This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/RINTWQU8O-dtVLISeiowSUIg1i4.roa File: RINTWQU8O-dtVLISeiowSUIg1i4.roa (raw, json) Hash identifier: mr0pYPWJuxdErynFbzmieVFUznI70KYCtpeAb0gQwOI= Subject key identifier: 44:83:53:59:05:3C:3B:E7:6D:54:B2:12:7A:2A:30:49:42:20:D6:2E Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9 Certificate serial: 019B7B35D16154806DE9DD9075CF0630CAE2 Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/RINTWQU8O-dtVLISeiowSUIg1i4.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42349 IP address blocks: 91.233.122.0/24 maxlen: 24 185.203.28.0/22 maxlen: 24 2a0a:e040::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d1:61:54:80:6d:e9:dd:90:75:cf:06:30:ca:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9 Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44835359053c3be76d54b2127a2a30494220d62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:54:fa:37:d7:ed:19:68:25:dd:93:16:2c: c2:f3:92:46:b2:e0:5c:98:ab:a2:66:e6:4d:c8:91: 4d:d8:ec:73:e8:94:e4:1d:e0:4f:2b:f7:6c:41:b7: 1e:ce:81:47:b4:67:c9:44:5c:21:49:2a:58:2b:a9: 0a:0d:aa:68:cf:69:9b:13:3e:ed:f7:ba:e6:50:fc: 77:5d:45:4f:1b:62:82:61:ad:f8:6d:6d:36:75:ee: 84:ab:28:18:6f:39:96:4d:69:42:7d:bd:12:ff:26: 39:42:ae:73:e7:23:fe:46:b9:4f:36:f8:51:17:eb: 74:59:df:cf:f3:18:2b:1d:5c:6d:11:ec:ca:54:4b: 84:9c:c4:53:d9:82:cc:91:e1:f4:b9:fb:2b:9e:26: 06:cf:8c:12:9a:f9:98:c6:58:a3:1c:82:7d:78:5d: 64:0a:16:75:bc:16:8b:44:91:f2:59:c4:b5:2c:01: b3:e5:f4:78:14:c2:6a:a7:63:78:ab:9b:de:2e:cd: 9d:1f:7a:7e:0f:1f:74:55:5a:08:4f:8a:a3:9b:82: 72:90:81:f7:4f:6e:03:77:5a:fb:56:1b:cc:76:a2: f6:1d:4e:c0:1a:70:5c:c0:9d:80:0e:ea:8d:7b:92: 4a:3a:e5:6c:b7:e2:c8:84:56:ba:d3:cd:2b:2e:cb: 6d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:83:53:59:05:3C:3B:E7:6D:54:B2:12:7A:2A:30:49:42:20:D6:2E X509v3 Authority Key Identifier: keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/RINTWQU8O-dtVLISeiowSUIg1i4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.122.0/24 185.203.28.0/22 IPv6: 2a0a:e040::/29 Signature Algorithm: sha256WithRSAEncryption 97:c8:57:dd:3e:13:1b:fc:e6:6a:d9:fc:76:32:2f:86:dc:1d: 1c:23:bb:a5:e3:8b:f7:cb:d2:f5:72:ec:c9:65:ff:c3:7b:f5: 52:64:4c:e3:94:00:81:c4:00:88:c9:b6:2d:72:0f:83:15:c0: ce:26:32:9a:46:77:96:91:2e:13:5d:93:a8:b7:b0:18:40:d0: 29:02:2e:35:d7:e4:bc:fb:36:5f:6d:18:dc:0f:2d:1f:4b:fd: e5:62:e4:dc:8e:71:59:40:80:5f:62:57:2b:91:a6:9a:e1:23: 15:12:08:d3:83:89:96:36:d1:77:62:25:8d:5f:38:71:86:0d: c9:40:08:3f:52:d4:e4:ca:a1:a5:5f:ae:07:6c:d9:79:4d:88: ee:f3:be:54:a0:b4:26:bc:78:16:00:a1:07:d1:0a:16:52:17: 8e:77:be:d0:3d:e6:7a:2b:ad:bc:c4:ae:c3:a3:84:4a:77:27: 82:9e:ed:16:5d:db:35:f7:43:ad:41:23:ac:ff:33:c3:10:9b: 9d:b3:23:68:df:ef:f5:e0:45:f6:7d:5b:ff:23:73:8a:a1:4b: b1:a9:ef:af:6a:f9:40:09:fc:8e:93:8a:5e:91:78:df:9a:66: 15:aa:bf:9d:47:d0:90:79:a3:3c:ae:38:1f:3d:05:70:5b:a9: d8:a1:57:66 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NdFhVIBt6d2Qdc8GMMriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGI1YmJiZTE3NDY3NDc2ZTIyODI4ODgyMjE4ODdkZjU0 OWY0YjkwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDgzNTM1OTA1M2MzYmU3NmQ1NGIyMTI3YTJhMzA0OTQyMjBkNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTZU+jfX7RloJd2TFizC85JGsuBc mKuiZuZNyJFN2Oxz6JTkHeBPK/dsQbcezoFHtGfJRFwhSSpYK6kKDapoz2mbEz7t 97rmUPx3XUVPG2KCYa34bW02de6EqygYbzmWTWlCfb0S/yY5Qq5z5yP+RrlPNvhR F+t0Wd/P8xgrHVxtEezKVEuEnMRT2YLMkeH0ufsrniYGz4wSmvmYxlijHIJ9eF1k ChZ1vBaLRJHyWcS1LAGz5fR4FMJqp2N4q5veLs2dH3p+Dx90VVoIT4qjm4JykIH3 T24Dd1r7VhvMdqL2HU7AGnBcwJ2ADuqNe5JKOuVst+LIhFa6080rLsttKwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFESDU1kFPDvnbVSyEnoqMElCINYuMB8GA1UdIwQY MBaAFClLW7vhdGdHbiKCiIIhiH31SfS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYt YzQxZDg2MDk4ZGY3LzEvUklOVFdRVThPLWR0VkxJU2Vpb3dTVUlnMWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYtYzQxZDg2MDk4ZGY3 LzEvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+l6AwQC ucscMA0EAgACMAcDBQMqCuBAMA0GCSqGSIb3DQEBCwUAA4IBAQCXyFfdPhMb/OZq 2fx2Mi+G3B0cI7ul44v3y9L1cuzJZf/De/VSZEzjlACBxACIybYtcg+DFcDOJjKa RneWkS4TXZOot7AYQNApAi411+S8+zZfbRjcDy0fS/3lYuTcjnFZQIBfYlcrkaaa 4SMVEgjTg4mWNtF3YiWNXzhxhg3JQAg/UtTkyqGlX64HbNl5TYju875UoLQmvHgW AKEH0QoWUheOd77QPeZ6K628xK7Do4RKdyeCnu0WXds190OtQSOs/zPDEJudsyNo 3+/14EX2fVv/I3OKoUuxqe+vavlACfyOk4pekXjfmmYVqr+dR9CQeaM8rjgfPQVw W6nYoVdm -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:11 2026 by rpki-client