This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/iiTKAqZGJ6vws7T7EzUEpqTG4Yw.roa File: iiTKAqZGJ6vws7T7EzUEpqTG4Yw.roa (raw, json) Hash identifier: ebn3NWhZojsxDB0gw9zwRqNtjRbJ4CRhTXOu0mX7Whk= Subject key identifier: 8A:24:CA:02:A6:46:27:AB:F0:B3:B4:FB:13:35:04:A6:A4:C6:E1:8C Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Certificate serial: 019B7C7FB83F704E45E52CA69109A3697F64 Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/iiTKAqZGJ6vws7T7EzUEpqTG4Yw.roa Signing time: Fri 02 Jan 2026 02:18:23 +0000 ROA not before: Fri 02 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33847 IP address blocks: 91.212.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b8:3f:70:4e:45:e5:2c:a6:91:09:a3:69:7f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a24ca02a64627abf0b3b4fb133504a6a4c6e18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:7b:cb:0e:c0:79:41:2c:ae:4f:42:05:68: 22:33:8a:c7:d4:f6:6a:fa:9c:57:97:24:00:77:d7: 46:5c:78:ae:ea:05:0d:87:32:52:e1:b1:e1:88:c9: bb:5f:b5:e3:68:2d:fd:37:4d:3e:12:72:23:2c:36: ac:a3:98:f3:99:75:11:5f:e9:f5:47:f0:61:87:4c: 82:e3:36:33:8c:74:98:35:6f:c2:95:d7:a3:4c:de: 5e:1f:f0:b0:f5:08:cf:8d:57:a6:be:16:14:24:21: f7:d9:3c:57:6c:76:2f:2b:e6:40:bb:7c:f4:6d:56: 59:aa:90:68:cf:91:d2:96:d6:7f:d7:8a:9f:5a:c8: c7:34:2c:eb:c9:c1:39:bf:a7:03:a7:1a:db:d6:3b: f7:69:b0:51:88:a9:56:3c:5c:79:72:1b:ab:7f:71: 82:41:59:09:04:f2:1b:74:9d:7a:1a:3d:d1:c1:11: ee:dc:67:55:10:9c:51:e6:b2:8c:1c:76:fb:bd:7f: be:43:d2:c0:66:e5:95:57:ac:6f:de:91:fe:b8:28: 39:f4:c0:b2:6a:99:de:1d:a1:54:96:28:6a:52:28: e6:35:56:0e:c2:b6:45:93:c0:b2:8d:16:82:27:97: 4b:d5:88:48:15:84:93:72:98:b0:04:a5:3c:c5:29: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:24:CA:02:A6:46:27:AB:F0:B3:B4:FB:13:35:04:A6:A4:C6:E1:8C X509v3 Authority Key Identifier: keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/iiTKAqZGJ6vws7T7EzUEpqTG4Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.53.0/24 Signature Algorithm: sha256WithRSAEncryption bd:a5:dc:48:70:4f:d5:77:d8:ba:1f:08:95:73:2b:74:e9:e3: 35:58:2f:d3:a8:83:75:5c:87:3b:3d:82:3a:f0:36:7e:51:b6: 2a:b4:a9:4f:bc:c8:a4:ad:ed:12:b0:1b:ec:c5:7e:11:cd:ad: 14:35:f1:7e:a2:b9:ae:16:6a:4a:5e:ba:2b:bf:0d:c4:7a:ec: d6:4d:c8:29:c9:12:82:48:25:b8:bb:39:f5:03:bd:40:46:cd: 5a:af:53:ab:2d:4e:e7:e9:e6:cc:9e:dc:4c:b1:b2:e3:fb:7d: b6:a0:32:ec:23:55:5f:de:48:74:e5:ce:b4:11:f5:cc:81:7f: a9:d7:95:1e:cb:b2:bb:10:62:d3:44:fd:59:0e:7e:df:97:f6: 8d:30:ec:eb:c1:b0:25:bf:b4:05:84:dd:04:a6:90:7b:03:67: ae:e7:00:e6:03:e0:4c:83:df:18:89:a9:09:fd:6e:ca:8c:e9: 2c:e9:fa:48:fb:bb:74:8c:1e:ad:b9:63:f7:45:53:e4:3b:0f: 8d:9e:36:8d:6e:84:28:18:46:8c:fb:d4:bd:0c:30:a8:7f:be: 50:ae:5c:30:d6:f1:6c:c1:42:93:25:7e:4a:bb:f2:26:b0:39: 2a:a9:65:74:6e:08:9d:7c:34:bb:38:00:ee:43:a2:67:ef:3d: 09:91:a4:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7g/cE5F5SymkQmjaX9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk MzUyZWYwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTI0Y2EwMmE2NDYyN2FiZjBiM2I0ZmIxMzM1MDRhNmE0YzZlMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNR7yw7AeUEsrk9CBWgiM4rH1PZq +pxXlyQAd9dGXHiu6gUNhzJS4bHhiMm7X7XjaC39N00+EnIjLDaso5jzmXURX+n1 R/Bhh0yC4zYzjHSYNW/CldejTN5eH/Cw9QjPjVemvhYUJCH32TxXbHYvK+ZAu3z0 bVZZqpBoz5HSltZ/14qfWsjHNCzrycE5v6cDpxrb1jv3abBRiKlWPFx5churf3GC QVkJBPIbdJ16Gj3RwRHu3GdVEJxR5rKMHHb7vX++Q9LAZuWVV6xv3pH+uCg59MCy apneHaFUlihqUijmNVYOwrZFk8CyjRaCJ5dL1YhIFYSTcpiwBKU8xSkCkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIokygKmRier8LO0+xM1BKakxuGMMB8GA1UdIwQY MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct NmIwMDY1NTA4OTk2LzEvaWlUS0FxWkdKNnZ3czdUN0V6VUVwcVRHNFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2 LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9Q1MA0G CSqGSIb3DQEBCwUAA4IBAQC9pdxIcE/Vd9i6HwiVcyt06eM1WC/TqIN1XIc7PYI6 8DZ+UbYqtKlPvMikre0SsBvsxX4Rza0UNfF+ormuFmpKXrorvw3EeuzWTcgpyRKC SCW4uzn1A71ARs1ar1OrLU7n6ebMntxMsbLj+322oDLsI1Vf3kh05c60EfXMgX+p 15Uey7K7EGLTRP1ZDn7fl/aNMOzrwbAlv7QFhN0EppB7A2eu5wDmA+BMg98YiakJ /W7KjOks6fpI+7t0jB6tuWP3RVPkOw+NnjaNboQoGEaM+9S9DDCof75Qrlww1vFs wUKTJX5Ku/ImsDkqqWV0bgidfDS7OADuQ6Jn7z0JkaRm -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:53 2026 by rpki-client