This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/sAjWputXETwsd0f5bPK9WwQfnp4.roa File: sAjWputXETwsd0f5bPK9WwQfnp4.roa (raw, json) Hash identifier: VHGAcT48PcqLVh4j4mpXHm+yifOjbnBfzwoffj3XsoQ= Subject key identifier: B0:08:D6:A6:EB:57:11:3C:2C:77:47:F9:6C:F2:BD:5B:04:1F:9E:9E Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Certificate serial: 019B783534F390ED41119ABCE3ED761A0249 Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/sAjWputXETwsd0f5bPK9WwQfnp4.roa Signing time: Thu 01 Jan 2026 06:18:31 +0000 ROA not before: Thu 01 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56624 IP address blocks: 91.237.236.0/22 maxlen: 22 2001:67c:2b7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:34:f3:90:ed:41:11:9a:bc:e3:ed:76:1a:02:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b008d6a6eb57113c2c7747f96cf2bd5b041f9e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:73:8b:7e:d0:46:55:92:20:d0:93:59:3c: c6:7e:66:2c:4c:10:29:cd:d0:62:0d:06:1b:ac:5c: c9:12:98:e2:27:1b:57:c2:ac:d3:e2:fa:b3:71:3c: 0b:80:10:3d:0e:0f:e3:cf:55:73:6c:72:6d:cb:cc: 4d:a1:af:72:d8:ef:d4:cf:0c:3c:36:cc:82:6a:59: f8:cd:cd:f7:a8:a6:a1:89:0b:ec:d1:19:ce:19:2f: e7:b7:93:bb:07:4a:a3:3b:02:ac:02:d8:b1:4a:05: a0:43:c4:b3:1a:3f:c9:78:9d:fa:e8:60:e1:cf:41: 17:ea:87:1f:c5:6f:fa:d1:64:90:66:f9:e8:60:4e: 49:9d:36:34:1f:44:5a:87:a3:ba:a3:af:81:1c:6f: 39:1f:d1:0b:fd:59:c7:9c:a2:7a:ed:af:32:da:57: d1:be:83:09:40:e0:59:96:9f:6d:16:be:84:fe:45: ab:7b:a8:e9:44:76:74:01:50:92:54:46:7a:ae:a1: 24:11:02:46:ab:ff:eb:b9:eb:c2:2b:fc:82:03:95: cd:39:f1:fa:52:59:63:49:f2:f9:87:5b:8d:a4:30: 97:94:94:64:17:6e:82:ca:ad:aa:0e:27:35:60:d3: 72:04:da:49:26:96:92:c8:ae:89:91:10:b2:f3:45: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:08:D6:A6:EB:57:11:3C:2C:77:47:F9:6C:F2:BD:5B:04:1F:9E:9E X509v3 Authority Key Identifier: keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/sAjWputXETwsd0f5bPK9WwQfnp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.236.0/22 IPv6: 2001:67c:2b7c::/48 Signature Algorithm: sha256WithRSAEncryption 88:2c:5e:a9:7a:f4:92:46:61:83:14:31:6b:6f:b4:d6:84:7a: 2b:44:ad:cb:92:c5:04:44:87:fb:08:62:28:72:8f:6d:fd:84: 7b:a2:5f:3d:09:79:c3:f2:28:67:1b:b0:c0:af:d0:38:c2:f4: 01:b1:f2:fd:80:52:2e:59:09:d0:5d:4e:52:c7:8b:13:fd:60: 62:32:e4:2a:52:a6:12:41:b9:cc:2e:35:07:42:aa:f7:5d:90: 5e:53:06:a7:d2:8a:7d:5d:50:bd:a6:64:ca:89:c4:28:d0:11: 48:f7:2f:99:cf:3c:ff:ed:b2:7c:9b:19:d1:2f:50:a6:55:76: ed:71:0c:87:66:84:41:36:c6:01:c4:f7:d5:72:81:06:9f:a9: 10:7a:54:8e:58:cd:41:d3:d8:aa:00:4f:3b:0d:59:4e:09:11: aa:16:c6:f8:79:2f:1a:6a:43:7a:8c:33:5a:c5:97:f6:82:e6: bf:7f:d7:ab:27:02:8e:fe:23:f7:d8:db:9c:ba:81:65:9a:cf: 99:26:c6:8c:98:96:55:2c:91:cd:30:71:47:60:e9:7f:e0:ad: f5:01:2a:16:d9:2d:ff:48:bc:33:e4:fa:7b:dd:ab:a8:e1:52: 9e:7e:42:f0:aa:56:3e:2c:fd:2c:c8:7f:92:aa:b5:74:f9:f7: 57:38:7b:3b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NTTzkO1BEZq84+12GgJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi OTZkZDYwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDA4ZDZhNmViNTcxMTNjMmM3NzQ3Zjk2Y2YyYmQ1YjA0MWY5ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApodzi37QRlWSINCTWTzGfmYsTBAp zdBiDQYbrFzJEpjiJxtXwqzT4vqzcTwLgBA9Dg/jz1VzbHJty8xNoa9y2O/Uzww8 NsyCaln4zc33qKahiQvs0RnOGS/nt5O7B0qjOwKsAtixSgWgQ8SzGj/JeJ366GDh z0EX6ocfxW/60WSQZvnoYE5JnTY0H0Rah6O6o6+BHG85H9EL/VnHnKJ67a8y2lfR voMJQOBZlp9tFr6E/kWre6jpRHZ0AVCSVEZ6rqEkEQJGq//ruevCK/yCA5XNOfH6 UlljSfL5h1uNpDCXlJRkF26Cyq2qDic1YNNyBNpJJpaSyK6JkRCy80UfZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLAI1qbrVxE8LHdH+WzyvVsEH56eMB8GA1UdIwQY MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt MjAxNjdjZDQyYjgyLzEvc0FqV3B1dFhFVHdzZDBmNWJQSzlXd1FmbnA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+3sMA8E AgACMAkDBwAgAQZ8K3wwDQYJKoZIhvcNAQELBQADggEBAIgsXql69JJGYYMUMWtv tNaEeitErcuSxQREh/sIYihyj239hHuiXz0JecPyKGcbsMCv0DjC9AGx8v2AUi5Z CdBdTlLHixP9YGIy5CpSphJBucwuNQdCqvddkF5TBqfSin1dUL2mZMqJxCjQEUj3 L5nPPP/tsnybGdEvUKZVdu1xDIdmhEE2xgHE99VygQafqRB6VI5YzUHT2KoATzsN WU4JEaoWxvh5LxpqQ3qMM1rFl/aC5r9/16snAo7+I/fY25y6gWWaz5kmxoyYllUs kc0wcUdg6X/grfUBKhbZLf9IvDPk+nvdq6jhUp5+QvCqVj4s/SzIf5KqtXT591c4 ezs= -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:47 2026 by rpki-client