This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/b2NnwzgfLDbXtAxH9dtL0v2uNtk.roa File: b2NnwzgfLDbXtAxH9dtL0v2uNtk.roa (raw, json) Hash identifier: KBKYmxla1nso+r4vvsx8/d03VCCVPfJjj4bfekYBlMo= Subject key identifier: 6F:63:67:C3:38:1F:2C:36:D7:B4:0C:47:F5:DB:4B:D2:FD:AE:36:D9 Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b Certificate serial: 019B7F83EB7BFC2EC6B391C0BB48C5AC5808 Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/b2NnwzgfLDbXtAxH9dtL0v2uNtk.roa Signing time: Fri 02 Jan 2026 16:21:50 +0000 ROA not before: Fri 02 Jan 2026 16:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49092 IP address blocks: 91.212.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:eb:7b:fc:2e:c6:b3:91:c0:bb:48:c5:ac:58:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b Validity Not Before: Jan 2 16:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f6367c3381f2c36d7b40c47f5db4bd2fdae36d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:9f:95:ba:2a:c3:66:c1:53:f5:05:41:e5: ce:01:5c:9d:99:1f:86:fb:9c:ac:fa:61:f0:34:5d: 08:c8:89:1c:76:3e:19:ac:74:4d:37:80:ea:3f:9b: 44:eb:c4:e3:b0:e0:6e:9b:96:2e:54:8b:f6:ca:2b: 2a:77:8c:62:6f:e1:4e:04:d7:c7:16:c2:74:b6:98: 79:81:9e:a0:8e:14:41:19:38:f2:c0:2e:fa:46:7d: c9:98:44:49:4f:01:03:65:02:b2:47:c8:57:0f:3d: 34:1b:c7:7f:73:0d:f9:44:c9:34:34:35:26:da:d8: 67:45:33:c1:8c:ca:6d:90:87:a7:28:ce:47:1c:55: 51:b1:5a:8e:3f:7f:6b:eb:9a:9d:2d:b8:a6:fe:09: ca:69:77:47:5a:85:81:2e:5c:88:fe:45:3c:2b:49: c2:9b:e6:be:13:d9:58:c7:8e:bb:de:a4:55:2d:ce: 2c:96:d5:58:3e:1e:97:e0:5d:42:55:4c:da:79:8f: ba:e7:62:a0:c1:c7:0b:fd:37:1a:2e:c0:8c:48:66: 07:c0:7a:3e:ec:2f:66:bc:e5:78:55:b9:16:52:77: 16:6f:07:f7:67:1d:79:ef:ac:82:18:06:dc:ea:01: 99:e3:1e:0d:ed:23:a5:2e:90:73:ec:57:7c:67:a3: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:63:67:C3:38:1F:2C:36:D7:B4:0C:47:F5:DB:4B:D2:FD:AE:36:D9 X509v3 Authority Key Identifier: keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/b2NnwzgfLDbXtAxH9dtL0v2uNtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.113.0/24 Signature Algorithm: sha256WithRSAEncryption 76:13:d2:cb:d8:6e:af:a0:37:5b:9f:3f:d4:46:05:c7:72:a4: 43:e3:79:ae:11:46:79:e6:2f:5c:04:53:2c:b1:ac:d5:67:9f: 71:5a:97:c0:f1:2f:c0:89:d3:ff:3a:e6:dc:1c:76:a9:f8:6c: 74:8b:44:0f:0e:f4:c9:95:fb:32:18:11:92:44:f1:04:03:af: d4:68:11:08:e7:da:b9:68:f5:48:0a:a1:3c:9b:4d:52:d4:1f: 98:a6:84:c1:68:8d:65:1e:c8:df:e0:90:e3:3c:a8:7c:a6:0b: 02:6e:94:e1:66:79:4b:6f:fd:f1:2b:1d:14:21:cb:91:66:3a: 48:08:66:a7:1f:27:19:d7:9e:97:10:48:28:be:67:e0:97:1e: 9d:bf:32:a6:b8:89:f8:78:58:98:64:ac:62:df:09:42:de:f0: 88:05:fd:ad:d2:44:aa:05:5e:d0:d4:fe:f4:b1:41:5a:a0:7a: da:75:4f:53:34:1e:f9:43:85:ed:0e:c8:48:62:15:b7:c6:2b: d0:6d:56:73:23:6d:f8:a1:d3:5c:b8:1d:ce:54:b9:ef:ea:d7: 60:b8:13:dd:8c:0e:c9:14:42:f8:81:f1:de:a8:85:f7:8f:8e: f0:53:12:ed:5f:3b:a7:1a:6c:13:85:5d:c8:87:02:c9:51:cb: 4f:8c:01:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+t7/C7Gs5HAu0jFrFgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzhiMzYwMjQ1ZmU0NGIxNzU3YTY5ZTk3N2ExNWUwN2Zh YWY2OWIwHhcNMjYwMTAyMTYyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjYzNjdjMzM4MWYyYzM2ZDdiNDBjNDdmNWRiNGJkMmZkYWUzNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrSflboqw2bBU/UFQeXOAVydmR+G +5ys+mHwNF0IyIkcdj4ZrHRNN4DqP5tE68TjsOBum5YuVIv2yisqd4xib+FOBNfH FsJ0tph5gZ6gjhRBGTjywC76Rn3JmERJTwEDZQKyR8hXDz00G8d/cw35RMk0NDUm 2thnRTPBjMptkIenKM5HHFVRsVqOP39r65qdLbim/gnKaXdHWoWBLlyI/kU8K0nC m+a+E9lYx4673qRVLc4sltVYPh6X4F1CVUzaeY+652KgwccL/TcaLsCMSGYHwHo+ 7C9mvOV4VbkWUncWbwf3Zx1576yCGAbc6gGZ4x4N7SOlLpBz7Fd8Z6NXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9jZ8M4Hyw217QMR/XbS9L9rjbZMB8GA1UdIwQY MBaAFHY4s2AkX+RLF1emnpd6FeB/qvabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAt OGYyNjFkMmZiNjRlLzEvYjJObnd6Z2ZMRGJYdEF4SDlkdEwwdjJ1TnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAtOGYyNjFkMmZiNjRl LzEvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RxMA0G CSqGSIb3DQEBCwUAA4IBAQB2E9LL2G6voDdbnz/URgXHcqRD43muEUZ55i9cBFMs sazVZ59xWpfA8S/AidP/OubcHHap+Gx0i0QPDvTJlfsyGBGSRPEEA6/UaBEI59q5 aPVICqE8m01S1B+YpoTBaI1lHsjf4JDjPKh8pgsCbpThZnlLb/3xKx0UIcuRZjpI CGanHycZ156XEEgovmfglx6dvzKmuIn4eFiYZKxi3wlC3vCIBf2t0kSqBV7Q1P70 sUFaoHradU9TNB75Q4XtDshIYhW3xivQbVZzI234odNcuB3OVLnv6tdguBPdjA7J FEL4gfHeqIX3j47wUxLtXzunGmwThV3IhwLJUctPjAGe -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:30 2026 by rpki-client