This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/f4mExJRDDKoQa7XCQQ_EW1oUEtI.roa File: f4mExJRDDKoQa7XCQQ_EW1oUEtI.roa (raw, json) Hash identifier: xx+rcnNDCiX+rDClDnIpjuXtYVA+qpNh390KFCm9PpM= Subject key identifier: 7F:89:84:C4:94:43:0C:AA:10:6B:B5:C2:41:0F:C4:5B:5A:14:12:D2 Certificate issuer: /CN=b40aa5163496e053a76b6d69cdc45f75006cd8df Certificate serial: 019B7AC8ED6DC95E974DFAE259842F9FBED2 Authority key identifier: B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/f4mExJRDDKoQa7XCQQ_EW1oUEtI.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51509 IP address blocks: 91.217.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ed:6d:c9:5e:97:4d:fa:e2:59:84:2f:9f:be:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40aa5163496e053a76b6d69cdc45f75006cd8df Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f8984c494430caa106bb5c2410fc45b5a1412d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:b0:70:d9:55:ec:6e:9c:32:71:1c:fd:59: b6:06:19:da:2a:27:8f:4b:5e:16:3a:a4:b1:61:ca: 79:6e:98:34:57:43:cf:fa:0c:f7:67:9c:19:09:38: a6:cb:1f:a8:dd:c8:f2:e7:ed:2e:ed:da:df:2e:7f: de:40:3d:ee:94:98:1b:b9:e1:ef:81:cb:52:b6:dc: 8a:0f:7c:fd:18:48:a9:db:d9:20:01:5c:17:ae:2a: dc:df:75:3e:e7:e5:a9:ad:32:bb:d0:4a:e6:7c:d7: ff:e7:bc:e1:3e:2a:f6:a2:d5:9a:c9:77:f1:83:83: 5e:50:49:7c:0f:3e:f1:cf:f9:ac:05:25:59:42:26: c1:46:db:e7:a6:5b:ce:ae:fb:89:2d:cc:ed:84:59: ab:fb:29:62:d7:62:f8:3e:a8:03:25:76:90:cf:10: 4b:9f:41:19:23:6a:2d:99:d5:08:68:e2:ac:0a:b4: 31:b1:a4:38:1d:1a:35:65:69:83:b2:99:ad:7b:4a: ee:21:cf:34:17:72:e9:db:a6:2d:1a:43:c0:35:7d: 60:6e:fa:74:ba:e0:33:d5:ac:c4:36:b7:75:87:57: f2:f6:72:bb:63:38:2c:de:21:1a:c7:aa:a8:b9:cd: 0c:ed:de:9e:3d:2c:be:ae:af:f5:78:f7:f3:28:5f: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:89:84:C4:94:43:0C:AA:10:6B:B5:C2:41:0F:C4:5B:5A:14:12:D2 X509v3 Authority Key Identifier: keyid:B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/f4mExJRDDKoQa7XCQQ_EW1oUEtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.92.0/23 Signature Algorithm: sha256WithRSAEncryption 06:1a:cb:35:cb:d1:20:13:70:4c:fa:e8:8c:51:4f:28:ad:e8: 3f:df:18:55:64:77:ca:57:33:e9:b1:56:e6:fb:2c:39:28:f3: 5c:9a:7c:56:05:79:50:c7:f2:43:ea:c5:08:85:ac:c4:c1:77: f4:4f:c4:54:0c:1a:5f:09:2e:a4:d0:49:bb:45:6f:7b:5e:5d: 5f:c6:b1:68:d7:46:99:ec:d9:40:af:6a:f0:cc:1d:ee:d8:33: a9:a9:31:5d:1b:ee:e5:b2:5b:dc:83:2b:f8:ed:28:f2:0e:21: 00:10:9d:21:db:0f:e0:3c:06:eb:3e:9a:c2:f0:6f:90:e6:08: f4:69:b2:83:e4:52:e5:a2:42:04:5c:2b:48:ea:0d:89:51:50: 76:10:bb:bd:dd:e9:09:f5:37:cc:ad:fe:59:08:98:06:0a:88: fe:a8:64:c3:d5:a5:a5:b8:37:2b:06:99:10:e9:cd:c8:6c:dc: 4e:2c:47:11:18:6a:cf:c6:25:cf:b8:1e:59:1c:47:41:f4:42: 5b:20:7c:05:f4:50:62:e7:1e:3e:bc:2a:c5:f1:9a:42:21:fe: 46:d0:ea:c3:8c:ac:b5:21:c6:dd:ae:11:10:12:a7:c1:c4:bf: 02:f0:6c:13:bf:03:10:69:ad:18:6a:e1:57:c1:d3:70:4a:d0: 7f:93:a7:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yO1tyV6XTfriWYQvn77SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGFhNTE2MzQ5NmUwNTNhNzZiNmQ2OWNkYzQ1Zjc1MDA2 Y2Q4ZGYwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjg5ODRjNDk0NDMwY2FhMTA2YmI1YzI0MTBmYzQ1YjVhMTQxMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkKwcNlV7G6cMnEc/Vm2BhnaKieP S14WOqSxYcp5bpg0V0PP+gz3Z5wZCTimyx+o3cjy5+0u7drfLn/eQD3ulJgbueHv gctSttyKD3z9GEip29kgAVwXrirc33U+5+WprTK70ErmfNf/57zhPir2otWayXfx g4NeUEl8Dz7xz/msBSVZQibBRtvnplvOrvuJLczthFmr+yli12L4PqgDJXaQzxBL n0EZI2otmdUIaOKsCrQxsaQ4HRo1ZWmDspmte0ruIc80F3Lp26YtGkPANX1gbvp0 uuAz1azENrd1h1fy9nK7Yzgs3iEax6qouc0M7d6ePSy+rq/1ePfzKF8LfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+JhMSUQwyqEGu1wkEPxFtaFBLSMB8GA1UdIwQY MBaAFLQKpRY0luBTp2ttac3EX3UAbNjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFxbEZqU1c0Rk9uYTIxcHpjUmZkUUJzMk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hMjBmYjAtNWI4ZC00NTE3LWI0NmUt YzcyY2JhYzI4NWY4LzEvZjRtRXhKUkRES29RYTdYQ1FRX0VXMW9VRXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hMjBmYjAtNWI4ZC00NTE3LWI0NmUtYzcyY2JhYzI4NWY4 LzEvdEFxbEZqU1c0Rk9uYTIxcHpjUmZkUUJzMk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW9lcMA0G CSqGSIb3DQEBCwUAA4IBAQAGGss1y9EgE3BM+uiMUU8oreg/3xhVZHfKVzPpsVbm +yw5KPNcmnxWBXlQx/JD6sUIhazEwXf0T8RUDBpfCS6k0Em7RW97Xl1fxrFo10aZ 7NlAr2rwzB3u2DOpqTFdG+7lslvcgyv47SjyDiEAEJ0h2w/gPAbrPprC8G+Q5gj0 abKD5FLlokIEXCtI6g2JUVB2ELu93ekJ9TfMrf5ZCJgGCoj+qGTD1aWluDcrBpkQ 6c3IbNxOLEcRGGrPxiXPuB5ZHEdB9EJbIHwF9FBi5x4+vCrF8ZpCIf5G0OrDjKy1 IcbdrhEQEqfBxL8C8GwTvwMQaa0YauFXwdNwStB/k6cZ -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:34 2026 by rpki-client