This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa File: gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa (raw, json) Hash identifier: ydHk1WEPluuP+9CX+LPaHVAvbLA6LF+fubk2zBDCmt0= Subject key identifier: 80:8D:EE:53:34:A7:61:FE:D0:EC:16:6D:62:31:50:FD:F3:C5:D8:E5 Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388 Certificate serial: 019B7F8280FA50C220AFFC0893C02D113CA8 Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa Signing time: Fri 02 Jan 2026 16:20:17 +0000 ROA not before: Fri 02 Jan 2026 16:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49435 IP address blocks: 91.220.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:80:fa:50:c2:20:af:fc:08:93:c0:2d:11:3c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388 Validity Not Before: Jan 2 16:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=808dee5334a761fed0ec166d623150fdf3c5d8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:3d:b0:a8:9c:35:ca:8a:33:2b:2a:ad:13: 6c:fa:f2:18:c9:63:79:f9:96:e5:eb:d7:5d:84:bf: 25:7d:fa:20:5d:30:15:ad:3c:c1:70:6d:66:9f:2c: 2e:66:cd:ce:32:8d:c1:8e:b3:13:18:a1:16:52:cc: 09:fc:28:1e:ee:59:af:cd:f7:7f:ae:81:7e:32:9b: 05:93:44:e5:41:ef:d7:0d:50:ba:1d:ca:86:64:f5: 1c:99:2b:a1:28:d3:bf:83:da:a9:00:8a:26:e3:0d: 24:7c:d1:4b:a9:af:f2:71:d4:73:b9:9e:66:e6:32: 11:dc:90:06:4c:00:4c:cc:d3:bf:ca:e3:22:65:88: 4a:0c:74:4a:ea:50:9b:b0:74:86:fc:e6:43:96:7c: a7:c3:c8:10:33:18:49:be:cc:51:13:00:3d:bd:e8: 73:b9:cb:d9:36:93:66:04:f5:1c:88:99:c3:5e:90: c0:32:63:4c:92:f3:9c:34:ed:0f:29:07:c7:e8:ce: ae:b6:aa:f5:49:7f:c3:f4:f7:a7:98:b6:e9:87:7f: 39:fb:9a:ed:82:8a:18:20:29:c4:24:81:06:ba:8f: c9:ae:e1:b3:60:61:01:5c:b8:db:b1:d2:c7:63:31: 7f:d0:51:43:93:f6:68:2d:28:29:84:bd:1a:f3:b8: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8D:EE:53:34:A7:61:FE:D0:EC:16:6D:62:31:50:FD:F3:C5:D8:E5 X509v3 Authority Key Identifier: keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.34.0/24 Signature Algorithm: sha256WithRSAEncryption 84:5f:2e:30:83:83:a0:d4:17:bc:3f:8b:ae:ec:f8:a5:7b:3d: 4b:d8:fc:ba:85:89:94:9c:ac:44:7f:89:81:e0:54:97:d7:8c: 84:55:64:f9:e8:cc:98:09:50:f7:42:53:8e:93:a3:6e:3f:a0: 56:80:95:af:d6:09:b1:90:2c:34:55:73:57:92:02:8e:52:73: 31:29:2f:f4:77:f8:8a:f1:e5:35:73:cb:36:e3:ba:d4:9f:ae: 10:a6:43:5a:c0:20:ce:55:77:9f:6d:6e:60:bc:43:31:d9:80: 25:56:0b:0c:94:e7:3f:03:2a:bf:a6:6a:e2:6d:14:27:1b:6a: 4a:08:b2:15:17:6c:7b:7e:11:6d:c1:b1:4c:53:9a:b8:4e:ff: 02:33:32:4f:c3:27:e7:1c:c2:11:4e:02:cb:8d:6d:17:66:7c: 9e:39:10:72:28:ff:43:85:e3:3c:2c:5b:57:a4:2d:9c:9e:be: a4:a7:1e:2d:7e:d4:a2:a9:c1:d4:cf:c4:f4:a0:0d:09:14:59: 32:9e:a7:e2:8c:08:53:ee:a6:2e:3d:ed:8c:35:60:61:5e:e5: 00:cd:ee:c2:bb:78:1c:89:f7:a4:b1:4f:82:d1:56:14:36:3e: 42:8b:70:f3:87:d8:6c:4e:25:5b:fb:fa:d6:53:67:22:a1:14: c7:72:79:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/goD6UMIgr/wIk8AtETyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjYwNGRjNzg5MmJhOTlmNTM1Mjk2YjkxMDJkOGQ3YTE4 NDQzODgwHhcNMjYwMTAyMTYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDhkZWU1MzM0YTc2MWZlZDBlYzE2NmQ2MjMxNTBmZGYzYzVkOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBY9sKicNcqKMysqrRNs+vIYyWN5 +Zbl69ddhL8lffogXTAVrTzBcG1mnywuZs3OMo3BjrMTGKEWUswJ/Cge7lmvzfd/ roF+MpsFk0TlQe/XDVC6HcqGZPUcmSuhKNO/g9qpAIom4w0kfNFLqa/ycdRzuZ5m 5jIR3JAGTABMzNO/yuMiZYhKDHRK6lCbsHSG/OZDlnynw8gQMxhJvsxREwA9vehz ucvZNpNmBPUciJnDXpDAMmNMkvOcNO0PKQfH6M6utqr1SX/D9PenmLbph385+5rt gooYICnEJIEGuo/JruGzYGEBXLjbsdLHYzF/0FFDk/ZoLSgphL0a87gNVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICN7lM0p2H+0OwWbWIxUP3zxdjlMB8GA1UdIwQY MBaAFP/2BNx4krqZ9TUpa5EC2NehhEOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUt MWMxOTk0OWI5NmI2LzEvZ0kzdVV6U25ZZjdRN0JadFlqRlFfZlBGMk9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUtMWMxOTk0OWI5NmI2 LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wiMA0G CSqGSIb3DQEBCwUAA4IBAQCEXy4wg4Og1Be8P4uu7Pilez1L2Py6hYmUnKxEf4mB 4FSX14yEVWT56MyYCVD3QlOOk6NuP6BWgJWv1gmxkCw0VXNXkgKOUnMxKS/0d/iK 8eU1c8s247rUn64QpkNawCDOVXefbW5gvEMx2YAlVgsMlOc/Ayq/pmribRQnG2pK CLIVF2x7fhFtwbFMU5q4Tv8CMzJPwyfnHMIRTgLLjW0XZnyeORByKP9DheM8LFtX pC2cnr6kpx4tftSiqcHUz8T0oA0JFFkynqfijAhT7qYuPe2MNWBhXuUAze7Cu3gc ifeksU+C0VYUNj5Ci3Dzh9hsTiVb+/rWU2cioRTHcnkT -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:33 2026 by rpki-client