This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/t7Gq84nW0Oj9leZaX2X9wjhswgA.roa File: t7Gq84nW0Oj9leZaX2X9wjhswgA.roa (raw, json) Hash identifier: yr3zYXhfmgwWPLlesJ4m39gkLVl7WXaVbHMKkBty0Jk= Subject key identifier: B7:B1:AA:F3:89:D6:D0:E8:FD:95:E6:5A:5F:65:FD:C2:38:6C:C2:00 Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7 Certificate serial: 019B7F840926E2AFD7CBF7EE7073A14C345A Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/t7Gq84nW0Oj9leZaX2X9wjhswgA.roa Signing time: Fri 02 Jan 2026 16:21:58 +0000 ROA not before: Fri 02 Jan 2026 16:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211671 IP address blocks: 91.220.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:09:26:e2:af:d7:cb:f7:ee:70:73:a1:4c:34:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7 Validity Not Before: Jan 2 16:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7b1aaf389d6d0e8fd95e65a5f65fdc2386cc200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:0b:ac:f8:46:f2:71:ee:d7:c8:41:ff:3d: 15:ac:6a:07:9d:61:de:e0:16:1f:3c:1b:f1:a9:fc: 7f:2f:65:aa:04:eb:8d:5a:ac:d9:78:e3:c9:6b:b8: 52:80:e0:e4:d2:0f:bb:78:fe:d7:98:fe:2f:dd:70: cb:71:2b:f3:f9:ba:ff:4c:6c:a0:e7:d0:e9:20:26: 3a:04:be:31:bb:9d:62:08:2e:42:9c:1f:32:31:72: 86:a7:9b:22:3f:a4:72:04:47:fa:60:9b:99:ae:ca: f0:5f:70:43:bd:30:16:ad:8a:7e:64:d8:b7:30:1b: f5:5f:da:95:d2:63:ca:6e:88:9a:33:c1:71:50:75: 29:9d:fb:2c:5b:c2:10:a9:a7:9c:0a:65:75:eb:3a: 27:0f:7d:e7:7f:b8:1c:ad:e7:93:fb:54:13:97:90: b6:48:8a:68:7a:43:4f:ea:02:6e:b4:c0:fc:f9:1f: 26:80:ca:3f:fa:7c:f2:26:64:17:b6:0b:b2:93:42: 14:71:f8:7f:de:b9:5d:94:6c:a5:14:4c:9c:7f:6b: bf:bc:64:5b:6a:90:8d:40:fc:d0:d4:9c:46:39:08: 62:85:7d:bb:d9:9c:4b:2d:14:bb:a7:88:d8:52:20: 35:14:0c:38:e3:38:52:c7:9d:9e:a5:d2:09:e9:64: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B1:AA:F3:89:D6:D0:E8:FD:95:E6:5A:5F:65:FD:C2:38:6C:C2:00 X509v3 Authority Key Identifier: keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/t7Gq84nW0Oj9leZaX2X9wjhswgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.10.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:39:ee:9f:3c:1a:8b:a7:dc:e0:e8:6c:b9:65:53:f1:7b:7a: 2e:7b:14:f3:3e:0c:cc:e6:23:4a:62:d9:42:ce:e3:05:af:56: 8e:d9:12:99:aa:7c:35:6c:a8:f3:bd:43:ce:d5:e1:88:a3:2b: 21:59:eb:64:22:06:99:52:54:a8:12:6c:c7:40:0b:08:ac:43: da:ac:95:73:0c:5b:66:9a:92:ad:69:47:a8:45:38:4b:17:aa: 3d:24:5a:4a:33:b8:26:2b:a7:86:44:72:a0:eb:01:6b:f4:2c: aa:81:62:8f:b3:90:42:35:43:1b:64:b9:ed:b3:02:53:d2:18: 32:e0:ec:4a:47:82:ca:03:b4:55:e7:83:dd:24:eb:01:92:cc: 42:c6:63:16:f9:9b:45:88:4d:83:cc:b5:e0:2f:3b:59:e4:f1: cb:ee:09:a6:69:73:e0:bb:c8:50:cf:1a:65:ab:2d:93:60:c9: 4a:1d:28:44:ba:24:08:81:e2:5c:91:d6:0c:61:c5:c8:ff:ef: 3f:31:57:df:18:87:22:73:43:51:10:f1:72:6a:0f:7f:9f:5e: 78:5e:b2:19:af:d3:e3:1e:b4:8f:28:59:26:7e:bf:62:bd:f4: ae:1e:8b:c9:86:5d:77:26:95:a1:4e:15:70:e7:75:17:78:06: ff:09:bb:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hAkm4q/Xy/fucHOhTDRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZmI4ZmExMGRmZjM0NzNlNjUzZGJmNjFjOWE4NjQzMjE4 MGE1YzcwHhcNMjYwMTAyMTYyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2IxYWFmMzg5ZDZkMGU4ZmQ5NWU2NWE1ZjY1ZmRjMjM4NmNjMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskwLrPhG8nHu18hB/z0VrGoHnWHe 4BYfPBvxqfx/L2WqBOuNWqzZeOPJa7hSgODk0g+7eP7XmP4v3XDLcSvz+br/TGyg 59DpICY6BL4xu51iCC5CnB8yMXKGp5siP6RyBEf6YJuZrsrwX3BDvTAWrYp+ZNi3 MBv1X9qV0mPKboiaM8FxUHUpnfssW8IQqaecCmV16zonD33nf7gcreeT+1QTl5C2 SIpoekNP6gJutMD8+R8mgMo/+nzyJmQXtguyk0IUcfh/3rldlGylFEycf2u/vGRb apCNQPzQ1JxGOQhihX272ZxLLRS7p4jYUiA1FAw44zhSx52epdIJ6WR6WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLexqvOJ1tDo/ZXmWl9l/cI4bMIAMB8GA1UdIwQY MBaAFJL7j6EN/zRz5lPb9hyahkMhgKXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDct MjkzZjYxMjJhMTlkLzEvdDdHcTg0blcwT2o5bGVaYVgyWDl3amhzd2dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDctMjkzZjYxMjJhMTlk LzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wKMA0G CSqGSIb3DQEBCwUAA4IBAQAdOe6fPBqLp9zg6Gy5ZVPxe3ouexTzPgzM5iNKYtlC zuMFr1aO2RKZqnw1bKjzvUPO1eGIoyshWetkIgaZUlSoEmzHQAsIrEParJVzDFtm mpKtaUeoRThLF6o9JFpKM7gmK6eGRHKg6wFr9CyqgWKPs5BCNUMbZLntswJT0hgy 4OxKR4LKA7RV54PdJOsBksxCxmMW+ZtFiE2DzLXgLztZ5PHL7gmmaXPgu8hQzxpl qy2TYMlKHShEuiQIgeJckdYMYcXI/+8/MVffGIcic0NREPFyag9/n154XrIZr9Pj HrSPKFkmfr9ivfSuHovJhl13JpWhThVw53UXeAb/Cbtc -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:53 2026 by rpki-client