This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/0G0rRTu6YWCR1V_Lc199bCBf3eY.roa File: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (raw, json) Hash identifier: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw= Subject key identifier: D0:6D:2B:45:3B:BA:61:60:91:D5:5F:CB:73:5F:7D:6C:20:5F:DD:E6 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B77C709644D52E2873CCAD8D0DD80FCEC Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/0G0rRTu6YWCR1V_Lc199bCBf3eY.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42830 IP address blocks: 91.236.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:09:64:4d:52:e2:87:3c:ca:d8:d0:dd:80:fc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d06d2b453bba616091d55fcb735f7d6c205fdde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:e7:f5:42:d4:dc:e4:a2:20:1c:d0:36:47: 74:52:ea:26:69:77:1c:ce:78:d6:92:36:05:11:7a: d2:6c:6f:08:dd:30:24:8d:81:59:a9:6c:e4:a5:56: de:10:ae:23:0a:09:49:f0:b8:c4:29:aa:bf:69:4f: 5a:eb:23:12:e4:be:c5:9e:69:be:6a:d0:a2:ea:26: 59:2e:5a:57:b5:b3:61:84:e5:82:69:f5:a5:ed:be: 49:d0:53:f0:96:08:2f:79:c4:83:f6:e5:9a:43:9d: d7:35:85:23:95:f6:58:0e:f6:9c:c3:2c:e1:60:2f: e1:cd:e0:03:ac:9f:da:5f:43:93:f3:3a:b9:c5:63: a4:c5:ca:fb:0f:cb:fe:11:8f:75:17:85:20:8d:c6: 18:21:c4:b0:90:70:82:a9:46:4b:64:99:50:6e:8d: c1:d6:41:18:94:9f:12:b5:38:21:46:03:2e:f6:36: 1b:41:ec:7e:6e:2b:d7:53:ee:4e:06:18:84:d1:76: 71:1f:a0:56:ae:ac:2c:4d:97:8f:c9:66:36:bf:13: 25:08:c7:88:6f:d5:81:e9:d3:3f:c1:e0:7d:c2:80: 4b:75:25:17:6e:e4:5f:21:2b:82:9d:47:e1:e8:39: d4:49:f0:d0:01:e1:1c:e1:01:8a:a3:46:0f:41:03: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6D:2B:45:3B:BA:61:60:91:D5:5F:CB:73:5F:7D:6C:20:5F:DD:E6 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/0G0rRTu6YWCR1V_Lc199bCBf3eY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.129.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:fc:48:26:08:91:ce:a6:64:83:68:71:02:4b:7d:ce:46:0b: af:a2:d5:65:19:30:3e:00:6e:ca:6c:45:e8:74:2f:b8:49:e4: 09:45:b7:0f:e6:4a:53:b6:9c:4f:0e:93:66:be:3c:d9:fc:49: 75:da:31:41:f6:2d:68:65:e4:02:35:8f:be:5f:7e:23:8f:ff: e3:37:b2:0f:0e:ea:0a:94:65:90:cc:26:49:d3:46:0d:0e:34: fc:dd:78:6f:87:4b:cd:f3:63:64:bd:e0:1d:a9:87:27:07:fd: 4c:b7:55:b2:97:04:ad:13:a2:fd:41:90:e0:b4:25:82:27:16: ba:a7:50:7e:65:00:e9:a9:a7:1a:5f:c6:90:74:46:54:e4:bc: 87:78:70:38:82:de:dc:ad:41:f7:37:6c:a2:81:1e:cf:b2:eb: c8:62:44:86:ba:1e:8e:93:3b:0e:d6:c6:4e:a6:ec:41:3e:dd: 2e:aa:db:26:a4:19:db:bd:5f:5b:23:29:a2:61:23:2a:cd:bf: d3:74:76:d6:5a:48:a2:8a:db:44:0b:94:71:97:3d:70:d7:ae: 63:7a:4a:6b:f7:04:d8:aa:bd:8d:ad:3f:83:6f:7f:f8:17:4f: a4:9e:54:13:77:7c:ae:26:d5:36:c0:39:17:8a:11:77:40:24: f4:30:90:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwlkTVLihzzK2NDdgPzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDZkMmI0NTNiYmE2MTYwOTFkNTVmY2I3MzVmN2Q2YzIwNWZkZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22rn9ULU3OSiIBzQNkd0UuomaXcc znjWkjYFEXrSbG8I3TAkjYFZqWzkpVbeEK4jCglJ8LjEKaq/aU9a6yMS5L7Fnmm+ atCi6iZZLlpXtbNhhOWCafWl7b5J0FPwlggvecSD9uWaQ53XNYUjlfZYDvacwyzh YC/hzeADrJ/aX0OT8zq5xWOkxcr7D8v+EY91F4UgjcYYIcSwkHCCqUZLZJlQbo3B 1kEYlJ8StTghRgMu9jYbQex+bivXU+5OBhiE0XZxH6BWrqwsTZePyWY2vxMlCMeI b9WB6dM/weB9woBLdSUXbuRfISuCnUfh6DnUSfDQAeEc4QGKo0YPQQOBTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNBtK0U7umFgkdVfy3NffWwgX93mMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvMEcwclJUdTZZV0NSMVZfTGMxOTliQ0JmM2VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+yBMA0G CSqGSIb3DQEBCwUAA4IBAQBb/EgmCJHOpmSDaHECS33ORguvotVlGTA+AG7KbEXo dC+4SeQJRbcP5kpTtpxPDpNmvjzZ/El12jFB9i1oZeQCNY++X34jj//jN7IPDuoK lGWQzCZJ00YNDjT83Xhvh0vN82NkveAdqYcnB/1Mt1WylwStE6L9QZDgtCWCJxa6 p1B+ZQDpqacaX8aQdEZU5LyHeHA4gt7crUH3N2yigR7PsuvIYkSGuh6OkzsO1sZO puxBPt0uqtsmpBnbvV9bIymiYSMqzb/TdHbWWkiiittEC5Rxlz1w165jekpr9wTY qr2NrT+Db3/4F0+knlQTd3yuJtU2wDkXihF3QCT0MJCc -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:29 2026 by rpki-client