This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/l2OwBfKBqnL4zNFyyaKM_FGb5e8.roa File: l2OwBfKBqnL4zNFyyaKM_FGb5e8.roa (raw, json) Hash identifier: toz7u9OavVUGLaYysHXeqXBkXKxUrSmYpku7Siccj48= Subject key identifier: 97:63:B0:05:F2:81:AA:72:F8:CC:D1:72:C9:A2:8C:FC:51:9B:E5:EF Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b Certificate serial: 019B7AC7BA1AB026BA05D384A3793F97F998 Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/l2OwBfKBqnL4zNFyyaKM_FGb5e8.roa Signing time: Thu 01 Jan 2026 18:17:48 +0000 ROA not before: Thu 01 Jan 2026 18:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51450 IP address blocks: 91.217.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ba:1a:b0:26:ba:05:d3:84:a3:79:3f:97:f9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9763b005f281aa72f8ccd172c9a28cfc519be5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:f1:ec:b5:b0:f8:62:be:53:ce:21:d4:b5: 51:f8:99:0d:40:c9:40:34:ca:1c:5e:19:6a:85:8f: 31:4d:7e:4f:d5:82:5f:57:41:1d:6f:90:ab:c3:b5: 4b:20:2c:0f:06:18:d0:84:86:7a:35:ca:f8:66:92: c0:8e:e9:0b:ec:6f:61:6a:74:9c:00:b4:fd:3c:33: 00:8d:0c:dc:02:42:50:cf:83:f0:36:76:7d:4f:31: bf:b7:8f:5c:bd:27:36:aa:94:09:d5:0b:cd:0a:69: b9:71:7d:67:26:5a:31:04:5a:83:29:ea:00:ca:64: 33:12:ce:bb:98:b2:97:8d:a1:67:5c:0a:e0:39:f8: 65:db:b9:04:a3:67:1a:38:06:f4:64:cd:3c:e7:20: c4:e4:53:8d:67:36:71:58:58:de:ad:01:80:a3:bb: 3e:37:63:c7:1a:a8:01:73:6f:6a:50:c3:e4:1d:a8: 2a:4d:dc:f2:73:3d:6a:6b:0c:aa:4d:54:16:4e:70: 40:ce:1e:fd:ae:d3:e4:40:53:a3:48:9f:f0:a9:50: d4:67:48:6f:70:b3:14:23:91:73:3c:3c:86:bc:a4: a2:3e:20:45:89:2f:6a:67:63:3b:49:f1:22:c6:63: 51:d9:94:fb:f1:dc:d5:fb:03:04:45:1f:ee:4c:f4: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:B0:05:F2:81:AA:72:F8:CC:D1:72:C9:A2:8C:FC:51:9B:E5:EF X509v3 Authority Key Identifier: keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/l2OwBfKBqnL4zNFyyaKM_FGb5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.170.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d0:a2:78:38:f4:d9:ea:91:35:ed:24:2b:1b:c1:88:af:72: fd:a9:82:4f:a5:ad:8a:26:b7:a6:49:2a:6f:05:9f:eb:1f:bb: ea:0f:6e:12:84:cc:f8:aa:5a:df:91:35:b1:60:72:9c:e6:6d: 66:3e:9b:6e:3d:4e:0f:b4:01:3a:0f:fe:69:48:a2:15:41:3e: eb:d2:11:0c:51:35:22:7a:fd:d2:7d:a5:f2:86:69:55:00:fb: 7a:b4:05:fa:68:2d:ff:db:e5:5c:80:41:58:43:b0:a1:31:92: 5e:8c:e4:bb:5c:cc:d3:21:13:da:17:b7:7a:2c:7e:77:f9:13: 37:68:74:56:3d:a7:9a:98:c1:d3:c4:33:4d:0e:37:bf:66:a3: 11:d7:7a:5c:b4:98:c0:3a:5c:05:0c:dd:ac:6e:fe:f4:2a:b0: b8:cb:ef:35:32:c5:95:15:2e:71:ba:8d:98:c0:98:2d:81:e6: 99:6e:11:f5:16:52:9c:7f:c6:14:c1:37:41:35:58:18:b8:d2: ef:c0:0f:55:2e:44:3e:0d:d3:16:20:67:9c:02:eb:08:f9:dc: df:ee:cd:84:dd:70:dd:53:da:cf:0d:88:85:14:0e:28:9a:65: 31:4f:f8:ae:a9:80:0f:e7:b7:4a:8c:05:31:8d:9c:5a:ba:18: 7b:cd:4d:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7oasCa6BdOEo3k/l/mYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTkwODhiYjQyMDFjZTQ2ZDhlYjgzZGM5ZjM4Yzc4Yjhm M2JlMWIwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzYzYjAwNWYyODFhYTcyZjhjY2QxNzJjOWEyOGNmYzUxOWJlNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNjx7LWw+GK+U84h1LVR+JkNQMlA NMocXhlqhY8xTX5P1YJfV0Edb5Crw7VLICwPBhjQhIZ6Ncr4ZpLAjukL7G9hanSc ALT9PDMAjQzcAkJQz4PwNnZ9TzG/t49cvSc2qpQJ1QvNCmm5cX1nJloxBFqDKeoA ymQzEs67mLKXjaFnXArgOfhl27kEo2caOAb0ZM085yDE5FONZzZxWFjerQGAo7s+ N2PHGqgBc29qUMPkHagqTdzycz1qawyqTVQWTnBAzh79rtPkQFOjSJ/wqVDUZ0hv cLMUI5FzPDyGvKSiPiBFiS9qZ2M7SfEixmNR2ZT78dzV+wMERR/uTPTs/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdjsAXygapy+MzRcsmijPxRm+XvMB8GA1UdIwQY MBaAFLmpCIu0IBzkbY64PcnzjHi4874bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMt OGRkNDUzYWI0MjNkLzEvbDJPd0JmS0Jxbkw0ek5GeXlhS01fRkdiNWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jY2FmMzQtM2RlZS00ZmUyLWIyZmMtOGRkNDUzYWI0MjNk LzEvdWFrSWk3UWdIT1J0anJnOXlmT01lTGp6dmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mqMA0G CSqGSIb3DQEBCwUAA4IBAQBZ0KJ4OPTZ6pE17SQrG8GIr3L9qYJPpa2KJremSSpv BZ/rH7vqD24ShMz4qlrfkTWxYHKc5m1mPptuPU4PtAE6D/5pSKIVQT7r0hEMUTUi ev3SfaXyhmlVAPt6tAX6aC3/2+VcgEFYQ7ChMZJejOS7XMzTIRPaF7d6LH53+RM3 aHRWPaeamMHTxDNNDje/ZqMR13pctJjAOlwFDN2sbv70KrC4y+81MsWVFS5xuo2Y wJgtgeaZbhH1FlKcf8YUwTdBNVgYuNLvwA9VLkQ+DdMWIGecAusI+dzf7s2E3XDd U9rPDYiFFA4ommUxT/iuqYAP57dKjAUxjZxauhh7zU0R -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:51 2026 by rpki-client