This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa File: iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa (raw, json) Hash identifier: 0GjE/GSpKOrR5lJaIX0JhjgnY5INn+Q+Cz2beD9Wkrc= Subject key identifier: 89:4B:ED:44:6B:44:75:7C:81:A2:BA:36:2A:5D:C9:83:0D:A5:C1:FD Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1 Certificate serial: 019B7D5C19526319CF893FEEF0E9D4437917 Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa Signing time: Fri 02 Jan 2026 06:19:06 +0000 ROA not before: Fri 02 Jan 2026 06:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44073 IP address blocks: 91.198.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:19:52:63:19:cf:89:3f:ee:f0:e9:d4:43:79:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1 Validity Not Before: Jan 2 06:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=894bed446b44757c81a2ba362a5dc9830da5c1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:0d:70:b0:3e:ac:0a:6b:53:2e:43:25:5c: df:16:44:5e:7c:f3:c1:10:44:3a:9a:2b:67:16:f1: 6f:e0:b9:d1:53:57:8e:65:07:66:1a:f2:16:df:21: 79:76:e3:0f:a0:79:1a:62:32:c5:01:e9:4e:7c:8b: 16:28:18:a7:31:d9:22:69:f9:34:bd:71:64:ff:8c: e5:23:23:43:e1:fe:65:ec:9f:08:cb:5b:36:b8:d7: 75:bb:60:f7:54:75:3a:88:17:44:03:68:66:13:7a: 4a:67:6b:7c:3c:3a:1b:20:27:3d:28:a4:a9:46:b3: 9e:bc:2a:45:96:fd:c2:12:47:e7:55:96:d2:2e:e7: 77:eb:56:6a:bf:54:12:d2:8b:6c:6d:f1:21:0c:2d: 8b:eb:76:9a:ec:66:2f:29:7b:51:45:66:c5:c7:c9: 57:fb:12:73:62:bf:ba:04:85:ff:f4:95:f1:ad:86: 57:a4:06:92:80:d9:45:0a:b2:a1:f2:23:a8:86:d7: d4:54:61:1d:99:49:57:10:ea:1b:d6:09:b4:ec:68: 61:aa:3c:cf:44:38:a5:e5:8c:17:4d:e5:ec:4d:52: a3:e1:93:7d:fe:45:85:5f:63:cf:c9:7d:c5:52:39: fd:44:ce:86:1e:57:9e:ec:d1:b6:b8:45:b9:05:d0: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4B:ED:44:6B:44:75:7C:81:A2:BA:36:2A:5D:C9:83:0D:A5:C1:FD X509v3 Authority Key Identifier: keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.112.0/24 Signature Algorithm: sha256WithRSAEncryption da:5d:c2:23:35:1b:82:66:eb:99:a2:b1:b3:c9:74:1f:91:6b: 09:99:03:6d:2e:59:73:84:b7:ee:de:64:80:5b:42:d3:8c:37: 31:4d:e0:60:f5:5c:86:f6:69:19:47:d3:1f:ea:e5:b8:34:44: 00:7e:70:87:c3:b2:70:9b:43:8b:9c:fb:e6:70:7b:09:8e:3d: bf:e9:fd:2e:a9:3f:be:8d:0d:41:86:8e:e7:b8:cb:80:54:db: 7f:e9:db:cb:2b:65:a6:cf:48:bf:5e:6c:74:eb:29:6f:fa:a4: 13:0c:a9:7e:1e:2b:05:cf:1e:68:5a:14:b2:1d:3d:42:29:b7: 48:82:cf:94:30:d2:b2:0d:3e:fc:d7:da:de:38:9d:24:fa:39: 6b:f9:52:07:3c:2a:f7:84:f5:f3:bd:74:b8:41:52:d3:48:29: 69:1f:61:a4:20:2d:18:00:4b:94:ee:71:3c:6c:b7:9e:10:f1: dd:b3:b0:bb:1a:16:85:47:85:75:91:58:ac:b4:8b:1e:42:26: f8:30:37:11:bf:d2:16:b0:9a:9a:e8:35:f5:36:9c:5a:9b:4e: 3c:61:72:90:3c:d7:95:0b:f8:c0:52:ce:97:d6:04:41:4a:5a: 4f:88:fe:9e:36:27:65:c0:13:16:56:22:bd:c2:c6:cf:2d:5d: 67:3c:a8:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XBlSYxnPiT/u8OnUQ3kXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmU0MmNiMzBjM2Q0OTZmOTZmMTFlZDkzY2Y3NDM2MTcw OGM3ZTEwHhcNMjYwMTAyMDYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTRiZWQ0NDZiNDQ3NTdjODFhMmJhMzYyYTVkYzk4MzBkYTVjMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZENcLA+rAprUy5DJVzfFkRefPPB EEQ6mitnFvFv4LnRU1eOZQdmGvIW3yF5duMPoHkaYjLFAelOfIsWKBinMdkiafk0 vXFk/4zlIyND4f5l7J8Iy1s2uNd1u2D3VHU6iBdEA2hmE3pKZ2t8PDobICc9KKSp RrOevCpFlv3CEkfnVZbSLud361Zqv1QS0otsbfEhDC2L63aa7GYvKXtRRWbFx8lX +xJzYr+6BIX/9JXxrYZXpAaSgNlFCrKh8iOohtfUVGEdmUlXEOob1gm07GhhqjzP RDil5YwXTeXsTVKj4ZN9/kWFX2PPyX3FUjn9RM6GHlee7NG2uEW5BdCv+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlL7URrRHV8gaK6NipdyYMNpcH9MB8GA1UdIwQY MBaAFLv+Qssww9SW+W8R7ZPPdDYXCMfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUt ZjFkMTE0MTNlMThhLzEvaVV2dFJHdEVkWHlCb3JvMktsM0pndzJsd2YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUtZjFkMTE0MTNlMThh LzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZwMA0G CSqGSIb3DQEBCwUAA4IBAQDaXcIjNRuCZuuZorGzyXQfkWsJmQNtLllzhLfu3mSA W0LTjDcxTeBg9VyG9mkZR9Mf6uW4NEQAfnCHw7Jwm0OLnPvmcHsJjj2/6f0uqT++ jQ1Bho7nuMuAVNt/6dvLK2Wmz0i/Xmx06ylv+qQTDKl+HisFzx5oWhSyHT1CKbdI gs+UMNKyDT7819reOJ0k+jlr+VIHPCr3hPXzvXS4QVLTSClpH2GkIC0YAEuU7nE8 bLeeEPHds7C7GhaFR4V1kVistIseQib4MDcRv9IWsJqa6DX1Npxam048YXKQPNeV C/jAUs6X1gRBSlpPiP6eNidlwBMWViK9wsbPLV1nPKjk -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:46 2026 by rpki-client