This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/336eDMssVQNfEiBmoxarP3nrjtk.roa File: 336eDMssVQNfEiBmoxarP3nrjtk.roa (raw, json) Hash identifier: 9J9MwpU2hz/GKCdOknpT6/jotuvB3sQI9jkSTrRaadM= Subject key identifier: DF:7E:9E:0C:CB:2C:55:03:5F:12:20:66:A3:16:AB:3F:79:EB:8E:D9 Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc Certificate serial: 019B7A5AEFB13E8EB8D1958C5183B38BD934 Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/336eDMssVQNfEiBmoxarP3nrjtk.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 91.90.125.0/24 maxlen: 24 91.90.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ef:b1:3e:8e:b8:d1:95:8c:51:83:b3:8b:d9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df7e9e0ccb2c55035f122066a316ab3f79eb8ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:09:81:5a:bb:e7:04:96:25:b5:64:bc:1b:31: b9:f2:8a:a9:e5:8c:60:21:36:fd:12:16:df:7a:b7: f9:5c:d3:d2:1f:3f:67:d6:de:fa:04:07:35:4a:87: 76:2a:92:4b:ef:45:79:d2:20:79:e4:c9:70:5f:22: e5:b4:8e:77:bf:7c:35:92:78:f2:4e:0b:b8:46:82: 3d:76:8b:f5:3a:e3:04:37:22:f7:1a:0f:a9:6e:91: 32:9a:ba:bf:1a:52:47:e6:98:86:46:05:0b:4d:be: 49:bb:07:eb:7c:38:38:f0:44:78:83:ea:65:17:fb: fe:1a:24:a2:94:c9:64:1f:2f:54:f2:d8:7b:a1:53: 2b:40:1c:b9:59:30:2b:1c:61:ca:91:36:65:48:22: c8:18:36:fd:34:47:81:89:29:cf:8c:53:9a:ae:14: 38:e6:ca:58:a4:c8:6b:65:dd:bb:66:8a:24:d9:ee: 4d:cd:e7:79:5a:8a:91:91:29:e6:35:85:fc:de:92: e5:c9:df:8b:ca:8c:81:21:b7:2f:49:64:ff:72:98: 35:4b:ef:a1:4d:1e:2f:56:42:6c:7e:ef:c1:9b:12: 97:52:12:d0:23:62:73:2a:4b:79:af:97:d7:ee:88: bd:46:80:6c:4b:e5:31:10:b4:36:98:2b:6e:c0:14: d8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7E:9E:0C:CB:2C:55:03:5F:12:20:66:A3:16:AB:3F:79:EB:8E:D9 X509v3 Authority Key Identifier: keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/336eDMssVQNfEiBmoxarP3nrjtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.125.0/24 91.90.127.0/24 Signature Algorithm: sha256WithRSAEncryption 55:47:76:c9:1d:2e:5a:a1:02:5a:ce:71:d3:ea:12:3f:53:cd: 14:b7:7f:58:3a:2b:0b:f8:64:dd:be:1a:95:32:76:ee:43:71: 41:ae:d6:16:dd:f5:ac:0e:d4:65:4d:5c:32:bd:d9:5f:87:e5: 86:df:37:2c:b7:7d:a6:29:39:cc:33:6b:8d:07:54:b7:45:ce: 76:1c:55:ec:8d:70:60:96:1a:b7:db:8d:72:04:62:d3:fa:f2: 7c:7a:56:5d:fa:20:f4:92:83:43:5f:c3:84:3e:1d:7f:94:ab: 5a:ab:92:8c:e2:d7:0b:11:25:23:d0:71:b8:bd:58:92:15:41: fc:4b:30:f8:7d:52:8c:17:83:54:98:f1:dc:c0:ce:b0:56:b3: cf:51:79:5c:8b:91:db:6e:8a:1d:e7:cc:1f:52:c6:25:8c:4e: d2:30:81:72:16:94:76:be:f4:7c:8f:cb:62:02:8e:5d:b4:ad: 19:c3:6b:7d:82:f7:31:e2:15:bf:2c:3a:4f:1b:76:b8:e3:6a: 60:b1:c7:3a:f3:12:d2:d4:de:63:1b:d8:b0:56:f8:f1:ad:77: e8:75:69:5e:b0:f4:1e:be:d9:48:5d:69:84:b8:7a:4e:dc:bd: b6:5a:7e:11:86:33:2a:76:ce:ca:07:31:70:73:b9:6a:2c:f8: d1:b1:9a:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wu+xPo640ZWMUYOzi9k0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDhlY2I5ZjM0YzFmYmMzZjM1ODk3MTBhYjNlMzQ5ZmM2 Mjk1Y2MwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjdlOWUwY2NiMmM1NTAzNWYxMjIwNjZhMzE2YWIzZjc5ZWI4ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gmBWrvnBJYltWS8GzG58oqp5Yxg ITb9Ehbferf5XNPSHz9n1t76BAc1Sod2KpJL70V50iB55MlwXyLltI53v3w1knjy Tgu4RoI9dov1OuMENyL3Gg+pbpEymrq/GlJH5piGRgULTb5JuwfrfDg48ER4g+pl F/v+GiSilMlkHy9U8th7oVMrQBy5WTArHGHKkTZlSCLIGDb9NEeBiSnPjFOarhQ4 5spYpMhrZd27Zook2e5Nzed5WoqRkSnmNYX83pLlyd+LyoyBIbcvSWT/cpg1S++h TR4vVkJsfu/BmxKXUhLQI2JzKkt5r5fX7oi9RoBsS+UxELQ2mCtuwBTYdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN9+ngzLLFUDXxIgZqMWqz95647ZMB8GA1UdIwQY MBaAFOII7LnzTB+8PzWJcQqz40n8YpXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTIt MWNhNzM5YmIwMGNjLzEvMzM2ZURNc3NWUU5mRWlCbW94YXJQM25yanRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTItMWNhNzM5YmIwMGNj LzEvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1p9AwQA W1p/MA0GCSqGSIb3DQEBCwUAA4IBAQBVR3bJHS5aoQJaznHT6hI/U80Ut39YOisL +GTdvhqVMnbuQ3FBrtYW3fWsDtRlTVwyvdlfh+WG3zcst32mKTnMM2uNB1S3Rc52 HFXsjXBglhq3241yBGLT+vJ8elZd+iD0koNDX8OEPh1/lKtaq5KM4tcLESUj0HG4 vViSFUH8SzD4fVKMF4NUmPHcwM6wVrPPUXlci5Hbbood58wfUsYljE7SMIFyFpR2 vvR8j8tiAo5dtK0Zw2t9gvcx4hW/LDpPG3a442pgscc68xLS1N5jG9iwVvjxrXfo dWlesPQevtlIXWmEuHpO3L22Wn4RhjMqds7KBzFwc7lqLPjRsZoj -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:23 2026 by rpki-client