This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/tKmmsRGg9YbOwZD0WDnzLRT91zI.roa File: tKmmsRGg9YbOwZD0WDnzLRT91zI.roa (raw, json) Hash identifier: 1BiDxW73ZmhEDeC+jXIfDWgmKydIlt1YsSH4cXEQpzg= Subject key identifier: B4:A9:A6:B1:11:A0:F5:86:CE:C1:90:F4:58:39:F3:2D:14:FD:D7:32 Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4 Certificate serial: 019B7FF2245CDD492C84E724031A1A6609CE Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/tKmmsRGg9YbOwZD0WDnzLRT91zI.roa Signing time: Fri 02 Jan 2026 18:22:13 +0000 ROA not before: Fri 02 Jan 2026 18:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15083 IP address blocks: 91.208.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 23:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:24:5c:dd:49:2c:84:e7:24:03:1a:1a:66:09:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4 Validity Not Before: Jan 2 18:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4a9a6b111a0f586cec190f45839f32d14fdd732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:5c:51:31:54:26:79:c3:6e:47:23:84:b4: 19:8a:be:7d:d1:a7:92:f3:71:fb:90:95:b5:80:68: ca:8c:74:1b:44:e9:00:84:ba:7e:ac:f2:31:9c:a5: 7d:9b:a3:6f:c3:fd:70:84:0b:2e:b1:a5:4f:ca:7f: ff:9b:45:68:28:4e:22:bb:09:6b:09:58:92:9a:66: 86:5a:74:4d:c6:9a:db:52:41:c6:a6:54:60:66:7e: 97:96:0d:9a:80:f1:01:d7:e4:b3:4c:58:fc:49:21: 76:af:47:3a:26:08:2b:74:76:b6:b7:1e:ef:72:99: bb:25:61:b0:c1:ef:97:1a:ed:4b:66:8f:ac:86:b4: 18:4e:0f:de:56:08:f2:ec:d7:db:01:bf:17:7d:77: 59:75:e9:54:49:2f:7d:00:5c:78:ed:03:cd:cc:11: 13:26:e4:ce:9d:3c:6b:41:5b:43:70:bf:2b:3a:f4: 66:04:1a:cf:70:4a:e0:4b:21:40:1e:05:c0:6a:2a: 78:ee:83:27:2f:ea:42:69:d5:a6:cb:9f:44:56:3f: d8:01:a8:ab:f5:b6:51:90:92:9a:ee:bf:87:88:31: 8c:ca:9d:d6:8d:47:28:15:c4:46:58:78:f6:3c:bd: 67:ff:70:71:32:b9:fd:eb:f6:2f:a4:20:95:49:e6: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A9:A6:B1:11:A0:F5:86:CE:C1:90:F4:58:39:F3:2D:14:FD:D7:32 X509v3 Authority Key Identifier: keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/tKmmsRGg9YbOwZD0WDnzLRT91zI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.108.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:6e:c1:f8:49:22:11:fc:9f:b5:12:99:c2:b0:d4:fa:17:cb: e3:61:af:51:ab:00:e1:f5:29:35:5a:a3:02:27:f4:5a:a8:22: 28:1d:b8:66:c8:96:ad:3d:c0:8c:14:f6:41:25:d0:bf:f4:34: a2:ed:46:92:4b:cc:06:26:d9:f6:d6:d9:c3:e3:3c:f6:90:2d: 9a:bf:a0:53:de:f7:ba:c7:95:43:50:c3:b4:61:3d:a3:28:a4: 9c:10:f6:90:2a:fb:8c:f9:1d:42:2b:d0:fa:d4:7d:0a:d8:c6: 70:f2:fa:c5:37:c6:1b:e2:4b:01:0c:1f:bf:43:76:1a:08:55: f5:66:94:80:bb:50:c8:b2:9c:a5:82:bb:02:31:55:88:84:81: 0f:fb:3f:2e:d5:4f:a2:21:87:fc:be:d2:6c:e5:e6:0f:b9:a2: 69:c4:5a:10:aa:96:62:c6:81:da:b9:62:05:e4:b4:f5:64:d7: b5:2c:30:39:9e:be:b9:23:ea:6b:17:0e:d2:62:1e:1d:be:7a: 97:34:fc:ef:c2:8d:cd:ba:f8:88:0b:98:e7:da:3f:f4:9d:6a: 78:67:2f:20:2e:e7:5f:04:02:67:29:09:bc:2f:bf:2c:10:e5: fe:95:c3:0f:dc:8e:40:37:1f:af:e1:63:74:17:18:2c:bc:38: 65:dc:c5:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8iRc3UkshOckAxoaZgnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4 NmVlZjQwHhcNMjYwMTAyMTgyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGE5YTZiMTExYTBmNTg2Y2VjMTkwZjQ1ODM5ZjMyZDE0ZmRkNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzFcUTFUJnnDbkcjhLQZir590aeS 83H7kJW1gGjKjHQbROkAhLp+rPIxnKV9m6Nvw/1whAsusaVPyn//m0VoKE4iuwlr CViSmmaGWnRNxprbUkHGplRgZn6Xlg2agPEB1+SzTFj8SSF2r0c6JggrdHa2tx7v cpm7JWGwwe+XGu1LZo+shrQYTg/eVgjy7NfbAb8XfXdZdelUSS99AFx47QPNzBET JuTOnTxrQVtDcL8rOvRmBBrPcErgSyFAHgXAaip47oMnL+pCadWmy59EVj/YAair 9bZRkJKa7r+HiDGMyp3WjUcoFcRGWHj2PL1n/3BxMrn96/YvpCCVSeZ2ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSpprERoPWGzsGQ9Fg58y0U/dcyMB8GA1UdIwQY MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et ZDUxNmYwZTE0ODdiLzEvdEttbXNSR2c5WWJPd1pEMFdEbnpMUlQ5MXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BsMA0G CSqGSIb3DQEBCwUAA4IBAQAabsH4SSIR/J+1EpnCsNT6F8vjYa9RqwDh9Sk1WqMC J/RaqCIoHbhmyJatPcCMFPZBJdC/9DSi7UaSS8wGJtn21tnD4zz2kC2av6BT3ve6 x5VDUMO0YT2jKKScEPaQKvuM+R1CK9D61H0K2MZw8vrFN8Yb4ksBDB+/Q3YaCFX1 ZpSAu1DIspylgrsCMVWIhIEP+z8u1U+iIYf8vtJs5eYPuaJpxFoQqpZixoHauWIF 5LT1ZNe1LDA5nr65I+prFw7SYh4dvnqXNPzvwo3NuviIC5jn2j/0nWp4Zy8gLudf BAJnKQm8L78sEOX+lcMP3I5ANx+v4WN0FxgsvDhl3MWh -----END CERTIFICATE-----Generated at Fri Feb 13 08:26:57 2026 by rpki-client