This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/4vob8D5i4e8yxUzOgD_ndBkImWg.roa File: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (raw, json) Hash identifier: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28= Subject key identifier: E2:FA:1B:F0:3E:62:E1:EF:32:C5:4C:CE:80:3F:E7:74:19:08:99:68 Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Certificate serial: 019B7B36AED14A2A123A050E48FE0FB55F23 Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/4vob8D5i4e8yxUzOgD_ndBkImWg.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39928 IP address blocks: 91.213.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ae:d1:4a:2a:12:3a:05:0e:48:fe:0f:b5:5f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2fa1bf03e62e1ef32c54cce803fe77419089968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:13:77:45:c5:b2:ee:5b:cc:4f:68:fc:73: 10:9a:a2:5f:56:de:81:4e:58:cf:f7:c2:8d:65:5f: ca:b1:5a:0c:0b:a9:70:78:b0:b5:1f:14:45:e8:85: cb:d5:86:6f:06:75:19:ed:c1:e9:71:46:c3:c2:13: b8:71:c3:e8:5c:eb:ac:b9:75:fd:21:d9:d6:e6:1c: 68:46:9b:4f:8c:11:87:45:9b:13:2d:e2:5c:6b:d0: d4:24:e1:fd:7c:c6:b5:b8:1f:dd:41:42:c3:f3:62: 71:71:eb:e3:12:2f:13:9f:1d:df:69:b1:37:5b:42: d4:b1:49:13:e5:2e:a1:86:63:c6:09:9b:7a:aa:a5: 0b:7c:44:90:10:7a:83:2c:0b:9c:ab:8d:d0:84:19: 82:ac:5b:ce:2b:aa:84:05:ee:59:04:76:4b:e0:c3: fa:87:67:42:2a:04:c1:3f:b3:84:7f:15:82:66:95: 7d:64:7f:5f:dc:c0:cf:18:f4:b2:89:53:c3:a2:c3: 0a:d2:32:ad:b1:a2:94:9a:ed:b4:fd:c2:5a:a9:05: a6:5c:14:a8:f5:7d:e6:57:43:d8:84:43:33:35:7d: bd:3a:72:4f:44:51:4f:69:e2:34:ab:06:0c:ed:54: 9d:82:fe:60:9e:14:c2:6c:da:97:19:1f:59:cf:7f: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FA:1B:F0:3E:62:E1:EF:32:C5:4C:CE:80:3F:E7:74:19:08:99:68 X509v3 Authority Key Identifier: keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/4vob8D5i4e8yxUzOgD_ndBkImWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.149.0/24 Signature Algorithm: sha256WithRSAEncryption 01:75:e0:2d:df:9f:af:16:da:f6:09:f6:39:9a:be:54:ef:fc: a9:7b:da:46:75:0b:66:f7:59:b4:88:69:22:b2:10:54:d8:34: b0:d3:82:5a:f6:5d:59:af:ad:cb:b1:0f:82:92:6b:61:89:f6: 4f:43:b3:23:13:83:fa:2f:4a:65:ca:f4:6e:b8:97:36:1e:b4: a4:f1:7c:1f:99:e0:32:58:02:ec:fe:9c:4a:d9:46:ea:70:d3: 5d:3e:5e:7c:20:ae:23:79:2c:01:1a:87:ce:90:9a:e8:70:4a: 37:8d:2f:34:8b:47:c8:65:cd:64:4f:6f:6f:e2:bd:ee:9b:e8: 67:78:2c:0b:7c:93:63:a9:b7:f2:8a:8c:5f:e8:5a:78:da:13: df:91:7f:ab:e7:87:90:3f:2d:59:3c:3e:80:52:3e:bb:a9:84: d5:80:6f:d7:68:24:b9:ca:2a:a2:39:8f:ce:37:9f:7a:15:32: 3a:98:c2:3e:56:bc:16:b1:c8:b8:a6:1c:27:0a:00:ab:a3:99: c7:db:a1:34:ca:f2:17:30:4e:bd:fd:2e:8f:2a:a7:26:5d:b8: 1e:33:1e:fc:a2:c5:0c:b5:1f:f6:e1:84:70:d6:6b:4d:fa:c2: 98:7b:73:6a:16:44:77:17:61:01:0a:af:38:40:92:c0:3f:ae: 99:7e:c4:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nq7RSioSOgUOSP4PtV8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx YWJmZGEwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmZhMWJmMDNlNjJlMWVmMzJjNTRjY2U4MDNmZTc3NDE5MDg5OTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRYTd0XFsu5bzE9o/HMQmqJfVt6B TljP98KNZV/KsVoMC6lweLC1HxRF6IXL1YZvBnUZ7cHpcUbDwhO4ccPoXOusuXX9 IdnW5hxoRptPjBGHRZsTLeJca9DUJOH9fMa1uB/dQULD82JxcevjEi8Tnx3fabE3 W0LUsUkT5S6hhmPGCZt6qqULfESQEHqDLAucq43QhBmCrFvOK6qEBe5ZBHZL4MP6 h2dCKgTBP7OEfxWCZpV9ZH9f3MDPGPSyiVPDosMK0jKtsaKUmu20/cJaqQWmXBSo 9X3mV0PYhEMzNX29OnJPRFFPaeI0qwYM7VSdgv5gnhTCbNqXGR9Zz38NOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOL6G/A+YuHvMsVMzoA/53QZCJloMB8GA1UdIwQY MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct MWNkMzNjNjJjNDVjLzEvNHZvYjhENWk0ZTh5eFV6T2dEX25kQmtJbVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9WVMA0G CSqGSIb3DQEBCwUAA4IBAQABdeAt35+vFtr2CfY5mr5U7/ype9pGdQtm91m0iGki shBU2DSw04Ja9l1Zr63LsQ+CkmthifZPQ7MjE4P6L0plyvRuuJc2HrSk8XwfmeAy WALs/pxK2UbqcNNdPl58IK4jeSwBGofOkJrocEo3jS80i0fIZc1kT29v4r3um+hn eCwLfJNjqbfyioxf6Fp42hPfkX+r54eQPy1ZPD6AUj67qYTVgG/XaCS5yiqiOY/O N596FTI6mMI+VrwWsci4phwnCgCro5nH26E0yvIXME69/S6PKqcmXbgeMx78osUM tR/24YRw1mtN+sKYe3NqFkR3F2EBCq84QJLAP66ZfsTy -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:12 2026 by rpki-client