This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/JyitJqFf_sQZcIwoUYj4wcE-Kng.roa File: JyitJqFf_sQZcIwoUYj4wcE-Kng.roa (raw, json) Hash identifier: yAWpwzimbdFio0eZOpdLMpc2d2s+H4IuE70MmKFwzP0= Subject key identifier: 27:28:AD:26:A1:5F:FE:C4:19:70:8C:28:51:88:F8:C1:C1:3E:2A:78 Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358 Certificate serial: 019B7C80B6E0C5D339818D1AF04A60B218AF Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/JyitJqFf_sQZcIwoUYj4wcE-Kng.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42934 IP address blocks: 91.209.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b6:e0:c5:d3:39:81:8d:1a:f0:4a:60:b2:18:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2728ad26a15ffec419708c285188f8c1c13e2a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:7f:f6:81:e0:5c:84:5b:eb:54:3e:3a:07: c2:b3:9c:87:cc:0f:69:49:52:ca:5e:d8:9e:01:83: f2:c2:fe:ad:73:6b:35:5d:b6:2f:f4:c6:56:83:f0: f6:03:06:8c:75:3b:5e:68:70:09:79:7c:32:e5:4e: 9f:90:f9:94:69:57:c2:65:9b:bf:a5:c2:e0:44:f1: 5f:36:1b:93:61:9a:f1:d7:65:6b:7d:1b:cb:08:18: 5d:22:af:65:f2:67:16:d2:fc:b6:aa:88:76:41:24: 43:a2:82:0d:63:df:0c:1f:6e:f7:a2:c9:0e:41:de: 63:f0:43:d1:6f:8d:cd:74:ef:08:b8:35:dc:6f:5e: c4:05:ac:0f:be:a4:ee:d2:29:c7:e2:31:6b:19:dc: 1a:ee:2e:5a:b5:f8:95:29:76:b8:ae:4a:85:a3:7d: 37:7a:6b:57:18:0e:b5:f2:a1:20:40:d8:f0:48:37: 8e:bc:ca:44:85:51:6d:58:15:62:a3:66:0b:e7:44: bb:29:3a:5b:42:f7:f0:15:dc:fb:18:62:ad:93:de: 94:ff:76:9f:15:62:f7:dd:eb:5c:b6:d6:1c:49:2b: 84:3c:43:1a:43:1b:c2:70:3a:15:eb:6e:cf:92:81: e5:cb:a1:2c:96:73:5f:51:a7:d5:5a:b2:d0:21:64: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:28:AD:26:A1:5F:FE:C4:19:70:8C:28:51:88:F8:C1:C1:3E:2A:78 X509v3 Authority Key Identifier: keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/JyitJqFf_sQZcIwoUYj4wcE-Kng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:99:4a:eb:c4:b0:61:db:f8:c8:4c:47:1c:0f:bb:6f:68:78: f1:ba:90:f4:26:2a:ac:a0:12:1e:23:ae:d7:4b:98:6d:9a:ee: 0b:26:b5:47:c1:e1:91:5b:ca:8f:93:6e:1e:8d:53:8d:49:a9: ea:93:72:b1:56:98:df:f8:01:20:cb:e2:91:84:0f:48:7b:e4: 8d:0e:90:2f:d1:b8:a6:b2:3d:f9:ef:7a:b2:52:45:88:7c:2f: bc:5e:6a:7a:31:aa:6b:8c:db:f9:3b:9c:0e:05:33:e1:03:3e: b4:19:94:67:f4:3f:6b:49:0e:75:7b:92:8b:59:98:17:76:75: 40:ec:c7:0a:77:d8:18:52:5a:aa:86:b1:c2:92:33:a0:a8:60: 5b:38:ca:48:b5:b6:59:e9:c9:e1:64:62:40:2e:e5:97:62:1c: d5:54:57:67:77:57:58:d2:37:6a:04:c3:9e:1d:58:9d:83:04: 40:e3:46:26:95:c5:cd:48:ec:1b:60:b8:ca:e1:31:02:67:ee: a1:31:eb:ae:21:74:bc:af:6b:05:dc:4a:a8:a5:e2:84:c5:05: ae:2c:e3:42:71:34:da:39:36:c7:b7:3e:2e:04:ae:68:a3:b2: ab:0f:15:20:86:3c:a5:29:7b:6b:0c:a3:42:3d:d4:c2:49:07: d4:ee:58:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLbgxdM5gY0a8EpgshivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MjZkMzA5ZDBkYjAyZGYxZDdlMDRiYmIzOTMxM2JkMWRm MTMzNTgwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzI4YWQyNmExNWZmZWM0MTk3MDhjMjg1MTg4ZjhjMWMxM2UyYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryN/9oHgXIRb61Q+OgfCs5yHzA9p SVLKXtieAYPywv6tc2s1XbYv9MZWg/D2AwaMdTteaHAJeXwy5U6fkPmUaVfCZZu/ pcLgRPFfNhuTYZrx12VrfRvLCBhdIq9l8mcW0vy2qoh2QSRDooINY98MH273oskO Qd5j8EPRb43NdO8IuDXcb17EBawPvqTu0inH4jFrGdwa7i5atfiVKXa4rkqFo303 emtXGA618qEgQNjwSDeOvMpEhVFtWBVio2YL50S7KTpbQvfwFdz7GGKtk96U/3af FWL33etcttYcSSuEPEMaQxvCcDoV627PkoHly6EslnNfUafVWrLQIWToBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCcorSahX/7EGXCMKFGI+MHBPip4MB8GA1UdIwQY MBaAFJQm0wnQ2wLfHX4Eu7OTE70d8TNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYt ZjE3ZjA5NWRkM2FmLzEvSnlpdEpxRmZfc1FaY0l3b1VZajR3Y0UtS25nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYtZjE3ZjA5NWRkM2Fm LzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9H/MA0G CSqGSIb3DQEBCwUAA4IBAQANmUrrxLBh2/jITEccD7tvaHjxupD0JiqsoBIeI67X S5htmu4LJrVHweGRW8qPk24ejVONSanqk3KxVpjf+AEgy+KRhA9Ie+SNDpAv0bim sj3573qyUkWIfC+8Xmp6MaprjNv5O5wOBTPhAz60GZRn9D9rSQ51e5KLWZgXdnVA 7McKd9gYUlqqhrHCkjOgqGBbOMpItbZZ6cnhZGJALuWXYhzVVFdnd1dY0jdqBMOe HVidgwRA40YmlcXNSOwbYLjK4TECZ+6hMeuuIXS8r2sF3EqopeKExQWuLONCcTTa OTbHtz4uBK5oo7KrDxUghjylKXtrDKNCPdTCSQfU7lhP -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:48 2026 by rpki-client