This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/81erH1PyFfVJ8_cg3A4J-xcuYbw.roa File: 81erH1PyFfVJ8_cg3A4J-xcuYbw.roa (raw, json) Hash identifier: NaAy63sjfoCM4Pl3nqIIgQyKV92LR17H8Jx3JG7KMKc= Subject key identifier: F3:57:AB:1F:53:F2:15:F5:49:F3:F7:20:DC:0E:09:FB:17:2E:61:BC Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d Certificate serial: 019B7B3558C3B9CC19941B4E39ED74DB4B27 Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/81erH1PyFfVJ8_cg3A4J-xcuYbw.roa Signing time: Thu 01 Jan 2026 20:17:32 +0000 ROA not before: Thu 01 Jan 2026 20:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198891 IP address blocks: 91.236.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:58:c3:b9:cc:19:94:1b:4e:39:ed:74:db:4b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f357ab1f53f215f549f3f720dc0e09fb172e61bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:61:06:0f:d5:df:fa:ea:d5:81:96:3a:1d: 2a:ea:37:d8:d9:4f:72:e1:13:e3:d8:71:4f:00:28: 55:27:61:1a:83:f1:a5:26:d7:b8:bd:87:80:f8:bc: dd:4e:ee:ca:16:30:e7:01:2c:32:cf:eb:b7:4d:a5: 31:dc:9b:87:f7:b7:fb:5a:af:43:01:5c:a0:d5:ba: af:31:49:ba:99:c0:1c:5f:6c:d2:e1:50:1e:07:47: b0:1f:03:ea:02:9f:94:8f:25:68:69:16:e0:1e:b3: 38:78:67:a9:0e:4c:e7:fc:16:3a:c0:b9:45:cc:15: 67:5d:3b:8f:c5:ff:2b:8c:ba:dc:98:5c:a3:75:db: d1:6c:e4:1b:6d:8d:e4:23:7e:20:b9:9d:a3:81:a3: 94:59:0e:b9:ea:d2:78:f3:56:8e:2e:18:e9:31:1f: 4c:da:bc:fa:b4:6d:8e:dd:e7:30:26:d8:43:08:0e: a4:ba:c3:c6:ac:21:92:ad:d4:fe:d7:d0:b5:4f:65: bb:8d:ab:8c:8b:18:58:42:d4:35:cf:44:fb:65:72: 76:4d:bc:84:3d:81:b3:49:d2:52:05:e2:24:ea:a9: 5e:83:eb:8d:65:00:74:b1:4e:30:65:50:a8:b0:13: 9d:f3:b9:16:c6:65:c3:0f:bf:1a:b8:b4:82:ec:51: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:AB:1F:53:F2:15:F5:49:F3:F7:20:DC:0E:09:FB:17:2E:61:BC X509v3 Authority Key Identifier: keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/81erH1PyFfVJ8_cg3A4J-xcuYbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.137.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f9:fb:c0:57:70:5c:5c:98:14:21:c0:92:90:63:ec:66:f8: b6:24:b9:ab:3a:2e:70:95:28:b7:df:fc:69:0a:1d:ff:4d:a9: 48:ef:03:94:7c:63:48:83:bd:fe:cb:06:84:d3:e0:e5:30:aa: 54:9f:21:63:ac:45:eb:3d:f2:f0:75:35:92:c9:45:24:49:a9: cc:8c:08:18:95:42:99:02:de:25:93:92:2d:11:b8:3b:c2:a9: b8:a8:96:b5:71:7f:ca:74:ab:c3:56:0e:c9:be:a8:09:a5:3d: 36:a7:52:5a:c8:49:f0:53:b7:2a:1c:0d:81:f1:22:87:14:6e: 42:dd:c3:c2:3b:cf:bf:a2:ea:ef:43:a4:f2:cf:8c:6e:1f:5e: 4c:76:d3:f8:ac:97:1d:fa:b7:e0:53:df:fa:a3:b1:55:e1:2a: e9:5c:82:9d:57:18:d1:aa:ad:f2:1d:eb:4a:d7:88:81:67:ae: 98:78:76:d0:ad:8c:d2:2a:49:f5:81:66:1b:50:eb:b0:12:e6: e2:35:7d:3a:d1:65:a2:d7:33:90:f5:75:b3:56:9b:29:35:01: b1:cc:92:ab:67:d5:b0:31:2f:44:ed:15:09:c2:81:18:20:bd: 97:4a:8c:af:cb:57:66:13:f3:94:41:51:9e:65:a1:d1:23:c7: 69:e8:fc:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVjDucwZlBtOOe1020snMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NzZiZWQ5YmZiOTZmZmExOTgyMjA1NThhYTNkNWI4Yzhm OWNkM2QwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzU3YWIxZjUzZjIxNWY1NDlmM2Y3MjBkYzBlMDlmYjE3MmU2MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+FhBg/V3/rq1YGWOh0q6jfY2U9y 4RPj2HFPAChVJ2Eag/GlJte4vYeA+LzdTu7KFjDnASwyz+u3TaUx3JuH97f7Wq9D AVyg1bqvMUm6mcAcX2zS4VAeB0ewHwPqAp+UjyVoaRbgHrM4eGepDkzn/BY6wLlF zBVnXTuPxf8rjLrcmFyjddvRbOQbbY3kI34guZ2jgaOUWQ656tJ481aOLhjpMR9M 2rz6tG2O3ecwJthDCA6kusPGrCGSrdT+19C1T2W7jauMixhYQtQ1z0T7ZXJ2TbyE PYGzSdJSBeIk6qleg+uNZQB0sU4wZVCosBOd87kWxmXDD78auLSC7FHADwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNXqx9T8hX1SfP3INwOCfsXLmG8MB8GA1UdIwQY MBaAFAl2vtm/uW/6GYIgVYqj1bjI+c09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lY2MyY2YtZWNjMC00Y2JiLTk2MzUt MTY2YzZhM2QzZWNmLzEvODFlckgxUHlGZlZKOF9jZzNBNEoteGN1WWJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lY2MyY2YtZWNjMC00Y2JiLTk2MzUtMTY2YzZhM2QzZWNm LzEvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+yJMA0G CSqGSIb3DQEBCwUAA4IBAQBy+fvAV3BcXJgUIcCSkGPsZvi2JLmrOi5wlSi33/xp Ch3/TalI7wOUfGNIg73+ywaE0+DlMKpUnyFjrEXrPfLwdTWSyUUkSanMjAgYlUKZ At4lk5ItEbg7wqm4qJa1cX/KdKvDVg7JvqgJpT02p1JayEnwU7cqHA2B8SKHFG5C 3cPCO8+/ourvQ6Tyz4xuH15MdtP4rJcd+rfgU9/6o7FV4SrpXIKdVxjRqq3yHetK 14iBZ66YeHbQrYzSKkn1gWYbUOuwEubiNX060WWi1zOQ9XWzVpspNQGxzJKrZ9Ww MS9E7RUJwoEYIL2XSoyvy1dmE/OUQVGeZaHRI8dp6Pwd -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:44 2026 by rpki-client