This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/jUtQtxBZyibdNC4jT7o0T5Rgb1k.roa File: jUtQtxBZyibdNC4jT7o0T5Rgb1k.roa (raw, json) Hash identifier: hiJPLFqh6YKXOv/Jd1knmkpQBkjeV4y7NB+PULCLrtY= Subject key identifier: 8D:4B:50:B7:10:59:CA:26:DD:34:2E:23:4F:BA:34:4F:94:60:6F:59 Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e Certificate serial: 019B7CED1A0A7145C79EC0B356AC22897B7C Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/jUtQtxBZyibdNC4jT7o0T5Rgb1k.roa Signing time: Fri 02 Jan 2026 04:17:52 +0000 ROA not before: Fri 02 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39399 IP address blocks: 91.199.194.0/24 maxlen: 24 91.215.24.0/22 maxlen: 22 178.215.176.0/20 maxlen: 20 195.182.192.0/23 maxlen: 23 2001:67c:2280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1a:0a:71:45:c7:9e:c0:b3:56:ac:22:89:7b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e Validity Not Before: Jan 2 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d4b50b71059ca26dd342e234fba344f94606f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:3e:58:fa:e4:43:bd:01:2b:1e:f5:b6:aa: 55:5c:8b:a8:6a:df:fa:24:41:08:cf:08:ae:0d:82: c4:ef:dd:33:83:73:94:73:96:63:a6:2d:e1:3e:4a: e5:bf:e9:79:a7:62:51:65:c6:70:da:67:99:a5:32: 03:98:cf:df:61:9b:1d:52:02:24:d0:c6:99:4e:b3: 61:af:3f:a5:67:8a:2b:78:90:cc:17:49:18:c3:00: 8c:d2:cc:f0:2b:c0:df:92:66:66:25:79:f3:bc:1a: 63:ca:37:7d:71:8d:dc:a5:03:06:42:a8:67:09:ab: 83:92:01:75:2a:0f:a7:e3:21:9b:91:f9:8a:d3:ec: 20:a2:d8:6b:f5:f2:6c:32:78:e2:65:cb:3f:ed:81: 2c:41:f5:00:de:0f:57:a6:8d:a5:f6:04:64:77:35: 80:40:92:b9:3b:bd:c3:38:d8:86:e8:71:4e:27:54: 4a:92:53:99:15:e8:ad:09:64:9e:03:83:54:e0:84: f4:4a:4c:af:cb:e0:c8:b8:6f:a3:82:17:4a:7a:b7: 34:c9:38:15:6d:50:db:eb:1b:0d:16:68:23:46:c5: f1:8a:a0:a4:9a:b6:6a:59:76:27:63:41:ec:d4:29: 00:db:2a:06:28:f3:85:cb:cd:7c:72:7f:6d:af:a3: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4B:50:B7:10:59:CA:26:DD:34:2E:23:4F:BA:34:4F:94:60:6F:59 X509v3 Authority Key Identifier: keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/jUtQtxBZyibdNC4jT7o0T5Rgb1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.194.0/24 91.215.24.0/22 178.215.176.0/20 195.182.192.0/23 IPv6: 2001:67c:2280::/48 Signature Algorithm: sha256WithRSAEncryption 1c:1f:c8:5d:b6:aa:49:3a:f0:d9:41:7b:80:c2:81:0d:1d:76: a7:a7:cf:af:5c:a7:73:50:55:e6:3e:39:d3:3f:e0:68:9c:28: 2f:66:dd:e6:0e:fc:e5:ba:ad:b1:54:2e:0d:68:09:3c:f0:3e: 3e:cc:b3:a2:34:43:11:ca:b3:73:61:3d:38:7e:4d:15:04:c1: d4:4b:80:e8:b0:59:3c:72:ac:7b:45:6b:25:db:90:e9:f6:90: 8d:6c:bb:af:47:f8:a6:f6:13:8f:fa:51:54:38:c7:7d:00:c5: 2c:da:5b:d8:f6:db:59:34:36:bb:0a:fa:c5:4f:83:23:bd:00: 3e:8d:6a:fe:fb:87:ba:01:0b:61:85:a2:6e:9c:6f:46:05:eb: c5:48:77:db:3e:d0:b6:23:65:b2:06:ed:cb:bc:8b:a2:49:82: ae:af:f5:13:0b:4b:2c:a2:43:dd:3d:16:27:44:9a:f8:7d:d3: 79:ca:b4:3c:a1:c1:e6:d9:09:a1:83:b1:f8:cf:b6:40:eb:ca: 0a:fb:d4:e7:13:4a:65:c9:63:3f:f4:e3:4e:c5:fa:59:54:a8: bd:84:c0:ae:d8:9d:74:bd:31:58:7e:b7:f6:d6:8e:d9:e7:3d: fb:b4:53:ad:21:23:0b:3c:0c:44:5f:4d:e2:34:f2:be:3c:1d: f1:f9:c3:37 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt87RoKcUXHnsCzVqwiiXt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGE5ODU5ZmJmMmU2YmMzZWQ4MjczOTExNzYyYmQ4ZmE1 ZTgwMmUwHhcNMjYwMTAyMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDRiNTBiNzEwNTljYTI2ZGQzNDJlMjM0ZmJhMzQ0Zjk0NjA2ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQk+WPrkQ70BKx71tqpVXIuoat/6 JEEIzwiuDYLE790zg3OUc5Zjpi3hPkrlv+l5p2JRZcZw2meZpTIDmM/fYZsdUgIk 0MaZTrNhrz+lZ4oreJDMF0kYwwCM0szwK8DfkmZmJXnzvBpjyjd9cY3cpQMGQqhn CauDkgF1Kg+n4yGbkfmK0+wgothr9fJsMnjiZcs/7YEsQfUA3g9Xpo2l9gRkdzWA QJK5O73DONiG6HFOJ1RKklOZFeitCWSeA4NU4IT0Skyvy+DIuG+jghdKerc0yTgV bVDb6xsNFmgjRsXxiqCkmrZqWXYnY0Hs1CkA2yoGKPOFy818cn9tr6PblwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFI1LULcQWcom3TQuI0+6NE+UYG9ZMB8GA1UdIwQY MBaAFCIKmFn78ua8PtgnORF2K9j6XoAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxWVdmdnk1cnctMkNjNUVYWXIyUHBlZ0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lODI4MWYtY2QxNy00ZTAyLThmY2Et OGM1YWMwNmMxNGE4LzEvalV0UXR4Qlp5aWJkTkM0alQ3bzBUNVJnYjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lODI4MWYtY2QxNy00ZTAyLThmY2EtOGM1YWMwNmMxNGE4 LzEvSWdxWVdmdnk1cnctMkNjNUVYWXIyUHBlZ0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAW8fCAwQC W9cYAwQEstewAwQBw7bAMA8EAgACMAkDBwAgAQZ8IoAwDQYJKoZIhvcNAQELBQAD ggEBABwfyF22qkk68NlBe4DCgQ0ddqenz69cp3NQVeY+OdM/4GicKC9m3eYO/OW6 rbFULg1oCTzwPj7Ms6I0QxHKs3NhPTh+TRUEwdRLgOiwWTxyrHtFayXbkOn2kI1s u69H+Kb2E4/6UVQ4x30AxSzaW9j221k0NrsK+sVPgyO9AD6Nav77h7oBC2GFom6c b0YF68VId9s+0LYjZbIG7cu8i6JJgq6v9RMLSyyiQ909FidEmvh903nKtDyhwebZ CaGDsfjPtkDrygr71OcTSmXJYz/0407F+llUqL2EwK7YnXS9MVh+t/bWjtnnPfu0 U60hIws8DERfTeI08r48HfH5wzc= -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:58 2026 by rpki-client