This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/SUQY6UofiVh29UboveKG3iabRZA.roa File: SUQY6UofiVh29UboveKG3iabRZA.roa (raw, json) Hash identifier: 834PzvKRE6PhNfTtl5/jpZUTuO/AUBInt9sgqC8VSzk= Subject key identifier: 49:44:18:E9:4A:1F:89:58:76:F5:46:E8:BD:E2:86:DE:26:9B:45:90 Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd Certificate serial: 019B7DCAAFA529BC3E660251F7D2BF120CE1 Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/SUQY6UofiVh29UboveKG3iabRZA.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196610 IP address blocks: 91.214.253.0/24 maxlen: 24 91.214.253.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:af:a5:29:bc:3e:66:02:51:f7:d2:bf:12:0c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494418e94a1f895876f546e8bde286de269b4590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:b5:45:1d:a4:99:8f:e3:4b:54:f6:96:1c: 56:73:0f:f8:43:87:d2:60:90:57:ea:a3:ec:81:c7: 60:c5:3d:24:32:38:f6:f4:3a:90:ae:41:52:1a:f6: a0:06:54:37:07:02:b2:e3:5e:e2:96:20:e7:d0:4f: 72:66:41:f2:1d:05:25:ed:02:ea:26:9d:09:06:ef: dd:36:a0:49:0c:48:ae:60:c8:a5:6f:20:2b:5c:29: 7a:a6:b8:65:e9:bd:13:00:97:bc:e2:6b:64:07:9f: ab:9a:e3:1b:66:06:02:a9:c3:e6:e5:d2:5e:0c:96: 5b:18:5b:2b:11:8f:7a:91:9e:a7:00:81:ae:31:95: 98:ba:74:83:8d:6d:1f:d9:7c:7c:f7:02:a3:b6:0d: 41:6d:c5:b5:0f:7e:e9:73:e7:63:49:60:52:35:d8: 6a:db:bb:1c:c0:87:36:0e:f9:fb:18:d6:fe:2b:32: 26:5c:20:e9:a8:20:74:0b:43:ad:4d:03:d7:ce:7d: 2b:a8:dc:11:43:0f:64:de:a8:16:12:3c:bb:9b:0e: 94:a8:be:db:82:c8:7f:39:77:06:14:df:61:fb:d5: 60:80:c4:95:94:2a:1f:d2:a1:e7:37:d5:c9:d6:f6: c5:b3:0d:b0:ac:1a:15:cc:21:ca:42:53:7d:2f:2e: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:44:18:E9:4A:1F:89:58:76:F5:46:E8:BD:E2:86:DE:26:9B:45:90 X509v3 Authority Key Identifier: keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/SUQY6UofiVh29UboveKG3iabRZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.253.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:38:fa:d5:1d:7c:f9:2b:c3:96:ed:a4:dd:00:72:2e:ac:cc: a6:f7:49:0d:26:5c:3f:fe:bb:91:9e:09:f4:b2:c0:c2:92:fb: 83:53:83:a1:23:12:d5:10:76:23:ba:46:c7:58:a0:3e:ac:68: bb:0a:1a:a8:31:e7:a7:2f:36:e7:5b:bc:e7:97:13:1f:c7:48: 4b:e0:3d:47:1e:05:2d:b5:a6:1a:9c:e1:3a:d9:5f:0a:76:2a: 96:96:c9:aa:53:19:b0:77:3c:b5:35:17:aa:4c:2d:12:7e:2a: 23:2b:62:7d:59:fb:b1:d8:3c:98:02:34:bf:e6:89:41:b8:42: be:4e:94:37:ad:c9:80:a0:59:b1:65:db:65:ef:93:9d:96:14: 14:6a:b0:f0:c3:be:a0:27:9d:e2:45:a5:bd:df:c5:05:07:47: 5f:f0:3f:cb:42:c2:1f:d5:4e:64:62:8e:56:98:b6:ed:ae:14: d6:79:19:c8:1b:78:4f:d3:13:7d:94:d5:8d:fd:5e:a1:48:dd: 58:05:10:a9:22:38:f6:ce:1c:2a:71:83:e3:7a:04:fa:6f:96: 1d:58:aa:8b:48:7d:2a:eb:8a:c9:6e:df:e6:5a:01:de:80:f8: b4:20:07:68:86:93:2f:54:d0:5d:9a:1c:93:2f:30:25:6b:06: f2:6f:0c:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yq+lKbw+ZgJR99K/EgzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDFjZmVjMzgxMzFmODNhZTNkZjY5OThmYTAyODM3NTg1 YzkxZGQwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTQ0MThlOTRhMWY4OTU4NzZmNTQ2ZThiZGUyODZkZTI2OWI0NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YK1RR2kmY/jS1T2lhxWcw/4Q4fS YJBX6qPsgcdgxT0kMjj29DqQrkFSGvagBlQ3BwKy417iliDn0E9yZkHyHQUl7QLq Jp0JBu/dNqBJDEiuYMilbyArXCl6prhl6b0TAJe84mtkB5+rmuMbZgYCqcPm5dJe DJZbGFsrEY96kZ6nAIGuMZWYunSDjW0f2Xx89wKjtg1BbcW1D37pc+djSWBSNdhq 27scwIc2Dvn7GNb+KzImXCDpqCB0C0OtTQPXzn0rqNwRQw9k3qgWEjy7mw6UqL7b gsh/OXcGFN9h+9VggMSVlCof0qHnN9XJ1vbFsw2wrBoVzCHKQlN9Ly4D/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElEGOlKH4lYdvVG6L3iht4mm0WQMB8GA1UdIwQY MBaAFPNBz+w4Ex+Drj32mY+gKDdYXJHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUt MDlhZmI3ZDZmYjE2LzEvU1VRWTZVb2ZpVmgyOVVib3ZlS0czaWFiUlpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUtMDlhZmI3ZDZmYjE2 LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9b9MA0G CSqGSIb3DQEBCwUAA4IBAQCaOPrVHXz5K8OW7aTdAHIurMym90kNJlw//ruRngn0 ssDCkvuDU4OhIxLVEHYjukbHWKA+rGi7ChqoMeenLzbnW7znlxMfx0hL4D1HHgUt taYanOE62V8KdiqWlsmqUxmwdzy1NReqTC0SfiojK2J9Wfux2DyYAjS/5olBuEK+ TpQ3rcmAoFmxZdtl75OdlhQUarDww76gJ53iRaW938UFB0df8D/LQsIf1U5kYo5W mLbtrhTWeRnIG3hP0xN9lNWN/V6hSN1YBRCpIjj2zhwqcYPjegT6b5YdWKqLSH0q 64rJbt/mWgHegPi0IAdohpMvVNBdmhyTLzAlawbybwz7 -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:18 2026 by rpki-client