This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/O2yqyVYgMd1D21b33Ew-cuZUWKs.roa File: O2yqyVYgMd1D21b33Ew-cuZUWKs.roa (raw, json) Hash identifier: mXmtbWNjV9pCi5BRUwRDhllYcEQ3x1WSO9bUZGlzGjw= Subject key identifier: 3B:6C:AA:C9:56:20:31:DD:43:DB:56:F7:DC:4C:3E:72:E6:54:58:AB Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2 Certificate serial: 019B7C7F15010703810A289A7C90BB6BCCB4 Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/O2yqyVYgMd1D21b33Ew-cuZUWKs.roa Signing time: Fri 02 Jan 2026 02:17:41 +0000 ROA not before: Fri 02 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51732 IP address blocks: 91.220.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:15:01:07:03:81:0a:28:9a:7c:90:bb:6b:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2 Validity Not Before: Jan 2 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b6caac9562031dd43db56f7dc4c3e72e65458ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:0b:ad:b4:06:26:0a:36:d6:70:14:bf:75: 9d:4d:8b:c5:da:6a:45:fc:d5:10:28:90:fb:1c:1c: 1d:f5:cd:cd:b1:db:10:ce:39:e1:24:43:3c:71:12: 0e:9d:cc:c2:bf:e4:90:fd:72:80:3b:b0:26:59:5f: ae:ef:7e:7c:ab:f2:ff:07:d4:87:f7:95:07:dc:b5: 71:12:c4:bc:ef:c7:b6:f6:24:59:43:6f:00:43:83: b2:67:3a:de:61:7f:60:51:c7:68:1e:ac:dd:ab:e7: 95:61:88:48:b4:dd:f4:2b:ca:35:74:2d:10:37:2f: a5:86:1b:b1:3c:41:35:5c:e4:f5:29:d3:6f:ab:94: 13:19:1f:e1:72:b2:a8:e1:aa:3c:83:98:cd:de:a2: ae:f7:f2:8f:0c:a2:11:4a:56:89:12:a2:66:af:3d: cb:48:20:51:2b:91:28:e9:8c:27:db:35:85:bb:8b: d1:59:11:ad:c3:f6:07:d1:4f:88:81:fd:43:b4:19: c6:0d:2c:e5:e9:4d:c6:69:74:7f:bf:dc:27:33:12: dd:3e:ec:e9:b8:4e:27:37:6c:90:ff:ee:09:f2:d1: 97:21:b1:1d:3a:5e:69:0c:bb:ab:4f:8a:ea:db:9a: ab:2e:6e:62:09:4d:57:08:04:70:24:66:ec:0b:68: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6C:AA:C9:56:20:31:DD:43:DB:56:F7:DC:4C:3E:72:E6:54:58:AB X509v3 Authority Key Identifier: keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/O2yqyVYgMd1D21b33Ew-cuZUWKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.79.0/24 Signature Algorithm: sha256WithRSAEncryption 02:39:56:3f:7d:44:cb:bc:98:01:7f:f9:c2:bd:6b:a8:b9:92: 8c:90:68:eb:5b:d8:c6:c9:7e:4c:d0:83:50:a9:a0:e0:3c:26: c1:5a:f5:e3:a8:83:88:11:f5:27:08:4e:90:f3:50:00:ea:f2: 5e:c8:12:1d:68:fa:c1:ef:96:83:f8:fb:3a:dd:8a:08:b2:68: 92:7e:70:37:f2:f4:4b:44:65:ee:09:60:5f:5b:f6:ee:f7:b5: 5d:42:63:a9:91:8d:e4:9e:03:cf:8e:bd:76:17:68:b9:97:8c: 66:99:f3:76:d4:d9:22:ca:2b:c1:90:1a:54:be:02:8c:f9:0f: 11:64:14:e0:83:11:9c:a0:aa:25:84:13:63:51:4e:09:2b:fd: 95:9e:f5:d4:81:e2:a8:3c:9f:6f:00:57:33:73:26:28:69:0d: 72:0a:3f:26:a2:61:98:54:b2:df:58:02:87:aa:cc:e2:2f:36: 59:0b:83:ed:07:e2:a3:c3:ee:df:1e:70:50:18:01:ce:a1:f7: 01:0d:89:5a:53:24:79:d1:22:22:b7:d7:2b:41:72:60:7f:7c: 67:58:68:fb:0d:f9:48:14:4b:c6:e0:1a:b8:79:b3:e8:24:a3: 5c:ce:e0:99:14:e7:aa:97:95:b7:7c:ea:6c:4a:7a:68:9c:df: 45:70:fb:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fxUBBwOBCiiafJC7a8y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODhmNDI5ZWRjODZhYTg3YmIzYTE3NzE3Y2VhNzFjNzA4 NzNhZjIwHhcNMjYwMTAyMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjZjYWFjOTU2MjAzMWRkNDNkYjU2ZjdkYzRjM2U3MmU2NTQ1OGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IsLrbQGJgo21nAUv3WdTYvF2mpF /NUQKJD7HBwd9c3NsdsQzjnhJEM8cRIOnczCv+SQ/XKAO7AmWV+u7358q/L/B9SH 95UH3LVxEsS878e29iRZQ28AQ4OyZzreYX9gUcdoHqzdq+eVYYhItN30K8o1dC0Q Ny+lhhuxPEE1XOT1KdNvq5QTGR/hcrKo4ao8g5jN3qKu9/KPDKIRSlaJEqJmrz3L SCBRK5Eo6Ywn2zWFu4vRWRGtw/YH0U+Igf1DtBnGDSzl6U3GaXR/v9wnMxLdPuzp uE4nN2yQ/+4J8tGXIbEdOl5pDLurT4rq25qrLm5iCU1XCARwJGbsC2hxMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDtsqslWIDHdQ9tW99xMPnLmVFirMB8GA1UdIwQY MBaAFBqI9CntyGqoe7OhdxfOpxxwhzryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEt MDZkNDk4ZjYyMGEzLzEvTzJ5cXlWWWdNZDFEMjFiMzNFdy1jdVpVV0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEtMDZkNDk4ZjYyMGEz LzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xPMA0G CSqGSIb3DQEBCwUAA4IBAQACOVY/fUTLvJgBf/nCvWuouZKMkGjrW9jGyX5M0INQ qaDgPCbBWvXjqIOIEfUnCE6Q81AA6vJeyBIdaPrB75aD+Ps63YoIsmiSfnA38vRL RGXuCWBfW/bu97VdQmOpkY3kngPPjr12F2i5l4xmmfN21NkiyivBkBpUvgKM+Q8R ZBTggxGcoKolhBNjUU4JK/2VnvXUgeKoPJ9vAFczcyYoaQ1yCj8momGYVLLfWAKH qsziLzZZC4PtB+Kjw+7fHnBQGAHOofcBDYlaUyR50SIit9crQXJgf3xnWGj7DflI FEvG4Bq4ebPoJKNczuCZFOeql5W3fOpsSnponN9FcPsv -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:55 2026 by rpki-client