This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/H981rBSibLZh88vJlKv1pHz3_do.roa File: H981rBSibLZh88vJlKv1pHz3_do.roa (raw, json) Hash identifier: ewvncvRycEX7KsKjfDRU9rlRt7/KlR10lPJ3htzWUIo= Subject key identifier: 1F:DF:35:AC:14:A2:6C:B6:61:F3:CB:C9:94:AB:F5:A4:7C:F7:FD:DA Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6 Certificate serial: 019B7E3804B7925086A4E66ECE11ADFA39B9 Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/H981rBSibLZh88vJlKv1pHz3_do.roa Signing time: Fri 02 Jan 2026 10:19:18 +0000 ROA not before: Fri 02 Jan 2026 10:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198794 IP address blocks: 91.239.100.0/24 maxlen: 24 2001:67c:28a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:04:b7:92:50:86:a4:e6:6e:ce:11:ad:fa:39:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6 Validity Not Before: Jan 2 10:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fdf35ac14a26cb661f3cbc994abf5a47cf7fdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:09:f6:6d:ca:f6:c6:08:51:21:a4:e6:22:f5: d2:03:1b:72:08:88:37:0a:e9:58:0d:b8:5f:10:5c: 8e:27:dc:e1:49:7a:2b:cd:47:c6:b9:94:22:3e:08: cf:f7:0b:42:bd:55:b9:d2:5f:fd:2b:29:1e:ef:c9: a4:5d:88:39:64:a2:bc:c9:c2:9b:ea:2b:d8:6c:3b: d4:97:af:ac:3d:50:66:44:53:a3:e2:63:6a:7e:82: ca:36:c6:7e:64:88:77:28:30:f7:4c:b6:d2:f3:eb: a0:2d:00:e6:ac:2d:86:61:ad:97:47:93:e3:37:ca: 74:fd:c0:74:dc:62:dd:0f:5a:40:1e:22:58:a2:26: 1c:27:b8:7b:94:0e:b1:f9:43:1f:92:d8:25:fc:2a: 73:27:73:db:5b:58:5c:13:59:f2:04:68:22:d6:34: 08:4f:c4:a8:85:9d:3a:65:1e:e1:08:23:4b:48:f6: c8:0c:ba:2f:f7:c8:e8:37:a8:7b:d0:44:db:22:96: b1:3b:64:44:45:c9:23:30:64:bc:06:1c:c1:cf:20: 9b:ac:74:66:c5:73:95:f0:e9:c5:65:bb:80:c9:48: ef:b1:80:17:ab:ed:42:07:f0:e3:df:24:a0:3a:ae: 3d:9f:ba:f3:25:c6:87:0b:42:21:cc:39:12:2d:fe: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:35:AC:14:A2:6C:B6:61:F3:CB:C9:94:AB:F5:A4:7C:F7:FD:DA X509v3 Authority Key Identifier: keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/H981rBSibLZh88vJlKv1pHz3_do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.100.0/24 IPv6: 2001:67c:28a4::/48 Signature Algorithm: sha256WithRSAEncryption 64:97:3f:2b:a4:aa:34:9d:85:2b:71:bd:a2:b5:2d:12:88:c3: 84:41:c0:05:9e:d3:99:70:cf:04:b9:6d:4c:24:de:29:a1:24: 3a:72:98:e7:83:35:14:28:13:d6:87:48:39:64:c8:95:98:e5: 58:1e:40:36:0d:ac:8e:cb:a0:12:fb:c4:a3:56:d1:99:8a:32: c4:33:b7:c9:5c:75:f4:0d:b6:cb:66:0e:69:77:d5:99:7b:ca: 55:5f:54:c8:0c:6d:d2:e8:fb:e8:19:51:c8:3f:5d:ad:7e:10: c0:0a:26:47:3c:cc:a8:6e:60:5a:ae:99:d2:11:76:24:3d:62: f9:ee:ba:ab:35:0e:6f:20:4d:78:0d:82:a8:86:47:57:7d:7b: 3c:e1:29:32:bc:7d:15:af:fa:f8:84:c9:9c:d2:2d:b0:be:00: 50:7a:a2:ad:b7:df:22:a3:a3:95:df:fa:c8:91:be:d1:56:a0: 4d:36:4f:d3:52:e2:fd:63:90:b2:45:70:5e:dd:a2:be:28:b1: 1c:81:c7:8b:60:3b:31:c5:2e:0f:d2:e3:b3:d5:90:c0:8c:3c: cd:f0:4e:c3:5c:4f:ca:ab:88:89:f9:a1:bc:6b:66:6f:ce:c3: ef:2f:07:f8:06:ae:03:68:6a:b2:54:8d:2a:f6:1e:18:c2:9e: 8b:94:26:83 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OAS3klCGpOZuzhGt+jm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWJlODI0NzVkMjU4MDhlMjE0ZTlhNWNhMjc5MTM0N2Mx MWRhYjYwHhcNMjYwMTAyMTAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmRmMzVhYzE0YTI2Y2I2NjFmM2NiYzk5NGFiZjVhNDdjZjdmZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAn2bcr2xghRIaTmIvXSAxtyCIg3 CulYDbhfEFyOJ9zhSXorzUfGuZQiPgjP9wtCvVW50l/9Kyke78mkXYg5ZKK8ycKb 6ivYbDvUl6+sPVBmRFOj4mNqfoLKNsZ+ZIh3KDD3TLbS8+ugLQDmrC2GYa2XR5Pj N8p0/cB03GLdD1pAHiJYoiYcJ7h7lA6x+UMfktgl/CpzJ3PbW1hcE1nyBGgi1jQI T8SohZ06ZR7hCCNLSPbIDLov98joN6h70ETbIpaxO2RERckjMGS8BhzBzyCbrHRm xXOV8OnFZbuAyUjvsYAXq+1CB/Dj3ySgOq49n7rzJcaHC0IhzDkSLf6teQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB/fNawUomy2YfPLyZSr9aR89/3aMB8GA1UdIwQY MBaAFI+b6CR10lgI4hTppconkTR8Edq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lMTNiMWMtNzU1My00MmNmLWI4YzUt Y2ExMGE0ODhjNzE1LzEvSDk4MXJCU2liTFpoODh2SmxLdjFwSHozX2RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lMTNiMWMtNzU1My00MmNmLWI4YzUtY2ExMGE0ODhjNzE1 LzEvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+9kMA8E AgACMAkDBwAgAQZ8KKQwDQYJKoZIhvcNAQELBQADggEBAGSXPyukqjSdhStxvaK1 LRKIw4RBwAWe05lwzwS5bUwk3imhJDpymOeDNRQoE9aHSDlkyJWY5VgeQDYNrI7L oBL7xKNW0ZmKMsQzt8lcdfQNtstmDml31Zl7ylVfVMgMbdLo++gZUcg/Xa1+EMAK Jkc8zKhuYFqumdIRdiQ9Yvnuuqs1Dm8gTXgNgqiGR1d9ezzhKTK8fRWv+viEyZzS LbC+AFB6oq233yKjo5Xf+siRvtFWoE02T9NS4v1jkLJFcF7dor4osRyBx4tgOzHF Lg/S47PVkMCMPM3wTsNcT8qriIn5obxrZm/Ow+8vB/gGrgNoarJUjSr2HhjCnouU JoM= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:19 2026 by rpki-client