This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/V8NlnKjUgS7bj4rUkCz5LctnTTY.roa File: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (raw, json) Hash identifier: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo= Subject key identifier: 57:C3:65:9C:A8:D4:81:2E:DB:8F:8A:D4:90:2C:F9:2D:CB:67:4D:36 Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c Certificate serial: 019BB705E09607AF5DA019828A92BAE038C3 Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/V8NlnKjUgS7bj4rUkCz5LctnTTY.roa Signing time: Tue 13 Jan 2026 11:02:54 +0000 ROA not before: Tue 13 Jan 2026 11:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57525 IP address blocks: 91.232.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:05:e0:96:07:af:5d:a0:19:82:8a:92:ba:e0:38:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c Validity Not Before: Jan 13 11:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57c3659ca8d4812edb8f8ad4902cf92dcb674d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:6e:8f:82:3a:7e:3f:13:af:2e:79:d8:6a: e5:bb:fa:87:ae:f0:ae:bd:48:51:e4:f6:d0:7b:4b: aa:cb:aa:e0:b8:26:26:2a:b8:d4:7d:a3:c9:0d:41: 38:6a:af:92:4f:06:11:9a:01:32:09:e3:59:83:05: 06:ed:a0:04:a7:44:dd:ff:39:a0:d6:6f:40:4c:a1: 23:32:c3:85:64:ab:0f:56:31:3c:49:72:a7:c5:83: 02:33:62:e3:f3:a9:f7:ca:97:fd:e6:24:4a:de:ea: ad:40:4b:f5:13:36:90:b9:e5:7a:ee:ac:d0:af:88: 14:3a:62:68:6e:6b:39:c5:4e:49:f0:08:47:28:15: a4:3d:4d:26:9c:d6:2d:8f:c9:0c:d3:bf:5f:a7:12: 2c:44:7a:73:82:fc:3d:7a:02:c5:d5:1f:1d:54:8e: 39:1b:a3:42:9a:bf:af:a0:11:45:b6:0f:34:b2:ba: c1:7a:1b:5a:1b:04:c8:56:d4:13:08:07:0b:94:91: 89:11:7a:df:16:72:f7:dd:92:b7:cd:f1:83:45:d3: 91:ad:37:3d:13:66:29:f3:42:fb:e2:8a:a4:8a:5a: 67:01:16:2c:0c:21:17:14:0b:74:8b:47:0d:61:dc: bc:25:cc:42:45:f2:7f:b2:e4:77:9f:73:8c:ea:44: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C3:65:9C:A8:D4:81:2E:DB:8F:8A:D4:90:2C:F9:2D:CB:67:4D:36 X509v3 Authority Key Identifier: keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/V8NlnKjUgS7bj4rUkCz5LctnTTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.180.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:5b:39:31:1d:0f:94:7b:7a:aa:e8:73:b1:03:1c:40:0f:11: 7d:52:5b:60:f1:e7:6a:29:bf:0c:93:f5:86:0e:c1:61:e8:ee: 32:fe:ee:a9:15:89:f2:fa:cc:a7:68:1a:ce:a0:b8:1f:d1:e7: a3:42:b4:9e:c6:eb:30:ee:b8:3f:c4:f8:14:c9:5e:e2:7e:5b: c0:a0:c2:2b:65:9a:93:4b:a3:ff:d4:4a:f6:e2:6b:f4:63:36: fa:c8:c6:95:5f:d0:89:78:03:93:99:b5:3c:89:7d:3b:54:a6: 47:15:48:f8:f1:26:7f:5f:98:3e:d6:f0:a6:48:96:d5:e1:3a: 76:a9:61:90:80:f2:13:70:c8:02:04:13:d7:e6:c6:3b:a5:05: 36:4e:28:77:07:c8:92:25:21:6d:c6:c0:d8:a9:b3:66:b5:75: f2:f8:e7:17:fe:3c:a7:87:3b:03:93:3b:58:9f:62:a1:3c:41: 5b:76:bb:34:97:90:99:68:4a:3f:13:0f:03:0b:a9:dd:f7:b2: 93:34:75:bd:14:83:78:9b:04:a0:36:61:7a:55:12:36:1b:87: 9c:d3:80:bf:a2:c1:8e:20:b0:c7:0d:ea:3d:d7:34:33:c2:3d: 99:39:83:74:29:80:ec:c1:2c:22:0b:d4:a3:8b:da:2c:fd:aa: bd:e0:be:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu3BeCWB69doBmCipK64DjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZGM5MWU2NjY0OTRkMGRjNTZhMmI4MWQyMjlhYmQ2ZWUz NWY4NGMwHhcNMjYwMTEzMTEwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2MzNjU5Y2E4ZDQ4MTJlZGI4ZjhhZDQ5MDJjZjkyZGNiNjc0ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNNuj4I6fj8Try552Grlu/qHrvCu vUhR5PbQe0uqy6rguCYmKrjUfaPJDUE4aq+STwYRmgEyCeNZgwUG7aAEp0Td/zmg 1m9ATKEjMsOFZKsPVjE8SXKnxYMCM2Lj86n3ypf95iRK3uqtQEv1EzaQueV67qzQ r4gUOmJobms5xU5J8AhHKBWkPU0mnNYtj8kM079fpxIsRHpzgvw9egLF1R8dVI45 G6NCmr+voBFFtg80srrBehtaGwTIVtQTCAcLlJGJEXrfFnL33ZK3zfGDRdORrTc9 E2Yp80L74oqkilpnARYsDCEXFAt0i0cNYdy8JcxCRfJ/suR3n3OM6kTJTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfDZZyo1IEu24+K1JAs+S3LZ002MB8GA1UdIwQY MBaAFCDckeZmSU0NxWorgdIpq9buNfhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMt MWQwMGVhODQxZDNlLzEvVjhObG5LalVnUzdiajRyVWtDejVMY3RuVFRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMtMWQwMGVhODQxZDNl LzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+i0MA0G CSqGSIb3DQEBCwUAA4IBAQA8WzkxHQ+Ue3qq6HOxAxxADxF9Ultg8edqKb8Mk/WG DsFh6O4y/u6pFYny+synaBrOoLgf0eejQrSexusw7rg/xPgUyV7iflvAoMIrZZqT S6P/1Er24mv0Yzb6yMaVX9CJeAOTmbU8iX07VKZHFUj48SZ/X5g+1vCmSJbV4Tp2 qWGQgPITcMgCBBPX5sY7pQU2Tih3B8iSJSFtxsDYqbNmtXXy+OcX/jynhzsDkztY n2KhPEFbdrs0l5CZaEo/Ew8DC6nd97KTNHW9FIN4mwSgNmF6VRI2G4ec04C/osGO ILDHDeo91zQzwj2ZOYN0KYDswSwiC9Sji9os/aq94L5L -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:26 2026 by rpki-client