This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/K3S0XoV9uTdcPwSeYNQbNAsf14Y.roa File: K3S0XoV9uTdcPwSeYNQbNAsf14Y.roa (raw, json) Hash identifier: loHuoVuquEI4tAT3rW7VS3mainPoNo4WAoOqCbKbYJk= Subject key identifier: 2B:74:B4:5E:85:7D:B9:37:5C:3F:04:9E:60:D4:1B:34:0B:1F:D7:86 Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717 Certificate serial: 019B797DF3DEDCD8865930D77F71EF81AE35 Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/K3S0XoV9uTdcPwSeYNQbNAsf14Y.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49551 IP address blocks: 91.214.220.0/22 maxlen: 22 91.214.220.0/23 maxlen: 23 91.214.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f3:de:dc:d8:86:59:30:d7:7f:71:ef:81:ae:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b74b45e857db9375c3f049e60d41b340b1fd786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:09:48:02:03:d8:f1:51:f0:39:ac:ca:2f: 4d:74:f2:ed:fc:26:3c:43:36:06:bd:20:2b:99:59: b1:dc:70:d6:18:8e:67:e2:70:0b:2f:ac:c5:9e:c6: 28:dc:95:e4:f5:85:64:83:68:54:1f:f9:c4:4a:76: d9:97:02:77:7a:63:05:f8:bc:bb:25:dd:42:1a:e4: e6:e2:7c:4d:92:22:55:0d:81:b1:6b:cd:69:1e:2f: e0:8f:29:ab:ad:fa:98:44:61:16:17:35:10:ff:19: 3b:3b:15:b4:96:3d:60:d0:15:2f:4d:d3:f5:8e:2a: dc:25:12:f0:c6:b1:c9:98:42:55:32:0d:78:79:03: 61:d3:78:61:2e:20:22:a5:47:fd:79:cd:96:ea:27: 0d:f3:36:65:e3:23:a7:cc:56:58:02:bc:5c:ae:a1: eb:72:7e:08:e5:06:cd:48:b3:70:f9:de:f5:f5:8d: 1f:17:54:f1:5a:07:b7:61:e7:2a:68:c1:ac:c9:2c: e8:ba:90:9e:23:e7:0c:39:c5:c4:40:c9:c9:5d:8f: 80:e2:80:de:5d:a0:b8:4a:dc:a2:ab:48:1f:4b:57: fe:93:77:85:b2:cb:4a:50:76:c0:12:2f:d7:86:57: 9d:a6:6f:5d:fc:02:9b:e9:01:54:9f:79:8f:f5:c8: 0d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:74:B4:5E:85:7D:B9:37:5C:3F:04:9E:60:D4:1B:34:0B:1F:D7:86 X509v3 Authority Key Identifier: keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/K3S0XoV9uTdcPwSeYNQbNAsf14Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.220.0/22 Signature Algorithm: sha256WithRSAEncryption 57:e6:19:2d:67:b5:32:6d:d7:4c:cc:56:e9:4f:80:4a:39:36: 89:43:d0:2e:97:e2:84:14:4f:59:d5:e9:5b:89:ec:d9:72:58: 0e:a7:99:e2:d3:74:4c:e3:cc:44:1a:67:5b:08:01:e6:06:48: c6:38:e5:c4:2d:d6:ef:d0:99:0a:f0:51:ab:d1:cf:66:86:e5: 29:6b:dc:3d:cc:44:e2:50:da:17:16:a7:65:f6:b0:63:9f:1a: b7:39:71:ea:e5:f2:24:2f:08:0b:21:6e:bc:af:14:2e:52:d0: a3:38:a2:db:24:e8:2f:89:3f:d9:e1:8e:74:22:91:d4:bd:57: af:c1:8e:a2:b8:a8:df:66:c3:02:07:68:39:25:16:b3:a5:94: 03:b2:bd:25:61:fa:03:5d:85:65:44:07:73:5c:86:4b:34:0d: 86:9a:dd:3e:7e:ea:84:d4:69:47:00:11:b1:3b:3c:4a:87:23: cd:a6:3d:7b:a0:01:81:0d:cf:7f:b0:ad:80:f6:58:90:a3:52: 3e:dd:ba:39:8f:93:04:6b:d7:be:e0:26:ac:b1:68:b4:2e:23: 99:4a:44:e2:a8:99:6a:33:81:12:54:5c:bb:f7:67:6d:57:0c: 13:14:fb:78:6e:e8:ce:31:48:24:d6:63:f7:d3:af:09:00:58: 64:64:0d:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffPe3NiGWTDXf3Hvga41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh NjE3MTcwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjc0YjQ1ZTg1N2RiOTM3NWMzZjA0OWU2MGQ0MWIzNDBiMWZkNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MsJSAID2PFR8Dmsyi9NdPLt/CY8 QzYGvSArmVmx3HDWGI5n4nALL6zFnsYo3JXk9YVkg2hUH/nESnbZlwJ3emMF+Ly7 Jd1CGuTm4nxNkiJVDYGxa81pHi/gjymrrfqYRGEWFzUQ/xk7OxW0lj1g0BUvTdP1 jircJRLwxrHJmEJVMg14eQNh03hhLiAipUf9ec2W6icN8zZl4yOnzFZYArxcrqHr cn4I5QbNSLNw+d719Y0fF1TxWge3YecqaMGsySzoupCeI+cMOcXEQMnJXY+A4oDe XaC4Styiq0gfS1f+k3eFsstKUHbAEi/Xhledpm9d/AKb6QFUn3mP9cgNJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCt0tF6Ffbk3XD8EnmDUGzQLH9eGMB8GA1UdIwQY MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt N2FlOTNmZDJhZDA0LzEvSzNTMFhvVjl1VGRjUHdTZVlOUWJOQXNmMTRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0 LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9bcMA0G CSqGSIb3DQEBCwUAA4IBAQBX5hktZ7UybddMzFbpT4BKOTaJQ9Aul+KEFE9Z1elb iezZclgOp5ni03RM48xEGmdbCAHmBkjGOOXELdbv0JkK8FGr0c9mhuUpa9w9zETi UNoXFqdl9rBjnxq3OXHq5fIkLwgLIW68rxQuUtCjOKLbJOgviT/Z4Y50IpHUvVev wY6iuKjfZsMCB2g5JRazpZQDsr0lYfoDXYVlRAdzXIZLNA2Gmt0+fuqE1GlHABGx OzxKhyPNpj17oAGBDc9/sK2A9liQo1I+3bo5j5MEa9e+4CassWi0LiOZSkTiqJlq M4ESVFy792dtVwwTFPt4bujOMUgk1mP3068JAFhkZA3X -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:18 2026 by rpki-client