This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/aO2ZlWLbMjM6ILrdeRaGhaKttR8.roa File: aO2ZlWLbMjM6ILrdeRaGhaKttR8.roa (raw, json) Hash identifier: Rh3oaacN+KK3Ek4ghfhfmihUkTVyNL5b9I6KnwPFkBY= Subject key identifier: 68:ED:99:95:62:DB:32:33:3A:20:BA:DD:79:16:86:85:A2:AD:B5:1F Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f Certificate serial: 019B78A32C0E6C14A3A5E9F6C34B1E146B2E Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/aO2ZlWLbMjM6ILrdeRaGhaKttR8.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208664 IP address blocks: 91.201.10.0/24 maxlen: 24 91.207.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:0e:6c:14:a3:a5:e9:f6:c3:4b:1e:14:6b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68ed999562db32333a20badd79168685a2adb51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:9b:23:46:4b:d1:24:99:5b:73:d6:03:b4: a2:96:9f:85:d1:cc:4d:a7:7f:f8:25:03:ad:17:cb: eb:69:54:df:69:3b:db:9f:f7:b0:ad:b5:f9:98:78: 29:96:72:e4:c8:aa:09:39:2c:45:0e:2e:dd:ee:56: 8d:b9:fd:9f:9c:a9:f4:e5:ab:c8:8f:ed:56:11:ee: 38:81:59:54:82:e3:14:e3:42:64:58:66:17:a5:9e: 13:42:7c:a5:25:77:d5:dd:74:df:72:e5:7c:38:f0: 9a:41:af:a9:c1:f3:0b:19:1b:6a:fc:1d:f9:6f:3d: 67:43:2f:f6:e2:a3:b8:95:b2:8a:61:92:77:59:48: 17:ec:3e:f8:30:39:35:36:48:0e:e9:b4:02:5d:16: 14:d5:b6:99:22:18:da:1a:f3:8a:84:4d:19:72:a8: 1e:bc:1e:e7:a1:8e:67:47:ed:9f:c1:81:20:da:c7: ee:ce:6e:3f:ab:d6:cf:df:b9:c2:39:97:e2:7f:8e: 14:44:b6:76:18:8c:6a:28:61:c1:f4:03:46:93:c0: 9a:2a:ef:14:84:5f:78:7b:84:9c:90:9a:04:43:f0: 6c:a4:e8:fa:60:be:d4:85:94:f4:11:51:e9:4d:eb: cb:58:28:16:f8:4f:cb:96:3e:2c:cf:de:b3:cc:6f: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:ED:99:95:62:DB:32:33:3A:20:BA:DD:79:16:86:85:A2:AD:B5:1F X509v3 Authority Key Identifier: keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/aO2ZlWLbMjM6ILrdeRaGhaKttR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.10.0/24 91.207.8.0/24 Signature Algorithm: sha256WithRSAEncryption 03:96:e8:ed:19:59:84:44:ea:90:3c:61:50:45:13:27:34:2b: 70:b2:49:f7:05:1d:f6:02:fd:7d:10:60:3a:ad:0a:0a:1e:04: 89:4d:2a:0f:05:e4:f2:31:64:30:eb:61:67:10:9c:f2:05:41: ec:62:42:9f:96:70:90:fe:5c:c2:b4:67:63:e4:4a:cf:44:08: cb:78:73:39:89:d9:3d:a8:b5:66:6d:09:30:4c:fe:e5:8d:1c: 83:70:b0:ac:d3:a9:4e:4e:51:63:ad:aa:52:b5:5e:1d:d2:c7: 94:3b:83:9f:cd:47:21:5f:0b:fe:43:93:49:3c:bd:22:cc:ee: 0b:69:e0:a3:58:88:f2:08:47:2b:d5:42:dd:e0:1b:15:79:10: 6d:96:14:2c:b6:a5:28:f1:e4:6b:95:64:e8:6c:64:b8:dd:7b: 8f:33:59:af:83:69:d7:24:3f:5c:61:f4:74:a1:4e:2c:ff:ad: 49:5a:a9:81:4e:b2:5d:ae:40:af:76:73:bb:dd:c7:1e:a5:cc: 0b:57:d6:86:1c:85:03:26:4d:66:1f:17:fa:d9:96:0a:0f:6f: 03:ee:44:5e:07:2c:c1:02:ef:c1:13:e9:4d:92:36:57:6d:63: 02:b6:b5:2a:87:a3:b4:95:61:4d:88:ff:32:8e:b1:43:07:6a: f3:b2:47:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oywObBSjpen2w0seFGsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGQ2ZTNkY2YyNThhZTI2YjBjZmE2ZmZkZWY0NjdjNTRi YjdkOWYwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGVkOTk5NTYyZGIzMjMzM2EyMGJhZGQ3OTE2ODY4NWEyYWRiNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh+bI0ZL0SSZW3PWA7Silp+F0cxN p3/4JQOtF8vraVTfaTvbn/ewrbX5mHgplnLkyKoJOSxFDi7d7laNuf2fnKn05avI j+1WEe44gVlUguMU40JkWGYXpZ4TQnylJXfV3XTfcuV8OPCaQa+pwfMLGRtq/B35 bz1nQy/24qO4lbKKYZJ3WUgX7D74MDk1NkgO6bQCXRYU1baZIhjaGvOKhE0Zcqge vB7noY5nR+2fwYEg2sfuzm4/q9bP37nCOZfif44URLZ2GIxqKGHB9ANGk8CaKu8U hF94e4SckJoEQ/BspOj6YL7UhZT0EVHpTevLWCgW+E/Llj4sz96zzG/ynwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGjtmZVi2zIzOiC63XkWhoWirbUfMB8GA1UdIwQY MBaAFJCNbj3PJYriawz6b/3vRnxUu32fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUt ZWQ2MTE0Yzc5ZGFlLzEvYU8yWmxXTGJNak02SUxyZGVSYUdoYUt0dFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUtZWQ2MTE0Yzc5ZGFl LzEva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8kKAwQA W88IMA0GCSqGSIb3DQEBCwUAA4IBAQADlujtGVmEROqQPGFQRRMnNCtwskn3BR32 Av19EGA6rQoKHgSJTSoPBeTyMWQw62FnEJzyBUHsYkKflnCQ/lzCtGdj5ErPRAjL eHM5idk9qLVmbQkwTP7ljRyDcLCs06lOTlFjrapStV4d0seUO4OfzUchXwv+Q5NJ PL0izO4LaeCjWIjyCEcr1ULd4BsVeRBtlhQstqUo8eRrlWTobGS43XuPM1mvg2nX JD9cYfR0oU4s/61JWqmBTrJdrkCvdnO73ccepcwLV9aGHIUDJk1mHxf62ZYKD28D 7kReByzBAu/BE+lNkjZXbWMCtrUqh6O0lWFNiP8yjrFDB2rzskdX -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:51 2026 by rpki-client