This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/sYaZQ3u2p7Idos9F2hdpdk29H-8.roa File: sYaZQ3u2p7Idos9F2hdpdk29H-8.roa (raw, json) Hash identifier: qUgIR43iEvfVLnAh9SKc6qTcZrxYuGi/KZLcH3UDKI8= Subject key identifier: B1:86:99:43:7B:B6:A7:B2:1D:A2:CF:45:DA:17:69:76:4D:BD:1F:EF Certificate issuer: /CN=c11d08186433903069b5d6bb652f98428f53c808 Certificate serial: 019B79ED217CC5211EA0E025146C9B46A06D Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/sYaZQ3u2p7Idos9F2hdpdk29H-8.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200031 IP address blocks: 91.193.40.0/23 maxlen: 24 91.215.44.0/23 maxlen: 24 91.215.46.0/24 maxlen: 24 195.60.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:21:7c:c5:21:1e:a0:e0:25:14:6c:9b:46:a0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b18699437bb6a7b21da2cf45da1769764dbd1fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:d2:ad:a9:c5:19:89:1c:62:32:e2:d3:30: 9e:a1:72:5e:33:9d:ac:73:43:0c:cd:c3:b5:76:2e: 57:78:c5:1b:33:72:04:62:94:2e:05:6c:6e:26:44: 4e:59:94:f7:f8:32:ae:7b:9d:ec:3d:aa:5f:7a:15: b1:db:f9:37:17:bf:31:d6:53:38:d1:c2:70:6f:6c: fe:42:09:62:e6:4f:74:68:38:c5:15:f1:e3:d5:35: 04:0b:a6:17:79:b3:b5:da:fd:ac:20:e5:bb:59:cd: 41:27:6d:66:16:0c:ab:f0:16:d1:c7:62:a6:ff:70: ca:ae:d3:44:a6:6c:85:26:89:94:db:32:0e:9d:9d: 07:82:70:9a:20:96:3c:77:f5:cb:7f:37:4c:75:f8: 4c:a0:4a:25:a4:5a:e3:c8:6b:01:3d:5e:ed:69:31: b4:6d:50:ff:bb:04:6f:80:e8:92:64:92:4c:50:5e: 9b:50:39:52:54:40:79:9b:71:61:34:a5:8c:b4:56: bb:16:8c:ef:db:d4:f2:6e:b4:5a:27:b3:fd:03:96: d1:3f:07:b1:6e:0f:14:4f:4c:79:ef:a2:1b:36:eb: e0:59:2d:b8:41:75:92:1d:e4:5e:48:52:e1:38:6c: 06:17:24:2f:2a:75:3f:18:45:a0:36:15:72:6c:32: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:99:43:7B:B6:A7:B2:1D:A2:CF:45:DA:17:69:76:4D:BD:1F:EF X509v3 Authority Key Identifier: keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/sYaZQ3u2p7Idos9F2hdpdk29H-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.40.0/23 91.215.44.0-91.215.46.255 195.60.64.0/23 Signature Algorithm: sha256WithRSAEncryption 57:74:3e:64:60:aa:89:86:90:67:c1:07:8c:3d:8b:fd:08:37: 6d:a6:8b:95:08:48:1b:d4:9b:63:1d:4d:7e:da:d3:a1:01:db: 1f:51:d7:38:8b:1c:d2:5a:8b:5b:e7:a8:db:66:a9:97:90:3c: 75:ea:2e:c8:a9:4d:24:32:ca:2e:9f:8f:b2:ad:9c:e5:1f:3f: 12:f3:9d:af:34:f9:e9:0a:39:7b:7a:8b:27:d9:00:cb:1a:b6: 33:7b:00:10:f9:09:d0:53:ca:14:f2:71:fe:8a:bf:09:e9:c6: af:b1:b8:dc:60:9f:9e:28:51:5f:10:37:be:6e:26:33:ae:67: 0a:a9:4d:26:96:99:61:b4:24:98:14:7c:05:30:60:69:00:88: 69:f6:da:97:f5:dd:62:8c:14:5a:ce:c7:22:1e:47:3f:d5:9c: 52:28:1a:21:68:7d:cc:31:5c:c6:0e:e8:0c:1b:8d:5f:e1:f9: 5b:00:6f:3d:e6:18:72:fe:f6:23:3f:6e:b0:7b:28:48:7d:3e: 54:f0:b3:49:28:11:ca:97:a5:33:44:9d:bf:ed:9d:3c:cf:39: 19:47:8b:39:d9:12:e6:ef:51:b5:48:8a:d8:d7:6d:94:3e:f7: 28:dd:bb:cf:24:60:9c:a5:07:4a:bc:c4:89:09:ce:89:cc:2c: 20:d6:55:8d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt57SF8xSEeoOAlFGybRqBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWQwODE4NjQzMzkwMzA2OWI1ZDZiYjY1MmY5ODQyOGY1 M2M4MDgwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTg2OTk0MzdiYjZhN2IyMWRhMmNmNDVkYTE3Njk3NjRkYmQxZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ/SranFGYkcYjLi0zCeoXJeM52s c0MMzcO1di5XeMUbM3IEYpQuBWxuJkROWZT3+DKue53sPapfehWx2/k3F78x1lM4 0cJwb2z+Qgli5k90aDjFFfHj1TUEC6YXebO12v2sIOW7Wc1BJ21mFgyr8BbRx2Km /3DKrtNEpmyFJomU2zIOnZ0HgnCaIJY8d/XLfzdMdfhMoEolpFrjyGsBPV7taTG0 bVD/uwRvgOiSZJJMUF6bUDlSVEB5m3FhNKWMtFa7Fozv29TybrRaJ7P9A5bRPwex bg8UT0x576IbNuvgWS24QXWSHeReSFLhOGwGFyQvKnU/GEWgNhVybDL2QQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLGGmUN7tqeyHaLPRdoXaXZNvR/vMB8GA1UdIwQY MBaAFMEdCBhkM5AwabXWu2UvmEKPU8gIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1IwSUdHUXprREJwdGRhN1pTLVlRbzlUeUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNjMzNTItODA4OC00ZjViLWE2MjAt YWViNWNkOGRlMTVkLzEvc1lhWlEzdTJwN0lkb3M5RjJoZHBkazI5SC04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNjMzNTItODA4OC00ZjViLWE2MjAtYWViNWNkOGRlMTVk LzEvd1IwSUdHUXprREJwdGRhN1pTLVlRbzlUeUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBW8EoMAwD BAJb1ywDBABb1y4DBAHDPEAwDQYJKoZIhvcNAQELBQADggEBAFd0PmRgqomGkGfB B4w9i/0IN22mi5UISBvUm2MdTX7a06EB2x9R1ziLHNJai1vnqNtmqZeQPHXqLsip TSQyyi6fj7KtnOUfPxLzna80+ekKOXt6iyfZAMsatjN7ABD5CdBTyhTycf6Kvwnp xq+xuNxgn54oUV8QN75uJjOuZwqpTSaWmWG0JJgUfAUwYGkAiGn22pf13WKMFFrO xyIeRz/VnFIoGiFofcwxXMYO6AwbjV/h+VsAbz3mGHL+9iM/brB7KEh9PlTws0ko EcqXpTNEnb/tnTzPORlHiznZEubvUbVIitjXbZQ+9yjdu88kYJylB0q8xIkJzonM LCDWVY0= -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:13 2026 by rpki-client