This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/H8Odkm46hNd3Sl7VyO14IOsEyA4.roa File: H8Odkm46hNd3Sl7VyO14IOsEyA4.roa (raw, json) Hash identifier: bo4IFbthZWHDFRLwrSI7BTm3inTN1awZ7ZmUE9MhV2o= Subject key identifier: 1F:C3:9D:92:6E:3A:84:D7:77:4A:5E:D5:C8:ED:78:20:EB:04:C8:0E Certificate issuer: /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Certificate serial: 019B7D5CF2386B8CBA1C3B8D6BA3635AC4AC Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/H8Odkm46hNd3Sl7VyO14IOsEyA4.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 91.201.100.0/22 maxlen: 24 194.76.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f2:38:6b:8c:ba:1c:3b:8d:6b:a3:63:5a:c4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc39d926e3a84d7774a5ed5c8ed7820eb04c80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9f:0e:5a:5d:42:af:86:1e:d0:38:77:a7:59: 4e:55:ea:1f:33:8c:4a:97:2c:64:b4:f8:50:55:00: a4:f8:16:7a:22:8b:62:ef:36:25:78:84:00:bf:a1: 8d:f9:2b:01:04:34:cc:12:d9:e5:31:ad:a9:8a:d1: 0c:4d:6f:e9:51:d1:b0:6f:f5:68:fd:53:f5:59:c6: 80:37:61:23:21:f6:d1:00:e0:af:fe:55:5b:37:f8: c2:35:1c:e3:13:a8:4e:78:61:56:9c:40:4f:39:21: 6f:14:30:c8:ee:75:df:52:50:e8:71:0a:a5:64:ec: ba:ff:ac:06:da:58:1b:d1:9c:89:3d:8e:f3:08:35: a4:f2:84:12:d6:16:87:df:ee:30:71:b0:17:ca:20: f3:fc:64:0a:0a:62:7b:90:68:13:3c:cb:e2:7b:12: 2c:6c:8d:c3:67:1e:18:ab:ef:05:c4:1b:34:00:9e: 21:51:2b:2e:e0:ca:3c:78:2c:67:c6:7c:5e:ba:af: 61:53:1e:6a:9c:9d:29:50:4a:d1:b3:1f:4c:5c:d1: 8d:56:6d:58:31:a6:3a:61:0e:ba:b7:30:dd:c1:0b: 1a:64:30:0c:14:21:6a:1f:a3:22:1b:ee:de:33:dd: ea:69:c0:15:c6:4e:96:bb:43:ce:e9:ac:8e:ca:34: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C3:9D:92:6E:3A:84:D7:77:4A:5E:D5:C8:ED:78:20:EB:04:C8:0E X509v3 Authority Key Identifier: keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/H8Odkm46hNd3Sl7VyO14IOsEyA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.100.0/22 194.76.193.0/24 Signature Algorithm: sha256WithRSAEncryption 20:29:89:b6:79:12:57:0e:6e:6e:55:47:2d:8d:62:0e:f3:0e: a0:34:ba:40:f6:89:85:2f:77:83:70:c1:a2:c8:a7:f9:2b:ef: 82:7b:ee:4c:ef:a1:ba:9e:88:85:52:7c:5d:66:5f:30:e8:96: c5:96:0a:e5:4a:41:ba:ad:15:b6:e9:f4:d7:f2:79:50:50:a4: 5f:33:89:4a:8c:20:c6:17:68:96:fe:34:3e:96:25:da:b2:86: 5d:fb:00:aa:4c:da:1b:3c:1d:9b:14:99:31:93:c5:25:98:be: d6:79:18:16:2c:3a:c2:2e:66:4c:3e:d3:05:b3:0f:fd:f2:c9: 94:a2:69:b3:17:a6:16:52:86:64:c3:57:38:8e:e0:d0:7c:d4: c4:09:32:ee:2b:97:02:3c:ca:5f:07:a2:45:aa:3c:62:76:4e: cf:36:c0:00:dd:23:9c:8b:94:2a:3d:df:31:08:6e:cf:8e:02: ef:02:6b:9d:ab:1e:9b:6c:5e:b5:f4:c4:06:6d:34:46:74:07: b0:a1:55:f4:8a:7c:c4:86:da:c9:27:95:68:57:4c:3e:9f:df: 55:21:e4:03:bc:9e:e1:3c:29:dc:76:c0:d3:e1:7c:b4:82:4a: 9b:d8:45:45:77:f8:de:9d:ad:1b:f5:5c:d1:03:fc:71:5f:7b: 34:13:55:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XPI4a4y6HDuNa6NjWsSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YTEwMjM0Y2ZiNTUyMmFhMjliMzI2MGE3NWY4YTlmNzk5 MzNlN2IwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmMzOWQ5MjZlM2E4NGQ3Nzc0YTVlZDVjOGVkNzgyMGViMDRjODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8J8OWl1Cr4Ye0Dh3p1lOVeofM4xK lyxktPhQVQCk+BZ6Ioti7zYleIQAv6GN+SsBBDTMEtnlMa2pitEMTW/pUdGwb/Vo /VP1WcaAN2EjIfbRAOCv/lVbN/jCNRzjE6hOeGFWnEBPOSFvFDDI7nXfUlDocQql ZOy6/6wG2lgb0ZyJPY7zCDWk8oQS1haH3+4wcbAXyiDz/GQKCmJ7kGgTPMviexIs bI3DZx4Yq+8FxBs0AJ4hUSsu4Mo8eCxnxnxeuq9hUx5qnJ0pUErRsx9MXNGNVm1Y MaY6YQ66tzDdwQsaZDAMFCFqH6MiG+7eM93qacAVxk6Wu0PO6ayOyjRNJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB/DnZJuOoTXd0pe1cjteCDrBMgOMB8GA1UdIwQY MBaAFBehAjTPtVIqopsyYKdfip95kz57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMt MmFkMmJiNTMyNjEzLzEvSDhPZGttNDZoTmQzU2w3VnlPMTRJT3NFeUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMtMmFkMmJiNTMyNjEz LzEvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8lkAwQA wkzBMA0GCSqGSIb3DQEBCwUAA4IBAQAgKYm2eRJXDm5uVUctjWIO8w6gNLpA9omF L3eDcMGiyKf5K++Ce+5M76G6noiFUnxdZl8w6JbFlgrlSkG6rRW26fTX8nlQUKRf M4lKjCDGF2iW/jQ+liXasoZd+wCqTNobPB2bFJkxk8UlmL7WeRgWLDrCLmZMPtMF sw/98smUommzF6YWUoZkw1c4juDQfNTECTLuK5cCPMpfB6JFqjxidk7PNsAA3SOc i5QqPd8xCG7PjgLvAmudqx6bbF619MQGbTRGdAewoVX0inzEhtrJJ5VoV0w+n99V IeQDvJ7hPCncdsDT4Xy0gkqb2EVFd/jena0b9VzRA/xxX3s0E1UP -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:56 2026 by rpki-client