This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/bk3MpB9dFYsKx-vk9Fu2s4AOobg.roa File: bk3MpB9dFYsKx-vk9Fu2s4AOobg.roa (raw, json) Hash identifier: VhKUc5HBMkEPpFpw6zVe4nOAoJ2kIgyeitJGidAI9eo= Subject key identifier: 6E:4D:CC:A4:1F:5D:15:8B:0A:C7:EB:E4:F4:5B:B6:B3:80:0E:A1:B8 Certificate issuer: /CN=10b43613535ffaa73d9acc503c71a28fa17b3839 Certificate serial: 019B7F1581663DB8C4BF8746784AA2058AA3 Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/bk3MpB9dFYsKx-vk9Fu2s4AOobg.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49772 IP address blocks: 91.213.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:81:66:3d:b8:c4:bf:87:46:78:4a:a2:05:8a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e4dcca41f5d158b0ac7ebe4f45bb6b3800ea1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:1f:c9:a7:5f:7b:f5:a5:61:d8:7c:8a:ff: bf:5c:fc:92:39:e8:23:27:f8:56:bc:ff:a3:c9:f5: 31:1d:b5:31:bc:30:28:e9:09:32:31:89:69:86:5b: e0:01:43:60:d6:12:2d:53:21:06:81:b1:3d:be:43: d0:d4:96:a9:ce:05:f2:64:20:52:73:5e:7f:fb:f7: ec:51:6c:47:78:f8:8a:a6:f0:f8:04:73:42:71:59: 3c:dc:89:5d:54:6b:00:bf:82:a9:59:fb:dc:83:15: a6:27:ef:8f:b6:38:79:f6:6b:e3:b8:06:81:d7:cc: 8a:9a:49:bd:1a:63:55:63:c3:73:ca:c4:1a:f2:23: 84:be:4d:31:c5:53:e3:d3:6f:56:26:ab:6d:be:86: 31:bc:cf:f9:79:df:6d:27:51:06:df:cc:d4:77:e5: 17:fe:c8:9b:29:a8:ef:26:4c:d1:57:47:18:8a:73: 00:e6:c6:87:b3:fd:24:e9:4a:6d:e8:c1:8f:4a:83: d1:17:b4:7a:eb:99:4a:ae:32:06:a4:e0:11:20:fb: 1f:8c:16:1b:05:32:48:b4:90:e3:85:ec:b4:dd:6e: d7:1d:19:18:93:71:23:51:b9:2c:26:bf:42:65:50: 4c:06:8c:26:f9:2c:46:09:07:8a:71:de:82:c1:43: ec:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:CC:A4:1F:5D:15:8B:0A:C7:EB:E4:F4:5B:B6:B3:80:0E:A1:B8 X509v3 Authority Key Identifier: keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/bk3MpB9dFYsKx-vk9Fu2s4AOobg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.210.0/24 Signature Algorithm: sha256WithRSAEncryption 75:19:f8:64:3e:9f:fa:1d:1c:cd:49:06:65:90:72:e4:8f:1e: c3:39:b8:54:21:32:25:c1:a8:6e:58:ae:2f:07:9e:e6:57:92: 69:d5:5c:61:d4:3b:10:52:ab:b8:30:c8:6f:b9:cf:0f:03:47: 6e:a8:66:36:88:13:48:eb:85:37:ef:d5:68:bd:e1:fe:83:e3: 95:7a:d0:b8:2b:ab:2a:1f:94:34:73:4b:01:f1:85:f4:6e:36: 86:86:a1:d6:2f:ca:0f:d0:0a:52:9b:72:24:20:ec:ad:1f:23: 14:08:d3:b3:9f:f0:34:cd:15:67:67:c3:df:9e:c3:f9:70:51: 8e:20:d6:0e:1f:8d:62:1d:42:91:d7:20:1e:6a:a4:49:18:f3: 21:fd:bc:8b:da:0d:87:7a:80:0f:e1:96:22:0a:39:7b:8e:b5: dd:7c:a8:ca:94:54:16:a9:3a:47:ef:b2:fe:8d:2c:fc:c6:56: 61:e4:5e:6e:eb:fa:5d:2f:cd:46:4d:2d:8a:7a:58:4b:9a:bf: ab:9a:7f:57:52:e9:58:6b:1e:48:d8:65:d2:80:b4:71:e7:ed: f6:f8:54:40:11:b2:1c:5f:25:9f:19:8e:95:9b:62:91:4e:c3: a4:ab:e8:c8:f0:a8:a4:9f:47:33:65:a5:81:bb:f3:30:8f:26: 27:b4:b2:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYFmPbjEv4dGeEqiBYqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYjQzNjEzNTM1ZmZhYTczZDlhY2M1MDNjNzFhMjhmYTE3 YjM4MzkwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTRkY2NhNDFmNWQxNThiMGFjN2ViZTRmNDViYjZiMzgwMGVhMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pkfyadfe/WlYdh8iv+/XPySOegj J/hWvP+jyfUxHbUxvDAo6QkyMYlphlvgAUNg1hItUyEGgbE9vkPQ1JapzgXyZCBS c15/+/fsUWxHePiKpvD4BHNCcVk83IldVGsAv4KpWfvcgxWmJ++Ptjh59mvjuAaB 18yKmkm9GmNVY8NzysQa8iOEvk0xxVPj029WJqttvoYxvM/5ed9tJ1EG38zUd+UX /sibKajvJkzRV0cYinMA5saHs/0k6Upt6MGPSoPRF7R665lKrjIGpOARIPsfjBYb BTJItJDjhey03W7XHRkYk3EjUbksJr9CZVBMBowm+SxGCQeKcd6CwUPsoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5NzKQfXRWLCsfr5PRbtrOADqG4MB8GA1UdIwQY MBaAFBC0NhNTX/qnPZrMUDxxoo+hezg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQt Y2YzYzFhNzllNjM0LzEvYmszTXBCOWRGWXNLeC12azlGdTJzNEFPb2JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQtY2YzYzFhNzllNjM0 LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9XSMA0G CSqGSIb3DQEBCwUAA4IBAQB1GfhkPp/6HRzNSQZlkHLkjx7DObhUITIlwahuWK4v B57mV5Jp1Vxh1DsQUqu4MMhvuc8PA0duqGY2iBNI64U379VoveH+g+OVetC4K6sq H5Q0c0sB8YX0bjaGhqHWL8oP0ApSm3IkIOytHyMUCNOzn/A0zRVnZ8PfnsP5cFGO INYOH41iHUKR1yAeaqRJGPMh/byL2g2HeoAP4ZYiCjl7jrXdfKjKlFQWqTpH77L+ jSz8xlZh5F5u6/pdL81GTS2KelhLmr+rmn9XUulYax5I2GXSgLRx5+32+FRAEbIc XyWfGY6Vm2KRTsOkq+jI8Kikn0czZaWBu/MwjyYntLIc -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:20 2026 by rpki-client