This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/_oQxFMzNlOznniUHUPZHi268kuQ.roa File: _oQxFMzNlOznniUHUPZHi268kuQ.roa (raw, json) Hash identifier: fDFJnV4r1JvMpZQX0gHhVdBTmacaoLVDqifzr7CLi/I= Subject key identifier: FE:84:31:14:CC:CD:94:EC:E7:9E:25:07:50:F6:47:8B:6E:BC:92:E4 Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6 Certificate serial: 019B7A5B10E7EE7829E9F50EEBD503989F7F Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/_oQxFMzNlOznniUHUPZHi268kuQ.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31734 IP address blocks: 91.208.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:10:e7:ee:78:29:e9:f5:0e:eb:d5:03:98:9f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe843114cccd94ece79e250750f6478b6ebc92e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:90:03:fe:63:0f:61:32:16:ee:58:b5:da: e1:37:d9:ae:15:f9:18:8e:27:b9:4a:f9:aa:49:56: b0:6a:79:b8:97:ef:ab:95:76:28:f2:00:f3:e6:c6: 17:fe:38:82:38:34:30:51:48:30:b7:9d:ab:4f:86: 7d:cc:c9:7d:55:15:f7:89:ce:74:27:2b:b0:2c:d4: 61:b9:1f:83:03:92:8a:6d:52:47:bc:17:ef:82:df: fd:61:8d:fa:c5:92:5d:35:36:1a:57:53:38:71:2c: dc:fa:e7:de:cd:e4:e3:d6:f8:42:1f:b5:d9:3e:5e: d8:9c:d9:ce:61:80:a0:91:73:b3:a7:79:85:28:0b: d0:c8:18:55:aa:e7:17:63:3b:ef:3c:4a:9a:98:97: 99:db:1b:a3:2a:7d:46:0b:0f:a1:70:81:37:10:14: af:c2:b8:39:e5:e7:9e:79:d8:5d:e6:82:d2:7b:d0: 62:fe:f6:f9:4e:63:d5:4c:c5:e4:5a:3f:ec:51:9e: 95:63:b4:eb:fa:20:98:41:15:36:06:c4:fd:53:2b: 9c:a2:15:1e:00:10:85:4b:e2:c8:01:ec:cf:af:01: b8:fd:2e:4b:02:ed:a1:f9:c0:1a:a1:b4:91:47:00: 57:b8:3f:3b:40:af:b3:3d:e6:39:fe:12:b9:29:82: bf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:84:31:14:CC:CD:94:EC:E7:9E:25:07:50:F6:47:8B:6E:BC:92:E4 X509v3 Authority Key Identifier: keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/_oQxFMzNlOznniUHUPZHi268kuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.223.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:89:29:4b:f6:e6:73:b9:e5:20:b7:d4:86:b9:e0:0d:c7:39: 35:e2:d0:56:de:6e:3d:59:77:65:8c:ff:ce:aa:9f:72:ef:18: d3:29:f6:c7:7d:0d:31:40:cc:3f:f1:96:13:4f:d7:11:8d:1e: 67:75:e8:11:e2:bb:78:35:9f:2f:0e:b1:03:e8:df:44:68:70: c3:66:e9:72:a1:30:89:91:af:90:a3:72:b2:1b:d8:e7:51:b2: b1:e4:4a:0a:b2:87:e6:dc:a5:46:ab:04:80:bd:0b:21:97:cb: 90:85:32:71:29:b9:3a:a9:af:bf:c6:b5:fb:f6:09:86:2e:92: 8a:34:e1:fd:da:2a:87:ef:36:a5:30:15:a2:40:1f:c3:55:b1: 86:9a:cb:87:d4:ce:a6:28:ac:80:2e:84:5f:03:8a:05:63:29: 63:30:fe:bd:05:1d:94:1a:9e:b3:06:9a:ed:2c:19:d0:e6:7e: 43:ec:8e:5c:51:d4:d6:fe:7a:87:0d:44:06:2a:9a:ab:2e:11: 62:fb:7c:04:de:38:84:65:ee:da:97:7e:88:b2:6c:2f:9c:f8: a0:25:d9:ce:f9:9c:93:b0:d5:7a:04:37:67:51:e0:fe:ac:2b: 57:85:0b:5a:77:2c:39:c6:fd:e7:3c:b6:05:d2:bd:76:e3:94: b8:f7:84:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxDn7ngp6fUO69UDmJ9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMmRkMDY1MDFmOTlkNDcwMjJkM2E0MDM5ZWZjZjQzOWQw YmM3ZTYwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTg0MzExNGNjY2Q5NGVjZTc5ZTI1MDc1MGY2NDc4YjZlYmM5MmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxISQA/5jD2EyFu5YtdrhN9muFfkY jie5SvmqSVawanm4l++rlXYo8gDz5sYX/jiCODQwUUgwt52rT4Z9zMl9VRX3ic50 JyuwLNRhuR+DA5KKbVJHvBfvgt/9YY36xZJdNTYaV1M4cSzc+ufezeTj1vhCH7XZ Pl7YnNnOYYCgkXOzp3mFKAvQyBhVqucXYzvvPEqamJeZ2xujKn1GCw+hcIE3EBSv wrg55eeeedhd5oLSe9Bi/vb5TmPVTMXkWj/sUZ6VY7Tr+iCYQRU2BsT9UyucohUe ABCFS+LIAezPrwG4/S5LAu2h+cAaobSRRwBXuD87QK+zPeY5/hK5KYK/8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6EMRTMzZTs554lB1D2R4tuvJLkMB8GA1UdIwQY MBaAFLIt0GUB+Z1HAi06QDnvz0OdC8fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMt NzExZmZkZjkxNjk4LzEvX29ReEZNek5sT3pubmlVSFVQWkhpMjY4a3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMtNzExZmZkZjkxNjk4 LzEvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DfMA0G CSqGSIb3DQEBCwUAA4IBAQCeiSlL9uZzueUgt9SGueANxzk14tBW3m49WXdljP/O qp9y7xjTKfbHfQ0xQMw/8ZYTT9cRjR5ndegR4rt4NZ8vDrED6N9EaHDDZulyoTCJ ka+Qo3KyG9jnUbKx5EoKsofm3KVGqwSAvQshl8uQhTJxKbk6qa+/xrX79gmGLpKK NOH92iqH7zalMBWiQB/DVbGGmsuH1M6mKKyALoRfA4oFYyljMP69BR2UGp6zBprt LBnQ5n5D7I5cUdTW/nqHDUQGKpqrLhFi+3wE3jiEZe7al36IsmwvnPigJdnO+ZyT sNV6BDdnUeD+rCtXhQtadyw5xv3nPLYF0r1245S494SI -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:38 2026 by rpki-client