This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/sG3h814gvsBDoEa2xpAwWL-ObSo.roa File: sG3h814gvsBDoEa2xpAwWL-ObSo.roa (raw, json) Hash identifier: OV+yw216aevrkswztcs3VKqDNfGOUQFwVNVE2VFF68g= Subject key identifier: B0:6D:E1:F3:5E:20:BE:C0:43:A0:46:B6:C6:90:30:58:BF:8E:6D:2A Certificate issuer: /CN=a8707679223c883fed7f7c79ff2f293bff8730b5 Certificate serial: 019B7DCB59461A9145FFF41BA98194FAB2F8 Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/sG3h814gvsBDoEa2xpAwWL-ObSo.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51752 IP address blocks: 91.220.88.0/24 maxlen: 24 185.15.220.0/22 maxlen: 22 2a03:c9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:59:46:1a:91:45:ff:f4:1b:a9:81:94:fa:b2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b06de1f35e20bec043a046b6c6903058bf8e6d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:02:67:9d:af:c8:d1:5e:04:01:42:8f:24: 2a:6a:9f:75:47:7c:85:e6:7e:c8:32:59:79:f2:bf: 64:16:2d:34:7a:90:f9:91:dc:93:5f:ad:a4:fa:44: 3e:45:2f:b7:b5:8f:a8:d0:9f:e0:01:46:54:7d:b4: 1a:37:9e:d6:8f:8d:e0:23:1b:cd:86:28:93:dc:f7: a4:0b:16:47:24:cd:ea:34:08:f1:75:4f:a0:a5:2b: 37:e1:3d:3d:d5:3d:4f:a5:82:16:90:f6:3c:f0:a1: 85:c0:b0:24:7c:cb:86:8c:02:e4:e5:36:49:ef:e0: 64:a7:8a:7a:8c:f1:7f:52:4e:c7:91:26:72:ee:2b: 11:0f:12:d7:69:58:62:a8:cc:a7:72:36:b6:39:fc: 52:67:65:74:cc:a8:ef:23:5a:59:cb:61:ba:b7:c8: 28:54:23:a7:17:af:f9:9d:63:76:33:c1:2b:03:43: 41:eb:26:56:7f:14:95:c6:3b:ae:fb:0d:97:9f:78: b6:75:96:81:17:3c:cc:92:5e:2d:29:b3:32:05:65: c6:4f:11:8b:2e:ad:e2:43:2a:a8:96:82:1b:d4:5d: 4d:ca:6c:cc:17:ea:08:db:05:f3:e6:00:4c:b2:0c: b3:e9:f0:e7:b6:d2:98:01:a9:46:02:0a:96:f4:b7: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6D:E1:F3:5E:20:BE:C0:43:A0:46:B6:C6:90:30:58:BF:8E:6D:2A X509v3 Authority Key Identifier: keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/sG3h814gvsBDoEa2xpAwWL-ObSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.88.0/24 185.15.220.0/22 IPv6: 2a03:c9c0::/32 Signature Algorithm: sha256WithRSAEncryption 12:58:c8:0f:10:21:e5:c1:0c:e6:a7:26:4c:2d:07:0d:d7:4a: ea:a5:1f:cb:0e:b8:1e:13:53:c5:ee:cf:2c:4d:c2:1a:22:a8: 41:4a:72:8e:e8:7e:68:a2:e4:9b:58:b3:02:bd:be:2d:32:ea: fb:2c:8b:1b:d7:c1:50:9d:ef:77:2f:40:ad:c5:79:14:5d:62: 17:29:32:ba:6b:cd:3e:73:73:11:53:04:34:65:bc:79:6b:29: 93:dc:5e:94:f7:64:69:aa:af:ff:b7:69:f3:e2:22:70:c3:e0: 90:ac:f9:13:49:7d:2c:dc:93:d5:11:5b:8d:ee:59:9e:60:db: 0d:c6:1f:22:e8:eb:91:90:4a:1a:80:38:de:33:e1:5c:33:eb: c5:3d:c4:3d:83:a3:64:9d:8b:8e:38:e8:3f:68:7c:48:2a:d5: 36:35:a5:22:08:99:04:f8:b3:08:03:e3:8c:a3:f5:10:3c:be: c0:58:bc:d8:18:fd:c3:1e:89:44:f6:67:94:0a:c3:e9:47:1b: 2b:9a:dc:5d:6a:1a:03:d0:fb:51:7e:03:e5:81:b3:fc:fd:b2: a0:aa:2f:d8:6b:2c:c7:76:c0:35:2d:2d:bc:53:68:e5:63:de: 52:cf:53:4a:3f:88:40:6a:5b:6b:4a:0d:99:b0:b3:c5:97:24: f3:48:61:09 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9y1lGGpFF//QbqYGU+rL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA3Njc5MjIzYzg4M2ZlZDdmN2M3OWZmMmYyOTNiZmY4 NzMwYjUwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDZkZTFmMzVlMjBiZWMwNDNhMDQ2YjZjNjkwMzA1OGJmOGU2ZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOwCZ52vyNFeBAFCjyQqap91R3yF 5n7IMll58r9kFi00epD5kdyTX62k+kQ+RS+3tY+o0J/gAUZUfbQaN57Wj43gIxvN hiiT3PekCxZHJM3qNAjxdU+gpSs34T091T1PpYIWkPY88KGFwLAkfMuGjALk5TZJ 7+Bkp4p6jPF/Uk7HkSZy7isRDxLXaVhiqMyncja2OfxSZ2V0zKjvI1pZy2G6t8go VCOnF6/5nWN2M8ErA0NB6yZWfxSVxjuu+w2Xn3i2dZaBFzzMkl4tKbMyBWXGTxGL Lq3iQyqoloIb1F1NymzMF+oI2wXz5gBMsgyz6fDnttKYAalGAgqW9LfEQQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLBt4fNeIL7AQ6BGtsaQMFi/jm0qMB8GA1UdIwQY MBaAFKhwdnkiPIg/7X98ef8vKTv/hzC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhCMmVTSThpRF90ZjN4NV95OHBPXy1ITUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjk4NjYtZGJmNi00Mjk0LTk0Yjkt NDA3ZmVmNjljZmI4LzEvc0czaDgxNGd2c0JEb0VhMnhwQXdXTC1PYlNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kYjk4NjYtZGJmNi00Mjk0LTk0YjktNDA3ZmVmNjljZmI4 LzEvcUhCMmVTSThpRF90ZjN4NV95OHBPXy1ITUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9xYAwQC uQ/cMA0EAgACMAcDBQAqA8nAMA0GCSqGSIb3DQEBCwUAA4IBAQASWMgPECHlwQzm pyZMLQcN10rqpR/LDrgeE1PF7s8sTcIaIqhBSnKO6H5oouSbWLMCvb4tMur7LIsb 18FQne93L0CtxXkUXWIXKTK6a80+c3MRUwQ0Zbx5aymT3F6U92Rpqq//t2nz4iJw w+CQrPkTSX0s3JPVEVuN7lmeYNsNxh8i6OuRkEoagDjeM+FcM+vFPcQ9g6NknYuO OOg/aHxIKtU2NaUiCJkE+LMIA+OMo/UQPL7AWLzYGP3DHolE9meUCsPpRxsrmtxd ahoD0PtRfgPlgbP8/bKgqi/YayzHdsA1LS28U2jlY95Sz1NKP4hAaltrSg2ZsLPF lyTzSGEJ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:14 2026 by rpki-client