This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/mP8W7TMyviTbTSoXDcPVC4ui5L4.roa File: mP8W7TMyviTbTSoXDcPVC4ui5L4.roa (raw, json) Hash identifier: 6juiOWCmEUWksztqfKv/1hmW4YE+zbFyyfjzUEd04ug= Subject key identifier: 98:FF:16:ED:33:32:BE:24:DB:4D:2A:17:0D:C3:D5:0B:8B:A2:E4:BE Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Certificate serial: 019B76EAC9ADFFAD5667F93D4DA06A12EB5A Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/mP8W7TMyviTbTSoXDcPVC4ui5L4.roa Signing time: Thu 01 Jan 2026 00:17:37 +0000 ROA not before: Thu 01 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197979 IP address blocks: 91.231.24.0/24 maxlen: 24 91.231.25.0/24 maxlen: 24 91.231.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c9:ad:ff:ad:56:67:f9:3d:4d:a0:6a:12:eb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98ff16ed3332be24db4d2a170dc3d50b8ba2e4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:a5:f7:73:fd:fc:25:86:d0:a2:75:46:57: a3:e0:42:8e:49:f3:59:1b:bf:c6:20:70:1a:64:d6: 4f:e2:01:c2:09:5d:32:e6:59:73:97:de:20:60:ba: 56:8c:de:60:d8:be:10:01:23:6d:a5:04:ea:73:41: 4b:36:1d:83:5e:7b:54:67:bc:cc:c2:25:4a:c3:25: 4f:ae:53:a3:9e:78:d4:79:97:de:9c:ae:af:9c:7c: e2:a2:56:2e:66:b5:00:4d:94:4a:14:81:a3:63:2b: 6f:11:78:b9:79:d3:cd:84:dc:f0:a1:30:59:d2:d2: 74:40:65:4d:64:d5:6a:c8:e9:fc:04:32:a4:96:b0: a4:6a:fb:09:a2:e9:0d:f4:d8:97:5e:84:7e:e8:84: 42:ab:73:4d:04:bc:5b:7f:7e:32:24:14:80:23:d6: 41:c8:a7:43:19:47:51:bf:df:0e:33:03:55:19:65: 84:0f:5e:d3:a0:62:46:69:a2:e9:25:b3:6f:ac:40: e2:56:b8:c0:b6:77:f0:da:41:01:31:93:c4:d7:e0: 75:01:b1:9c:c1:83:b9:be:5c:28:1a:50:4b:a5:5a: 0d:ac:78:8d:1f:e7:15:54:72:c2:2b:ee:d0:5f:6b: 9e:12:f0:85:39:d0:81:b0:9f:36:a6:fe:89:fb:6a: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FF:16:ED:33:32:BE:24:DB:4D:2A:17:0D:C3:D5:0B:8B:A2:E4:BE X509v3 Authority Key Identifier: keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/mP8W7TMyviTbTSoXDcPVC4ui5L4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.24.0/23 91.231.27.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:89:80:ad:3b:5e:05:41:0e:07:e0:db:fa:d7:4b:1f:b3:77: 8c:16:ef:86:f7:22:22:56:82:d6:83:a7:0e:1d:26:b7:89:d1: 9c:60:e9:6d:a0:6a:f1:97:9a:c6:18:ac:e4:09:d9:61:c9:bd: 5c:95:0a:c7:bf:68:61:b5:b6:71:ca:61:0f:c4:6c:c7:b2:ee: e3:fb:92:8d:da:57:3c:b4:c9:0a:ff:f1:99:82:73:25:21:21: 9d:02:0c:a5:39:6d:61:5c:b3:90:80:c9:5d:ae:91:9d:93:fc: 00:2e:35:bf:23:30:90:66:59:02:1f:d1:3d:7e:9d:5c:da:88: 59:2c:77:f8:2b:47:72:a5:1e:00:1b:4e:6a:22:2e:1c:2f:03: 5a:de:01:0e:02:9d:07:df:37:49:8a:b6:aa:db:9e:5c:d2:6a: 73:98:f8:36:b4:2e:84:bd:d2:b9:af:06:45:88:d2:cc:ed:7c: f7:da:59:1a:d5:c9:c5:3d:8f:e8:4d:89:ad:c0:c1:c9:8e:b8: 6f:fb:ef:c3:c4:bc:ff:f0:d8:b2:fa:c4:4d:c0:6c:63:5e:b5: 7a:9d:b2:d9:7f:0a:ae:18:e9:89:c1:00:cc:bb:ad:7e:cf:e2: 64:42:65:b9:a0:95:88:89:7d:80:d0:8e:c0:7e:e3:17:9b:e6: 10:a9:de:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26smt/61WZ/k9TaBqEutaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2 OTQ4NjAwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGZmMTZlZDMzMzJiZTI0ZGI0ZDJhMTcwZGMzZDUwYjhiYTJlNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXSl93P9/CWG0KJ1Rlej4EKOSfNZ G7/GIHAaZNZP4gHCCV0y5llzl94gYLpWjN5g2L4QASNtpQTqc0FLNh2DXntUZ7zM wiVKwyVPrlOjnnjUeZfenK6vnHziolYuZrUATZRKFIGjYytvEXi5edPNhNzwoTBZ 0tJ0QGVNZNVqyOn8BDKklrCkavsJoukN9NiXXoR+6IRCq3NNBLxbf34yJBSAI9ZB yKdDGUdRv98OMwNVGWWED17ToGJGaaLpJbNvrEDiVrjAtnfw2kEBMZPE1+B1AbGc wYO5vlwoGlBLpVoNrHiNH+cVVHLCK+7QX2ueEvCFOdCBsJ82pv6J+2pHOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJj/Fu0zMr4k200qFw3D1QuLouS+MB8GA1UdIwQY MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct NzhlOTk3ODY5OTUyLzEvbVA4VzdUTXl2aVRiVFNvWERjUFZDNHVpNUw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+cYAwQA W+cbMA0GCSqGSIb3DQEBCwUAA4IBAQAeiYCtO14FQQ4H4Nv610sfs3eMFu+G9yIi VoLWg6cOHSa3idGcYOltoGrxl5rGGKzkCdlhyb1clQrHv2hhtbZxymEPxGzHsu7j +5KN2lc8tMkK//GZgnMlISGdAgylOW1hXLOQgMldrpGdk/wALjW/IzCQZlkCH9E9 fp1c2ohZLHf4K0dypR4AG05qIi4cLwNa3gEOAp0H3zdJiraq255c0mpzmPg2tC6E vdK5rwZFiNLM7Xz32lka1cnFPY/oTYmtwMHJjrhv++/DxLz/8Niy+sRNwGxjXrV6 nbLZfwquGOmJwQDMu61+z+JkQmW5oJWIiX2A0I7AfuMXm+YQqd4g -----END CERTIFICATE-----Generated at Tue Jan 27 12:39:30 2026 by rpki-client