This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/C15rJO_bJRsVwZitZCSgh0qDMBk.roa File: C15rJO_bJRsVwZitZCSgh0qDMBk.roa (raw, json) Hash identifier: rFrB85LTHmEZy4HaNwBvd/+Qzbn2vKgCWTAZhL3DIhc= Subject key identifier: 0B:5E:6B:24:EF:DB:25:1B:15:C1:98:AD:64:24:A0:87:4A:83:30:19 Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc Certificate serial: 019B79ED3A7D397B4128CA1D6D45D173E490 Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/C15rJO_bJRsVwZitZCSgh0qDMBk.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197680 IP address blocks: 91.213.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3a:7d:39:7b:41:28:ca:1d:6d:45:d1:73:e4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b5e6b24efdb251b15c198ad6424a0874a833019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:ba:73:83:30:99:c9:09:03:75:61:fd:e5: 1e:03:ae:c4:5a:25:74:90:2d:81:98:bc:51:fe:95: b4:54:74:ec:18:e2:ff:07:39:cd:9e:b2:3d:71:4b: 71:ab:fc:32:a3:ed:fa:25:76:f1:01:16:24:47:59: 5e:1f:78:46:55:97:26:ac:98:44:27:c7:29:3d:47: cc:46:cf:ef:b2:c2:a8:d4:d4:4c:86:a0:a2:39:38: e6:14:b5:32:03:ac:6e:92:78:bf:33:e6:6b:67:bb: fb:3d:3e:5a:bf:d0:ab:ed:90:62:a3:0f:ba:4d:97: 20:7d:9b:01:23:26:50:26:33:b4:57:4d:ab:60:d9: 06:30:6b:2a:d9:59:12:1c:21:cb:08:ea:66:a6:c8: 86:01:c2:0e:73:1b:b3:0c:d8:f5:d2:54:35:30:29: c3:3b:ae:84:c7:3a:b0:48:e6:7e:80:ce:ed:de:d8: 07:46:98:f9:a7:fe:bd:21:7d:f1:ca:36:3d:5d:4c: 39:5c:a7:89:d4:40:9b:b8:54:39:f7:ed:2b:1a:80: 5e:6e:53:66:23:fd:d2:fe:c1:f4:1d:63:82:ba:11: e4:e2:5b:e6:6a:44:cd:bc:12:73:25:1a:8a:bf:d0: f7:ee:88:d7:c4:8a:38:f2:92:73:87:d6:26:44:6d: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5E:6B:24:EF:DB:25:1B:15:C1:98:AD:64:24:A0:87:4A:83:30:19 X509v3 Authority Key Identifier: keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/C15rJO_bJRsVwZitZCSgh0qDMBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.226.0/24 Signature Algorithm: sha256WithRSAEncryption 90:7e:9c:0f:85:91:a8:99:06:de:67:e6:77:22:3f:b6:e2:6c: 07:56:d1:7d:73:e2:c9:48:5b:b5:24:09:1a:a2:a5:58:b9:5b: ab:53:2a:44:1a:17:6b:04:b3:36:ad:c2:f0:7f:4f:ad:f4:46: ce:00:2d:f6:4e:56:77:c3:14:5a:76:81:98:46:6f:bf:f3:b0: 56:e4:84:53:7d:2d:55:72:8f:ff:c1:67:5e:12:9c:df:ef:0c: 46:e1:3b:b5:d5:35:43:5f:e0:17:94:75:4d:da:53:e8:12:3e: 3b:b8:41:20:3d:58:cd:c2:5f:35:2c:b6:d7:27:24:3d:a6:38: 65:bd:29:ec:12:55:c1:1d:88:0f:15:03:10:09:62:90:11:d0: 17:85:51:31:57:00:5f:e4:8b:b0:3f:55:69:7f:3e:a6:73:bd: e2:75:0c:84:b2:da:58:59:ac:b1:15:ec:85:82:86:89:24:ae: 2d:71:be:34:9f:e8:f9:f2:05:0b:34:dd:b9:19:dc:93:12:26: 61:f4:43:b1:10:bc:e7:35:48:e7:79:a2:5b:92:3d:35:1e:00: 1b:f3:ef:fe:e8:31:44:93:c2:a6:1c:c0:36:d2:30:63:a0:9c: 40:8c:40:09:38:46:ff:43:70:54:2d:fd:43:d9:8a:6e:95:b2: be:28:c3:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Tp9OXtBKModbUXRc+SQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjdiMGRkOWZmY2EyZjg1NzM0YzUzN2NiZWY1Y2NkMTE5 OWU1YmMwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjVlNmIyNGVmZGIyNTFiMTVjMTk4YWQ2NDI0YTA4NzRhODMzMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw+6c4MwmckJA3Vh/eUeA67EWiV0 kC2BmLxR/pW0VHTsGOL/BznNnrI9cUtxq/wyo+36JXbxARYkR1leH3hGVZcmrJhE J8cpPUfMRs/vssKo1NRMhqCiOTjmFLUyA6xukni/M+ZrZ7v7PT5av9Cr7ZBiow+6 TZcgfZsBIyZQJjO0V02rYNkGMGsq2VkSHCHLCOpmpsiGAcIOcxuzDNj10lQ1MCnD O66ExzqwSOZ+gM7t3tgHRpj5p/69IX3xyjY9XUw5XKeJ1ECbuFQ59+0rGoBeblNm I/3S/sH0HWOCuhHk4lvmakTNvBJzJRqKv9D37ojXxIo48pJzh9YmRG0Z0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAteayTv2yUbFcGYrWQkoIdKgzAZMB8GA1UdIwQY MBaAFIj3sN2f/KL4VzTFN8vvXM0RmeW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kYzhjMDItNGY2ZC00OWY2LTg4MmMt MTM2OTA1ZTJjN2M1LzEvQzE1ckpPX2JKUnNWd1ppdFpDU2doMHFETUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9kYzhjMDItNGY2ZC00OWY2LTg4MmMtMTM2OTA1ZTJjN2M1 LzEvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9XiMA0G CSqGSIb3DQEBCwUAA4IBAQCQfpwPhZGomQbeZ+Z3Ij+24mwHVtF9c+LJSFu1JAka oqVYuVurUypEGhdrBLM2rcLwf0+t9EbOAC32TlZ3wxRadoGYRm+/87BW5IRTfS1V co//wWdeEpzf7wxG4Tu11TVDX+AXlHVN2lPoEj47uEEgPVjNwl81LLbXJyQ9pjhl vSnsElXBHYgPFQMQCWKQEdAXhVExVwBf5IuwP1Vpfz6mc73idQyEstpYWayxFeyF goaJJK4tcb40n+j58gULNN25GdyTEiZh9EOxELznNUjneaJbkj01HgAb8+/+6DFE k8KmHMA20jBjoJxAjEAJOEb/Q3BULf1D2YpulbK+KMMA -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:07 2026 by rpki-client