This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/891PtgTBNZC3a-YUGxtJoKTNd9Q.roa File: 891PtgTBNZC3a-YUGxtJoKTNd9Q.roa (raw, json) Hash identifier: 8pLxt4vOUppE6as9sL8XWLpnhsDUpDNmeiVIIwF1HIQ= Subject key identifier: F3:DD:4F:B6:04:C1:35:90:B7:6B:E6:14:1B:1B:49:A0:A4:CD:77:D4 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AAD38670ABB6A99E54D3854F13C84 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/891PtgTBNZC3a-YUGxtJoKTNd9Q.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 91.208.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ad:38:67:0a:bb:6a:99:e5:4d:38:54:f1:3c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3dd4fb604c13590b76be6141b1b49a0a4cd77d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:82:ca:61:9f:bc:06:13:ed:f6:90:12:eb: 90:b7:df:7c:d5:32:ae:4f:9a:78:05:3d:73:fb:bd: 94:ed:80:91:81:10:35:80:6e:ea:2f:92:9c:82:68: 45:48:31:99:64:26:cb:36:48:6d:d1:8c:01:a6:89: 49:c0:58:54:52:a0:1e:93:02:0f:bc:6a:06:8e:f8: 78:54:59:93:14:b9:2e:10:74:eb:eb:7d:7d:f6:06: 2d:77:48:fc:e3:6c:cb:9d:03:03:a2:57:81:c3:4e: 12:80:7d:0d:27:6c:b7:64:72:37:6e:0c:0b:e1:e0: 11:3e:d1:42:d0:0f:dd:81:2c:be:05:8a:78:1a:8d: 03:b8:57:b7:41:f9:72:79:38:f2:fe:12:6e:3c:46: 0c:61:e0:01:cc:d9:93:bf:8d:2f:4a:c6:d7:d8:ce: 67:f3:fc:ea:6f:dc:11:39:2d:a2:62:c1:d9:3f:24: 1c:61:97:89:ab:a1:c1:b5:09:6a:67:13:21:7e:3d: 8d:a4:80:21:9b:21:00:77:52:bf:b8:a9:bc:76:c7: f4:12:0a:39:66:99:2c:55:1d:ac:00:b0:0e:7b:76: 83:70:73:cf:13:88:c8:80:81:17:d6:39:75:ab:ab: 1e:14:73:33:3f:aa:9e:4e:85:d4:75:70:06:61:c6: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DD:4F:B6:04:C1:35:90:B7:6B:E6:14:1B:1B:49:A0:A4:CD:77:D4 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/891PtgTBNZC3a-YUGxtJoKTNd9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.69.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:32:8e:09:a3:5c:09:bd:b3:7b:71:cc:f2:e3:0b:24:8a:f7: ce:23:f4:af:ac:85:b7:9d:6b:70:92:73:f1:6f:0f:d0:0a:fa: 3e:7b:2d:07:1f:47:22:d4:fb:3f:03:75:47:cd:65:94:a8:2a: 93:e5:53:38:00:8c:08:b5:8b:93:7b:e0:d9:97:36:dc:1d:a4: 35:fe:0a:36:7f:c3:cc:a7:80:4a:8e:f7:56:39:c9:dc:a3:8b: 4e:8f:1d:6e:dd:c1:7c:92:ef:56:59:e8:48:42:63:e7:da:ea: 30:27:09:60:32:56:6c:b4:14:c0:72:14:e9:c5:46:89:20:62: 0e:7d:df:c4:ad:3d:d8:da:af:a4:78:2e:3d:85:46:df:d4:74: 25:eb:fd:a0:e2:c8:3f:96:66:2b:4a:96:f6:fe:d2:9f:95:22: e7:af:1b:56:c6:18:e9:ab:04:3e:d0:40:f3:0c:dc:17:58:d4: 76:fa:98:df:03:78:88:0d:57:39:62:6c:1d:d3:4e:a2:2c:55: fc:14:ff:90:d5:7d:22:22:b2:19:7f:d3:a9:4b:8f:3f:f6:cd: a8:ea:51:46:b5:ca:e1:bd:e1:64:92:27:4b:fc:56:db:ec:04: 51:7f:ce:06:f7:a2:ef:d2:a1:58:94:25:1d:39:29:cf:6e:86: 3f:90:30:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wq04Zwq7apnlTThU8TyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2RkNGZiNjA0YzEzNTkwYjc2YmU2MTQxYjFiNDlhMGE0Y2Q3N2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfmCymGfvAYT7faQEuuQt9981TKu T5p4BT1z+72U7YCRgRA1gG7qL5KcgmhFSDGZZCbLNkht0YwBpolJwFhUUqAekwIP vGoGjvh4VFmTFLkuEHTr63199gYtd0j842zLnQMDoleBw04SgH0NJ2y3ZHI3bgwL 4eARPtFC0A/dgSy+BYp4Go0DuFe3QflyeTjy/hJuPEYMYeABzNmTv40vSsbX2M5n 8/zqb9wROS2iYsHZPyQcYZeJq6HBtQlqZxMhfj2NpIAhmyEAd1K/uKm8dsf0Ego5 ZpksVR2sALAOe3aDcHPPE4jIgIEX1jl1q6seFHMzP6qeToXUdXAGYcbMtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPdT7YEwTWQt2vmFBsbSaCkzXfUMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvODkxUHRnVEJOWkMzYS1ZVUd4dEpvS1ROZDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BFMA0G CSqGSIb3DQEBCwUAA4IBAQAOMo4Jo1wJvbN7cczy4wskivfOI/SvrIW3nWtwknPx bw/QCvo+ey0HH0ci1Ps/A3VHzWWUqCqT5VM4AIwItYuTe+DZlzbcHaQ1/go2f8PM p4BKjvdWOcnco4tOjx1u3cF8ku9WWehIQmPn2uowJwlgMlZstBTAchTpxUaJIGIO fd/ErT3Y2q+keC49hUbf1HQl6/2g4sg/lmYrSpb2/tKflSLnrxtWxhjpqwQ+0EDz DNwXWNR2+pjfA3iIDVc5Ymwd006iLFX8FP+Q1X0iIrIZf9OpS48/9s2o6lFGtcrh veFkkidL/Fbb7ARRf84G96Lv0qFYlCUdOSnPboY/kDAr -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:00 2026 by rpki-client