This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/n38Xqr0qqFJ7oGfHYhb-VaYtVsU.roa File: n38Xqr0qqFJ7oGfHYhb-VaYtVsU.roa (raw, json) Hash identifier: +D4AMbYExvYotaGN2taivxR0S26uQ3AxgVQRHrzxbnw= Subject key identifier: 9F:7F:17:AA:BD:2A:A8:52:7B:A0:67:C7:62:16:FE:55:A6:2D:56:C5 Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be Certificate serial: 019B77C6DCC0E7BB6D08E02920597675B679 Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/n38Xqr0qqFJ7oGfHYhb-VaYtVsU.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43566 IP address blocks: 91.199.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:c0:e7:bb:6d:08:e0:29:20:59:76:75:b6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f7f17aabd2aa8527ba067c76216fe55a62d56c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:b5:f0:3c:36:73:9a:5c:b7:33:b9:1e:7b: ee:37:45:c4:bb:ba:c4:ec:d6:b0:58:57:e6:7f:d4: 4b:5c:f6:15:de:29:12:65:02:f9:3d:f5:a1:69:54: 6d:5a:7c:dd:47:c7:5c:79:67:cd:2a:bb:e0:d2:21: 8e:f0:55:99:2e:bd:11:8e:1d:ee:20:0e:5a:c0:f7: 7b:4d:ae:91:63:09:de:0b:e1:18:fd:32:5f:20:ef: da:e2:c4:ad:45:e7:c9:f9:eb:72:7e:56:00:5d:cd: 24:2f:a2:65:ad:a8:20:ce:e9:49:63:9b:ea:b7:c7: 52:de:e9:a5:a7:fb:6c:0b:a9:1e:b4:ef:7d:fe:06: 45:4c:9b:cd:57:b2:fd:fa:0f:72:c2:61:e1:77:90: c0:66:c5:10:4b:80:0e:f8:ff:cf:62:5f:82:61:a0: 28:e3:96:f6:f5:82:b7:7e:ae:e0:14:7a:a8:70:a7: b0:f9:7b:16:34:e5:a9:c5:3a:e3:22:82:3d:d0:2a: a2:ef:cc:6f:0d:d0:7e:62:1b:f2:30:62:d6:fa:29: b5:d9:04:d8:4f:73:71:c4:08:25:3e:38:a5:6c:cd: d4:8b:36:3a:fd:bb:49:c1:3e:42:02:3f:a0:2e:5e: 1d:c0:a4:77:35:e7:fe:14:66:e7:81:9f:98:1e:b3: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7F:17:AA:BD:2A:A8:52:7B:A0:67:C7:62:16:FE:55:A6:2D:56:C5 X509v3 Authority Key Identifier: keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/n38Xqr0qqFJ7oGfHYhb-VaYtVsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.83.0/24 Signature Algorithm: sha256WithRSAEncryption cb:89:3c:5f:6c:87:81:d2:f2:92:e6:d5:b2:e0:0d:aa:58:3d: a9:22:57:d5:4d:fb:cb:71:ba:9e:2b:43:25:31:91:1b:1c:a0: b4:5e:df:bf:69:46:4d:7c:99:38:4a:ed:2d:fe:2c:a8:b5:8e: 6b:44:cb:00:51:34:c8:29:c9:77:fe:c7:30:5a:fe:85:ca:0f: 0b:fc:28:a5:af:71:56:aa:3c:66:df:c1:17:ef:69:d0:2e:07: ed:69:45:e1:c7:4f:a9:99:3b:33:43:81:17:8d:06:6b:53:19: 3a:98:70:2f:4f:ee:ca:63:75:43:79:1b:72:ac:3b:92:69:c1: 5c:20:3a:ea:3d:65:3e:46:1a:b2:ff:c8:4d:1b:73:69:63:13: b4:b8:65:50:9d:a0:ea:f3:f4:f3:d3:cf:67:5a:4d:87:7a:23: d9:d1:97:33:74:8d:00:13:3b:c7:77:18:6a:a9:d1:07:64:90: 0b:03:21:48:2d:ac:72:4e:f9:89:2c:ae:2b:02:7b:9c:cc:2b: e5:e3:d1:72:b4:5e:94:b1:67:d7:a7:dd:e6:73:2b:24:32:94: 74:ff:14:f5:da:20:24:62:99:0c:4c:f0:2f:5d:07:35:b5:55: a0:f4:12:2d:94:10:fc:1b:14:3a:be:e5:5a:ec:a4:c4:0c:e3: 5b:17:6f:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtzA57ttCOApIFl2dbZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMDIwNzcyZjYyOGI4ZmI1MWYzNDc1MTM2Yjc3ZmViNGIy Njk4YmUwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjdmMTdhYWJkMmFhODUyN2JhMDY3Yzc2MjE2ZmU1NWE2MmQ1NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrO18Dw2c5pctzO5HnvuN0XEu7rE 7NawWFfmf9RLXPYV3ikSZQL5PfWhaVRtWnzdR8dceWfNKrvg0iGO8FWZLr0Rjh3u IA5awPd7Ta6RYwneC+EY/TJfIO/a4sStRefJ+etyflYAXc0kL6JlraggzulJY5vq t8dS3umlp/tsC6ketO99/gZFTJvNV7L9+g9ywmHhd5DAZsUQS4AO+P/PYl+CYaAo 45b29YK3fq7gFHqocKew+XsWNOWpxTrjIoI90Cqi78xvDdB+YhvyMGLW+im12QTY T3NxxAglPjilbM3UizY6/btJwT5CAj+gLl4dwKR3Nef+FGbngZ+YHrPOcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9/F6q9KqhSe6Bnx2IW/lWmLVbFMB8GA1UdIwQY MBaAFKECB3L2KLj7UfNHUTa3f+tLJpi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1FJSGN2WW91UHRSODBkUk5yZF82MHNtbUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NTA0MzEtNjE3NC00N2QyLThiYWIt NTFhZjgyOTY1ZTMzLzEvbjM4WHFyMHFxRko3b0dmSFloYi1WYVl0VnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81NTA0MzEtNjE3NC00N2QyLThiYWItNTFhZjgyOTY1ZTMz LzEvb1FJSGN2WW91UHRSODBkUk5yZF82MHNtbUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dTMA0G CSqGSIb3DQEBCwUAA4IBAQDLiTxfbIeB0vKS5tWy4A2qWD2pIlfVTfvLcbqeK0Ml MZEbHKC0Xt+/aUZNfJk4Su0t/iyotY5rRMsAUTTIKcl3/scwWv6Fyg8L/Cilr3FW qjxm38EX72nQLgftaUXhx0+pmTszQ4EXjQZrUxk6mHAvT+7KY3VDeRtyrDuSacFc IDrqPWU+Rhqy/8hNG3NpYxO0uGVQnaDq8/Tz089nWk2HeiPZ0ZczdI0AEzvHdxhq qdEHZJALAyFILaxyTvmJLK4rAnuczCvl49FytF6UsWfXp93mcyskMpR0/xT12iAk YpkMTPAvXQc1tVWg9BItlBD8GxQ6vuVa7KTEDONbF28B -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:47 2026 by rpki-client