This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/9oOBFeGSrwdju604vrWfdCoTauM.roa File: 9oOBFeGSrwdju604vrWfdCoTauM.roa (raw, json) Hash identifier: pd4ZMcD0zoZVQx34tpixPFz8KnUMJc8/XoRGbitBdPI= Subject key identifier: F6:83:81:15:E1:92:AF:07:63:BB:AD:38:BE:B5:9F:74:2A:13:6A:E3 Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6 Certificate serial: 019B79ECEF458889E195E9B16F88F7EEF293 Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/9oOBFeGSrwdju604vrWfdCoTauM.roa Signing time: Thu 01 Jan 2026 14:18:49 +0000 ROA not before: Thu 01 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57063 IP address blocks: 91.236.201.0/24 maxlen: 24 213.5.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ef:45:88:89:e1:95:e9:b1:6f:88:f7:ee:f2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6 Validity Not Before: Jan 1 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6838115e192af0763bbad38beb59f742a136ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:50:0a:74:c2:1a:4d:9d:89:a2:13:60:47: d7:ac:64:87:75:0a:d3:c2:6b:e9:b6:53:df:1d:80: 7b:22:30:c6:63:2b:62:37:30:15:5b:ca:44:72:50: 60:bc:d4:7b:cc:ea:9f:3e:1a:35:8e:0f:94:46:2f: 78:6a:1d:00:82:b7:20:56:99:47:ac:20:b1:8d:51: fe:86:89:c8:7b:3f:44:bc:ec:f6:6c:46:0c:65:df: 90:65:28:15:62:43:77:ed:f4:df:68:1e:ca:6e:5d: f4:d6:51:63:59:ba:d2:ac:cc:20:03:df:68:e3:8e: 6c:6c:b6:5b:62:f3:b7:1b:98:16:bc:53:71:4c:1c: 0c:13:79:bf:4b:96:ad:9c:1f:85:98:f0:58:e6:89: 75:f5:c7:b3:f4:e2:b2:31:a9:af:75:80:31:26:f0: 2b:6c:67:3d:84:36:89:33:99:eb:5f:a3:53:5e:f0: 47:63:26:fc:7b:65:cd:c3:3e:a8:8f:fd:87:4d:cd: 5c:0a:47:07:5e:97:ac:3b:c9:8b:f5:85:ff:ed:0a: 0a:a1:79:a9:28:97:9b:33:5b:be:ee:9f:5c:b3:d2: 8f:f6:3b:8a:c4:13:f8:37:7d:e3:5b:6c:a1:d3:90: 9c:75:dc:6d:40:dc:bd:c6:af:56:16:9c:37:cb:46: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:83:81:15:E1:92:AF:07:63:BB:AD:38:BE:B5:9F:74:2A:13:6A:E3 X509v3 Authority Key Identifier: keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/9oOBFeGSrwdju604vrWfdCoTauM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.201.0/24 213.5.72.0/24 Signature Algorithm: sha256WithRSAEncryption 88:01:81:b2:fb:97:60:48:7b:cc:3b:99:96:ff:a3:b4:d7:62: e8:92:fc:51:89:6c:2b:36:be:40:3b:ab:11:55:33:47:22:9b: 7d:63:52:96:83:99:76:00:ba:10:a8:b1:1a:89:61:a8:c9:d4: 30:98:e5:48:ea:55:41:af:e8:f0:40:53:f7:a2:48:90:c8:16: 6a:f4:aa:aa:55:9b:6b:53:b3:22:2f:55:bf:53:d0:31:bc:f3: cd:96:1f:1c:90:3b:06:ff:4e:24:54:76:37:78:3b:c1:d1:43: bb:bf:09:e1:a7:d1:4c:93:13:a9:7e:11:8a:16:06:07:93:77: 95:35:72:55:70:b6:1e:35:e7:03:34:49:b1:b9:18:50:eb:93: 85:e2:5b:7d:6a:71:29:61:66:1f:7f:07:04:d0:e0:c5:1d:ad: 4a:29:90:68:cf:0a:26:98:20:2a:48:c3:d7:ae:26:72:43:9d: 39:a4:09:73:f3:b6:e5:6e:0e:c1:37:0a:b4:4a:9a:43:48:c2: 33:38:f4:8e:14:dc:71:b9:e2:bc:d8:39:36:c5:fc:5b:1f:54: 37:3f:6d:ef:d4:90:9f:4a:23:22:67:88:c1:81:ba:7b:a1:0a: dd:7b:86:1b:b5:dc:0d:4b:43:83:b5:ef:18:8b:b9:26:79:97: bd:5c:fe:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57O9FiInhlemxb4j37vKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2 NTViZTYwHhcNMjYwMTAxMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjgzODExNWUxOTJhZjA3NjNiYmFkMzhiZWI1OWY3NDJhMTM2YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFQCnTCGk2diaITYEfXrGSHdQrT wmvptlPfHYB7IjDGYytiNzAVW8pEclBgvNR7zOqfPho1jg+URi94ah0AgrcgVplH rCCxjVH+honIez9EvOz2bEYMZd+QZSgVYkN37fTfaB7Kbl301lFjWbrSrMwgA99o 445sbLZbYvO3G5gWvFNxTBwME3m/S5atnB+FmPBY5ol19cez9OKyMamvdYAxJvAr bGc9hDaJM5nrX6NTXvBHYyb8e2XNwz6oj/2HTc1cCkcHXpesO8mL9YX/7QoKoXmp KJebM1u+7p9cs9KP9juKxBP4N33jW2yh05CcddxtQNy9xq9WFpw3y0bScwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPaDgRXhkq8HY7utOL61n3QqE2rjMB8GA1UdIwQY MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt NWY2OTgwYjhjNDY3LzEvOW9PQkZlR1Nyd2RqdTYwNHZyV2ZkQ29UYXVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3 LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+zJAwQA 1QVIMA0GCSqGSIb3DQEBCwUAA4IBAQCIAYGy+5dgSHvMO5mW/6O012LokvxRiWwr Nr5AO6sRVTNHIpt9Y1KWg5l2ALoQqLEaiWGoydQwmOVI6lVBr+jwQFP3okiQyBZq 9KqqVZtrU7MiL1W/U9AxvPPNlh8ckDsG/04kVHY3eDvB0UO7vwnhp9FMkxOpfhGK FgYHk3eVNXJVcLYeNecDNEmxuRhQ65OF4lt9anEpYWYffwcE0ODFHa1KKZBozwom mCAqSMPXriZyQ505pAlz87blbg7BNwq0SppDSMIzOPSOFNxxueK82Dk2xfxbH1Q3 P23v1JCfSiMiZ4jBgbp7oQrde4YbtdwNS0ODte8Yi7kmeZe9XP6J -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:39 2026 by rpki-client