This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/p2dX8ZxrxFo5bme0wCXmevmXoFM.roa File: p2dX8ZxrxFo5bme0wCXmevmXoFM.roa (raw, json) Hash identifier: z7vq22A/NBz69RT3OwNZlFHGPIzvOhIGUKvXngDLH00= Subject key identifier: A7:67:57:F1:9C:6B:C4:5A:39:6E:67:B4:C0:25:E6:7A:F9:97:A0:53 Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876 Certificate serial: 019B77C6AE5AE80418A046BFAEB6E751CC1D Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/p2dX8ZxrxFo5bme0wCXmevmXoFM.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48303 IP address blocks: 91.216.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ae:5a:e8:04:18:a0:46:bf:ae:b6:e7:51:cc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a76757f19c6bc45a396e67b4c025e67af997a053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:94:f1:53:0f:f0:fb:de:46:85:03:ac:a2:36: 12:38:b3:e5:ee:ad:7a:e0:4a:7d:42:76:cf:e8:73: 7d:79:2e:8a:4c:ac:8f:79:d4:6f:32:fc:b6:a9:de: 6b:13:8e:08:92:dc:6e:7d:75:3e:0b:48:e4:5a:ad: 7c:04:a6:e6:63:bc:f0:2f:28:21:50:60:f4:fa:f9: c8:d4:d2:e9:b6:24:f6:29:c7:bd:f3:55:32:1a:b5: 39:5f:71:a5:8e:29:75:a7:96:da:1e:68:1e:d3:85: 24:35:ca:a8:93:b0:c4:9e:c7:7e:20:8e:ad:07:17: d9:50:38:42:ac:ea:27:83:30:86:6e:1a:07:a5:67: 66:c8:6b:1f:24:29:28:c6:db:bd:53:36:dd:7c:c9: e5:71:ff:d3:c9:f1:71:63:e8:00:78:c2:35:34:d6: cb:a2:68:72:39:a5:26:61:be:20:1e:ec:14:19:db: bd:8e:4a:7c:02:d6:ce:f8:95:72:80:15:04:dd:fa: 16:10:14:fa:0b:00:5d:94:a9:40:68:f0:9b:87:98: 2f:eb:b0:ee:3f:07:24:bb:24:ea:f7:c5:87:06:e5: f4:c3:40:e4:b7:1f:28:98:47:c4:6c:0c:2c:f5:9e: 0e:8b:f1:2f:9a:5f:4c:52:65:62:27:25:e5:73:76: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:67:57:F1:9C:6B:C4:5A:39:6E:67:B4:C0:25:E6:7A:F9:97:A0:53 X509v3 Authority Key Identifier: keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/p2dX8ZxrxFo5bme0wCXmevmXoFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.44.0/24 Signature Algorithm: sha256WithRSAEncryption 04:09:f7:3f:3e:67:8e:71:ac:3a:93:8d:63:0f:52:de:be:83: 83:e4:d5:77:50:35:a5:86:f4:40:0a:e2:2a:31:3c:bf:7d:92: 26:1d:fe:2d:25:b6:36:89:e1:53:e6:28:81:29:c4:1b:9c:ca: ab:26:62:99:3b:62:07:cb:ba:9c:02:f1:72:6d:93:5c:5e:5b: 66:10:91:aa:a0:6b:fa:8d:ba:4d:c9:38:c6:d9:2f:ad:d8:6e: 4e:3b:73:af:b4:7d:fe:97:87:22:70:8d:76:53:cf:54:d4:ec: 43:06:a0:61:ed:1d:56:04:d5:8e:5e:8d:58:cc:f5:8d:41:aa: f1:a6:7d:1d:71:2a:1e:ec:9e:b7:08:01:d7:bc:ba:75:90:63: 09:20:89:d5:56:1f:1a:1d:58:46:21:ce:c5:e9:10:1d:2f:a5: a0:80:13:3a:42:d4:d4:ae:8a:a5:93:bf:5c:88:73:64:26:7f: 28:ad:89:38:ac:63:53:e5:58:38:2c:d4:6a:f4:f1:9b:fb:64: b9:4a:27:7a:4c:20:27:ff:cd:11:9e:cb:98:79:65:68:1e:1e: ea:73:9f:03:4b:bf:2b:7a:32:54:a6:91:9a:13:00:94:1b:ef: b6:4a:ea:e2:b9:3e:d8:a7:32:59:aa:8a:6d:62:7d:f5:b4:f0: 4c:83:fb:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xq5a6AQYoEa/rrbnUcwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0Yjk3NTg5OGQxMGYxYTUwNTIxMzNlMWUyNTAzNmM2MTE0 ZDg4NzYwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzY3NTdmMTljNmJjNDVhMzk2ZTY3YjRjMDI1ZTY3YWY5OTdhMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JTxUw/w+95GhQOsojYSOLPl7q16 4Ep9QnbP6HN9eS6KTKyPedRvMvy2qd5rE44IktxufXU+C0jkWq18BKbmY7zwLygh UGD0+vnI1NLptiT2Kce981UyGrU5X3Gljil1p5baHmge04UkNcqok7DEnsd+II6t BxfZUDhCrOongzCGbhoHpWdmyGsfJCkoxtu9UzbdfMnlcf/TyfFxY+gAeMI1NNbL omhyOaUmYb4gHuwUGdu9jkp8AtbO+JVygBUE3foWEBT6CwBdlKlAaPCbh5gv67Du PwckuyTq98WHBuX0w0Dktx8omEfEbAws9Z4Oi/Evml9MUmViJyXlc3Y75QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdnV/Gca8RaOW5ntMAl5nr5l6BTMB8GA1UdIwQY MBaAFHS5dYmNEPGlBSEz4eJQNsYRTYh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExsMWlZMFE4YVVGSVRQaDRsQTJ4aEZOaUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZGNkMGUtZjMxOS00NDAzLWIxNjQt YjdjODcyZGQ5Njc1LzEvcDJkWDhaeHJ4Rm81Ym1lMHdDWG1ldm1Yb0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZGNkMGUtZjMxOS00NDAzLWIxNjQtYjdjODcyZGQ5Njc1 LzEvZExsMWlZMFE4YVVGSVRQaDRsQTJ4aEZOaUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gsMA0G CSqGSIb3DQEBCwUAA4IBAQAECfc/PmeOcaw6k41jD1LevoOD5NV3UDWlhvRACuIq MTy/fZImHf4tJbY2ieFT5iiBKcQbnMqrJmKZO2IHy7qcAvFybZNcXltmEJGqoGv6 jbpNyTjG2S+t2G5OO3OvtH3+l4cicI12U89U1OxDBqBh7R1WBNWOXo1YzPWNQarx pn0dcSoe7J63CAHXvLp1kGMJIInVVh8aHVhGIc7F6RAdL6WggBM6QtTUroqlk79c iHNkJn8orYk4rGNT5Vg4LNRq9PGb+2S5Sid6TCAn/80RnsuYeWVoHh7qc58DS78r ejJUppGaEwCUG++2SuriuT7YpzJZqoptYn31tPBMg/sA -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:03 2026 by rpki-client