This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/e9f3B44EK2wKomC2T7X1vPJt_tY.roa File: e9f3B44EK2wKomC2T7X1vPJt_tY.roa (raw, json) Hash identifier: w9sFrHQXnGx9nnQqHsGkGtrOe5lM1/FzKdCvsaW8Vb0= Subject key identifier: 7B:D7:F7:07:8E:04:2B:6C:0A:A2:60:B6:4F:B5:F5:BC:F2:6D:FE:D6 Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d Certificate serial: 019B7C809D306B2572CCDEF9069D2A2800DB Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/e9f3B44EK2wKomC2T7X1vPJt_tY.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202137 IP address blocks: 91.208.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9d:30:6b:25:72:cc:de:f9:06:9d:2a:28:00:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bd7f7078e042b6c0aa260b64fb5f5bcf26dfed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:59:ab:47:c9:09:81:89:10:41:00:9f:b3:77: 9d:56:ab:df:3b:73:0a:40:26:14:67:67:88:3d:37: bf:78:15:ce:30:65:3c:35:4c:35:18:45:c0:8b:67: 3a:74:3e:e4:49:eb:d7:a7:14:db:58:2d:4e:56:0b: b1:09:fd:6d:e8:71:f8:c4:e6:56:25:21:15:5c:e5: ed:11:36:00:cd:4a:9d:5b:37:24:ca:98:f5:6e:b1: d9:76:82:bf:ed:5d:c7:1c:ab:ce:b3:74:2f:ca:c4: 47:b1:af:6e:6a:47:e9:c7:f9:33:0d:46:b2:d0:fe: 13:c3:dd:8e:a8:4c:87:ec:34:4c:4e:ec:44:8b:ef: 0a:8a:52:0a:c4:76:e2:2b:1e:6a:18:f5:0d:5a:7e: bc:db:d9:91:b9:c7:b8:b9:b8:06:05:cb:fb:73:22: fc:4f:24:aa:b2:f4:6f:ff:e2:67:70:6f:e8:52:94: 0c:a3:40:d6:c6:5a:a2:d4:32:0c:f3:21:65:a1:95: 39:0d:3d:ff:b5:91:8d:b3:26:92:12:71:27:97:75: 6f:79:f8:90:75:9d:b7:9f:4f:db:b0:59:91:d0:40: 7e:d8:d7:35:d7:02:43:ef:f7:b6:29:d2:f7:53:c4: 07:5a:6e:2a:a6:2e:f2:91:9c:eb:2f:14:99:42:4c: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:F7:07:8E:04:2B:6C:0A:A2:60:B6:4F:B5:F5:BC:F2:6D:FE:D6 X509v3 Authority Key Identifier: keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/e9f3B44EK2wKomC2T7X1vPJt_tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.243.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:c7:51:06:ce:b4:bf:bd:c6:42:4e:f2:ca:28:30:76:d1:01: dc:08:f6:ca:e1:4d:98:5e:a2:d8:55:e2:5c:cd:12:59:c5:02: 81:17:02:51:eb:e2:cc:09:1e:3e:47:93:8f:45:48:8a:63:77: 6b:78:4d:6e:af:5d:6e:d6:04:f9:cb:48:48:b9:e9:a2:10:46: c5:38:a3:dc:5c:65:ef:f7:7a:9c:8d:d8:f6:e4:a4:c7:5b:d9: e6:6f:05:96:02:ae:31:a3:89:c9:18:78:d0:f2:a8:be:a8:82: 61:56:60:36:16:22:5f:71:7a:c2:c8:df:4b:86:85:63:81:e3: 44:76:cd:ee:05:1a:1b:e1:4a:d9:3b:21:59:f8:cd:9c:23:f4: d4:cb:c8:8e:c3:4d:66:92:16:1c:dc:88:0a:ac:79:66:06:d4: c9:ef:da:8b:fb:64:62:f3:a1:36:77:fa:a4:d1:dd:62:46:a5: 20:5d:72:02:07:b4:c8:13:c9:ad:05:65:93:26:f4:50:e5:25: 22:90:cb:6a:4b:7a:12:82:dc:ca:7c:5a:95:a2:ab:f0:ca:fc: 15:ab:1d:82:5c:86:da:f5:a1:d4:ce:63:5f:69:5b:ff:2e:3e: a0:58:45:33:48:e8:db:1a:a2:2f:34:53:c5:6f:bf:ec:9d:a4: f0:ed:c6:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJ0wayVyzN75Bp0qKADbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOTgxNmNhZmZmYTU2MjYzZGQwZDc0ODE5Yzk0ZDU0MDJm MWJiNmQwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQ3ZjcwNzhlMDQyYjZjMGFhMjYwYjY0ZmI1ZjViY2YyNmRmZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FmrR8kJgYkQQQCfs3edVqvfO3MK QCYUZ2eIPTe/eBXOMGU8NUw1GEXAi2c6dD7kSevXpxTbWC1OVguxCf1t6HH4xOZW JSEVXOXtETYAzUqdWzckypj1brHZdoK/7V3HHKvOs3QvysRHsa9uakfpx/kzDUay 0P4Tw92OqEyH7DRMTuxEi+8KilIKxHbiKx5qGPUNWn6829mRuce4ubgGBcv7cyL8 TySqsvRv/+JncG/oUpQMo0DWxlqi1DIM8yFloZU5DT3/tZGNsyaSEnEnl3VvefiQ dZ23n0/bsFmR0EB+2Nc11wJD7/e2KdL3U8QHWm4qpi7ykZzrLxSZQkwhqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvX9weOBCtsCqJgtk+19bzybf7WMB8GA1UdIwQY MBaAFMyYFsr/+lYmPdDXSBnJTVQC8bttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUt MDllYjAwMTNmYzI0LzEvZTlmM0I0NEVLMndLb21DMlQ3WDF2UEp0X3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUtMDllYjAwMTNmYzI0 LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DzMA0G CSqGSIb3DQEBCwUAA4IBAQAax1EGzrS/vcZCTvLKKDB20QHcCPbK4U2YXqLYVeJc zRJZxQKBFwJR6+LMCR4+R5OPRUiKY3dreE1ur11u1gT5y0hIuemiEEbFOKPcXGXv 93qcjdj25KTHW9nmbwWWAq4xo4nJGHjQ8qi+qIJhVmA2FiJfcXrCyN9LhoVjgeNE ds3uBRob4UrZOyFZ+M2cI/TUy8iOw01mkhYc3IgKrHlmBtTJ79qL+2Ri86E2d/qk 0d1iRqUgXXICB7TIE8mtBWWTJvRQ5SUikMtqS3oSgtzKfFqVoqvwyvwVqx2CXIba 9aHUzmNfaVv/Lj6gWEUzSOjbGqIvNFPFb7/snaTw7cb3 -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:26 2026 by rpki-client