This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/eHtaTNEahZIqEQ5NQhbqNOgkte8.roa File: eHtaTNEahZIqEQ5NQhbqNOgkte8.roa (raw, json) Hash identifier: MNC6u/UzUFisfjBXSx9RpaJq0ODx2gNTOpYSp6+HJcc= Subject key identifier: 78:7B:5A:4C:D1:1A:85:92:2A:11:0E:4D:42:16:EA:34:E8:24:B5:EF Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da Certificate serial: 019B7BA4E29AFCD835303BD0FD529EEB44EE Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/eHtaTNEahZIqEQ5NQhbqNOgkte8.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197441 IP address blocks: 91.208.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e2:9a:fc:d8:35:30:3b:d0:fd:52:9e:eb:44:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=787b5a4cd11a85922a110e4d4216ea34e824b5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:8b:7e:a8:51:4a:7f:af:79:fc:12:17:e0: fb:42:01:48:3f:1d:30:0a:77:ab:9f:45:b9:ae:2c: 14:15:b3:6e:dc:c0:92:26:62:09:51:fd:90:7e:6f: aa:0e:81:96:82:b5:d5:75:ef:e3:d6:12:8d:87:57: 18:0c:38:73:0b:06:a7:c6:e8:0b:bb:7d:85:49:7d: c1:45:5f:39:da:38:01:5a:70:47:8b:06:bc:33:ae: 3c:af:42:cf:5a:20:ef:eb:45:a4:c7:3d:9c:74:85: 56:72:05:d5:0c:73:84:89:e9:96:74:54:b0:9b:a6: 13:21:79:3e:40:ce:b7:9d:0c:2b:bb:f8:c2:b1:56: 58:e3:91:49:7a:e3:59:1e:61:1d:31:f9:80:1c:a4: f7:9c:a7:1a:ab:2c:12:88:b9:9d:ef:ee:c7:50:93: 65:c1:e9:33:c1:64:47:ed:ac:9f:29:23:db:d7:3d: cf:f0:78:7f:fa:82:46:e8:00:ed:7f:89:eb:f8:85: 54:c0:b7:b4:6c:d4:32:9a:73:a9:f5:f3:52:8f:52: d4:9b:36:e5:ac:a1:39:6b:69:c0:0b:2a:f4:84:28: 8d:8d:d6:ff:ed:61:1c:b1:91:3c:61:57:81:08:47: 26:8c:43:17:4b:d7:a9:25:8f:ff:92:bb:e7:4d:60: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7B:5A:4C:D1:1A:85:92:2A:11:0E:4D:42:16:EA:34:E8:24:B5:EF X509v3 Authority Key Identifier: keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/eHtaTNEahZIqEQ5NQhbqNOgkte8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.225.0/24 Signature Algorithm: sha256WithRSAEncryption 51:1e:74:26:1c:b9:c7:dc:b5:aa:0e:37:06:a0:03:9f:92:48: db:b5:d6:df:1b:79:8f:55:d6:17:ad:c0:0b:55:98:f3:7a:e8: 5a:21:c5:49:65:a5:40:d3:34:f9:18:94:6f:b9:57:84:2e:fa: 13:8c:3f:86:05:40:01:52:5a:f2:da:cf:53:c5:55:dc:af:ae: 97:96:0d:f0:a6:ed:94:92:d9:0f:4e:88:6e:12:93:4f:41:1d: ef:1f:bd:d4:b8:75:7f:c3:a4:de:4a:1e:60:7d:cc:58:12:c3: 7b:16:00:d9:89:80:84:d7:24:f5:b6:23:8b:da:59:1b:92:bc: ab:82:bf:ee:8b:16:78:fe:47:58:22:cf:17:f1:9a:f6:b8:fe: 1d:44:b7:47:4b:a9:7c:30:16:00:27:b6:f8:d5:e9:66:c5:84: 2d:64:b2:d6:45:c6:34:25:46:3d:3b:80:23:ca:89:d0:1c:be: d9:13:5e:d6:a4:9f:f9:22:ce:51:5b:4d:0e:ed:d4:11:36:99: 2f:ba:d5:04:f8:6b:26:ae:dd:49:32:26:be:9f:84:aa:b3:34: d4:62:d5:58:49:cd:d9:8a:82:91:a6:8d:ea:68:00:6b:2c:15: 4c:cb:a2:1c:30:18:9e:bc:65:61:01:96:39:47:91:38:fd:a7: d8:99:cb:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOKa/Ng1MDvQ/VKe60TuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMzU1NDZlYTViMDc5MDU0OWNhMGJhMWJiMmEzZTFkYmFl NGEzZGEwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODdiNWE0Y2QxMWE4NTkyMmExMTBlNGQ0MjE2ZWEzNGU4MjRiNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgOLfqhRSn+vefwSF+D7QgFIPx0w Cnern0W5riwUFbNu3MCSJmIJUf2Qfm+qDoGWgrXVde/j1hKNh1cYDDhzCwanxugL u32FSX3BRV852jgBWnBHiwa8M648r0LPWiDv60Wkxz2cdIVWcgXVDHOEiemWdFSw m6YTIXk+QM63nQwru/jCsVZY45FJeuNZHmEdMfmAHKT3nKcaqywSiLmd7+7HUJNl wekzwWRH7ayfKSPb1z3P8Hh/+oJG6ADtf4nr+IVUwLe0bNQymnOp9fNSj1LUmzbl rKE5a2nACyr0hCiNjdb/7WEcsZE8YVeBCEcmjEMXS9epJY//krvnTWAcOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHh7WkzRGoWSKhEOTUIW6jToJLXvMB8GA1UdIwQY MBaAFDA1VG6lsHkFScoLobsqPh265KPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMt MDA0ZjBjYjNlZDc3LzEvZUh0YVRORWFoWklxRVE1TlFoYnFOT2drdGU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMtMDA0ZjBjYjNlZDc3 LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DhMA0G CSqGSIb3DQEBCwUAA4IBAQBRHnQmHLnH3LWqDjcGoAOfkkjbtdbfG3mPVdYXrcAL VZjzeuhaIcVJZaVA0zT5GJRvuVeELvoTjD+GBUABUlry2s9TxVXcr66Xlg3wpu2U ktkPTohuEpNPQR3vH73UuHV/w6TeSh5gfcxYEsN7FgDZiYCE1yT1tiOL2lkbkryr gr/uixZ4/kdYIs8X8Zr2uP4dRLdHS6l8MBYAJ7b41elmxYQtZLLWRcY0JUY9O4Aj yonQHL7ZE17WpJ/5Is5RW00O7dQRNpkvutUE+Gsmrt1JMia+n4SqszTUYtVYSc3Z ioKRpo3qaABrLBVMy6IcMBievGVhAZY5R5E4/afYmcsz -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:25 2026 by rpki-client