This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/yIPdIGKPSnnWaFjIROBzg5HRQN4.roa File: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (raw, json) Hash identifier: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg= Subject key identifier: C8:83:DD:20:62:8F:4A:79:D6:68:58:C8:44:E0:73:83:91:D1:40:DE Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7 Certificate serial: 019B7DC8919757862818730E4D726094D65C Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/yIPdIGKPSnnWaFjIROBzg5HRQN4.roa Signing time: Fri 02 Jan 2026 08:17:35 +0000 ROA not before: Fri 02 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 91.220.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:91:97:57:86:28:18:73:0e:4d:72:60:94:d6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7 Validity Not Before: Jan 2 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c883dd20628f4a79d66858c844e0738391d140de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:50:75:96:72:b6:0e:1b:d3:b2:97:67:b3: 3e:9e:6c:11:cd:84:6b:fd:0b:89:ac:0f:f1:da:45: f0:04:28:07:1c:90:af:cf:bc:28:3c:ff:1b:90:6c: f8:ad:27:43:5e:8d:05:44:8b:13:ee:64:1f:6d:80: 71:90:36:38:ab:1f:33:4b:25:f0:d0:54:aa:d1:8a: 23:f6:4f:0b:2d:c8:43:62:3d:d0:e9:2b:e3:59:e7: eb:e3:e1:09:e7:36:1a:22:c0:8f:a8:f2:da:38:6a: c0:91:3e:8b:c9:0c:fe:fe:6a:02:6c:be:c1:d1:7d: a3:b5:82:fd:37:be:fd:00:b2:54:cd:8a:11:b9:47: f4:14:96:f5:f8:20:34:b0:a6:81:9f:7a:20:db:e3: 03:ff:4b:bd:a1:2a:d2:0f:e9:fe:22:78:5b:b3:67: ef:66:e6:be:32:c5:df:39:74:33:45:bc:a6:b3:e6: 21:5a:21:16:0a:23:47:46:85:38:f1:63:d9:0d:a0: 2d:6d:6e:73:90:e2:ad:3a:6c:9f:e6:3f:f9:57:5f: f5:80:4e:58:81:98:e4:b3:cd:de:5e:78:fa:dc:26: 3e:58:aa:e8:0d:0a:dd:1a:84:38:f8:09:3c:8e:47: 63:b5:bd:93:92:8f:48:0b:42:91:d4:03:a9:66:22: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:DD:20:62:8F:4A:79:D6:68:58:C8:44:E0:73:83:91:D1:40:DE X509v3 Authority Key Identifier: keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/yIPdIGKPSnnWaFjIROBzg5HRQN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.50.0/24 Signature Algorithm: sha256WithRSAEncryption 69:b7:bc:59:a4:99:d5:db:3e:da:53:21:0a:bf:71:c5:7f:5e: 84:0f:fd:19:39:c0:7b:86:46:a5:a1:7c:db:1a:72:a4:fd:a8: 7c:53:31:1f:4b:07:55:31:c9:c9:0e:09:e0:76:6d:e6:5a:f0: ee:8d:95:5b:8c:4d:b8:3e:da:b7:e8:21:d1:e5:5f:ca:f0:bb: 39:ca:3f:c7:9a:55:e4:c9:f5:fc:0f:31:5f:bf:8a:d3:97:63: 90:3b:5f:b9:be:63:c5:44:aa:78:60:36:16:a5:65:1e:4b:0c: ec:5b:29:b7:8a:ea:ed:60:a6:0b:f9:97:ee:34:92:9c:90:be: 9f:62:29:4c:91:1e:58:c3:50:03:74:0d:49:ce:1e:55:1e:ae: b1:78:8d:a1:59:58:58:4f:23:82:a2:d6:32:cf:53:1c:eb:18: be:e4:9d:19:a6:9d:28:be:e6:a6:4f:33:4a:af:68:2b:3a:66: c9:16:bd:e5:59:cc:a4:98:f4:8f:89:45:91:c3:04:7b:d0:98: 66:14:0b:e2:a7:a8:fa:eb:b5:99:bf:24:b1:f2:16:8d:f5:45: 4d:8f:0d:c5:00:f6:d1:98:5e:09:a9:14:de:19:80:e6:c3:e1: 3c:45:72:97:05:2e:ba:d5:31:4f:cd:ba:36:a8:04:73:b8:00: c5:1a:da:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yJGXV4YoGHMOTXJglNZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODQ3N2U1NjlkMWQ3ZDYwZjA0NjlhN2NjOGE3ZjQ3NDYw MzliYjcwHhcNMjYwMTAyMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODgzZGQyMDYyOGY0YTc5ZDY2ODU4Yzg0NGUwNzM4MzkxZDE0MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnghQdZZytg4b07KXZ7M+nmwRzYRr /QuJrA/x2kXwBCgHHJCvz7woPP8bkGz4rSdDXo0FRIsT7mQfbYBxkDY4qx8zSyXw 0FSq0Yoj9k8LLchDYj3Q6SvjWefr4+EJ5zYaIsCPqPLaOGrAkT6LyQz+/moCbL7B 0X2jtYL9N779ALJUzYoRuUf0FJb1+CA0sKaBn3og2+MD/0u9oSrSD+n+Inhbs2fv Zua+MsXfOXQzRbyms+YhWiEWCiNHRoU48WPZDaAtbW5zkOKtOmyf5j/5V1/1gE5Y gZjks83eXnj63CY+WKroDQrdGoQ4+Ak8jkdjtb2Tko9IC0KR1AOpZiKy6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiD3SBij0p51mhYyETgc4OR0UDeMB8GA1UdIwQY MBaAFE+Ed+Vp0dfWDwRpp8yKf0dGA5u3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEt YWQxNDdkOTE1NzkxLzEveUlQZElHS1BTbm5XYUZqSVJPQnpnNUhSUU40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEtYWQxNDdkOTE1Nzkx LzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wyMA0G CSqGSIb3DQEBCwUAA4IBAQBpt7xZpJnV2z7aUyEKv3HFf16ED/0ZOcB7hkaloXzb GnKk/ah8UzEfSwdVMcnJDgngdm3mWvDujZVbjE24Ptq36CHR5V/K8Ls5yj/HmlXk yfX8DzFfv4rTl2OQO1+5vmPFRKp4YDYWpWUeSwzsWym3iurtYKYL+ZfuNJKckL6f YilMkR5Yw1ADdA1Jzh5VHq6xeI2hWVhYTyOCotYyz1Mc6xi+5J0Zpp0ovuamTzNK r2grOmbJFr3lWcykmPSPiUWRwwR70JhmFAvip6j667WZvySx8haN9UVNjw3FAPbR mF4JqRTeGYDmw+E8RXKXBS661TFPzbo2qARzuADFGtpB -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:03 2026 by rpki-client