This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/iuDASUb0OcEG7E9NhPvGrlzMShY.roa File: iuDASUb0OcEG7E9NhPvGrlzMShY.roa (raw, json) Hash identifier: ap/QCleQpzEp2XCCBDxsxK10769HbmIBZHWPFMwID/I= Subject key identifier: 8A:E0:C0:49:46:F4:39:C1:06:EC:4F:4D:84:FB:C6:AE:5C:CC:4A:16 Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Certificate serial: 019B7E38D4B741E7CED2143D680CBE0809EF Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/iuDASUb0OcEG7E9NhPvGrlzMShY.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31129 IP address blocks: 91.211.252.0/22 maxlen: 24 91.211.253.0/24 maxlen: 24 193.23.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d4:b7:41:e7:ce:d2:14:3d:68:0c:be:08:09:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae0c04946f439c106ec4f4d84fbc6ae5ccc4a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1b:fa:99:88:21:89:fe:2d:7b:c7:45:aa:f0: 53:c1:5e:ae:f2:a1:20:e0:87:a9:44:f4:33:6f:7a: 46:9f:83:8c:af:f8:21:cf:6b:ae:62:e6:c5:a0:10: 4a:16:8d:d8:eb:9b:11:fa:1d:79:2e:5e:de:f3:29: 0a:a5:f7:bd:cf:41:f8:f3:c4:e1:5a:5e:9d:fb:ec: f6:15:eb:39:c8:30:d5:bf:9e:fb:40:3f:57:89:25: 4d:ab:9b:2d:d5:1a:d1:07:47:f4:5e:ee:cc:55:32: 08:2f:2b:ee:34:d8:ae:6f:1c:d1:27:50:17:e0:44: 05:fd:15:68:9d:55:08:6a:c2:6d:9a:e8:5c:d7:8e: 9a:aa:4d:6d:be:e7:23:20:97:69:10:fa:a7:70:7b: cc:dd:46:57:38:6b:b4:bb:ea:83:06:aa:61:69:0e: a6:6b:aa:43:18:fd:15:ea:87:80:90:9b:5f:5f:fc: cb:cf:9f:6b:b8:aa:10:78:31:b5:98:b8:da:22:38: f7:e9:2a:d7:2f:0c:b2:fb:1f:31:76:b8:5a:f4:ac: 4e:40:6d:3c:5c:a4:cc:b5:8a:81:f0:15:d9:b0:64: b3:bc:05:a6:ca:70:d1:45:23:a2:28:85:fe:37:a8: c9:26:d4:73:84:04:ae:21:78:e2:1b:88:62:d3:e2: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E0:C0:49:46:F4:39:C1:06:EC:4F:4D:84:FB:C6:AE:5C:CC:4A:16 X509v3 Authority Key Identifier: keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/iuDASUb0OcEG7E9NhPvGrlzMShY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.252.0/22 193.23.51.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1e:91:e1:ac:74:3e:67:b5:4d:58:9d:3e:81:87:04:40:fe: f8:90:f6:49:9e:ed:9e:a6:b4:93:f9:3c:61:f1:65:78:35:b1: 66:39:ed:7b:af:b9:26:a0:bc:46:1f:02:79:83:47:4c:3e:3d: e9:81:23:7c:ea:18:08:6d:3c:fe:29:c0:64:03:be:8d:5b:a4: 32:29:9b:54:c8:e2:2c:cd:6c:0c:36:78:4d:a6:2e:d6:30:f4: 5c:8d:1a:f6:ad:d9:5d:d7:63:ac:44:02:b0:40:f9:2f:da:ef: 47:b2:36:29:bc:5b:d8:70:da:1f:5c:ce:0a:c9:9e:b9:d2:14: 96:24:09:2e:ec:40:8f:9a:2d:d3:2d:31:54:77:72:56:7c:9f: 48:b7:b6:2c:1b:24:7b:38:da:91:85:80:19:57:50:14:df:44: 0c:87:eb:18:0c:00:55:55:7b:89:88:5a:b7:b5:89:4a:65:07: b7:41:52:18:03:6b:f1:58:ac:3e:33:4e:ac:a8:b5:53:b4:94: 22:3f:f8:5b:3c:3c:4a:6a:ab:3f:d6:e7:31:c4:bf:5a:4b:c4: f3:fa:e4:77:45:aa:28:25:aa:49:5b:c0:8d:c0:ac:0d:b0:ff: 77:f9:90:bc:59:b9:9c:27:16:84:1c:ea:d9:1b:31:06:2f:70: 8e:9d:ce:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ONS3QefO0hQ9aAy+CAnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj MDFhZjkwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWUwYzA0OTQ2ZjQzOWMxMDZlYzRmNGQ4NGZiYzZhZTVjY2M0YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Bv6mYghif4te8dFqvBTwV6u8qEg 4IepRPQzb3pGn4OMr/ghz2uuYubFoBBKFo3Y65sR+h15Ll7e8ykKpfe9z0H488Th Wl6d++z2Fes5yDDVv577QD9XiSVNq5st1RrRB0f0Xu7MVTIILyvuNNiubxzRJ1AX 4EQF/RVonVUIasJtmuhc146aqk1tvucjIJdpEPqncHvM3UZXOGu0u+qDBqphaQ6m a6pDGP0V6oeAkJtfX/zLz59ruKoQeDG1mLjaIjj36SrXLwyy+x8xdrha9KxOQG08 XKTMtYqB8BXZsGSzvAWmynDRRSOiKIX+N6jJJtRzhASuIXjiG4hi0+J9KQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIrgwElG9DnBBuxPTYT7xq5czEoWMB8GA1UdIwQY MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt Y2JlMDIwNjY1ZWZlLzEvaXVEQVNVYjBPY0VHN0U5TmhQdkdybHpNU2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9P8AwQA wRczMA0GCSqGSIb3DQEBCwUAA4IBAQB9HpHhrHQ+Z7VNWJ0+gYcEQP74kPZJnu2e prST+Txh8WV4NbFmOe17r7kmoLxGHwJ5g0dMPj3pgSN86hgIbTz+KcBkA76NW6Qy KZtUyOIszWwMNnhNpi7WMPRcjRr2rdld12OsRAKwQPkv2u9HsjYpvFvYcNofXM4K yZ650hSWJAku7ECPmi3TLTFUd3JWfJ9It7YsGyR7ONqRhYAZV1AU30QMh+sYDABV VXuJiFq3tYlKZQe3QVIYA2vxWKw+M06sqLVTtJQiP/hbPDxKaqs/1ucxxL9aS8Tz +uR3RaooJapJW8CNwKwNsP93+ZC8WbmcJxaEHOrZGzEGL3COnc52 -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:32 2026 by rpki-client