This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa File: jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa (raw, json) Hash identifier: ErKY/69zjGb+XdFCBodBK2CXOv9JRDcTgwXpmXZI5JY= Subject key identifier: 8E:5D:46:CB:B7:1A:DB:4F:E3:D8:A5:8D:B0:E8:86:FC:7C:B3:C8:AC Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Certificate serial: 019B7B361A35FED556A26C688051FD0ABDC9 Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51094 IP address blocks: 91.216.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1a:35:fe:d5:56:a2:6c:68:80:51:fd:0a:bd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e5d46cbb71adb4fe3d8a58db0e886fc7cb3c8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:97:f1:e8:7e:74:0d:9a:0e:6e:96:22:2f: e2:38:f5:31:54:75:41:c1:2d:6a:bb:25:c4:44:02: bc:dc:2a:4c:0d:b9:c7:ec:cd:d1:57:f2:87:91:eb: 16:e4:4b:7d:0f:05:22:bc:f9:b9:41:46:b2:a4:cd: c3:7c:68:bd:8c:64:f4:bd:f6:38:fc:69:86:4d:06: 4b:f3:5c:31:ed:a9:37:31:90:aa:04:93:8c:7f:32: 87:ba:8b:38:e0:0a:24:3f:e2:ab:3d:cb:c2:f7:59: be:f6:0c:eb:f3:05:a5:ef:37:f9:ea:99:03:d7:0d: a4:1d:e9:ea:34:a0:f1:b2:2f:6a:ff:bf:1d:b8:4c: 09:d2:c2:7a:df:ad:8e:6c:a1:b4:8e:d8:e9:21:c7: 0f:42:b1:cf:66:5c:ea:7a:fa:ca:2b:2e:6d:c8:ee: 96:8d:45:18:98:7f:90:01:69:52:dd:be:fc:10:1d: 8f:7e:6b:4f:b7:54:89:b1:94:22:a7:5d:fb:7a:c5: 89:e0:28:9f:4d:9b:5e:ad:26:cc:56:8e:3c:2b:a4: 52:df:44:45:68:00:bb:22:bb:75:28:00:f9:f6:2c: 5f:1b:b4:70:6c:0a:09:e1:b8:8a:a3:f6:d8:7f:4d: b4:d5:58:3a:06:39:2b:45:7d:13:fc:df:09:3c:3e: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5D:46:CB:B7:1A:DB:4F:E3:D8:A5:8D:B0:E8:86:FC:7C:B3:C8:AC X509v3 Authority Key Identifier: keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.144.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:1a:57:f4:9f:1b:cf:48:77:6a:b7:f2:6c:c7:7d:e6:3d:a4: 34:9d:12:72:6c:93:89:95:0d:9a:2b:81:63:b0:04:cc:50:70: 83:fd:d1:98:a8:43:44:41:ae:74:97:90:ea:b4:32:8c:ba:02: 9f:45:ab:0c:6d:f5:f8:90:0a:38:c8:42:65:ad:ae:7e:4c:c0: d2:ef:02:d5:10:52:2b:04:ec:39:03:5b:69:50:c3:6f:9e:62: cf:76:d8:1b:3c:e7:26:c5:5f:f1:c5:c7:be:a2:c6:81:22:11: 53:13:89:74:3e:17:b2:27:86:d2:a9:24:85:ce:fe:dd:3a:e0: 37:74:e4:e5:f5:76:6f:21:ff:28:5b:00:e3:8e:21:11:13:c5: 62:dc:09:2d:fe:08:b9:ec:5b:9a:e1:3b:31:9a:a6:c9:31:fc: b8:65:82:8e:4f:57:34:20:a8:51:18:84:a2:86:23:8a:4c:61: 15:91:e8:36:5d:d4:c2:62:5d:a6:f8:f9:9d:17:64:74:a8:c5: 47:8e:a6:d9:95:93:b3:59:bc:f5:5d:6a:07:8d:7d:eb:02:63: 2b:83:5a:06:0d:51:f6:b6:54:6b:38:35:3b:e9:97:41:45:99: f9:f2:57:68:e9:64:e5:6f:ad:54:7b:3e:97:21:39:c0:7d:eb: c0:c5:57:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nho1/tVWomxogFH9Cr3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmE0ZDA4MWIzNjg4N2YzZTVjYTY1MzdmNzQ2OWVlZTIx ZDcxYWUwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTVkNDZjYmI3MWFkYjRmZTNkOGE1OGRiMGU4ODZmYzdjYjNjOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswGX8eh+dA2aDm6WIi/iOPUxVHVB wS1quyXERAK83CpMDbnH7M3RV/KHkesW5Et9DwUivPm5QUaypM3DfGi9jGT0vfY4 /GmGTQZL81wx7ak3MZCqBJOMfzKHuos44AokP+KrPcvC91m+9gzr8wWl7zf56pkD 1w2kHenqNKDxsi9q/78duEwJ0sJ6362ObKG0jtjpIccPQrHPZlzqevrKKy5tyO6W jUUYmH+QAWlS3b78EB2PfmtPt1SJsZQip137esWJ4CifTZterSbMVo48K6RS30RF aAC7Irt1KAD59ixfG7RwbAoJ4biKo/bYf0201Vg6BjkrRX0T/N8JPD4KRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5dRsu3GttP49iljbDohvx8s8isMB8GA1UdIwQY MBaAFLT6TQgbNoh/PlymU390ae7iHXGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQt ODYzZGFlY2ZjMmU4LzEvamwxR3k3Y2EyMF9qMktXTnNPaUdfSHl6eUt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQtODYzZGFlY2ZjMmU4 LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iQMA0G CSqGSIb3DQEBCwUAA4IBAQA6Glf0nxvPSHdqt/Jsx33mPaQ0nRJybJOJlQ2aK4Fj sATMUHCD/dGYqENEQa50l5DqtDKMugKfRasMbfX4kAo4yEJlra5+TMDS7wLVEFIr BOw5A1tpUMNvnmLPdtgbPOcmxV/xxce+osaBIhFTE4l0PheyJ4bSqSSFzv7dOuA3 dOTl9XZvIf8oWwDjjiERE8Vi3Akt/gi57Fua4TsxmqbJMfy4ZYKOT1c0IKhRGISi hiOKTGEVkeg2XdTCYl2m+PmdF2R0qMVHjqbZlZOzWbz1XWoHjX3rAmMrg1oGDVH2 tlRrODU76ZdBRZn58ldo6WTlb61Uez6XITnAfevAxVcn -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:27 2026 by rpki-client