This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa File: K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa (raw, json) Hash identifier: /NaxyStNTlcpIpTarZjjR+9kQ6m4FlTTRFr5N6+rcrM= Subject key identifier: 2B:F1:B7:AB:5A:07:A0:59:0B:68:E9:CC:C8:45:4B:21:C9:FB:42:6C Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124 Certificate serial: 019B76EAE8B5D8152929B389ED901975509C Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57815 IP address blocks: 91.235.165.0/24 maxlen: 24 194.40.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e8:b5:d8:15:29:29:b3:89:ed:90:19:75:50:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db42059ce291d49a66920731c767da563ef21124 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bf1b7ab5a07a0590b68e9ccc8454b21c9fb426c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:20:86:35:12:c6:08:f5:9b:06:1a:c8:10:79: 52:e0:70:5b:b6:c0:8e:7f:8a:e7:e2:67:d2:a4:c6: 22:dc:4d:fc:da:02:d6:f4:e4:4d:5a:64:3a:e9:4a: ce:2e:5b:9b:39:1c:88:13:55:7d:d2:d3:fb:a8:ed: aa:82:36:35:0f:75:65:30:cc:73:38:13:1d:18:be: d2:35:54:68:88:4e:95:39:db:36:76:99:f3:2e:53: 91:e6:fb:be:b8:fb:d9:86:ea:fb:c3:49:4e:68:fb: 54:82:b8:fc:9d:a7:fd:1b:0b:e4:a4:58:fd:b8:ab: a9:c2:3e:d1:d5:eb:7e:be:99:5d:52:d1:a4:27:d9: e8:3d:57:5d:51:95:22:05:3a:0e:ea:4d:e9:29:7a: 29:2d:37:ca:ec:40:96:b4:ed:ae:94:3c:a6:cc:bd: 79:3e:12:0c:a5:be:94:82:e3:d7:9e:24:04:b1:33: 3a:31:d0:e4:a0:aa:76:e4:7f:3e:49:79:8d:0c:9a: 92:9b:54:9a:ec:be:ec:50:e5:b9:ac:12:91:38:5c: 3a:ac:af:cc:be:4c:37:71:a9:82:aa:f0:66:6f:bc: f0:31:e3:1a:37:bb:d7:51:4e:4b:05:50:32:c3:6a: 52:4f:21:c2:70:da:e4:af:8c:26:de:42:07:35:ad: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:B7:AB:5A:07:A0:59:0B:68:E9:CC:C8:45:4B:21:C9:FB:42:6C X509v3 Authority Key Identifier: keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/K_G3q1oHoFkLaOnMyEVLIcn7Qmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.165.0/24 194.40.210.0/24 Signature Algorithm: sha256WithRSAEncryption 21:f3:f3:64:eb:4f:be:63:1d:8d:5d:58:26:e5:87:5b:bb:6d: 8d:17:96:86:b8:11:3c:02:8d:cf:4b:b3:d6:73:d9:a8:a7:e4: e0:d2:29:79:99:b4:04:ac:38:3e:27:cc:f9:da:d9:61:df:93: cb:fb:ce:49:1d:54:a9:a2:22:84:71:fa:52:fc:68:d0:82:ba: 18:c1:f9:eb:c0:18:76:55:3b:cc:d6:bb:e3:52:c7:23:3d:a6: 9b:2f:58:9c:95:07:a5:07:ef:93:91:db:0f:3b:62:39:89:a3: fd:47:78:ac:c3:4a:c4:1e:ab:7d:6b:5e:fe:f3:ac:2d:42:e9: 45:19:83:6f:5e:66:44:d8:36:d2:f4:68:6f:60:04:01:f3:24: 3d:93:f6:56:5f:45:9d:68:e1:b3:a2:9a:7e:1c:b2:0c:a5:03: 52:df:79:e4:0f:f4:63:ac:77:83:43:d0:6c:87:a1:2b:09:1f: a8:2e:6d:a6:43:75:f4:6e:12:78:b7:d1:27:58:ff:78:36:44: 65:c2:42:53:53:67:e7:39:37:5c:17:6b:2c:58:81:c4:99:12: 41:78:75:0b:5b:94:67:68:b7:6a:f1:a0:72:42:7f:56:ac:b9: b3:0d:41:2e:eb:39:8c:8e:0b:22:5e:93:d7:bf:2d:20:1d:3a: 9b:6e:d7:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26ui12BUpKbOJ7ZAZdVCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDIwNTljZTI5MWQ0OWE2NjkyMDczMWM3NjdkYTU2M2Vm MjExMjQwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmYxYjdhYjVhMDdhMDU5MGI2OGU5Y2NjODQ1NGIyMWM5ZmI0MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iCGNRLGCPWbBhrIEHlS4HBbtsCO f4rn4mfSpMYi3E382gLW9ORNWmQ66UrOLlubORyIE1V90tP7qO2qgjY1D3VlMMxz OBMdGL7SNVRoiE6VOds2dpnzLlOR5vu+uPvZhur7w0lOaPtUgrj8naf9GwvkpFj9 uKupwj7R1et+vpldUtGkJ9noPVddUZUiBToO6k3pKXopLTfK7ECWtO2ulDymzL15 PhIMpb6UguPXniQEsTM6MdDkoKp25H8+SXmNDJqSm1Sa7L7sUOW5rBKROFw6rK/M vkw3camCqvBmb7zwMeMaN7vXUU5LBVAyw2pSTyHCcNrkr4wm3kIHNa0eGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCvxt6taB6BZC2jpzMhFSyHJ+0JsMB8GA1UdIwQY MBaAFNtCBZzikdSaZpIHMcdn2lY+8hEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBJRm5PS1IxSnBta2djeHgyZmFWajd5RVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZTNmMmEtMTQ0MC00MDg0LTg0YzIt OTMxMmQwODdkZmNhLzEvS19HM3Exb0hvRmtMYU9uTXlFVkxJY243UW13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85ZTNmMmEtMTQ0MC00MDg0LTg0YzItOTMxMmQwODdkZmNh LzEvMjBJRm5PS1IxSnBta2djeHgyZmFWajd5RVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+ulAwQA wijSMA0GCSqGSIb3DQEBCwUAA4IBAQAh8/Nk60++Yx2NXVgm5Ydbu22NF5aGuBE8 Ao3PS7PWc9mop+Tg0il5mbQErDg+J8z52tlh35PL+85JHVSpoiKEcfpS/GjQgroY wfnrwBh2VTvM1rvjUscjPaabL1iclQelB++TkdsPO2I5iaP9R3isw0rEHqt9a17+ 86wtQulFGYNvXmZE2DbS9GhvYAQB8yQ9k/ZWX0WdaOGzopp+HLIMpQNS33nkD/Rj rHeDQ9Bsh6ErCR+oLm2mQ3X0bhJ4t9EnWP94NkRlwkJTU2fnOTdcF2ssWIHEmRJB eHULW5RnaLdq8aByQn9WrLmzDUEu6zmMjgsiXpPXvy0gHTqbbte+ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:10 2026 by rpki-client