This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/G790ctvfB8H7olkvHbj2C62gXak.roa File: G790ctvfB8H7olkvHbj2C62gXak.roa (raw, json) Hash identifier: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI= Subject key identifier: 1B:BF:74:72:DB:DF:07:C1:FB:A2:59:2F:1D:B8:F6:0B:AD:A0:5D:A9 Certificate issuer: /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862 Certificate serial: 019B7AC8D50CB6DCA2179E13F6A44FC127FA Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/G790ctvfB8H7olkvHbj2C62gXak.roa Signing time: Thu 01 Jan 2026 18:19:00 +0000 ROA not before: Thu 01 Jan 2026 18:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56461 IP address blocks: 91.224.176.0/23 maxlen: 24 188.191.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d5:0c:b6:dc:a2:17:9e:13:f6:a4:4f:c1:27:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862 Validity Not Before: Jan 1 18:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bbf7472dbdf07c1fba2592f1db8f60bada05da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:ff:d5:95:e7:a7:72:7d:6b:23:fd:6d:32: 02:c6:ce:cb:d7:25:6a:c6:f9:3d:a6:da:72:8a:ca: 5f:c5:76:f3:a9:59:5d:b2:78:e1:d6:3b:38:03:30: ce:42:5f:36:00:dc:6c:aa:2f:5e:95:22:52:99:f6: 2e:46:c8:ff:df:a5:11:44:c3:ee:0a:80:81:56:60: a8:1e:f8:91:01:7e:4f:e9:67:a5:14:6e:77:7f:07: 75:4f:f4:39:2f:7e:51:df:2a:ac:0c:c3:d6:b4:17: 32:dd:47:57:96:ee:a0:41:1c:ac:12:c2:91:94:9d: 1b:07:03:2a:36:6e:cc:73:3b:5b:e2:7c:49:04:5e: 03:9a:45:41:de:54:1e:7b:04:b4:11:02:7f:6a:32: 03:da:5c:6a:e9:0c:17:71:2d:07:b6:4b:ce:d2:9a: 89:4d:0a:2a:01:56:0d:3e:6f:88:95:12:00:1f:58: 15:bd:9e:14:2e:bf:1f:8c:ba:4f:dc:cb:6e:de:84: 42:de:fa:74:06:20:31:6b:d2:64:1c:28:2c:ba:67: 61:bb:71:8c:6e:93:6e:92:c7:77:a6:c1:9d:fe:78: 03:66:6d:e0:8d:f1:29:68:2b:55:9b:33:2d:dc:d4: 0f:47:45:fb:74:7c:47:17:60:02:a2:c1:71:92:36: 50:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BF:74:72:DB:DF:07:C1:FB:A2:59:2F:1D:B8:F6:0B:AD:A0:5D:A9 X509v3 Authority Key Identifier: keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/G790ctvfB8H7olkvHbj2C62gXak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.176.0/23 188.191.176.0/21 Signature Algorithm: sha256WithRSAEncryption 13:52:a9:c8:d7:21:f8:33:d6:6c:b4:56:c2:8d:b9:74:3d:4c: 45:d7:3f:b5:a7:a8:11:5e:5a:8b:1b:94:5c:63:7e:b8:a2:c1: 84:b4:42:0c:4f:4c:e8:1c:c0:b4:d9:77:20:c4:45:ad:06:09: d0:66:da:de:6f:34:17:18:1a:a4:58:39:c2:67:e2:10:3f:e6: 89:5c:b6:31:00:c9:66:95:f3:c9:4f:2e:5f:29:05:2a:c9:55: 4a:8a:af:f4:1f:b3:fa:ac:ec:b5:43:d7:87:ac:02:29:7a:fe: 00:69:ba:e1:30:e2:63:7b:df:47:cd:1d:c8:88:4e:07:bc:5c: bc:4f:db:45:44:9f:49:66:3e:b1:bd:1a:ba:ad:34:ea:ee:5f: 49:d5:46:53:2c:f2:e7:79:4d:f0:a1:5c:3d:19:d6:4f:27:6e: 2d:4d:eb:56:4b:c5:7b:f7:12:46:93:ba:25:c4:43:60:ee:df: 84:ba:86:e5:81:6e:4d:54:c2:62:6c:bf:fe:bc:05:d8:ca:7a: e5:6d:e9:c5:e1:9d:3c:5f:bc:c8:bf:5e:fc:55:4b:9e:a7:d9: 12:b4:a9:20:09:00:dd:26:86:fe:cd:e2:82:03:96:27:92:90: bc:59:b1:8e:6f:37:b9:aa:cb:9d:7c:14:e8:76:07:20:bd:97: c9:08:bc:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yNUMttyiF54T9qRPwSf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNWQ0NGY5MDI5ZTFiNWQ3NDNjZmNlNTgxMWVmZTVlMjZm OGM4NjIwHhcNMjYwMTAxMTgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmJmNzQ3MmRiZGYwN2MxZmJhMjU5MmYxZGI4ZjYwYmFkYTA1ZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nb/1ZXnp3J9ayP9bTICxs7L1yVq xvk9ptpyispfxXbzqVldsnjh1js4AzDOQl82ANxsqi9elSJSmfYuRsj/36URRMPu CoCBVmCoHviRAX5P6WelFG53fwd1T/Q5L35R3yqsDMPWtBcy3UdXlu6gQRysEsKR lJ0bBwMqNm7Mcztb4nxJBF4DmkVB3lQeewS0EQJ/ajID2lxq6QwXcS0HtkvO0pqJ TQoqAVYNPm+IlRIAH1gVvZ4ULr8fjLpP3Mtu3oRC3vp0BiAxa9JkHCgsumdhu3GM bpNuksd3psGd/ngDZm3gjfEpaCtVmzMt3NQPR0X7dHxHF2ACosFxkjZQvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBu/dHLb3wfB+6JZLx249gutoF2pMB8GA1UdIwQY MBaAFBNdRPkCnhtddDz85YEe/l4m+MhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUt ZDBkMzNiMTY2OGE1LzEvRzc5MGN0dmZCOEg3b2xrdkhiajJDNjJnWGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUtZDBkMzNiMTY2OGE1 LzEvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+CwAwQD vL+wMA0GCSqGSIb3DQEBCwUAA4IBAQATUqnI1yH4M9ZstFbCjbl0PUxF1z+1p6gR XlqLG5RcY364osGEtEIMT0zoHMC02XcgxEWtBgnQZtrebzQXGBqkWDnCZ+IQP+aJ XLYxAMlmlfPJTy5fKQUqyVVKiq/0H7P6rOy1Q9eHrAIpev4AabrhMOJje99HzR3I iE4HvFy8T9tFRJ9JZj6xvRq6rTTq7l9J1UZTLPLneU3woVw9GdZPJ24tTetWS8V7 9xJGk7olxENg7t+EuoblgW5NVMJibL/+vAXYynrlbenF4Z08X7zIv178VUuep9kS tKkgCQDdJob+zeKCA5YnkpC8WbGObze5qsudfBTodgcgvZfJCLyt -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:23 2026 by rpki-client