This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/j41zoiaXBblg-s35yo_X9n6HONw.roa File: j41zoiaXBblg-s35yo_X9n6HONw.roa (raw, json) Hash identifier: f3EjsT3VTTwbnJB30KI4G3Xb0YezTgQyfGjz6XyAOKE= Subject key identifier: 8F:8D:73:A2:26:97:05:B9:60:FA:CD:F9:CA:8F:D7:F6:7E:87:38:DC Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed Certificate serial: 019B7AC89AEA592687F8FF35035C6408FA08 Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/j41zoiaXBblg-s35yo_X9n6HONw.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198232 IP address blocks: 91.232.175.0/24 maxlen: 24 195.60.240.0/23 maxlen: 23 195.60.240.0/24 maxlen: 24 195.60.241.0/24 maxlen: 24 195.60.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9a:ea:59:26:87:f8:ff:35:03:5c:64:08:fa:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f8d73a2269705b960facdf9ca8fd7f67e8738dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:87:7b:52:48:09:d5:be:20:89:51:97:16: 64:f6:bb:d3:1f:6f:4d:d4:84:4b:74:6d:a5:fd:13: 83:03:b6:5e:b2:c1:b1:ab:67:0c:a7:7e:f3:3f:9d: bf:34:10:22:9a:fb:88:1a:48:48:fb:23:9d:89:27: 7a:d8:be:ab:ab:55:fd:37:2b:bb:77:81:59:3f:b6: 7b:c1:58:cf:7a:2b:57:a7:13:bf:e2:2f:2f:da:ac: d5:b1:c9:95:44:84:b3:9e:78:35:84:4d:92:ac:41: 88:74:b5:45:ab:c3:94:2c:47:8d:b4:e0:5b:65:4f: 5e:2e:30:82:c6:fc:2e:6f:53:25:36:87:70:6e:92: 7b:38:71:b4:b2:cc:37:02:f8:20:72:30:c1:f9:42: ec:b7:e7:f5:1e:52:f9:0c:60:91:de:ad:c6:38:c4: 53:04:a6:17:fb:6d:c6:22:fb:89:2b:6b:9c:40:f2: 04:f4:0c:41:1a:55:8c:bb:98:05:71:c4:b1:8f:95: 27:b7:f5:e5:13:5b:53:c2:70:42:62:99:59:05:3a: 8d:d6:c5:c2:3f:b7:ad:36:8d:f3:8c:a6:3e:3d:15: 28:99:a7:82:2b:8f:3e:55:56:64:a4:53:4f:79:8e: b6:65:ea:84:2d:43:52:9b:74:6d:9b:d8:fe:97:0c: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:73:A2:26:97:05:B9:60:FA:CD:F9:CA:8F:D7:F6:7E:87:38:DC X509v3 Authority Key Identifier: keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/j41zoiaXBblg-s35yo_X9n6HONw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.175.0/24 195.60.240.0-195.60.242.255 Signature Algorithm: sha256WithRSAEncryption 90:b0:b0:16:43:6f:7c:84:5f:a7:f3:a7:58:f1:cc:40:75:23: 05:90:47:07:fc:05:51:c9:ce:0c:34:7b:18:06:71:cc:69:5e: 0d:f9:f6:b8:ff:e7:43:57:96:a3:4b:11:80:b0:91:4d:a3:7a: a4:30:90:e6:00:0a:16:d5:b4:e7:b3:d1:2b:bb:17:ef:f9:15: 26:03:78:61:48:60:87:cc:df:4b:f3:ff:69:63:65:e4:c9:12: e5:ea:c6:67:d8:cf:a4:8a:89:de:51:ff:21:37:d4:07:82:cd: 8a:f7:4d:09:36:61:4d:f7:08:d7:bc:b1:33:16:9b:ad:dc:7c: f5:9c:1f:fe:9b:d2:09:8f:66:04:49:49:9d:8d:1e:26:da:18: a5:47:eb:50:48:6c:63:02:dd:f6:2a:a8:5f:24:08:17:01:ec: f2:7a:e7:43:93:d0:f2:88:04:65:31:ff:74:fb:b3:5b:01:d4: a7:d0:69:49:87:a6:6d:d1:38:4c:a3:36:b4:27:c2:5a:4e:b5: b7:6b:fc:6c:20:c3:8b:cb:31:a5:d2:d8:49:c3:a6:5e:8b:35: a6:4e:76:38:61:41:09:81:4f:d0:e1:bd:f4:11:b1:41:87:f6: ba:c7:75:9a:0d:3a:0e:d9:61:e4:8f:fd:70:b2:13:e0:a9:a0: 57:2e:e0:1c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yJrqWSaH+P81A1xkCPoIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmU5Yzk0MmNmNTZiZWI4NjkyYzVkNTYyZWQ4ZWFkNjk0 NTI4ZWQwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjhkNzNhMjI2OTcwNWI5NjBmYWNkZjljYThmZDdmNjdlODczOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAKHe1JICdW+IIlRlxZk9rvTH29N 1IRLdG2l/RODA7ZessGxq2cMp37zP52/NBAimvuIGkhI+yOdiSd62L6rq1X9Nyu7 d4FZP7Z7wVjPeitXpxO/4i8v2qzVscmVRISznng1hE2SrEGIdLVFq8OULEeNtOBb ZU9eLjCCxvwub1MlNodwbpJ7OHG0ssw3AvggcjDB+ULst+f1HlL5DGCR3q3GOMRT BKYX+23GIvuJK2ucQPIE9AxBGlWMu5gFccSxj5Unt/XlE1tTwnBCYplZBTqN1sXC P7etNo3zjKY+PRUomaeCK48+VVZkpFNPeY62ZeqELUNSm3Rtm9j+lwzIRQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFI+Nc6ImlwW5YPrN+cqP1/Z+hzjcMB8GA1UdIwQY MBaAFF5unJQs9WvrhpLF1WLtjq1pRSjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMt ZTM0Mzc3N2MzOTczLzEvajQxem9pYVhCYmxnLXMzNXlvX1g5bjZIT053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMtZTM0Mzc3N2MzOTcz LzEvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW+ivMAwD BATDPPADBADDPPIwDQYJKoZIhvcNAQELBQADggEBAJCwsBZDb3yEX6fzp1jxzEB1 IwWQRwf8BVHJzgw0exgGccxpXg359rj/50NXlqNLEYCwkU2jeqQwkOYAChbVtOez 0Su7F+/5FSYDeGFIYIfM30vz/2ljZeTJEuXqxmfYz6SKid5R/yE31AeCzYr3TQk2 YU33CNe8sTMWm63cfPWcH/6b0gmPZgRJSZ2NHibaGKVH61BIbGMC3fYqqF8kCBcB 7PJ650OT0PKIBGUx/3T7s1sB1KfQaUmHpm3ROEyjNrQnwlpOtbdr/Gwgw4vLMaXS 2EnDpl6LNaZOdjhhQQmBT9DhvfQRsUGH9rrHdZoNOg7ZYeSP/XCyE+CpoFcu4Bw= -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:34 2026 by rpki-client