This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/c437ZNmHK-X0W4HjrhQoFz8sC0k.roa File: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (raw, json) Hash identifier: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I= Subject key identifier: 73:8D:FB:64:D9:87:2B:E5:F4:5B:81:E3:AE:14:28:17:3F:2C:0B:49 Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Certificate serial: 019B7CED2F75F4A6400C689898D97A7E75A2 Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/c437ZNmHK-X0W4HjrhQoFz8sC0k.roa Signing time: Fri 02 Jan 2026 04:17:57 +0000 ROA not before: Fri 02 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208788 IP address blocks: 91.210.212.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2f:75:f4:a6:40:0c:68:98:98:d9:7a:7e:75:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Validity Not Before: Jan 2 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=738dfb64d9872be5f45b81e3ae1428173f2c0b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:44:01:e8:06:4c:54:85:14:a6:8b:20:28: d2:22:1b:10:6d:00:36:30:a5:6a:74:20:dd:75:db: 5f:6e:70:ba:1d:04:14:4b:49:2c:75:ee:4e:89:f9: cc:ad:76:5a:09:42:09:85:a7:c2:45:fa:0e:e0:9c: b1:02:ba:b6:4c:c0:2e:1a:cb:ac:80:6f:2b:96:4a: b1:b2:5e:5a:93:da:74:3d:f0:e5:ba:50:d1:f6:ce: fc:21:3a:78:1c:60:49:73:a7:75:45:cf:d3:f6:ed: ef:a0:8c:df:db:a6:65:65:7c:96:1a:4e:be:62:b5: c7:01:14:02:97:3b:25:6c:c2:3d:b4:2d:33:a2:3e: c9:b8:4c:eb:64:d3:e9:b3:aa:66:11:5c:b0:2e:fa: 79:e4:de:9c:b0:92:b9:72:19:3f:72:63:60:b9:aa: 3f:9c:ab:cd:df:ba:c9:2d:8f:3b:57:05:6c:84:dd: d4:0c:59:94:66:ef:c8:eb:d8:05:59:59:dc:40:b5: 80:b5:0e:28:40:0c:ee:6c:79:0b:15:81:51:ec:aa: a3:07:f9:e5:35:07:b3:eb:73:23:8d:ba:23:4e:8d: 11:fc:10:11:53:8b:8f:2f:7b:32:08:e5:77:63:0d: fe:e8:37:dc:ea:95:52:d6:d4:77:e1:69:a9:47:12: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:FB:64:D9:87:2B:E5:F4:5B:81:E3:AE:14:28:17:3F:2C:0B:49 X509v3 Authority Key Identifier: keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/c437ZNmHK-X0W4HjrhQoFz8sC0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.212.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:cf:9d:3d:13:de:ac:f0:8a:e2:3e:9e:a2:23:5d:87:6d:05: 0d:60:0b:9b:c4:40:00:24:7c:12:2d:77:11:73:62:6a:cc:15: 1e:9a:b8:42:ec:26:92:ed:c7:c6:cf:2d:ac:a4:9c:f2:a0:db: 3d:d4:a9:28:50:28:2a:80:d0:ac:de:75:e8:18:4d:57:00:76: 31:64:b3:78:b5:be:85:26:47:02:29:e3:c8:74:45:5e:4f:86: 3b:72:2b:bd:c7:fd:fa:03:f4:4f:e9:9c:02:72:17:28:61:25: dc:a1:d0:7e:91:22:28:1f:7e:1e:1d:13:65:c0:70:78:0e:7a: 21:46:74:a6:2e:e7:b1:24:20:56:eb:fb:e0:36:6f:6f:ab:53: e3:67:62:aa:f8:08:51:18:ce:22:4c:c9:1a:23:9d:8a:b9:ce: 1b:87:11:f3:7e:ef:4f:02:a2:5a:9b:5a:13:66:f0:94:5a:db: be:54:4d:24:f7:96:bb:46:2c:2b:93:17:2c:e5:00:83:e2:f0: 34:da:52:52:67:c6:ce:67:d4:d2:93:81:14:fe:30:4f:44:88: 9d:9e:dc:30:a9:22:d3:c6:d1:b7:af:1c:a9:36:68:84:e0:5d: ff:56:9c:45:e1:39:0a:dc:6f:f5:3b:6f:20:fc:1f:ed:7f:4f: 4e:fd:8c:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87S919KZADGiYmNl6fnWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjEwYzhhNTgwNTQzZjkyZDE5ZmQ1ZjhmNTY0YmVlYWE0 OGNhMWUwHhcNMjYwMTAyMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzhkZmI2NGQ5ODcyYmU1ZjQ1YjgxZTNhZTE0MjgxNzNmMmMwYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWNEAegGTFSFFKaLICjSIhsQbQA2 MKVqdCDdddtfbnC6HQQUS0ksde5OifnMrXZaCUIJhafCRfoO4JyxArq2TMAuGsus gG8rlkqxsl5ak9p0PfDlulDR9s78ITp4HGBJc6d1Rc/T9u3voIzf26ZlZXyWGk6+ YrXHARQClzslbMI9tC0zoj7JuEzrZNPps6pmEVywLvp55N6csJK5chk/cmNguao/ nKvN37rJLY87VwVshN3UDFmUZu/I69gFWVncQLWAtQ4oQAzubHkLFYFR7KqjB/nl NQez63MjjbojTo0R/BARU4uPL3syCOV3Yw3+6Dfc6pVS1tR34WmpRxJchwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHON+2TZhyvl9FuB464UKBc/LAtJMB8GA1UdIwQY MBaAFA3xDIpYBUP5LRn9X49WS+6qSMoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEt OWUwYTVhMmY2MWI4LzEvYzQzN1pObUhLLVgwVzRIanJoUW9GejhzQzBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEtOWUwYTVhMmY2MWI4 LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9LUMA0G CSqGSIb3DQEBCwUAA4IBAQBKz509E96s8IriPp6iI12HbQUNYAubxEAAJHwSLXcR c2JqzBUemrhC7CaS7cfGzy2spJzyoNs91KkoUCgqgNCs3nXoGE1XAHYxZLN4tb6F JkcCKePIdEVeT4Y7ciu9x/36A/RP6ZwCchcoYSXcodB+kSIoH34eHRNlwHB4Dnoh RnSmLuexJCBW6/vgNm9vq1PjZ2Kq+AhRGM4iTMkaI52Kuc4bhxHzfu9PAqJam1oT ZvCUWtu+VE0k95a7Riwrkxcs5QCD4vA02lJSZ8bOZ9TSk4EU/jBPRIidntwwqSLT xtG3rxypNmiE4F3/VpxF4TkK3G/1O28g/B/tf09O/YxL -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client