This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/npTp4Du46e6L-gb7_xi1R_gV0tY.roa File: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (raw, json) Hash identifier: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU= Subject key identifier: 9E:94:E9:E0:3B:B8:E9:EE:8B:FA:06:FB:FF:18:B5:47:F8:15:D2:D6 Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f Certificate serial: 019B8D398C9836A5B6A9350B1877CCE1B51C Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/npTp4Du46e6L-gb7_xi1R_gV0tY.roa Signing time: Mon 05 Jan 2026 08:15:17 +0000 ROA not before: Mon 05 Jan 2026 08:15:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12831 IP address blocks: 91.221.26.0/23 maxlen: 23 91.244.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:39:8c:98:36:a5:b6:a9:35:0b:18:77:cc:e1:b5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f Validity Not Before: Jan 5 08:15:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e94e9e03bb8e9ee8bfa06fbff18b547f815d2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:d2:c5:ca:8b:5a:af:47:2c:65:fc:c9:aa: 23:2d:ec:9d:87:f0:36:f4:9e:65:b3:c0:34:4f:5e: ee:9d:0c:64:ce:8f:09:70:2f:03:90:ab:c3:56:70: 4c:03:21:a1:74:b9:81:a6:a9:a8:c6:23:fa:c8:0b: 8f:58:e8:e5:3e:e1:4f:8f:62:c2:04:47:a1:60:10: 55:24:a6:68:f6:cf:d0:4d:41:36:70:a1:4c:ba:4c: 4a:b0:db:b8:5c:f0:9a:5a:f0:14:0e:c0:5e:74:98: 7b:5e:21:a4:00:60:b3:9b:fe:c0:08:c9:c5:f5:d8: 62:53:91:24:e2:28:e1:18:ec:aa:bb:1d:ff:fc:5c: 7b:53:2c:c9:e2:23:45:c9:07:ee:b3:67:4d:b8:05: be:78:9f:f5:da:c1:5d:c0:08:61:f7:81:e4:ec:e6: 7a:b1:fe:7c:9a:36:9e:78:1d:f9:24:80:17:42:fc: ec:5e:6a:40:3c:bd:f4:ff:c5:c1:ec:46:d4:4c:f6: 5c:40:f2:57:31:19:74:24:3a:df:96:d4:77:aa:98: 02:ae:26:e2:42:9e:3a:12:50:40:8c:15:27:9c:20: 3f:5e:a7:1b:f1:17:a5:df:63:9a:0d:e2:e1:2e:0d: 8d:92:44:48:f8:d5:62:8d:c2:bc:41:2d:fd:42:4b: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:94:E9:E0:3B:B8:E9:EE:8B:FA:06:FB:FF:18:B5:47:F8:15:D2:D6 X509v3 Authority Key Identifier: keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/npTp4Du46e6L-gb7_xi1R_gV0tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.26.0/23 91.244.248.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:77:84:0c:46:80:38:db:c0:88:f1:9a:59:4e:a3:fd:ba:19: 1f:a6:05:36:27:5d:12:df:dd:93:ae:47:ef:26:b3:f2:bc:c5: f3:f5:8e:2a:89:46:e7:31:e0:96:1f:f7:8f:87:50:0b:78:e9: f2:f7:00:6c:08:8b:db:25:03:2a:a7:39:e3:fb:a2:66:66:88: ff:3c:e0:b5:09:22:34:03:3a:ed:5a:cf:16:02:59:22:79:4a: 75:a8:5e:f8:0c:0d:4c:7c:7f:b0:4d:cd:6d:07:af:d4:b4:33: e7:75:12:b6:e7:ba:96:e1:40:d4:31:9b:2d:52:4b:58:1c:9a: e9:f6:7b:b7:9f:25:db:06:91:43:1a:fa:22:6e:45:9d:ee:76: 8c:31:db:57:82:f6:27:9e:63:fa:9d:19:e0:63:74:75:a8:9a: 12:7a:e8:f1:b1:f7:37:e5:2b:15:dd:ab:7b:03:b0:89:a8:96: b3:0a:cf:c0:d5:11:2d:df:9c:f0:c4:b7:ac:b1:60:ce:b5:13: ce:5a:37:93:b1:81:da:32:9e:12:81:97:fc:35:c1:04:d7:8a: 92:f2:d8:ee:82:71:c4:01:e4:3e:61:73:bc:58:29:b6:99:7e: dc:94:63:0e:d2:f7:99:2f:41:89:df:21:6f:27:99:f5:ba:46: e0:b2:22:96 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuNOYyYNqW2qTULGHfM4bUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMjVhMmYyOGIxZWI2MjkxNjExMTI4NzA5NDJhNWVkMTgx YjUxOWYwHhcNMjYwMTA1MDgxNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTk0ZTllMDNiYjhlOWVlOGJmYTA2ZmJmZjE4YjU0N2Y4MTVkMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEXSxcqLWq9HLGX8yaojLeydh/A2 9J5ls8A0T17unQxkzo8JcC8DkKvDVnBMAyGhdLmBpqmoxiP6yAuPWOjlPuFPj2LC BEehYBBVJKZo9s/QTUE2cKFMukxKsNu4XPCaWvAUDsBedJh7XiGkAGCzm/7ACMnF 9dhiU5Ek4ijhGOyqux3//Fx7UyzJ4iNFyQfus2dNuAW+eJ/12sFdwAhh94Hk7OZ6 sf58mjaeeB35JIAXQvzsXmpAPL30/8XB7EbUTPZcQPJXMRl0JDrfltR3qpgCribi Qp46ElBAjBUnnCA/Xqcb8Rel32OaDeLhLg2NkkRI+NVijcK8QS39Qku48wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ6U6eA7uOnui/oG+/8YtUf4FdLWMB8GA1UdIwQY MBaAFPolovKLHrYpFhEShwlCpe0YG1GfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pV2k4b3NldGlrV0VSS0hDVUtsN1JnYlVaOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNjQ0NDNlLTAzZjgtNDM3NS05NDFj LWUxZDE5NWFjMzVkMi8xL25wVHA0RHU0NmU2TC1nYjdfeGkxUl9nVjB0WS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzkvNjQ0NDNlLTAzZjgtNDM3NS05NDFjLWUxZDE5NWFjMzVk Mi8xLzEtaVdpOG9zZXRpa1dFUktIQ1VLbDdSZ2JVWjguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFb3RoD BAJb9PgwDQYJKoZIhvcNAQELBQADggEBADp3hAxGgDjbwIjxmllOo/26GR+mBTYn XRLf3ZOuR+8ms/K8xfP1jiqJRucx4JYf94+HUAt46fL3AGwIi9slAyqnOeP7omZm iP884LUJIjQDOu1azxYCWSJ5SnWoXvgMDUx8f7BNzW0Hr9S0M+d1ErbnupbhQNQx my1SS1gcmun2e7efJdsGkUMa+iJuRZ3udowx21eC9ieeY/qdGeBjdHWomhJ66PGx 9zflKxXdq3sDsImolrMKz8DVES3fnPDEt6yxYM61E85aN5OxgdoynhKBl/w1wQTX ipLy2O6CccQB5D5hc7xYKbaZftyUYw7S95kvQYnfIW8nmfW6RuCyIpY= -----END CERTIFICATE-----Generated at Mon Feb 9 20:47:11 2026 by rpki-client