This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/J4YLrLdwYgPSyWf3TDtozKJGYDA.roa File: J4YLrLdwYgPSyWf3TDtozKJGYDA.roa (raw, json) Hash identifier: oD8qfrXmhU5eXPYgfnLW4FbZh7wYxDBRIu7McpM1mGg= Subject key identifier: 27:86:0B:AC:B7:70:62:03:D2:C9:67:F7:4C:3B:68:CC:A2:46:60:30 Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Certificate serial: 019B79ED504DA98890FA0D81386F22927CFA Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/J4YLrLdwYgPSyWf3TDtozKJGYDA.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213202 IP address blocks: 91.196.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:4d:a9:88:90:fa:0d:81:38:6f:22:92:7c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27860bacb7706203d2c967f74c3b68cca2466030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:ff:d1:99:68:20:85:65:ab:d6:28:b7:51: fb:0a:cc:2c:d2:9e:8d:c9:1a:2b:67:f6:11:3b:b8: 34:e7:2e:d3:ea:65:69:13:f7:6d:b3:92:20:c0:ab: 65:0d:49:f7:86:35:df:7c:26:29:7c:ac:11:61:10: 89:c2:d1:f7:00:9a:a1:db:e2:08:2d:ec:77:6a:30: 7d:b0:38:9a:a3:da:2e:06:39:6c:10:08:53:78:d7: 96:f0:34:3d:54:04:0a:72:1c:c2:3c:6e:fe:89:19: 1c:70:aa:4f:24:a9:8c:ec:6d:2c:a2:b8:5d:c7:4d: bc:46:da:82:f2:89:51:41:ac:bc:cc:fa:24:e2:70: ea:1f:16:b1:68:b5:61:92:42:af:e9:1d:95:6e:20: 0c:37:d6:aa:5a:96:09:3f:89:1c:7d:3d:04:94:52: 88:4d:d3:11:8d:a5:34:60:e2:b2:b5:e9:a8:92:2c: 19:e2:14:fd:16:78:d0:de:dc:f9:bc:77:0e:ba:c1: 64:90:d6:9c:7e:8c:f3:b7:91:16:7a:59:08:c7:b0: 29:e8:ce:ba:73:31:ce:3e:c2:12:bc:32:55:bb:cf: 27:7e:4c:8b:7c:dc:bd:e0:f0:df:dd:09:2d:7b:bb: 7f:0c:99:9c:65:74:f5:bf:d7:af:70:17:f3:df:a0: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:86:0B:AC:B7:70:62:03:D2:C9:67:F7:4C:3B:68:CC:A2:46:60:30 X509v3 Authority Key Identifier: keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/J4YLrLdwYgPSyWf3TDtozKJGYDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.191.0/24 Signature Algorithm: sha256WithRSAEncryption 79:88:5a:05:e9:03:4d:d1:2f:1d:97:f7:eb:8e:64:4e:a1:bb: f1:e7:2b:35:64:f1:a5:27:a2:cb:52:23:3e:4f:36:d0:35:6f: 22:22:8c:24:7a:9f:2f:bb:9e:ca:20:3f:b0:2f:58:52:ec:75: 3a:76:e2:d9:41:12:ab:0d:89:e5:ed:b2:ae:01:1f:91:0d:47: ee:57:0d:21:60:d9:fc:ee:53:06:34:d1:91:d1:0b:1f:89:79: 5e:f5:41:e0:af:31:15:5d:58:f4:f3:1b:df:63:ec:34:72:ad: 58:dc:4f:45:54:7e:3d:aa:5b:18:b0:82:44:23:a2:a3:69:9d: 0b:b9:cd:31:4d:b6:ac:cc:9d:9f:b6:43:ca:aa:63:1f:1c:51: 1b:9a:0a:b5:f5:86:2a:41:c3:be:d0:f0:1c:de:ac:7b:50:fd: bb:4a:2e:bf:d2:7b:ee:50:09:6e:9b:5c:dd:fe:4a:3c:f4:c4: 2b:56:a8:be:5f:35:fa:2b:26:9e:06:6d:6e:e5:b4:ed:6e:d0: 6e:41:cc:9a:9d:7b:13:e1:a0:f5:14:2e:01:18:45:ac:44:27: 71:8b:93:cb:ee:ee:12:37:eb:2d:14:29:f5:8b:c5:4b:35:6d: 79:a0:67:47:dd:bc:e0:18:1a:27:d8:3d:a4:20:ab:30:6e:23: 84:81:ff:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VBNqYiQ+g2BOG8iknz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGMxMWVkMWE5ZDllZDU2YmYxOWRhN2YyMTc4MzBhODA5 OWM0MjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzg2MGJhY2I3NzA2MjAzZDJjOTY3Zjc0YzNiNjhjY2EyNDY2MDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgX/0ZloIIVlq9Yot1H7Csws0p6N yRorZ/YRO7g05y7T6mVpE/dts5IgwKtlDUn3hjXffCYpfKwRYRCJwtH3AJqh2+II Lex3ajB9sDiao9ouBjlsEAhTeNeW8DQ9VAQKchzCPG7+iRkccKpPJKmM7G0sorhd x028RtqC8olRQay8zPok4nDqHxaxaLVhkkKv6R2VbiAMN9aqWpYJP4kcfT0ElFKI TdMRjaU0YOKytemokiwZ4hT9FnjQ3tz5vHcOusFkkNacfozzt5EWelkIx7Ap6M66 czHOPsISvDJVu88nfkyLfNy94PDf3Qkte7t/DJmcZXT1v9evcBfz36CgJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeGC6y3cGID0sln90w7aMyiRmAwMB8GA1UdIwQY MBaAFBTcEe0anZ7Va/Gdp/IXgwqAmcQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUt YzcxZGI3MTg5NzBlLzEvSjRZTHJMZHdZZ1BTeVdmM1REdG96S0pHWURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUtYzcxZGI3MTg5NzBl LzEvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8S/MA0G CSqGSIb3DQEBCwUAA4IBAQB5iFoF6QNN0S8dl/frjmROobvx5ys1ZPGlJ6LLUiM+ TzbQNW8iIowkep8vu57KID+wL1hS7HU6duLZQRKrDYnl7bKuAR+RDUfuVw0hYNn8 7lMGNNGR0QsfiXle9UHgrzEVXVj08xvfY+w0cq1Y3E9FVH49qlsYsIJEI6KjaZ0L uc0xTbaszJ2ftkPKqmMfHFEbmgq19YYqQcO+0PAc3qx7UP27Si6/0nvuUAlum1zd /ko89MQrVqi+XzX6KyaeBm1u5bTtbtBuQcyanXsT4aD1FC4BGEWsRCdxi5PL7u4S N+stFCn1i8VLNW15oGdH3bzgGBon2D2kIKswbiOEgf97 -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:13 2026 by rpki-client