This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/2O9eCKbnivIh0i1Vc9-m9rRkiOU.roa File: 2O9eCKbnivIh0i1Vc9-m9rRkiOU.roa (raw, json) Hash identifier: gTes36XiettxaFcO8lDJWprf+0dK7PBoLXIx0f+Y0o4= Subject key identifier: D8:EF:5E:08:A6:E7:8A:F2:21:D2:2D:55:73:DF:A6:F6:B4:64:88:E5 Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88 Certificate serial: 019B797F1DB68BEDFEF820A4A4188ED7417D Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/2O9eCKbnivIh0i1Vc9-m9rRkiOU.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48756 IP address blocks: 91.212.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1d:b6:8b:ed:fe:f8:20:a4:a4:18:8e:d7:41:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8ef5e08a6e78af221d22d5573dfa6f6b46488e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:d1:b0:66:de:51:91:57:37:13:1f:68:3f: 2e:63:9c:6b:92:2f:32:62:23:53:86:c4:8f:aa:6a: 2c:6d:f0:34:75:c2:14:5c:0f:93:48:e5:14:9b:26: 86:8c:96:f7:5a:bb:bd:2d:18:e6:41:46:33:98:61: 55:ee:44:9b:4b:0e:69:f0:8e:c1:ea:8e:3b:18:69: f3:66:f4:0a:a1:26:03:37:aa:72:2e:f9:80:c5:53: 30:30:6e:4e:62:1d:6c:10:c0:09:ca:e2:c1:55:d1: 42:b1:51:ea:39:52:60:d4:43:7c:ac:5c:4c:f8:de: 16:9c:8e:0e:30:b6:29:07:7b:e2:bc:ff:0c:d5:43: f1:ae:92:1b:ff:a0:87:7e:eb:ce:3d:d8:8c:9e:15: 30:75:02:81:e4:f2:f0:a9:45:19:e0:e2:4e:96:0d: de:bd:de:c5:fd:15:d9:77:f8:27:80:fa:9a:9c:35: d7:70:61:f4:c4:99:e0:24:9e:9a:42:1a:58:68:3e: b5:d1:4c:e3:4c:d1:34:76:58:11:5d:c5:cb:3c:cb: 06:43:da:48:ef:d0:a0:72:1e:c3:ff:cb:2e:07:bf: c9:19:fe:ae:f6:95:76:f2:9d:df:86:b8:0f:75:f5: d9:bb:9b:c1:9d:4e:a7:94:8b:fa:e3:4c:f6:f4:33: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EF:5E:08:A6:E7:8A:F2:21:D2:2D:55:73:DF:A6:F6:B4:64:88:E5 X509v3 Authority Key Identifier: keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/2O9eCKbnivIh0i1Vc9-m9rRkiOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.22.0/24 Signature Algorithm: sha256WithRSAEncryption a2:a9:5a:8e:16:e0:70:f8:ae:3c:de:b1:c9:56:a6:71:a5:eb: df:56:01:8e:10:a6:33:d6:86:4a:ea:c9:67:cc:ec:ee:4f:aa: cb:ba:ed:a2:3b:18:c7:52:23:42:96:bc:7b:62:93:6a:a5:b3: d7:9c:cf:9d:e5:b1:e3:b4:ff:1d:b3:b6:25:fc:89:62:b1:bc: de:43:7b:20:9a:a6:05:d2:7e:12:26:65:1a:ad:28:11:f8:bb: 08:1c:50:e6:97:1b:dd:05:60:e8:30:b2:e3:0b:0d:f2:84:06: d8:46:e4:fb:47:73:8b:8f:ea:61:ac:61:fa:19:88:f0:c5:bf: b0:3c:bc:ac:0e:25:55:0e:80:24:7c:32:41:22:7c:86:22:61: f2:07:ec:e9:02:21:87:14:d1:72:09:33:45:c9:9b:eb:6a:59: 5b:c7:92:84:ef:b4:77:c4:23:ed:1b:74:f5:c9:1d:ad:e9:d8: 3c:a2:27:83:76:aa:df:c3:bf:d4:8d:b6:90:5c:86:a7:ea:8e: 2d:1b:08:70:d0:8e:ff:cb:4b:09:0b:2c:28:3b:e3:7b:a4:8a: 57:a2:0c:40:3f:27:91:93:9d:8a:02:ba:0b:06:d6:7c:f1:64: 3c:9c:4b:0d:1b:cc:ee:1d:67:46:66:f8:7b:9d:3e:b6:76:7f: ed:78:03:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fx22i+3++CCkpBiO10F9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjdmYjg0NzgxNzdmNDhjZjQ1YmVkMDdjYmVjZjliNmU5 NWRlODgwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGVmNWUwOGE2ZTc4YWYyMjFkMjJkNTU3M2RmYTZmNmI0NjQ4OGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtirRsGbeUZFXNxMfaD8uY5xrki8y YiNThsSPqmosbfA0dcIUXA+TSOUUmyaGjJb3Wru9LRjmQUYzmGFV7kSbSw5p8I7B 6o47GGnzZvQKoSYDN6pyLvmAxVMwMG5OYh1sEMAJyuLBVdFCsVHqOVJg1EN8rFxM +N4WnI4OMLYpB3vivP8M1UPxrpIb/6CHfuvOPdiMnhUwdQKB5PLwqUUZ4OJOlg3e vd7F/RXZd/gngPqanDXXcGH0xJngJJ6aQhpYaD610UzjTNE0dlgRXcXLPMsGQ9pI 79Cgch7D/8suB7/JGf6u9pV28p3fhrgPdfXZu5vBnU6nlIv640z29DPESQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjvXgim54ryIdItVXPfpva0ZIjlMB8GA1UdIwQY MBaAFEL3+4R4F39Iz0W+0Hy+z5tuld6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYt MWFjNGM1ZDQyOTJmLzEvMk85ZUNLYm5pdkloMGkxVmM5LW05clJraU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYtMWFjNGM1ZDQyOTJm LzEvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QWMA0G CSqGSIb3DQEBCwUAA4IBAQCiqVqOFuBw+K483rHJVqZxpevfVgGOEKYz1oZK6sln zOzuT6rLuu2iOxjHUiNClrx7YpNqpbPXnM+d5bHjtP8ds7Yl/IlisbzeQ3sgmqYF 0n4SJmUarSgR+LsIHFDmlxvdBWDoMLLjCw3yhAbYRuT7R3OLj+phrGH6GYjwxb+w PLysDiVVDoAkfDJBInyGImHyB+zpAiGHFNFyCTNFyZvrallbx5KE77R3xCPtG3T1 yR2t6dg8oieDdqrfw7/UjbaQXIan6o4tGwhw0I7/y0sJCywoO+N7pIpXogxAPyeR k52KAroLBtZ88WQ8nEsNG8zuHWdGZvh7nT62dn/teAMF -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:27 2026 by rpki-client