This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa File: Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa (raw, json) Hash identifier: w+2GDqO3QQPP7xUHnZq2EDl7NnG4Qd4Bmp0KetYUXf0= Subject key identifier: 3A:9D:17:95:DD:00:BD:5F:43:F8:69:F9:75:0E:F2:97:97:E1:6B:D9 Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0 Certificate serial: 019B7F8258729183F479698C2450991F3FDF Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa Signing time: Fri 02 Jan 2026 16:20:07 +0000 ROA not before: Fri 02 Jan 2026 16:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50981 IP address blocks: 91.216.61.0/24 maxlen: 24 91.226.190.0/23 maxlen: 23 91.226.190.0/24 maxlen: 24 91.226.191.0/24 maxlen: 24 91.226.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:58:72:91:83:f4:79:69:8c:24:50:99:1f:3f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0 Validity Not Before: Jan 2 16:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a9d1795dd00bd5f43f869f9750ef29797e16bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:1c:95:1a:bf:0e:bf:d2:5c:bf:f6:48:ca: 46:e9:a6:43:4c:c5:97:9e:13:82:1b:e3:80:3b:98: 9d:14:bf:6e:25:46:9e:b1:af:cd:a8:b7:e9:38:2d: 04:3d:b6:8e:b8:52:1b:f9:c4:99:86:9b:d6:10:6f: b6:6e:f4:7d:a9:ee:2c:7e:08:53:83:48:eb:d8:07: 86:25:c8:ad:d4:50:0b:e0:b1:4e:d3:59:b0:d6:e5: 46:57:a4:16:69:62:f2:7b:fe:b3:d7:5e:0f:56:ff: 11:d2:af:13:35:bf:f5:f8:52:89:cb:22:da:96:37: 53:e7:88:3b:1a:40:9d:a0:03:b3:e1:f5:cb:ec:db: 3d:86:9a:d9:f6:63:7f:61:d1:95:84:12:cd:02:e8: cd:7f:de:47:a3:af:b4:d3:7f:28:a2:e1:7c:68:e0: 9f:36:27:01:ff:61:8a:f6:64:ac:9c:83:b0:92:24: f4:86:84:7a:f6:b2:a6:72:0e:1c:64:db:2c:4d:61: 5f:51:16:3a:1d:09:95:af:4a:fa:88:08:c8:44:f3: 41:e2:eb:08:46:e7:46:48:35:8d:8d:51:53:5e:1e: 3f:e3:e2:99:fe:91:a8:a4:68:c6:60:e6:c5:3d:c9: b4:c2:40:5a:83:89:f9:98:f4:c5:79:89:7a:d8:15: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:17:95:DD:00:BD:5F:43:F8:69:F9:75:0E:F2:97:97:E1:6B:D9 X509v3 Authority Key Identifier: keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.61.0/24 91.226.190.0-91.226.192.255 Signature Algorithm: sha256WithRSAEncryption 68:35:6d:e5:99:ea:60:0d:69:5d:e7:66:ab:92:86:26:80:92: f7:d4:34:4a:c9:1d:08:b6:a1:25:c9:86:88:57:75:72:32:8c: 8c:5c:09:09:5e:b5:d6:f9:a2:94:40:ac:8a:87:b8:e5:33:c1: df:2b:7e:1b:da:37:29:c5:4e:6f:2e:22:ae:11:be:95:61:47: 39:f4:b5:2a:b9:57:0f:a5:ff:cf:ea:30:a7:f8:69:96:7b:b1: 67:27:94:8c:da:dd:b9:05:73:fa:97:08:01:16:c4:59:92:36: e4:33:dd:26:c3:db:49:e0:ee:fc:a3:8c:89:72:84:7a:a4:ed: 72:80:14:b7:b5:e9:90:7d:61:a7:2c:8e:ab:ee:3f:57:6a:a6: f1:1f:5f:5b:78:a8:b0:42:2b:fa:d6:ec:64:1f:52:1c:47:94: dc:e3:b8:02:76:07:7a:3b:35:96:f1:34:75:57:df:79:11:be: 84:e7:56:af:93:be:f7:e4:01:cc:f1:f2:43:5c:05:e0:a9:eb: bc:e0:eb:26:91:52:d6:04:64:ed:43:98:01:5e:ee:a0:bf:a3: 88:97:05:9d:b6:e6:d2:60:fa:98:54:ec:ea:a3:b2:a6:a3:8a: 26:9f:6c:fd:3f:05:4c:40:76:f4:53:34:46:79:13:80:6c:e6: a7:3b:9d:82 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/glhykYP0eWmMJFCZHz/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy OTU5YzAwHhcNMjYwMTAyMTYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTlkMTc5NWRkMDBiZDVmNDNmODY5Zjk3NTBlZjI5Nzk3ZTE2YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFsclRq/Dr/SXL/2SMpG6aZDTMWX nhOCG+OAO5idFL9uJUaesa/NqLfpOC0EPbaOuFIb+cSZhpvWEG+2bvR9qe4sfghT g0jr2AeGJcit1FAL4LFO01mw1uVGV6QWaWLye/6z114PVv8R0q8TNb/1+FKJyyLa ljdT54g7GkCdoAOz4fXL7Ns9hprZ9mN/YdGVhBLNAujNf95Ho6+0038oouF8aOCf NicB/2GK9mSsnIOwkiT0hoR69rKmcg4cZNssTWFfURY6HQmVr0r6iAjIRPNB4usI RudGSDWNjVFTXh4/4+KZ/pGopGjGYObFPcm0wkBag4n5mPTFeYl62BUA6wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDqdF5XdAL1fQ/hp+XUO8peX4WvZMB8GA1UdIwQY MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct ZmRhOWNkYzkwZmUzLzEvT3AwWGxkMEF2VjlELUduNWRRN3lsNWZoYTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW9g9MAwD BAFb4r4DBABb4sAwDQYJKoZIhvcNAQELBQADggEBAGg1beWZ6mANaV3nZquShiaA kvfUNErJHQi2oSXJhohXdXIyjIxcCQletdb5opRArIqHuOUzwd8rfhvaNynFTm8u Iq4RvpVhRzn0tSq5Vw+l/8/qMKf4aZZ7sWcnlIza3bkFc/qXCAEWxFmSNuQz3SbD 20ng7vyjjIlyhHqk7XKAFLe16ZB9YacsjqvuP1dqpvEfX1t4qLBCK/rW7GQfUhxH lNzjuAJ2B3o7NZbxNHVX33kRvoTnVq+TvvfkAczx8kNcBeCp67zg6yaRUtYEZO1D mAFe7qC/o4iXBZ225tJg+phU7OqjsqajiiafbP0/BUxAdvRTNEZ5E4Bs5qc7nYI= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:05 2026 by rpki-client