This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/0hVeTF2nAdH91iTO48OxEkht79k.roa File: 0hVeTF2nAdH91iTO48OxEkht79k.roa (raw, json) Hash identifier: nzFagvuCRYhuTPVfckXmQ2+P0jcP0uf+Gm7rafFIPmc= Subject key identifier: D2:15:5E:4C:5D:A7:01:D1:FD:D6:24:CE:E3:C3:B1:12:48:6D:EF:D9 Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6 Certificate serial: 019B7C132560A3639122025A782CBFE8A8C8 Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/0hVeTF2nAdH91iTO48OxEkht79k.roa Signing time: Fri 02 Jan 2026 00:19:48 +0000 ROA not before: Fri 02 Jan 2026 00:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48906 IP address blocks: 91.212.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:25:60:a3:63:91:22:02:5a:78:2c:bf:e8:a8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6 Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2155e4c5da701d1fdd624cee3c3b112486defd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:6d:43:48:ce:75:ed:c7:82:a5:e2:8b:f4: d7:35:38:d7:bf:c2:bf:5a:b3:ca:c8:c4:2f:b9:77: 79:1b:e9:67:71:c2:3b:41:d9:de:99:46:fe:0e:dc: 21:0c:7c:8f:8d:e0:7b:92:2a:f4:e7:c0:7a:be:47: 2b:0a:ce:78:76:1a:2b:ec:17:a4:ce:50:ad:01:1e: ee:7e:05:f0:e2:7e:67:ce:b6:89:cd:bb:1e:37:22: a8:68:91:a5:38:d9:31:e8:2c:b1:31:23:f9:30:95: e2:48:2e:34:b6:34:e4:95:cc:8a:d4:1b:a5:ef:62: 5b:b7:fb:c3:3e:04:48:0c:52:a8:ea:72:2f:62:2f: be:25:07:eb:1c:aa:58:a6:77:fc:c0:dc:80:51:3f: 87:fc:16:2d:05:a5:9f:29:35:fa:59:f8:ac:90:a8: 75:27:11:04:68:16:97:31:66:0c:cf:cf:c8:f0:42: 42:90:26:a0:78:c0:a6:c9:2a:d9:e1:a1:bc:f8:90: 45:bd:ce:0a:2a:33:51:f6:38:85:ea:17:4f:13:01: 34:c0:cb:e9:e6:99:ff:cc:58:2a:50:8c:e7:00:b3: 0c:84:bd:ca:ca:7c:b2:77:b0:39:60:2c:9e:25:46: a1:86:e6:34:72:96:66:b4:0f:c5:b5:37:1c:49:54: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:15:5E:4C:5D:A7:01:D1:FD:D6:24:CE:E3:C3:B1:12:48:6D:EF:D9 X509v3 Authority Key Identifier: keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/0hVeTF2nAdH91iTO48OxEkht79k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.46.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ca:64:4f:22:f6:e2:19:d5:06:4d:1e:c3:b2:3b:fa:56:a7: a9:8e:5f:9f:ac:41:d7:6e:e5:c1:80:a2:48:21:53:18:be:e7: 64:fc:be:a8:5b:9a:17:d4:50:66:c5:e7:de:ca:42:7c:2e:54: 03:1a:05:03:62:b7:2a:97:de:0e:b2:02:3f:43:4e:25:76:dc: 47:b4:2a:90:6e:b1:26:be:3e:54:57:02:9e:82:c7:36:7b:87: a9:b8:a2:fd:48:26:36:5e:d6:0e:97:fb:8a:3f:04:2d:2d:76: 30:0c:e6:00:11:e6:19:e0:df:91:51:98:87:52:e8:bc:5b:94: be:6c:c5:4e:22:c2:26:c5:30:19:68:8c:0b:11:10:b5:6c:57: 8d:6a:10:f5:f6:a4:7e:65:6c:0d:be:0b:93:37:2f:dd:ea:c7: a7:66:d6:43:c0:43:2a:37:64:75:7e:50:b6:df:8e:d4:de:ac: 69:3a:a4:87:9d:e7:33:47:fc:e7:06:f3:d1:d2:71:61:88:b8: bf:3c:65:63:5d:f6:e2:ad:23:cc:68:b1:5d:4b:89:af:a1:15: 1e:65:a3:6e:46:d1:19:57:32:b5:31:c0:d3:ed:94:d9:c7:c1: c1:1a:18:04:5e:65:0c:1e:37:52:6f:b3:62:74:c4:4e:c9:4a: c4:90:58:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyVgo2ORIgJaeCy/6KjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzJlM2EwY2Q3NDkwMDUzNWI2YTZmOGZmYzY1N2Q5M2Ew OTA3YTYwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjE1NWU0YzVkYTcwMWQxZmRkNjI0Y2VlM2MzYjExMjQ4NmRlZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB1tQ0jOde3HgqXii/TXNTjXv8K/ WrPKyMQvuXd5G+lnccI7QdnemUb+DtwhDHyPjeB7kir058B6vkcrCs54dhor7Bek zlCtAR7ufgXw4n5nzraJzbseNyKoaJGlONkx6CyxMSP5MJXiSC40tjTklcyK1Bul 72Jbt/vDPgRIDFKo6nIvYi++JQfrHKpYpnf8wNyAUT+H/BYtBaWfKTX6WfiskKh1 JxEEaBaXMWYMz8/I8EJCkCageMCmySrZ4aG8+JBFvc4KKjNR9jiF6hdPEwE0wMvp 5pn/zFgqUIznALMMhL3Kynyyd7A5YCyeJUahhuY0cpZmtA/FtTccSVQpvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIVXkxdpwHR/dYkzuPDsRJIbe/ZMB8GA1UdIwQY MBaAFJ9y46DNdJAFNbam+P/GV9k6CQemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5Yzkt MTBhY2EzMzEzMzg3LzEvMGhWZVRGMm5BZEg5MWlUTzQ4T3hFa2h0NzlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5YzktMTBhY2EzMzEzMzg3 LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QuMA0G CSqGSIb3DQEBCwUAA4IBAQBwymRPIvbiGdUGTR7Dsjv6Vqepjl+frEHXbuXBgKJI IVMYvudk/L6oW5oX1FBmxefeykJ8LlQDGgUDYrcql94OsgI/Q04ldtxHtCqQbrEm vj5UVwKegsc2e4epuKL9SCY2XtYOl/uKPwQtLXYwDOYAEeYZ4N+RUZiHUui8W5S+ bMVOIsImxTAZaIwLERC1bFeNahD19qR+ZWwNvguTNy/d6senZtZDwEMqN2R1flC2 347U3qxpOqSHneczR/znBvPR0nFhiLi/PGVjXfbirSPMaLFdS4mvoRUeZaNuRtEZ VzK1McDT7ZTZx8HBGhgEXmUMHjdSb7NidMROyUrEkFhI -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:23 2026 by rpki-client