This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa File: oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa (raw, json) Hash identifier: v1OkVWqraYOFjsEZ3LFnKjFEiGungWJLb2B2UAHBg6o= Subject key identifier: A0:81:24:C3:73:C2:5E:BD:54:61:D4:67:2A:BF:6A:E1:0E:97:59:CB Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d Certificate serial: 019B7834D464DCA02D172E0F718BF4C8655C Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa Signing time: Thu 01 Jan 2026 06:18:06 +0000 ROA not before: Thu 01 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28889 IP address blocks: 91.206.236.0/24 maxlen: 24 91.206.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d4:64:dc:a0:2d:17:2e:0f:71:8b:f4:c8:65:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a08124c373c25ebd5461d4672abf6ae10e9759cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:2f:89:10:e6:a8:de:33:99:5b:ea:15:c3: c2:f5:30:ed:5f:bd:99:db:2d:5c:3b:d2:b3:7b:e3: e6:0a:da:9b:f7:ed:b8:d5:8c:3d:84:6d:57:1e:fb: e6:50:d3:9b:88:05:29:47:21:cc:ce:2d:35:f0:22: ba:8b:05:f1:72:cc:1f:98:d7:6d:80:2d:dd:f2:b0: d9:fa:23:4c:4b:b2:d4:4d:60:d2:d8:6c:2b:be:27: 9b:02:62:86:5e:8f:a6:38:b5:bd:cd:0e:ae:30:d9: 24:56:a5:8b:50:46:81:93:83:a7:f2:77:61:77:f3: 1b:8f:66:6b:49:43:e4:3b:a2:8a:a9:ae:3d:69:85: 46:d5:9d:73:7d:d1:37:8b:38:04:1e:36:3b:a9:d3: 03:c1:9b:23:ef:9d:20:1f:fa:80:d4:7c:b0:a4:73: 23:32:4f:13:27:c2:10:3a:a4:43:79:fa:c2:01:a2: 60:85:42:22:05:21:4a:d8:66:8e:9e:2b:c8:07:07: cc:18:71:23:e4:8f:60:62:12:0b:0d:48:30:90:70: e3:aa:3b:a4:9d:6b:b3:e9:ab:88:2b:28:01:b3:d1: a1:86:7b:b1:95:39:bd:49:86:0d:0b:2d:35:aa:cc: ca:aa:95:34:b2:14:1c:59:e0:9c:5b:a5:1c:ba:4f: 7a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:81:24:C3:73:C2:5E:BD:54:61:D4:67:2A:BF:6A:E1:0E:97:59:CB X509v3 Authority Key Identifier: keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/oIEkw3PCXr1UYdRnKr9q4Q6XWcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.236.0/23 Signature Algorithm: sha256WithRSAEncryption 16:65:bc:2b:be:46:f7:42:8c:d8:19:3b:3f:8d:20:58:e6:2f: 34:1e:7c:59:fc:f9:d6:46:a7:0a:d5:ed:61:61:c8:ba:0d:b1: 44:46:7c:44:1b:57:c6:07:d0:52:84:97:65:0a:8b:2d:3f:af: a7:5b:50:f1:13:20:2e:7f:91:8d:6f:62:d4:f4:19:48:6e:44: 17:77:d4:97:94:dc:2c:10:30:58:6f:c6:7f:30:cd:44:b3:f6: 63:f3:94:6f:5a:4f:58:d2:31:64:da:c1:39:06:81:7f:79:7f: cb:59:89:2d:ab:b9:85:af:37:fa:8c:e2:7c:d3:7a:b0:a1:b5: 55:3c:80:5e:62:da:36:6b:c2:62:40:dd:ff:15:61:06:2f:a5: 2f:e6:e6:9e:2c:fa:21:f1:9b:7b:42:bd:59:f9:d3:c5:ed:64: 21:44:8f:b6:a7:ed:8f:8d:25:bc:63:cc:e4:9c:e1:d6:88:fc: 26:e9:9d:c1:74:60:4b:ff:b4:c6:17:c5:e4:6d:2e:3d:14:6e: 7c:f7:60:0b:87:2c:d4:e8:89:16:94:aa:3e:c3:67:71:6a:36: 43:c8:e5:bd:fe:7f:48:fa:91:af:6f:c9:1e:bb:3e:f3:0a:0a: db:93:05:6e:10:15:ff:11:a2:38:90:8a:23:d6:36:7a:77:28: 0b:56:d6:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNRk3KAtFy4PcYv0yGVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTBjODIzYzM2MGI1Zjg2MTQ4OTJkMzViMTAzYzY0Nzc0 ZmQ2NWQwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDgxMjRjMzczYzI1ZWJkNTQ2MWQ0NjcyYWJmNmFlMTBlOTc1OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBoviRDmqN4zmVvqFcPC9TDtX72Z 2y1cO9Kze+PmCtqb9+241Yw9hG1XHvvmUNObiAUpRyHMzi018CK6iwXxcswfmNdt gC3d8rDZ+iNMS7LUTWDS2GwrviebAmKGXo+mOLW9zQ6uMNkkVqWLUEaBk4On8ndh d/Mbj2ZrSUPkO6KKqa49aYVG1Z1zfdE3izgEHjY7qdMDwZsj750gH/qA1HywpHMj Mk8TJ8IQOqRDefrCAaJghUIiBSFK2GaOnivIBwfMGHEj5I9gYhILDUgwkHDjqjuk nWuz6auIKygBs9GhhnuxlTm9SYYNCy01qszKqpU0shQcWeCcW6Ucuk962wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCBJMNzwl69VGHUZyq/auEOl1nLMB8GA1UdIwQY MBaAFB6gyCPDYLX4YUiS01sQPGR3T9ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmIt NWMwZDA1N2VmMmE2LzEvb0lFa3czUENYcjFVWWRSbktyOXE0UTZYV2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmItNWMwZDA1N2VmMmE2 LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW87sMA0G CSqGSIb3DQEBCwUAA4IBAQAWZbwrvkb3QozYGTs/jSBY5i80HnxZ/PnWRqcK1e1h Yci6DbFERnxEG1fGB9BShJdlCostP6+nW1DxEyAuf5GNb2LU9BlIbkQXd9SXlNws EDBYb8Z/MM1Es/Zj85RvWk9Y0jFk2sE5BoF/eX/LWYktq7mFrzf6jOJ803qwobVV PIBeYto2a8JiQN3/FWEGL6Uv5uaeLPoh8Zt7Qr1Z+dPF7WQhRI+2p+2PjSW8Y8zk nOHWiPwm6Z3BdGBL/7TGF8XkbS49FG5892ALhyzU6IkWlKo+w2dxajZDyOW9/n9I +pGvb8keuz7zCgrbkwVuEBX/EaI4kIoj1jZ6dygLVtb0 -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:40 2026 by rpki-client