsiy329DkDnSyF1HcqcM0 3IUR1HV2lzW4qp99vvdfZs7AnLDlNrTehVrnYuboNxP5wER4WiFCjN3A8g5njfAL gzKdiu+gFUdRlMbaF6Kx+QJwEzhqLUwTYwrqSs9FT2EbJdm8lAptcpyWcfv18QTD rBlU35/Sp87QyxYd69sJ+THRJad4Ty2kIhFclJygjQkk+gZhstVSIL63/8YkxrZ2 42A23p8aPB1kGbYE2vnsArJ/KA0hdAC5ZHC6LMUpQqk43aHMRAfAeb6KTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOB2xjI/vokrhR729vBjpCfEX4/ZMB8GA1UdIwQY MBaAFKIZ21UjvTkUUKncz21Qzln7Fd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZTYzNWMtN2QyYy00MTBjLTk2ZTIt N2NjZjkzNmRlODlhLzEvNEhiR01qLS1pU3VGSHZiMjhHT2tKOFJmajlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jZTYzNWMtN2QyYy00MTBjLTk2ZTItN2NjZjkzNmRlODlh LzEvb2huYlZTTzlPUlJRcWR6UGJWRE9XZnNWMzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8LeMA0G CSqGSIb3DQEBCwUAA4IBAQAhP7KqFKKHGzHERXTCJS1TrKBsDzgJWbV7TjnS1iOZ 8KtC+sZuzWxM+aIeDDwGmhVqwNCUTeWMgsuri1mBDtvx0UMxt+gnHEp85EnMIw+I 3RS8uOinxklphFRJlOxE0D4JGy2D8pTqbMBLNljtRhqoNeRaYBVd1FgcvP7ARs+Y zcZWdNl8acwQkYKrj7BdIkYnoTgzDfDvI7Qfos9hkDi3rYIYBH8nsGkFNG0faOyP nNNRK8gDzssEB/FLAswPPrCaUhnbQqSFMf6XO0n+v5s2dg80a5mUzFyWmQKMHZs8 ZwCcCnxk0Fg76N3Nmb+oNHOxnglprsicvcWHM3JY0J5/ -----END CERTIFICATE-----Generated at Mon Jan 26 21:31:31 2026 by rpki-client