This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/9ORatKC_booJh4vcao0J7074PtA.roa File: 9ORatKC_booJh4vcao0J7074PtA.roa (raw, json) Hash identifier: KoSuw4QcODM0xdnQccwsCreEDPHNKRxvZu1TQ2nNiDs= Subject key identifier: F4:E4:5A:B4:A0:BF:6E:8A:09:87:8B:DC:6A:8D:09:EF:4E:F8:3E:D0 Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Certificate serial: 019BC6A58FDF8ADD404A3175E5645C2D5B78 Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/9ORatKC_booJh4vcao0J7074PtA.roa Signing time: Fri 16 Jan 2026 11:51:37 +0000 ROA not before: Fri 16 Jan 2026 11:51:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 91.195.110.0/24 maxlen: 24 91.201.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:a5:8f:df:8a:dd:40:4a:31:75:e5:64:5c:2d:5b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Validity Not Before: Jan 16 11:51:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e45ab4a0bf6e8a09878bdc6a8d09ef4ef83ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:7a:1e:cf:19:cb:42:c6:5d:7f:80:8c:99: cd:93:1f:b7:93:06:81:31:8d:13:30:09:81:cd:a9: eb:4a:94:01:e0:9a:bc:a5:44:e8:05:e4:15:89:91: 64:b8:99:e9:f2:4e:34:6e:68:63:54:b1:27:0a:b0: 07:ed:c8:28:2c:f3:97:90:a3:a6:49:b5:e2:a7:52: 55:73:8a:1e:d8:3d:db:62:05:1e:56:15:18:7f:9a: 7f:4e:be:3e:d1:14:85:78:09:e6:fa:ee:6a:9c:3f: a7:f4:70:df:1b:12:23:a6:eb:e1:57:00:16:9e:53: f6:99:ed:7b:01:99:6d:b6:0b:48:cf:46:e1:3a:61: be:af:70:c0:e3:e6:31:cf:e9:18:a6:ed:3e:a9:06: 04:f6:f7:80:84:f3:ce:10:4c:8e:a0:c1:a8:9a:4c: 40:bd:a0:2a:64:e4:cb:91:7b:5e:e0:d5:5c:38:de: 59:3a:8d:e4:92:ba:dc:14:77:39:39:3b:79:12:7b: b9:6c:a8:41:d4:59:ed:97:cd:a8:76:4e:60:de:a3: 6d:a4:fd:1b:08:fd:ee:bb:ed:c7:a8:32:1b:9c:0c: fb:4e:a0:c4:af:3a:f0:25:f6:41:47:2b:3f:9a:5f: 1e:da:d1:d5:96:bd:f8:c9:4a:5c:00:02:b0:dc:bc: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E4:5A:B4:A0:BF:6E:8A:09:87:8B:DC:6A:8D:09:EF:4E:F8:3E:D0 X509v3 Authority Key Identifier: keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/9ORatKC_booJh4vcao0J7074PtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.110.0/24 91.201.196.0/24 Signature Algorithm: sha256WithRSAEncryption 93:94:d2:83:e2:fb:a1:2a:ea:4b:68:ed:54:b7:c8:1b:f9:bd: d9:b0:7a:e7:5f:a6:7c:41:72:af:65:f4:f7:d4:0e:b7:61:95: f3:74:a0:f4:2e:af:67:7a:f9:d1:06:fb:a4:3f:43:45:cb:be: b1:36:06:6f:ab:fa:8f:d6:1e:e8:ef:e7:92:cf:35:8c:5b:8a: 07:6c:23:a0:7a:08:62:aa:e4:a4:9d:e2:71:d2:22:91:23:de: 55:3a:bb:a2:80:e1:e8:22:58:02:ec:90:93:4c:3d:b8:91:ca: 5e:40:8b:12:a7:6b:58:86:c6:5b:42:7a:a1:aa:13:b4:4a:f2: 5e:1b:88:e8:a9:e0:0a:cb:ba:19:17:6d:20:93:8b:0a:d6:74: a1:b8:3e:83:42:77:c3:c7:84:66:98:1b:de:f9:d3:4c:02:f0: 56:26:ec:62:76:82:3e:fe:0f:03:b6:d9:98:1e:26:f8:80:5b: 98:cc:fc:70:9b:20:a4:3b:d1:96:b9:6e:81:35:24:5f:88:c1: 42:5b:6c:64:0b:e5:5f:ba:98:66:60:09:6a:e6:b8:89:0f:50: b5:f9:2c:10:af:75:b7:49:25:cf:21:be:97:7c:60:18:83:71: 9e:51:4f:80:6a:81:8a:90:91:08:64:21:f0:45:c4:f6:8d:eb: ef:15:52:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvGpY/fit1ASjF15WRcLVt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz NTU5Y2YwHhcNMjYwMTE2MTE1MTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGU0NWFiNGEwYmY2ZThhMDk4NzhiZGM2YThkMDllZjRlZjgzZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCd6Hs8Zy0LGXX+AjJnNkx+3kwaB MY0TMAmBzanrSpQB4Jq8pUToBeQViZFkuJnp8k40bmhjVLEnCrAH7cgoLPOXkKOm SbXip1JVc4oe2D3bYgUeVhUYf5p/Tr4+0RSFeAnm+u5qnD+n9HDfGxIjpuvhVwAW nlP2me17AZlttgtIz0bhOmG+r3DA4+Yxz+kYpu0+qQYE9veAhPPOEEyOoMGomkxA vaAqZOTLkXte4NVcON5ZOo3kkrrcFHc5OTt5Enu5bKhB1Fntl82odk5g3qNtpP0b CP3uu+3HqDIbnAz7TqDErzrwJfZBRys/ml8e2tHVlr34yUpcAAKw3LyRCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPTkWrSgv26KCYeL3GqNCe9O+D7QMB8GA1UdIwQY MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt YmFmMjRkZDU4MzlmLzEvOU9SYXRLQ19ib29KaDR2Y2FvMEo3MDc0UHRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8NuAwQA W8nEMA0GCSqGSIb3DQEBCwUAA4IBAQCTlNKD4vuhKupLaO1Ut8gb+b3ZsHrnX6Z8 QXKvZfT31A63YZXzdKD0Lq9nevnRBvukP0NFy76xNgZvq/qP1h7o7+eSzzWMW4oH bCOgeghiquSkneJx0iKRI95VOruigOHoIlgC7JCTTD24kcpeQIsSp2tYhsZbQnqh qhO0SvJeG4joqeAKy7oZF20gk4sK1nShuD6DQnfDx4RmmBve+dNMAvBWJuxidoI+ /g8DttmYHib4gFuYzPxwmyCkO9GWuW6BNSRfiMFCW2xkC+VfuphmYAlq5riJD1C1 +SwQr3W3SSXPIb6XfGAYg3GeUU+AaoGKkJEIZCHwRcT2jevvFVLF -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:28 2026 by rpki-client