This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/Rd5ogL0rZH0GwJinSJKEBpZALRE.roa File: Rd5ogL0rZH0GwJinSJKEBpZALRE.roa (raw, json) Hash identifier: nV1zKTqNKFR84ggPUZVLKnPWuVDibn1TXYU/+rnDjXA= Subject key identifier: 45:DE:68:80:BD:2B:64:7D:06:C0:98:A7:48:92:84:06:96:40:2D:11 Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b Certificate serial: 019B7D5CC52D10B19C94860C4B0B8EB1FBA1 Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/Rd5ogL0rZH0GwJinSJKEBpZALRE.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8304 IP address blocks: 91.223.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c5:2d:10:b1:9c:94:86:0c:4b:0b:8e:b1:fb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45de6880bd2b647d06c098a74892840696402d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:ff:33:26:d3:5f:78:8f:d6:2e:e4:6d:cd: f2:c2:b9:3d:ee:1d:39:ca:97:a7:68:41:88:0b:c3: b0:36:ad:60:88:39:64:7f:16:17:fa:88:14:82:f2: 71:0b:76:fd:c4:d2:3b:24:8c:18:ba:bd:82:e9:92: 82:7e:a3:5d:a2:82:d7:13:fd:a1:c3:84:3c:0a:0f: 4a:62:df:ad:1e:9e:88:4e:bf:03:8f:97:cc:4b:c0: 78:0f:c7:77:08:e7:11:51:75:71:7e:9c:e5:2c:8e: b9:2a:5b:de:e3:9d:fc:a2:e8:ed:3a:00:fc:61:3d: 31:da:84:46:d3:66:d6:a5:8e:86:14:37:a5:e9:8c: 0c:1c:30:0a:c0:47:35:c1:1b:2d:ca:bf:74:c0:07: fe:c3:30:2b:59:f9:31:27:2d:ca:01:d5:8c:58:1f: cc:64:b1:4d:e1:05:3a:25:62:d9:26:aa:a9:4f:2a: 33:8a:2e:e8:3f:3f:1a:1a:02:77:e2:60:94:00:3b: fc:72:30:d4:e5:c6:94:7f:4d:39:7a:d5:86:31:82: 7b:44:22:18:49:e9:26:97:17:73:1d:5b:64:71:62: b9:ee:8f:8d:00:54:f3:4f:98:df:43:e8:22:68:75: 3e:52:df:10:eb:f2:f3:e8:b8:fd:ec:9b:be:34:6c: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DE:68:80:BD:2B:64:7D:06:C0:98:A7:48:92:84:06:96:40:2D:11 X509v3 Authority Key Identifier: keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/Rd5ogL0rZH0GwJinSJKEBpZALRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.139.0/24 Signature Algorithm: sha256WithRSAEncryption 18:4e:dd:9b:4a:13:98:c9:6e:84:03:67:4c:a9:72:5a:f6:a3: 47:fa:6d:f8:06:f3:84:8c:34:d1:1f:c6:b8:85:41:23:e5:4c: 2b:19:09:11:55:77:c9:25:1b:e0:fd:90:41:fd:61:1d:3a:1f: ff:f6:ea:c4:3c:e4:48:0a:bb:83:70:91:29:79:17:4f:75:fc: 4b:b2:f5:06:3e:4d:09:03:ea:bf:41:1d:bd:6c:d6:50:24:4e: ce:03:19:d6:e9:da:1f:01:4e:d8:af:d5:33:ac:27:94:a0:4d: 15:da:94:7b:8e:ef:91:04:08:4c:e8:37:0f:37:b7:e6:bc:e6: 86:cc:c3:a3:64:7e:64:3b:ec:3a:22:4d:e3:56:8e:f4:8b:da: 02:13:cd:f1:33:be:37:d1:6d:f3:45:3b:f0:ad:71:91:38:d8: 76:09:83:59:cd:d7:5d:d8:37:83:ae:33:1f:9b:6c:ad:f9:4e: b1:01:5f:92:c7:3f:13:53:81:aa:92:15:67:51:60:81:9d:12: 24:0f:17:53:34:e0:f2:4c:51:ab:1f:7c:7f:a9:22:64:cd:a5: eb:06:72:9b:2b:46:76:5c:2c:78:42:95:31:64:5c:93:26:2b: c0:37:52:fe:38:a3:99:84:d9:7e:74:8b:bf:9e:dd:ca:aa:ea: fb:47:74:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMUtELGclIYMSwuOsfuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMzBjMzA3MGM2ZTYxZWRjNThhNjRmMzIzM2ZhOTdmYzVm NTczOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWRlNjg4MGJkMmI2NDdkMDZjMDk4YTc0ODkyODQwNjk2NDAyZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eb/MybTX3iP1i7kbc3ywrk97h05 ypenaEGIC8OwNq1giDlkfxYX+ogUgvJxC3b9xNI7JIwYur2C6ZKCfqNdooLXE/2h w4Q8Cg9KYt+tHp6ITr8Dj5fMS8B4D8d3COcRUXVxfpzlLI65Klve4538oujtOgD8 YT0x2oRG02bWpY6GFDel6YwMHDAKwEc1wRstyr90wAf+wzArWfkxJy3KAdWMWB/M ZLFN4QU6JWLZJqqpTyozii7oPz8aGgJ34mCUADv8cjDU5caUf005etWGMYJ7RCIY SekmlxdzHVtkcWK57o+NAFTzT5jfQ+giaHU+Ut8Q6/Lz6Lj97Ju+NGzLdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXeaIC9K2R9BsCYp0iShAaWQC0RMB8GA1UdIwQY MBaAFC0wwwcMbmHtxYpk8yM/qX/F9XObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDIt MTBkMTczNGQ3YjgzLzEvUmQ1b2dMMHJaSDBHd0ppblNKS0VCcFpBTFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDItMTBkMTczNGQ3Yjgz LzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+LMA0G CSqGSIb3DQEBCwUAA4IBAQAYTt2bShOYyW6EA2dMqXJa9qNH+m34BvOEjDTRH8a4 hUEj5UwrGQkRVXfJJRvg/ZBB/WEdOh//9urEPORICruDcJEpeRdPdfxLsvUGPk0J A+q/QR29bNZQJE7OAxnW6dofAU7Yr9UzrCeUoE0V2pR7ju+RBAhM6DcPN7fmvOaG zMOjZH5kO+w6Ik3jVo70i9oCE83xM7430W3zRTvwrXGRONh2CYNZzddd2DeDrjMf m2yt+U6xAV+Sxz8TU4GqkhVnUWCBnRIkDxdTNODyTFGrH3x/qSJkzaXrBnKbK0Z2 XCx4QpUxZFyTJivAN1L+OKOZhNl+dIu/nt3Kqur7R3Rk -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:05 2026 by rpki-client