This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/T_qkUaWs2ghdwUxzU0iuiusb7H8.roa File: T_qkUaWs2ghdwUxzU0iuiusb7H8.roa (raw, json) Hash identifier: bDaxnxgxc6VXP3Xzs/otfCvYZy7RhWEhtlo/OlQbb/g= Subject key identifier: 4F:FA:A4:51:A5:AC:DA:08:5D:C1:4C:73:53:48:AE:8A:EB:1B:EC:7F Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b Certificate serial: 019B76EB5B490148F3C70D9C3F27AD17B2E6 Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/T_qkUaWs2ghdwUxzU0iuiusb7H8.roa Signing time: Thu 01 Jan 2026 00:18:14 +0000 ROA not before: Thu 01 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8917 IP address blocks: 91.230.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5b:49:01:48:f3:c7:0d:9c:3f:27:ad:17:b2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ffaa451a5acda085dc14c735348ae8aeb1bec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:6f:a1:47:65:80:1c:29:b0:96:83:ac:43: 2b:62:dc:48:6f:9c:4d:46:bb:af:67:a5:7a:75:bf: 1b:b1:9b:f1:91:54:fb:e3:e7:d3:07:e2:c2:0d:df: 53:b0:1d:a3:7e:f4:ef:90:72:74:8f:fb:47:b6:25: 4e:53:24:d7:95:ac:87:a7:a6:ea:01:5f:f6:4e:0a: 90:f8:71:6f:62:dc:45:03:f1:a8:42:e8:13:1e:b5: 13:1f:52:43:ba:6c:bf:9d:f5:74:d5:1f:ad:1f:f2: da:2b:49:29:bc:27:47:76:4b:44:f8:ea:b9:c0:c2: 09:7d:64:17:3a:86:df:f7:f9:be:e4:bb:41:76:9d: 17:a8:69:e0:f0:31:0f:d0:bb:1e:5b:84:f5:ad:3d: e1:0d:2c:d2:43:f5:3d:d6:44:a2:fd:fa:f4:aa:ff: 8a:94:9c:bd:cf:9d:9f:60:3b:59:e0:4d:ee:14:84: cf:ca:67:15:f1:ea:e7:3b:bb:d7:ac:dc:0e:2e:b0: 65:55:4c:30:1b:c3:95:fd:b4:7c:47:cf:a5:15:2c: 2d:10:54:5c:53:88:b4:09:22:4e:d9:db:be:92:2c: 0b:bc:2f:23:e7:12:10:58:d7:a3:b2:64:86:f6:57: 04:72:71:b5:f6:19:41:e3:e6:7b:3e:5e:87:62:02: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FA:A4:51:A5:AC:DA:08:5D:C1:4C:73:53:48:AE:8A:EB:1B:EC:7F X509v3 Authority Key Identifier: keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/T_qkUaWs2ghdwUxzU0iuiusb7H8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.214.0/24 Signature Algorithm: sha256WithRSAEncryption 67:93:1e:9a:de:eb:fc:fc:5c:35:60:0c:83:07:d1:e1:2a:18: 41:ab:aa:0e:f3:1c:6b:13:7f:95:e9:85:b3:b5:42:41:ad:d2: 6f:b6:39:6a:53:00:33:5c:72:da:71:b4:f9:72:fb:43:e5:97: 5f:32:4b:20:30:c0:b7:99:42:cc:c8:25:8d:9a:47:d2:9d:0b: f9:65:57:0e:48:2f:62:d5:e6:1f:b4:b7:fc:a5:7c:67:b8:df: d1:ea:3b:16:05:73:08:d6:fb:fb:49:b2:a9:12:38:e1:4f:e3: d9:6e:45:93:f0:78:65:c1:27:8f:8a:98:cb:89:3e:c9:e1:f6: 0d:4c:0b:ef:df:91:c7:dc:4a:bb:7d:41:03:44:90:e4:66:95: 5a:f1:4c:38:45:cf:38:fe:da:2b:84:9b:e0:c9:1e:de:4f:61: 56:d4:ca:e4:35:a4:c7:0a:d7:14:a5:7c:ca:96:cd:1b:76:05: 1e:08:28:54:60:d9:b1:35:15:ff:34:2b:4e:01:a8:27:ea:fa: f4:47:58:c0:0e:72:58:cc:0b:9e:52:1d:ba:04:93:c2:75:f7: 30:38:9c:74:e4:b9:a7:af:05:9e:86:9e:fb:6a:7c:79:06:59: 90:8c:14:db:16:34:65:1e:4c:ce:9e:87:a3:06:18:e3:ce:cd: cd:29:37:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261tJAUjzxw2cPyetF7LmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh MzVkM2IwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmZhYTQ1MWE1YWNkYTA4NWRjMTRjNzM1MzQ4YWU4YWViMWJlYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqBvoUdlgBwpsJaDrEMrYtxIb5xN RruvZ6V6db8bsZvxkVT74+fTB+LCDd9TsB2jfvTvkHJ0j/tHtiVOUyTXlayHp6bq AV/2TgqQ+HFvYtxFA/GoQugTHrUTH1JDumy/nfV01R+tH/LaK0kpvCdHdktE+Oq5 wMIJfWQXOobf9/m+5LtBdp0XqGng8DEP0LseW4T1rT3hDSzSQ/U91kSi/fr0qv+K lJy9z52fYDtZ4E3uFITPymcV8ernO7vXrNwOLrBlVUwwG8OV/bR8R8+lFSwtEFRc U4i0CSJO2du+kiwLvC8j5xIQWNejsmSG9lcEcnG19hlB4+Z7Pl6HYgKQpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/6pFGlrNoIXcFMc1NIrorrG+x/MB8GA1UdIwQY MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct YWVkMTY0ODMyYThiLzEvVF9xa1VhV3MyZ2hkd1V4elUwaXVpdXNiN0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+bWMA0G CSqGSIb3DQEBCwUAA4IBAQBnkx6a3uv8/Fw1YAyDB9HhKhhBq6oO8xxrE3+V6YWz tUJBrdJvtjlqUwAzXHLacbT5cvtD5ZdfMksgMMC3mULMyCWNmkfSnQv5ZVcOSC9i 1eYftLf8pXxnuN/R6jsWBXMI1vv7SbKpEjjhT+PZbkWT8HhlwSePipjLiT7J4fYN TAvv35HH3Eq7fUEDRJDkZpVa8Uw4Rc84/torhJvgyR7eT2FW1MrkNaTHCtcUpXzK ls0bdgUeCChUYNmxNRX/NCtOAagn6vr0R1jADnJYzAueUh26BJPCdfcwOJx05Lmn rwWehp77anx5BlmQjBTbFjRlHkzOnoejBhjjzs3NKTd3 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:26 2026 by rpki-client