This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/AN7d4TXrtt5_te4VnJ6dVmu47oE.roa File: AN7d4TXrtt5_te4VnJ6dVmu47oE.roa (raw, json) Hash identifier: j0ueVlAIinrIC36bzKoLDFrIbGMkcFuqoDWXY+F2+w8= Subject key identifier: 00:DE:DD:E1:35:EB:B6:DE:7F:B5:EE:15:9C:9E:9D:56:6B:B8:EE:81 Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Certificate serial: 019B76EB4CF82ECF3A8B65E31CEA3607D99D Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/AN7d4TXrtt5_te4VnJ6dVmu47oE.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198421 IP address blocks: 91.234.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4c:f8:2e:cf:3a:8b:65:e3:1c:ea:36:07:d9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00dedde135ebb6de7fb5ee159c9e9d566bb8ee81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:88:32:cc:a7:a9:fd:8b:89:be:c4:37:2b: 52:6a:73:5e:a1:1a:b9:c5:ea:c1:a3:61:37:7a:a3: e7:33:50:5f:4c:6b:3a:47:c9:5e:57:fd:84:83:d6: 9a:8f:41:53:03:6b:00:35:47:35:52:3c:d9:44:73: 17:e2:7b:61:29:f8:fe:92:45:0d:3d:3c:2a:3c:11: c7:a3:a4:48:cf:9d:51:1e:9c:a1:54:24:69:43:3d: 67:9f:87:b3:ed:2c:b9:76:7d:3a:e7:a9:af:4f:a5: f5:5e:bf:c4:c1:68:60:a4:de:dc:53:f5:99:fc:c9: f7:21:97:ee:a5:85:fb:07:47:9e:1c:1d:83:b0:d1: 75:72:a3:d8:d1:73:cd:d2:69:ae:3c:74:29:91:f2: 7f:ce:fa:31:e9:a4:a3:63:5c:74:8a:48:1f:dc:f3: 13:54:c5:26:eb:93:16:62:67:eb:a6:62:72:21:10: 20:00:91:cc:a8:07:19:74:da:99:a3:3c:b5:d7:f0: af:ef:22:d4:6c:42:7b:04:86:d6:53:58:a4:bb:c7: 92:b7:79:3f:8b:e1:ee:d7:2a:90:ef:72:20:f0:89: 2c:de:d5:18:93:ee:4c:db:77:39:53:f4:a0:98:19: 4e:7f:e3:19:eb:82:55:cd:e1:f0:18:34:df:f7:7e: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DE:DD:E1:35:EB:B6:DE:7F:B5:EE:15:9C:9E:9D:56:6B:B8:EE:81 X509v3 Authority Key Identifier: keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/AN7d4TXrtt5_te4VnJ6dVmu47oE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.132.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:75:aa:07:ea:4d:14:db:13:e0:a1:f7:1f:24:c8:80:5c:69: 7f:4b:dc:e7:a7:ec:9e:c3:e5:56:1a:02:2e:29:f2:80:43:22: 00:08:b6:60:d3:fa:2e:36:2e:17:de:ef:01:41:82:eb:7c:c2: a4:45:21:01:7d:3e:1e:f6:54:91:8f:4f:4f:09:53:69:0b:61: c2:0e:24:73:16:9e:f9:6e:d7:60:9b:6f:67:84:78:37:b6:9e: b3:1d:58:a1:a1:c5:ca:1f:2f:98:36:4a:4d:b2:87:f8:de:03: 05:ac:36:19:fb:29:71:4f:ed:ad:66:23:a7:0d:d1:73:e2:3a: b2:c4:35:c8:a3:28:6a:09:4e:92:ac:54:ef:52:e1:43:80:a7: 75:c4:51:f7:08:de:56:e8:15:eb:74:e4:e9:91:4d:c5:cf:61: c1:02:f8:99:08:44:de:5e:dc:58:b0:26:6e:d4:97:2f:bc:86: 28:6d:95:df:f0:09:1d:fc:72:01:bf:98:cb:91:f3:0f:66:b0: 7f:ac:8b:8a:c2:cf:53:3e:2f:7e:00:72:6c:b7:e8:f6:df:d6: 1a:57:4c:ba:cd:e7:0a:f7:9c:f2:6e:70:4d:c5:aa:00:e0:44: 21:63:55:8f:f4:bb:64:70:bc:13:ae:2a:82:3e:4e:6d:fc:94: e8:ce:17:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260z4Ls86i2XjHOo2B9mdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm NTQ3YTIwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGRlZGRlMTM1ZWJiNmRlN2ZiNWVlMTU5YzllOWQ1NjZiYjhlZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ayIMsynqf2Lib7ENytSanNeoRq5 xerBo2E3eqPnM1BfTGs6R8leV/2Eg9aaj0FTA2sANUc1UjzZRHMX4nthKfj+kkUN PTwqPBHHo6RIz51RHpyhVCRpQz1nn4ez7Sy5dn0656mvT6X1Xr/EwWhgpN7cU/WZ /Mn3IZfupYX7B0eeHB2DsNF1cqPY0XPN0mmuPHQpkfJ/zvox6aSjY1x0ikgf3PMT VMUm65MWYmfrpmJyIRAgAJHMqAcZdNqZozy11/Cv7yLUbEJ7BIbWU1iku8eSt3k/ i+Hu1yqQ73Ig8Iks3tUYk+5M23c5U/SgmBlOf+MZ64JVzeHwGDTf934dMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADe3eE167bef7XuFZyenVZruO6BMB8GA1UdIwQY MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt MTg4MGU3ZWYxZGI0LzEvQU43ZDRUWHJ0dDVfdGU0Vm5KNmRWbXU0N29FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0 LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+qEMA0G CSqGSIb3DQEBCwUAA4IBAQAadaoH6k0U2xPgofcfJMiAXGl/S9znp+yew+VWGgIu KfKAQyIACLZg0/ouNi4X3u8BQYLrfMKkRSEBfT4e9lSRj09PCVNpC2HCDiRzFp75 btdgm29nhHg3tp6zHVihocXKHy+YNkpNsof43gMFrDYZ+ylxT+2tZiOnDdFz4jqy xDXIoyhqCU6SrFTvUuFDgKd1xFH3CN5W6BXrdOTpkU3Fz2HBAviZCETeXtxYsCZu 1JcvvIYobZXf8Akd/HIBv5jLkfMPZrB/rIuKws9TPi9+AHJst+j239YaV0y6zecK 95zybnBNxaoA4EQhY1WP9LtkcLwTriqCPk5t/JTozhcH -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:42 2026 by rpki-client