This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa File: lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa (raw, json) Hash identifier: WwqXm5S9kqC02dQFsZ5mFoZfT2ZEKlRHGYMQ2u0hdl8= Subject key identifier: 96:77:EB:84:74:74:8F:29:DF:47:6A:BB:4D:51:47:CB:F0:38:16:AA Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876 Certificate serial: 019B7C12634C2ABB5D69E6A2DFAE00F8EA7A Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa Signing time: Fri 02 Jan 2026 00:18:58 +0000 ROA not before: Fri 02 Jan 2026 00:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198245 IP address blocks: 91.232.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:63:4c:2a:bb:5d:69:e6:a2:df:ae:00:f8:ea:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9677eb8474748f29df476abb4d5147cbf03816aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:0b:14:b0:14:20:f6:45:1d:4b:4c:75:58: e9:4f:69:48:9a:1c:41:0e:b8:9f:42:eb:86:1b:01: fe:c5:b2:1d:4c:1a:4f:99:f7:de:03:b2:36:0e:21: 06:d9:e7:15:6b:54:62:a3:fc:a4:3f:3e:58:47:2f: a9:03:8f:ab:81:0a:d7:10:fa:54:01:22:8e:44:c7: c3:6a:e0:18:9a:68:d7:d9:60:c0:99:46:5d:09:b6: 01:53:6d:d2:08:9f:03:2d:5d:fc:2e:c2:1b:25:6a: 69:47:c6:57:87:72:c4:32:5b:5a:a6:fb:aa:a6:c7: 5e:da:c8:c2:6a:d7:11:05:9f:6f:ae:23:dd:f9:9f: 44:5c:6d:bd:aa:f7:39:f4:64:47:6a:ce:8d:8d:1e: df:d6:99:23:51:94:d0:60:45:67:b8:8c:5d:55:ff: 2e:b1:6b:24:22:c5:a3:cd:72:7e:6b:4d:e8:4e:f3: 39:57:01:48:9d:7f:ad:02:86:73:53:11:4e:3c:56: 27:93:91:8e:c5:b7:9f:1e:83:3c:72:9b:41:b9:09: 41:49:5f:51:e3:5b:f6:b4:f4:48:be:92:a4:39:84: 7e:ea:dd:eb:66:9f:78:21:95:c3:51:fb:40:4d:44: 46:ce:ae:8f:8a:47:d6:b9:be:67:8a:be:25:bf:33: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:77:EB:84:74:74:8F:29:DF:47:6A:BB:4D:51:47:CB:F0:38:16:AA X509v3 Authority Key Identifier: keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.234.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:cd:0c:f1:60:ea:4f:0b:f7:8b:d2:61:cc:f6:85:82:58:34: a6:e2:b7:5b:77:fd:ac:41:6d:44:14:96:e9:ec:ef:41:e3:04: 90:de:99:13:83:15:67:b9:b2:77:fc:2f:24:44:02:92:48:6f: 71:02:6b:cc:77:f2:a9:d1:36:d3:1c:98:08:03:73:d4:52:14: ee:fb:fe:86:49:17:95:f0:8c:a9:ed:2a:fe:d8:c4:63:a1:91: a8:d5:40:94:e7:32:48:1d:a0:8c:09:23:b7:a9:31:4e:92:1a: 05:36:9c:27:90:3d:8e:20:f1:d1:8c:f1:bd:ab:26:2b:e9:90: c2:33:07:fb:51:ee:39:3f:6f:e4:04:c4:2c:5e:a1:a0:84:3d: c4:c5:76:3e:90:37:e8:da:38:9f:92:7b:d4:6d:d1:37:16:b4: a4:a0:bf:f9:47:0d:46:c9:d2:c5:58:b4:53:66:65:38:c9:d7: fd:d7:cf:98:52:86:c5:f5:a9:44:4c:ac:6e:cd:7b:71:04:c0: b1:43:13:0c:0d:46:26:d8:c3:89:52:be:dd:ac:cb:ce:4d:66: 50:dd:2d:0e:6f:72:dc:cd:1e:ea:31:ea:26:e5:e7:0a:f7:d5: 52:20:53:04:a5:10:0f:26:8f:a9:af:9c:84:36:79:97:30:fd: 41:6a:6f:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmNMKrtdaeai364A+Op6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz N2Y4NzYwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Njc3ZWI4NDc0NzQ4ZjI5ZGY0NzZhYmI0ZDUxNDdjYmYwMzgxNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl4LFLAUIPZFHUtMdVjpT2lImhxB DrifQuuGGwH+xbIdTBpPmffeA7I2DiEG2ecVa1Rio/ykPz5YRy+pA4+rgQrXEPpU ASKORMfDauAYmmjX2WDAmUZdCbYBU23SCJ8DLV38LsIbJWppR8ZXh3LEMltapvuq psde2sjCatcRBZ9vriPd+Z9EXG29qvc59GRHas6NjR7f1pkjUZTQYEVnuIxdVf8u sWskIsWjzXJ+a03oTvM5VwFInX+tAoZzUxFOPFYnk5GOxbefHoM8cptBuQlBSV9R 41v2tPRIvpKkOYR+6t3rZp94IZXDUftATURGzq6PikfWub5nir4lvzMBgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJZ364R0dI8p30dqu01RR8vwOBaqMB8GA1UdIwQY MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt OGY3NmJmNzZjZjQ2LzEvbG5mcmhIUjBqeW5mUjJxN1RWRkh5X0E0RnFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjItOGY3NmJmNzZjZjQ2 LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+jqMA0G CSqGSIb3DQEBCwUAA4IBAQANzQzxYOpPC/eL0mHM9oWCWDSm4rdbd/2sQW1EFJbp 7O9B4wSQ3pkTgxVnubJ3/C8kRAKSSG9xAmvMd/Kp0TbTHJgIA3PUUhTu+/6GSReV 8Iyp7Sr+2MRjoZGo1UCU5zJIHaCMCSO3qTFOkhoFNpwnkD2OIPHRjPG9qyYr6ZDC Mwf7Ue45P2/kBMQsXqGghD3ExXY+kDfo2jifknvUbdE3FrSkoL/5Rw1GydLFWLRT ZmU4ydf918+YUobF9alETKxuzXtxBMCxQxMMDUYm2MOJUr7drMvOTWZQ3S0Ob3Lc zR7qMeom5ecK99VSIFMEpRAPJo+pr5yENnmXMP1Bam8O -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:10 2026 by rpki-client