This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/_9jmpjcQFwSsKwZDpKMfAdoAfAc.roa File: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (raw, json) Hash identifier: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk= Subject key identifier: FF:D8:E6:A6:37:10:17:04:AC:2B:06:43:A4:A3:1F:01:DA:00:7C:07 Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6 Certificate serial: 019B791029ACD14BE88EBEAF58CB66475A30 Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/_9jmpjcQFwSsKwZDpKMfAdoAfAc.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47329 IP address blocks: 91.206.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:29:ac:d1:4b:e8:8e:be:af:58:cb:66:47:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffd8e6a637101704ac2b0643a4a31f01da007c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:14:11:60:1c:ae:46:d8:4a:9c:96:06:34: 77:3b:6a:92:c3:e1:1b:26:35:9b:c0:19:6f:32:52: fa:42:d6:12:c9:5d:05:f5:42:06:2f:4e:01:b6:b8: cb:08:3b:cc:2b:0b:f1:da:aa:c4:7d:d0:d4:57:65: 42:9d:7d:b5:a4:b2:ee:b0:0c:5d:09:98:b0:70:38: 59:be:7d:fe:7a:e1:23:bb:62:70:92:3a:b3:56:51: e9:dc:ca:c3:1f:b0:3d:28:c7:81:00:cf:65:11:db: 35:ef:3c:4d:0b:db:28:da:2c:22:c2:be:b6:64:16: 6f:15:35:c9:a3:82:59:6f:2c:57:49:4d:bd:f2:33: cb:b0:c3:4e:f0:88:e3:af:de:77:af:b6:c2:6b:03: 90:a3:9e:a5:6f:6a:33:15:03:10:68:cd:49:16:b0: 21:c2:f0:dd:07:72:9f:8d:d5:5e:b0:6d:4a:24:aa: 96:85:d6:29:52:c9:ff:a6:d6:f7:6d:e2:9a:4e:94: 26:8e:a4:47:7b:e8:16:5b:3d:19:05:a8:05:cf:74: 4c:5a:bc:b5:c5:96:b8:27:8a:d5:20:99:c5:2f:79: 3e:fb:05:1f:55:4c:cd:ff:25:68:2f:61:3d:1c:76: a5:e3:6c:35:f1:84:09:52:6e:c8:53:f0:a1:19:19: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D8:E6:A6:37:10:17:04:AC:2B:06:43:A4:A3:1F:01:DA:00:7C:07 X509v3 Authority Key Identifier: keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/_9jmpjcQFwSsKwZDpKMfAdoAfAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.114.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:35:6e:77:01:4d:c8:9a:33:e2:39:d5:23:68:7c:f2:6f:54: 1d:8e:08:a6:7a:98:d4:42:48:1f:6c:d3:b2:13:c4:d7:3a:b2: b2:ab:3c:c1:ab:e8:70:62:30:f1:b1:4c:60:9e:f6:3c:0b:cd: a7:c0:8a:10:95:92:d7:f1:0e:1c:4b:bc:5b:bd:29:6d:36:dc: cf:dc:84:03:02:b2:22:b6:01:06:e8:f5:37:7e:11:ee:46:9d: cd:4e:25:63:26:5d:73:05:ae:d5:5e:9b:08:20:4f:b2:f2:54: 8e:bc:c2:02:88:33:fb:b7:24:13:dc:a3:4a:f8:92:96:9a:25: ec:bc:d9:b5:67:ac:3a:45:dc:86:34:55:15:15:1d:42:2b:3d: 73:89:42:ab:66:5a:6d:01:34:35:80:ba:ce:85:fe:f2:f4:a1: c6:b8:06:34:bf:fe:45:a3:b4:8f:5b:20:c7:6e:76:8b:45:21: 2d:4f:cc:8c:38:06:10:12:5e:87:c8:15:e1:8a:e1:e5:bb:e4: 87:52:63:72:3c:c3:e9:49:da:3d:61:8f:a5:ce:e4:44:a0:f2: 60:ac:d6:af:50:0e:4a:46:30:a9:d2:77:8f:65:76:ee:3b:f9: c3:e0:12:33:36:5e:c2:79:71:79:d1:78:58:41:0d:59:d0:17: 69:e7:c4:ba -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5ECms0Uvojr6vWMtmR1owMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWQ1NGUxNTg1YWMwOTdjM2Y5MWRlZmMwMzNkZGE1NzIy ZWExZTYwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmQ4ZTZhNjM3MTAxNzA0YWMyYjA2NDNhNGEzMWYwMWRhMDA3YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYYUEWAcrkbYSpyWBjR3O2qSw+Eb JjWbwBlvMlL6QtYSyV0F9UIGL04BtrjLCDvMKwvx2qrEfdDUV2VCnX21pLLusAxd CZiwcDhZvn3+euEju2JwkjqzVlHp3MrDH7A9KMeBAM9lEds17zxNC9so2iwiwr62 ZBZvFTXJo4JZbyxXSU298jPLsMNO8Ijjr953r7bCawOQo56lb2ozFQMQaM1JFrAh wvDdB3KfjdVesG1KJKqWhdYpUsn/ptb3beKaTpQmjqRHe+gWWz0ZBagFz3RMWry1 xZa4J4rVIJnFL3k++wUfVUzN/yVoL2E9HHal42w18YQJUm7IU/ChGRm+bQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFP/Y5qY3EBcErCsGQ6SjHwHaAHwHMB8GA1UdIwQY MBaAFPodVOFYWsCXw/kd78Az3aVyLqHmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oMVU0Vmhhd0pmRC1SM3Z3RFBkcFhJdW9lWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvNGQ3MDBlLTlmMWUtNDk1OS05Y2Zk LWIyYjU3MmUyNWFmZC8xL185am1wamNRRndTc0t3WkRwS01mQWRvQWZBYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTgvNGQ3MDBlLTlmMWUtNDk1OS05Y2ZkLWIyYjU3MmUyNWFm ZC8xLzEtaDFVNFZoYXdKZkQtUjN2d0RQZHBYSXVvZVkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFbznIw DQYJKoZIhvcNAQELBQADggEBAEw1bncBTciaM+I51SNofPJvVB2OCKZ6mNRCSB9s 07ITxNc6srKrPMGr6HBiMPGxTGCe9jwLzafAihCVktfxDhxLvFu9KW023M/chAMC siK2AQbo9Td+Ee5Gnc1OJWMmXXMFrtVemwggT7LyVI68wgKIM/u3JBPco0r4kpaa Jey82bVnrDpF3IY0VRUVHUIrPXOJQqtmWm0BNDWAus6F/vL0oca4BjS//kWjtI9b IMdudotFIS1PzIw4BhASXofIFeGK4eW75IdSY3I8w+lJ2j1hj6XO5ESg8mCs1q9Q DkpGMKnSd49ldu47+cPgEjM2XsJ5cXnReFhBDVnQF2nnxLo= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:03 2026 by rpki-client