This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/ij4gJmjVgeqYXeQbD1ZtwxDVXqs.roa File: ij4gJmjVgeqYXeQbD1ZtwxDVXqs.roa (raw, json) Hash identifier: tgnllS0U1hZ0N2hin4TK1nqPVptt1uSkt6Jkh0W7oGk= Subject key identifier: 8A:3E:20:26:68:D5:81:EA:98:5D:E4:1B:0F:56:6D:C3:10:D5:5E:AB Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57 Certificate serial: 019B7BA342B221EE227026A00FA3AC119D28 Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/ij4gJmjVgeqYXeQbD1ZtwxDVXqs.roa Signing time: Thu 01 Jan 2026 22:17:35 +0000 ROA not before: Thu 01 Jan 2026 22:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20769 IP address blocks: 91.208.87.0/24 maxlen: 32 2a04:a500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:42:b2:21:ee:22:70:26:a0:0f:a3:ac:11:9d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57 Validity Not Before: Jan 1 22:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a3e202668d581ea985de41b0f566dc310d55eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:39:42:a8:fb:cf:73:0d:70:f2:96:fe:c6: e4:3a:d1:03:91:e1:a8:a1:c5:14:02:b3:93:41:23: 93:39:fd:68:c8:87:6a:ce:44:26:b2:da:3f:24:d0: bc:5f:ab:27:b1:55:3c:b8:b8:a3:dc:4a:22:9c:74: d7:89:b1:43:0b:d1:d4:ac:ab:80:76:57:eb:06:a2: 3c:82:7a:81:53:28:f7:b0:e2:d1:46:7d:1e:72:c0: 82:df:db:52:b1:95:15:b8:c9:68:2f:fc:0d:fc:e1: eb:05:e3:bb:34:5e:1b:d1:5b:fc:8d:20:03:08:38: c6:09:e6:d4:d2:dd:d7:f4:6a:86:9c:2a:51:cc:07: 43:5e:fe:aa:28:cc:14:8b:a9:b1:f2:3f:bc:09:b5: b1:bc:d5:e0:11:dd:58:84:9e:d5:b1:94:b1:aa:4d: 10:3b:06:df:89:b1:71:aa:38:f8:05:34:92:56:64: a8:19:33:19:b5:a6:4b:77:b1:e6:f0:6b:c6:4c:97: 7c:a5:6c:49:6d:fe:67:82:99:9a:6a:64:bc:68:bd: fb:00:58:93:c0:33:69:8e:17:14:12:9c:14:86:e7: f5:ab:29:b9:9c:6b:fb:01:43:33:be:25:fe:56:fa: b1:1c:92:51:6a:0d:d7:91:4b:8f:c1:ab:02:f4:58: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3E:20:26:68:D5:81:EA:98:5D:E4:1B:0F:56:6D:C3:10:D5:5E:AB X509v3 Authority Key Identifier: keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/ij4gJmjVgeqYXeQbD1ZtwxDVXqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.87.0/24 IPv6: 2a04:a500::/29 Signature Algorithm: sha256WithRSAEncryption 4a:17:09:c0:84:bc:cc:10:95:82:2f:17:1a:17:2d:0e:d8:f6: 11:64:0b:99:0f:ab:af:f8:b2:2c:57:e2:08:50:d4:19:15:63: ae:93:38:12:cf:81:71:dc:a9:f1:61:69:12:c5:fb:4e:a1:9e: c6:71:cb:e1:4f:88:ec:71:0e:bc:1e:d0:c5:b6:da:4d:a0:86: 67:ec:f2:71:5c:99:e0:06:fa:e6:1d:38:8d:66:19:f5:cb:3d: 46:e6:17:f0:02:cb:f2:d6:ea:71:c7:75:7b:76:61:1e:5f:60: 6b:ba:21:5b:12:36:be:fc:3d:5d:5f:15:92:30:ee:db:e8:b5: fd:07:96:41:3c:35:5f:47:d5:99:2c:aa:25:7a:c6:03:12:ee: 04:fb:42:e4:a7:d1:51:5b:d9:8a:52:04:31:ce:ba:64:49:db: 38:5a:63:be:c2:7f:03:4e:de:d9:46:92:d6:df:ab:b3:96:f8: 5f:36:bc:6c:6d:3e:ac:56:44:7e:dc:34:d8:cc:42:91:7b:b2: 12:d2:89:60:74:ea:0f:48:ce:cd:92:9d:02:c3:97:dc:35:d8: 02:4f:a3:cc:cf:0a:39:8f:a9:e6:f7:41:2b:c5:5a:e6:65:0c: cd:e4:84:a5:79:84:cb:e7:42:53:ec:2f:b0:4e:5f:49:03:ff: 00:28:f1:f8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7o0KyIe4icCagD6OsEZ0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTgyNmRlMTA3MGQ5ZDc5ZGFhOWU0MTVmYzQzMjYxM2Nj NTdlNTcwHhcNMjYwMTAxMjIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTNlMjAyNjY4ZDU4MWVhOTg1ZGU0MWIwZjU2NmRjMzEwZDU1ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X85Qqj7z3MNcPKW/sbkOtEDkeGo ocUUArOTQSOTOf1oyIdqzkQmsto/JNC8X6snsVU8uLij3EoinHTXibFDC9HUrKuA dlfrBqI8gnqBUyj3sOLRRn0ecsCC39tSsZUVuMloL/wN/OHrBeO7NF4b0Vv8jSAD CDjGCebU0t3X9GqGnCpRzAdDXv6qKMwUi6mx8j+8CbWxvNXgEd1YhJ7VsZSxqk0Q OwbfibFxqjj4BTSSVmSoGTMZtaZLd7Hm8GvGTJd8pWxJbf5ngpmaamS8aL37AFiT wDNpjhcUEpwUhuf1qym5nGv7AUMzviX+VvqxHJJRag3XkUuPwasC9FhD5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIo+ICZo1YHqmF3kGw9WbcMQ1V6rMB8GA1UdIwQY MBaAFPjoJt4QcNnXnaqeQV/EMmE8xX5XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PZ20zaEJ3MmRlZHFwNUJYOFF5WVR6RmZsYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNzNkYjc3LTBhNmItNGY5Yi1hOGU4 LWVhZWRiNzA5ZWZiZi8xL2lqNGdKbWpWZ2VxWVhlUWJEMVp0d3hEVlhxcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWQvNzNkYjc3LTBhNmItNGY5Yi1hOGU4LWVhZWRiNzA5ZWZi Zi8xLzEtT2dtM2hCdzJkZWRxcDVCWDhReVlUekZmbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABb0Fcw DQQCAAIwBwMFAyoEpQAwDQYJKoZIhvcNAQELBQADggEBAEoXCcCEvMwQlYIvFxoX LQ7Y9hFkC5kPq6/4sixX4ghQ1BkVY66TOBLPgXHcqfFhaRLF+06hnsZxy+FPiOxx Drwe0MW22k2ghmfs8nFcmeAG+uYdOI1mGfXLPUbmF/ACy/LW6nHHdXt2YR5fYGu6 IVsSNr78PV1fFZIw7tvotf0HlkE8NV9H1ZksqiV6xgMS7gT7QuSn0VFb2YpSBDHO umRJ2zhaY77CfwNO3tlGktbfq7OW+F82vGxtPqxWRH7cNNjMQpF7shLSiWB06g9I zs2SnQLDl9w12AJPo8zPCjmPqeb3QSvFWuZlDM3khKV5hMvnQlPsL7BOX0kD/wAo 8fg= -----END CERTIFICATE-----Generated at Tue Feb 10 07:52:03 2026 by rpki-client