This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/cU3iO3FpJ3ThfSxvIxD6lKSlohQ.roa File: cU3iO3FpJ3ThfSxvIxD6lKSlohQ.roa (raw, json) Hash identifier: aQdNHFOqbEm1roloWNrBXbpYkaOudhwbtiAta4ngMDQ= Subject key identifier: 71:4D:E2:3B:71:69:27:74:E1:7D:2C:6F:23:10:FA:94:A4:A5:A2:14 Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a Certificate serial: 019B7834B050D2CA29D8265B290F7866DDB4 Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/cU3iO3FpJ3ThfSxvIxD6lKSlohQ.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 91.216.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b0:50:d2:ca:29:d8:26:5b:29:0f:78:66:dd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=714de23b71692774e17d2c6f2310fa94a4a5a214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:e6:c7:a5:9e:26:93:9a:17:8d:ab:9d:ae: 1f:8a:a5:1e:6a:4a:dc:e5:89:76:12:91:3d:de:ef: f9:2a:ea:74:84:50:38:bb:3e:75:48:4b:c7:ee:96: 0e:4a:e3:f4:f0:b8:6a:e9:cb:75:ee:63:a8:eb:8f: d0:68:ec:c6:6f:45:1e:53:d1:9c:b3:9e:6a:ae:3f: a5:88:f9:85:2f:24:51:31:92:dc:da:ab:06:71:8e: bb:32:59:6a:1b:f6:d6:ee:7e:9f:ea:df:73:64:d3: 76:f2:1f:a8:b7:5c:4e:03:c4:eb:8c:49:82:81:6a: 6f:a5:da:e5:fd:08:96:8d:82:e5:22:ca:37:a6:5c: d8:8b:da:9a:0d:eb:37:c5:02:ba:ac:03:02:28:1a: 6c:9a:48:ef:65:33:b3:6b:bf:76:b0:1f:a9:b5:bc: d4:3a:38:2a:16:7c:47:5e:aa:d6:fc:05:65:57:84: 53:6c:cc:fe:ad:da:21:09:71:69:90:3a:ff:cf:b6: 4f:3a:f8:92:19:af:0b:91:91:10:c6:fb:38:6d:7a: 70:26:a5:63:bb:4a:99:72:13:2e:57:13:6d:e2:dd: e7:5a:9f:ef:2d:27:fb:54:61:51:b0:28:7f:19:5d: f0:64:d3:d1:88:b8:9e:34:3b:db:8f:d0:0c:52:65: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4D:E2:3B:71:69:27:74:E1:7D:2C:6F:23:10:FA:94:A4:A5:A2:14 X509v3 Authority Key Identifier: keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/cU3iO3FpJ3ThfSxvIxD6lKSlohQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.184.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4f:c1:8a:70:7f:77:ac:4f:d1:10:c3:71:69:0a:17:13:b2: 22:b7:6a:c0:93:d3:02:e9:9e:0c:25:6b:5b:39:4c:c8:55:85: b3:a1:59:58:1e:18:d0:e2:1e:49:03:dd:9e:28:a7:b4:c5:84: 24:21:d7:09:4d:f3:f7:ab:08:9e:ab:71:08:2a:99:f4:00:59: ed:64:d0:07:62:bb:bb:e2:fe:b7:5b:cb:d5:cc:f1:a0:9a:3f: 77:3c:a6:d5:2a:39:3d:c2:90:c1:89:82:b9:27:02:db:e9:06: a5:b2:78:e0:f9:53:d3:b4:07:93:63:f3:cf:da:d9:09:59:cd: d4:85:df:e6:c7:d8:72:7a:3f:cb:13:66:4a:f4:cb:06:d7:47: 25:0c:cc:ee:44:87:45:81:27:ef:57:b7:b6:0a:0e:ae:96:74: 6c:82:6f:1b:24:d3:d2:37:8e:01:5f:b3:af:68:7a:24:ec:0b: 41:71:78:64:e1:64:46:32:44:70:cd:78:f5:e5:7e:22:43:f8: 44:72:11:49:1f:2c:c4:c3:b7:18:55:bd:49:2b:d9:8c:3d:b7: b7:de:c9:d8:88:87:d5:74:7d:2c:35:88:bc:79:5f:8c:0d:ee: d5:7c:fd:ea:32:57:fa:cc:5b:71:0b:c1:56:95:75:50:5e:4a: dc:1c:dd:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLBQ0sop2CZbKQ94Zt20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZjFiODFjZmU2YWJiMTE4ZTk3ZTAzMjViNjYyZWFmOTg0 ZjJmNmEwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTRkZTIzYjcxNjkyNzc0ZTE3ZDJjNmYyMzEwZmE5NGE0YTVhMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQnmx6WeJpOaF42rna4fiqUeakrc 5Yl2EpE93u/5Kup0hFA4uz51SEvH7pYOSuP08Lhq6ct17mOo64/QaOzGb0UeU9Gc s55qrj+liPmFLyRRMZLc2qsGcY67MllqG/bW7n6f6t9zZNN28h+ot1xOA8TrjEmC gWpvpdrl/QiWjYLlIso3plzYi9qaDes3xQK6rAMCKBpsmkjvZTOza792sB+ptbzU OjgqFnxHXqrW/AVlV4RTbMz+rdohCXFpkDr/z7ZPOviSGa8LkZEQxvs4bXpwJqVj u0qZchMuVxNt4t3nWp/vLSf7VGFRsCh/GV3wZNPRiLieNDvbj9AMUmXDUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHFN4jtxaSd04X0sbyMQ+pSkpaIUMB8GA1UdIwQY MBaAFH/xuBz+arsRjpfgMltmLq+YTy9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEt Y2VhN2ViMzUwNTM3LzEvY1UzaU8zRnBKM1RoZlN4dkl4RDZsS1Nsb2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEtY2VhN2ViMzUwNTM3 LzEvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9i4MA0G CSqGSIb3DQEBCwUAA4IBAQA1T8GKcH93rE/REMNxaQoXE7Iit2rAk9MC6Z4MJWtb OUzIVYWzoVlYHhjQ4h5JA92eKKe0xYQkIdcJTfP3qwieq3EIKpn0AFntZNAHYru7 4v63W8vVzPGgmj93PKbVKjk9wpDBiYK5JwLb6Qalsnjg+VPTtAeTY/PP2tkJWc3U hd/mx9hyej/LE2ZK9MsG10clDMzuRIdFgSfvV7e2Cg6ulnRsgm8bJNPSN44BX7Ov aHok7AtBcXhk4WRGMkRwzXj15X4iQ/hEchFJHyzEw7cYVb1JK9mMPbe33snYiIfV dH0sNYi8eV+MDe7VfP3qMlf6zFtxC8FWlXVQXkrcHN1g -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:34 2026 by rpki-client