This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/e90N0aUxGaG0P6Y-qgc78O_5cZo.roa File: e90N0aUxGaG0P6Y-qgc78O_5cZo.roa (raw, json) Hash identifier: OVICK+i3D3qLf0VgswLpLCKXQM3k/vXeVHGe62dEn3w= Subject key identifier: 7B:DD:0D:D1:A5:31:19:A1:B4:3F:A6:3E:AA:07:3B:F0:EF:F9:71:9A Certificate issuer: /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e Certificate serial: 019B7759218E55198AEE46A84FB593C20CF1 Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/e90N0aUxGaG0P6Y-qgc78O_5cZo.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42892 IP address blocks: 91.193.220.0/22 maxlen: 22 91.193.220.0/23 maxlen: 23 91.193.222.0/23 maxlen: 23 94.45.192.0/19 maxlen: 19 94.45.192.0/22 maxlen: 22 94.45.196.0/22 maxlen: 22 94.45.199.0/24 maxlen: 24 94.45.200.0/22 maxlen: 22 94.45.201.0/24 maxlen: 24 94.45.204.0/22 maxlen: 22 94.45.208.0/22 maxlen: 22 94.45.212.0/22 maxlen: 22 94.45.216.0/22 maxlen: 22 94.45.220.0/22 maxlen: 22 176.120.224.0/19 maxlen: 19 176.120.224.0/21 maxlen: 21 176.120.236.0/24 maxlen: 24 176.120.237.0/24 maxlen: 24 176.120.238.0/24 maxlen: 24 176.120.239.0/24 maxlen: 24 176.120.240.0/21 maxlen: 21 176.120.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:21:8e:55:19:8a:ee:46:a8:4f:b5:93:c2:0c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bdd0dd1a53119a1b43fa63eaa073bf0eff9719a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:c8:60:b5:20:b9:56:e3:b9:27:05:1c:6d: 3e:d5:0b:95:94:2d:07:73:c4:5e:a3:9a:ea:8d:2e: 7e:25:b2:53:9a:36:76:21:83:0b:05:c7:a4:70:fe: 44:0d:c4:8f:e0:2e:5e:3c:b0:63:d9:aa:0b:f7:57: be:c2:2d:1c:36:c2:ec:07:32:01:f6:7b:33:d5:d3: 5e:bf:cf:d3:e3:bc:eb:36:e1:1f:ee:68:10:7b:2c: 04:ce:d2:df:b0:83:f0:c6:24:b4:e9:93:15:13:d0: eb:8b:0c:95:86:97:31:86:0b:14:54:1e:4b:90:ed: ce:fd:de:2e:8f:25:47:da:d9:75:f5:3d:f3:08:c5: 42:ad:b1:cf:fe:7a:af:4c:c8:2d:b0:85:4d:57:73: 1a:cd:5f:ad:b5:03:2c:fc:fb:02:af:48:03:1f:31: 31:77:45:bc:61:61:ae:ec:9a:b7:27:3f:56:1c:81: f6:73:cd:10:f0:7e:81:6f:f5:60:cf:9d:7b:3c:27: 56:57:5a:08:26:d7:42:3f:eb:92:fc:c7:d6:7c:7a: e1:1c:1a:5d:2b:d7:37:23:63:6c:f3:30:4e:46:f7: a7:7a:68:6a:49:d8:cb:bb:e9:ce:1a:db:c1:f8:7f: ef:2e:d7:43:9c:83:70:b5:e9:14:24:ad:c6:80:73: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DD:0D:D1:A5:31:19:A1:B4:3F:A6:3E:AA:07:3B:F0:EF:F9:71:9A X509v3 Authority Key Identifier: keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/e90N0aUxGaG0P6Y-qgc78O_5cZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.220.0/22 94.45.192.0/19 176.120.224.0/19 Signature Algorithm: sha256WithRSAEncryption b1:21:a5:ba:ee:38:ee:3a:ac:02:be:15:d8:a2:3f:83:aa:ea: f6:14:b6:b0:dc:4b:69:48:ad:95:1f:e7:6b:5c:88:34:3d:d0: 4c:86:d5:15:f2:b8:88:27:fb:8b:a9:94:e0:ad:01:31:5c:d9: 80:53:ef:96:2d:6a:c4:dd:4f:7b:ad:2c:06:1a:52:fd:09:68: 22:00:f8:82:d6:e1:51:96:20:20:a3:46:38:32:5d:cf:04:fe: 51:22:ce:bd:93:3b:91:b4:fc:94:9d:01:9c:d2:35:94:ec:8e: 75:12:0c:82:c5:78:2f:6d:b5:ec:ee:3e:6a:21:c2:7c:e2:ff: 5c:d1:9a:cb:0c:86:12:71:0d:3a:d9:e3:dd:6b:11:44:62:1c: 57:4b:48:c9:8b:44:26:63:da:2d:aa:5c:63:70:51:2d:86:66: cd:81:b3:71:a5:d0:32:a1:77:4b:7c:02:67:8d:b9:8b:cc:88: 1c:9f:d3:e6:ec:78:d7:50:fa:80:f1:c2:ab:68:c5:fe:10:54: 3d:09:4e:eb:dc:07:a4:5b:7d:86:39:a6:9b:f1:8d:6c:b7:5f: 26:52:2a:16:72:72:fe:ce:6f:7e:5b:5f:62:1b:4b:2e:b4:4c: dc:4e:37:82:4b:03:28:4f:c8:56:fc:7f:a2:89:5a:e6:d1:b9: 5e:5d:b5:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WSGOVRmK7kaoT7WTwgzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmY2MyZjNlZTZiNWMzZmY2ZGM1MzQ2YTc1MzU1MDZmYTgy NDEyM2UwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmRkMGRkMWE1MzExOWExYjQzZmE2M2VhYTA3M2JmMGVmZjk3MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3LIYLUguVbjuScFHG0+1QuVlC0H c8Reo5rqjS5+JbJTmjZ2IYMLBcekcP5EDcSP4C5ePLBj2aoL91e+wi0cNsLsBzIB 9nsz1dNev8/T47zrNuEf7mgQeywEztLfsIPwxiS06ZMVE9DriwyVhpcxhgsUVB5L kO3O/d4ujyVH2tl19T3zCMVCrbHP/nqvTMgtsIVNV3MazV+ttQMs/PsCr0gDHzEx d0W8YWGu7Jq3Jz9WHIH2c80Q8H6Bb/Vgz517PCdWV1oIJtdCP+uS/MfWfHrhHBpd K9c3I2Ns8zBORvenemhqSdjLu+nOGtvB+H/vLtdDnINwtekUJK3GgHM8NwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHvdDdGlMRmhtD+mPqoHO/Dv+XGaMB8GA1UdIwQY MBaAFJ/MLz7mtcP/bcU0anU1UG+oJBI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83Zjg0MGQtM2JkNC00ZmFkLTlhMTUt OGJmMDRhZjRiMmI0LzEvZTkwTjBhVXhHYUcwUDZZLXFnYzc4T181Y1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83Zjg0MGQtM2JkNC00ZmFkLTlhMTUtOGJmMDRhZjRiMmI0 LzEvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8HcAwQF Xi3AAwQFsHjgMA0GCSqGSIb3DQEBCwUAA4IBAQCxIaW67jjuOqwCvhXYoj+Dqur2 FLaw3EtpSK2VH+drXIg0PdBMhtUV8riIJ/uLqZTgrQExXNmAU++WLWrE3U97rSwG GlL9CWgiAPiC1uFRliAgo0Y4Ml3PBP5RIs69kzuRtPyUnQGc0jWU7I51EgyCxXgv bbXs7j5qIcJ84v9c0ZrLDIYScQ062ePdaxFEYhxXS0jJi0QmY9otqlxjcFEthmbN gbNxpdAyoXdLfAJnjbmLzIgcn9Pm7HjXUPqA8cKraMX+EFQ9CU7r3AekW32GOaab 8Y1st18mUioWcnL+zm9+W19iG0sutEzcTjeCSwMoT8hW/H+iiVrm0bleXbVW -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:27 2026 by rpki-client