This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/F0X0Kldz9ZbWiCYe5dgOuGe8cE8.roa File: F0X0Kldz9ZbWiCYe5dgOuGe8cE8.roa (raw, json) Hash identifier: l3MXfi0HIHId22Sz44wGoyo4bnLBnE9WiSKYA9yuZAM= Subject key identifier: 17:45:F4:2A:57:73:F5:96:D6:88:26:1E:E5:D8:0E:B8:67:BC:70:4F Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b Certificate serial: 019B7C8076CCFA985E46061A7DA8664702C8 Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/F0X0Kldz9ZbWiCYe5dgOuGe8cE8.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49248 IP address blocks: 91.212.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:76:cc:fa:98:5e:46:06:1a:7d:a8:66:47:02:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1745f42a5773f596d688261ee5d80eb867bc704f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:77:d9:5b:0d:56:a8:2c:61:af:41:3a:41: 54:bd:5a:fd:ae:8f:5f:97:42:0d:b3:bd:4a:58:81: 83:4f:65:4a:57:21:a0:b6:82:49:b9:12:ed:56:95: 33:64:e0:8d:fe:65:27:37:8a:3a:c5:7d:a8:78:5f: 6a:fe:be:c4:6e:4c:96:1f:c8:ba:21:6f:92:9d:90: 4e:f1:11:a9:34:0e:28:63:cf:5f:41:2f:bb:b7:b4: 3b:a2:27:bc:77:60:ed:da:6b:7a:37:f5:3b:fa:f9: 08:6c:80:b2:eb:75:e5:f9:3e:1d:f3:1d:33:70:0c: 74:ff:01:91:a4:56:a4:ba:8e:7d:6f:0d:d8:a1:10: bf:fb:ff:fb:5b:39:62:45:73:73:41:d4:0b:54:c2: 1e:62:ab:e3:79:82:73:9c:26:7d:18:f9:0f:82:4c: 58:af:f3:aa:e9:40:98:f1:cb:0d:48:dd:ff:eb:b7: 8f:5c:a6:8b:48:d9:90:e0:e9:95:55:ac:ba:47:7c: 2e:a2:35:ce:68:b9:d9:a3:0b:eb:87:56:a7:6a:3a: 61:fd:29:e2:1e:3d:af:2a:80:3a:1f:08:b7:c7:16: 2f:c3:fe:30:38:02:08:54:ad:57:75:7f:c4:6b:41: 68:86:89:ec:04:55:81:5f:06:66:67:85:f6:20:3b: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:45:F4:2A:57:73:F5:96:D6:88:26:1E:E5:D8:0E:B8:67:BC:70:4F X509v3 Authority Key Identifier: keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/F0X0Kldz9ZbWiCYe5dgOuGe8cE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.102.0/24 Signature Algorithm: sha256WithRSAEncryption 35:ed:ad:00:50:87:be:7f:5c:39:79:2f:b0:fc:f9:7f:53:ca: 9d:6e:06:5e:ea:7e:74:ce:95:1f:cb:12:16:ee:f6:6d:b1:87: 2a:df:bf:a0:21:af:d8:91:fb:47:3c:ff:5b:4d:fc:2e:a5:75: 02:72:bc:df:2e:51:3d:4a:89:be:4b:1d:2e:8b:62:48:0a:58: ab:50:4e:b4:6d:13:60:3b:47:d8:8b:e2:60:61:f6:68:24:f1: c3:e7:98:fe:90:ec:e1:13:18:53:2d:a1:88:ab:42:e8:3b:e6: 4e:76:7a:99:94:61:44:6f:a3:d6:84:e8:0b:fd:36:c3:6a:99: 4d:bc:65:72:95:9b:f4:a0:2d:12:bf:07:b4:14:33:1b:7b:03: f4:99:52:6d:e5:3c:60:1d:cb:72:9c:95:c3:b5:82:0b:07:26: 19:1b:cf:27:7d:e5:08:98:f1:97:56:9a:c4:e9:24:29:9f:c4: 0c:2f:0a:c3:0a:ea:0e:75:04:38:80:c0:77:6f:ef:86:70:23: e3:94:75:d3:dc:73:75:e0:c4:5f:44:6e:0e:42:1b:f8:92:02: 05:be:0f:90:94:1a:b7:ec:35:aa:24:fb:2c:5b:8d:fb:85:08: 65:fb:7b:29:e0:f6:d2:9e:fd:fa:bd:35:58:a1:4d:51:cb:37: f7:c4:26:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHbM+pheRgYafahmRwLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YWE0MThhZTc3MGJkYThlZjA1MTZiMWQxYzYzM2E2N2U5 MWYzOGIwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzQ1ZjQyYTU3NzNmNTk2ZDY4ODI2MWVlNWQ4MGViODY3YmM3MDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMN32VsNVqgsYa9BOkFUvVr9ro9f l0INs71KWIGDT2VKVyGgtoJJuRLtVpUzZOCN/mUnN4o6xX2oeF9q/r7EbkyWH8i6 IW+SnZBO8RGpNA4oY89fQS+7t7Q7oie8d2Dt2mt6N/U7+vkIbICy63Xl+T4d8x0z cAx0/wGRpFakuo59bw3YoRC/+//7WzliRXNzQdQLVMIeYqvjeYJznCZ9GPkPgkxY r/Oq6UCY8csNSN3/67ePXKaLSNmQ4OmVVay6R3wuojXOaLnZowvrh1anajph/Sni Hj2vKoA6Hwi3xxYvw/4wOAIIVK1XdX/Ea0FohonsBFWBXwZmZ4X2IDsXrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdF9CpXc/WW1ogmHuXYDrhnvHBPMB8GA1UdIwQY MBaAFJSqQYrncL2o7wUWsdHGM6Z+kfOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUt YzM5NjIwMGZlMGJmLzEvRjBYMEtsZHo5WmJXaUNZZTVkZ091R2U4Y0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUtYzM5NjIwMGZlMGJm LzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RmMA0G CSqGSIb3DQEBCwUAA4IBAQA17a0AUIe+f1w5eS+w/Pl/U8qdbgZe6n50zpUfyxIW 7vZtsYcq37+gIa/YkftHPP9bTfwupXUCcrzfLlE9Som+Sx0ui2JIClirUE60bRNg O0fYi+JgYfZoJPHD55j+kOzhExhTLaGIq0LoO+ZOdnqZlGFEb6PWhOgL/TbDaplN vGVylZv0oC0Svwe0FDMbewP0mVJt5TxgHctynJXDtYILByYZG88nfeUImPGXVprE 6SQpn8QMLwrDCuoOdQQ4gMB3b++GcCPjlHXT3HN14MRfRG4OQhv4kgIFvg+QlBq3 7DWqJPssW437hQhl+3sp4PbSnv36vTVYoU1Ryzf3xCbA -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:52 2026 by rpki-client