This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa File: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (raw, json) Hash identifier: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s= Subject key identifier: 9F:74:C4:72:3D:9C:1F:0C:89:33:E9:6D:53:A1:73:E2:64:24:80:E9 Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd Certificate serial: 019B7BA3186A26A5E2643D44FEEE35093F09 Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa Signing time: Thu 01 Jan 2026 22:17:24 +0000 ROA not before: Thu 01 Jan 2026 22:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56372 IP address blocks: 91.224.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:18:6a:26:a5:e2:64:3d:44:fe:ee:35:09:3f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd Validity Not Before: Jan 1 22:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f74c4723d9c1f0c8933e96d53a173e2642480e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:30:1d:b1:a1:c7:78:03:b8:b9:5b:53:0a: a1:f8:d7:79:21:ee:9a:72:44:b9:88:06:e2:0e:17: 92:ae:db:c6:2b:26:a6:0c:76:ce:be:c7:77:17:d4: cb:23:3d:eb:10:ad:75:9c:03:08:50:2a:e3:0e:8d: 2f:f9:26:2c:26:46:e2:95:5a:9d:16:cd:f1:86:36: c8:35:0f:bf:a6:03:84:f9:cc:a1:90:90:18:58:a6: 22:6e:de:64:32:68:0c:ea:35:41:d9:20:f1:8c:27: 51:dd:df:0c:af:69:04:ac:c0:38:68:92:a8:45:63: 9b:2a:b6:59:9a:bf:24:d4:f8:96:71:39:13:b1:e6: 1c:a1:89:57:77:82:55:8a:d8:dd:8b:b5:89:65:36: fa:92:49:39:25:bb:f3:3a:46:78:b9:7c:f2:2d:2e: c8:5c:4a:d2:4a:b2:b0:a2:3e:cf:68:d6:7e:2d:d3: f1:c1:83:2f:6b:b4:e2:aa:c7:ad:16:67:61:ed:54: 13:95:3f:69:ba:a9:53:26:33:e6:a1:ec:c6:5d:a8: 8f:95:f6:bf:46:15:c4:95:af:d3:1f:c1:ff:ab:b0: b5:2f:2f:b2:70:19:24:49:d6:3c:58:23:9a:47:62: 1d:2a:4c:64:bb:e9:9b:d0:0d:06:87:97:2a:6e:69: 01:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:C4:72:3D:9C:1F:0C:89:33:E9:6D:53:A1:73:E2:64:24:80:E9 X509v3 Authority Key Identifier: keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.122.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:d6:51:fe:79:be:11:5f:fd:8f:32:7c:8b:a2:07:00:33:01: 4c:e3:7b:32:95:9a:7f:14:f7:62:25:1c:e0:d1:fd:bc:86:60: f2:7f:78:f8:2e:11:95:3c:05:cb:12:f9:fb:9e:8c:a6:19:38: e9:e3:43:f3:78:ef:2b:ed:93:12:87:bc:1a:fb:ce:8a:87:59: dd:ca:ca:e8:db:36:e8:e5:1b:8f:74:54:89:25:86:34:dc:1a: 2f:d2:77:54:1b:95:4f:1d:5c:5c:30:1f:c8:55:8f:31:b3:ff: 01:fc:bb:56:46:dd:fc:6d:6b:2e:ed:a7:12:90:8a:94:f3:25: 52:03:0c:8b:4b:aa:45:f8:9a:13:b0:49:db:40:cf:b9:91:5b: a0:5a:f1:5a:8f:69:7f:da:89:0b:51:c5:b3:3b:64:67:cf:8c: 76:4c:47:0d:c7:57:e4:ab:40:24:13:46:09:99:78:5e:84:a0: bc:18:7e:2c:be:88:63:42:24:98:ff:26:47:5b:2c:cc:fe:99: 4a:28:f6:d9:0a:f9:b6:13:02:6e:4f:25:b6:f1:8c:ed:3d:54: 29:e7:c4:5b:56:64:b2:c6:a3:9a:13:75:b8:60:70:0f:42:fa: f5:03:cf:44:9c:25:5f:e8:7d:d3:25:03:42:3c:2a:52:17:07: 02:24:00:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oxhqJqXiZD1E/u41CT8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNTE1MTY3NjdkOWE4NTA4YzZlMTRkNThkZWVmZmJmYWI4 MDgwZGQwHhcNMjYwMTAxMjIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjc0YzQ3MjNkOWMxZjBjODkzM2U5NmQ1M2ExNzNlMjY0MjQ4MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXkwHbGhx3gDuLlbUwqh+Nd5Ie6a ckS5iAbiDheSrtvGKyamDHbOvsd3F9TLIz3rEK11nAMIUCrjDo0v+SYsJkbilVqd Fs3xhjbINQ+/pgOE+cyhkJAYWKYibt5kMmgM6jVB2SDxjCdR3d8Mr2kErMA4aJKo RWObKrZZmr8k1PiWcTkTseYcoYlXd4JVitjdi7WJZTb6kkk5JbvzOkZ4uXzyLS7I XErSSrKwoj7PaNZ+LdPxwYMva7TiqsetFmdh7VQTlT9puqlTJjPmoezGXaiPlfa/ RhXEla/TH8H/q7C1Ly+ycBkkSdY8WCOaR2IdKkxku+mb0A0Gh5cqbmkB3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ90xHI9nB8MiTPpbVOhc+JkJIDpMB8GA1UdIwQY MBaAFA5RUWdn2ahQjG4U1Y3u/7+rgIDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGxGUloyZlpxRkNNYmhUVmplN192NnVBZ04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80NjQxZjYtODdjMC00ZDE3LWE1OGEt NjE2MzU2NGQ5NzA0LzEvbjNURWNqMmNId3lKTS1sdFU2Rno0bVFrZ09rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80NjQxZjYtODdjMC00ZDE3LWE1OGEtNjE2MzU2NGQ5NzA0 LzEvRGxGUloyZlpxRkNNYmhUVmplN192NnVBZ04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+B6MA0G CSqGSIb3DQEBCwUAA4IBAQAr1lH+eb4RX/2PMnyLogcAMwFM43sylZp/FPdiJRzg 0f28hmDyf3j4LhGVPAXLEvn7noymGTjp40PzeO8r7ZMSh7wa+86Kh1ndysro2zbo 5RuPdFSJJYY03Bov0ndUG5VPHVxcMB/IVY8xs/8B/LtWRt38bWsu7acSkIqU8yVS AwyLS6pF+JoTsEnbQM+5kVugWvFaj2l/2okLUcWzO2Rnz4x2TEcNx1fkq0AkE0YJ mXhehKC8GH4svohjQiSY/yZHWyzM/plKKPbZCvm2EwJuTyW28YztPVQp58RbVmSy xqOaE3W4YHAPQvr1A89EnCVf6H3TJQNCPCpSFwcCJAAQ -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:16 2026 by rpki-client