This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/0k0SMXdBc9F-S0u5frPj7VZDATI.roa File: 0k0SMXdBc9F-S0u5frPj7VZDATI.roa (raw, json) Hash identifier: fH1r/M4QH7i4V9CfzqHbwrIzNmtm+Dkd+L50E5BaVjo= Subject key identifier: D2:4D:12:31:77:41:73:D1:7E:4B:4B:B9:7E:B3:E3:ED:56:43:01:32 Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e Certificate serial: 019B76EAE24E63B6A2A01CDD120BDBB238D1 Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/0k0SMXdBc9F-S0u5frPj7VZDATI.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47505 IP address blocks: 91.206.78.0/23 maxlen: 23 193.142.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e2:4e:63:b6:a2:a0:1c:dd:12:0b:db:b2:38:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d24d1231774173d17e4b4bb97eb3e3ed56430132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:27:8f:3a:3e:28:f5:eb:cc:eb:31:63:74: eb:2a:2f:4a:89:6a:4c:93:b0:f8:4b:ef:7a:72:6a: 2f:62:dc:42:4a:bd:4c:dc:e0:8c:b5:d0:d7:94:03: 80:9c:9d:78:ee:e0:49:6e:84:c1:7c:88:f7:78:c0: 54:4f:58:89:8f:91:8a:54:0f:f3:c9:d1:56:3a:9b: e9:81:50:2e:b6:1a:77:a2:61:7b:15:64:00:9c:b4: a1:43:3f:1c:17:22:0b:88:b7:56:45:8e:38:3d:5a: f6:12:7e:8a:d1:51:fc:b3:9f:f7:d6:5e:d1:1c:3a: 2a:04:f3:26:3f:d5:07:ab:ae:8c:41:9c:a1:84:2e: fe:11:72:7f:d8:4e:c9:5a:0b:d1:d3:52:33:8b:66: ca:bf:de:10:2c:34:76:05:f0:20:5f:13:b9:06:ee: ab:a9:d1:f3:bf:76:b3:08:a7:d8:fb:50:f3:db:07: 2e:46:8a:e0:3f:5b:4c:a5:b0:96:24:01:f9:b0:a5: 6d:a5:13:6b:10:59:d0:84:e5:b4:79:fc:1c:65:02: 4d:e5:42:83:0f:9a:a6:87:75:28:04:72:23:a4:3f: d6:0c:36:c6:b8:2a:1c:07:2e:45:73:fd:69:bd:83: f8:5a:6a:ba:e5:94:fc:01:97:4f:55:5d:ed:8e:62: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4D:12:31:77:41:73:D1:7E:4B:4B:B9:7E:B3:E3:ED:56:43:01:32 X509v3 Authority Key Identifier: keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/0k0SMXdBc9F-S0u5frPj7VZDATI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.78.0/23 193.142.208.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:56:8f:63:71:f7:c4:ad:08:83:9c:d0:b0:6d:06:9c:be:2b: 5f:79:ac:05:93:a5:2d:d7:87:44:1b:96:4c:5d:bb:a0:1a:e0: 32:6d:7d:14:61:da:21:3b:c8:fd:86:be:d2:be:4a:d0:1e:a7: 28:a1:56:cb:42:91:82:ab:82:91:72:26:1b:a1:e7:4c:97:21: 84:a1:a6:db:b8:1e:62:71:bf:59:27:e3:6b:b9:11:4f:85:5a: 6c:34:67:9d:b0:9a:bc:8c:03:0d:21:de:30:58:e5:63:86:ea: c3:93:47:9d:0a:94:1e:41:f6:b8:6d:77:94:ca:92:c7:ca:9e: 61:22:59:b3:54:6d:27:91:7d:3f:44:53:f3:77:7a:2f:13:23: 92:ce:5e:b4:4b:8f:d6:74:7e:0a:56:b2:8d:2e:ba:ef:5c:0b: 20:8b:b6:b5:c8:46:fa:60:99:87:77:3f:49:c2:0c:4f:b8:9d: f5:27:88:a1:f2:91:39:c4:a7:6b:af:f3:d6:a0:b3:67:0f:b2: 59:a1:a9:f0:18:ef:af:2e:85:ab:73:9f:fc:44:84:9c:7e:c9: 6e:96:6c:f4:b0:0f:f0:52:68:4e:c8:ae:6f:ec:dd:e4:61:d3: 6e:91:61:b7:2b:4f:d6:23:b7:c3:3d:d1:69:1d:dc:df:11:4f: c9:46:4e:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26uJOY7aioBzdEgvbsjjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNzE3ZjNhYjYzOTQ1YTFiZTczOWMyYjNhMjU4OWJlYTU1 ZGRiNmUwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjRkMTIzMTc3NDE3M2QxN2U0YjRiYjk3ZWIzZTNlZDU2NDMwMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijknjzo+KPXrzOsxY3TrKi9KiWpM k7D4S+96cmovYtxCSr1M3OCMtdDXlAOAnJ147uBJboTBfIj3eMBUT1iJj5GKVA/z ydFWOpvpgVAuthp3omF7FWQAnLShQz8cFyILiLdWRY44PVr2En6K0VH8s5/31l7R HDoqBPMmP9UHq66MQZyhhC7+EXJ/2E7JWgvR01Izi2bKv94QLDR2BfAgXxO5Bu6r qdHzv3azCKfY+1Dz2wcuRorgP1tMpbCWJAH5sKVtpRNrEFnQhOW0efwcZQJN5UKD D5qmh3UoBHIjpD/WDDbGuCocBy5Fc/1pvYP4Wmq65ZT8AZdPVV3tjmLcBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNJNEjF3QXPRfktLuX6z4+1WQwEyMB8GA1UdIwQY MBaAFP1xfzq2OUWhvnOcKzolib6lXdtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yZjBhNjYtMTYzNC00MGZiLTk5YjAt OTMxNTA1ZmY0MWM1LzEvMGswU01YZEJjOUYtUzB1NWZyUGo3VlpEQVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yZjBhNjYtMTYzNC00MGZiLTk5YjAtOTMxNTA1ZmY0MWM1 LzEvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW85OAwQA wY7QMA0GCSqGSIb3DQEBCwUAA4IBAQAfVo9jcffErQiDnNCwbQacvitfeawFk6Ut 14dEG5ZMXbugGuAybX0UYdohO8j9hr7SvkrQHqcooVbLQpGCq4KRciYboedMlyGE oabbuB5icb9ZJ+NruRFPhVpsNGedsJq8jAMNId4wWOVjhurDk0edCpQeQfa4bXeU ypLHyp5hIlmzVG0nkX0/RFPzd3ovEyOSzl60S4/WdH4KVrKNLrrvXAsgi7a1yEb6 YJmHdz9JwgxPuJ31J4ih8pE5xKdrr/PWoLNnD7JZoanwGO+vLoWrc5/8RIScfslu lmz0sA/wUmhOyK5v7N3kYdNukWG3K0/WI7fDPdFpHdzfEU/JRk43 -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:52 2026 by rpki-client