This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/i9TbDs-UmHFr784ZoqFEeJgd4fs.roa File: i9TbDs-UmHFr784ZoqFEeJgd4fs.roa (raw, json) Hash identifier: jtee/rF2N21pHuv03EKIznBMKr6tlpL1hhT7AG0kWT8= Subject key identifier: 8B:D4:DB:0E:CF:94:98:71:6B:EF:CE:19:A2:A1:44:78:98:1D:E1:FB Certificate issuer: /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1 Certificate serial: 019B77587607313247981231F224C63AA569 Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/i9TbDs-UmHFr784ZoqFEeJgd4fs.roa Signing time: Thu 01 Jan 2026 02:17:24 +0000 ROA not before: Thu 01 Jan 2026 02:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202480 IP address blocks: 91.217.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:76:07:31:32:47:98:12:31:f2:24:c6:3a:a5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1 Validity Not Before: Jan 1 02:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd4db0ecf9498716befce19a2a14478981de1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:e8:e3:6f:55:b1:fb:de:73:5f:e3:24:0b: 49:bf:9a:2b:74:60:d4:91:da:cc:42:1c:98:c8:b3: 91:10:48:4f:0d:9c:ca:6b:9a:d0:24:25:19:a1:38: a2:b2:c6:0d:b5:06:10:1a:d6:d4:ca:8d:45:3d:fd: 1f:04:bc:4b:a3:fc:b9:73:77:da:c5:42:d2:71:ba: 95:13:39:1d:2e:52:61:46:1b:d4:61:7e:fd:d6:12: cd:d8:e1:05:f1:af:a6:a3:44:32:f8:65:29:6d:fa: eb:f4:db:7b:82:d7:b2:a1:cb:0e:40:28:62:29:41: 37:bb:bd:1a:23:43:a2:88:70:8b:53:68:27:11:30: e5:8b:f1:12:74:d4:74:65:68:52:76:21:c2:d9:de: b8:35:bd:50:e6:d6:ec:64:ed:e8:d8:68:a5:f9:cc: 06:34:8b:1a:d1:0f:83:8b:c5:3c:41:79:ea:c7:a4: 85:10:af:4e:4b:c7:8d:4d:64:7c:52:10:72:02:1a: 25:2e:85:2a:04:67:f0:cb:7b:ea:47:dc:47:73:36: 11:5d:36:5c:20:13:42:aa:e1:75:8b:f4:42:63:32: e1:5d:40:cc:2b:b8:d3:5f:40:8a:14:88:c9:cd:85: 80:7e:30:fb:6d:f2:93:b3:00:49:78:4b:cc:64:b3: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D4:DB:0E:CF:94:98:71:6B:EF:CE:19:A2:A1:44:78:98:1D:E1:FB X509v3 Authority Key Identifier: keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/i9TbDs-UmHFr784ZoqFEeJgd4fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.50.0/24 Signature Algorithm: sha256WithRSAEncryption b3:bb:9a:57:cf:fa:4f:ad:0c:0c:16:cd:8c:7a:09:34:63:9e: e7:53:2c:04:1a:9a:06:9b:5f:c0:a8:21:bb:79:62:eb:c4:96: a2:cb:7b:c7:b8:0e:1a:a7:c7:50:c6:b4:c4:bf:dd:4b:3d:63: e1:af:90:27:2c:07:cc:29:5d:76:c7:b9:80:7d:3c:f2:dc:49: 45:15:71:7e:ad:86:22:ea:8f:1c:ff:1a:c2:72:87:2a:09:d7: 70:27:3b:5f:c2:b9:2c:65:17:c2:41:0e:ad:64:53:ee:6f:9b: 17:56:7f:62:98:c6:86:33:42:c1:b6:ca:2d:16:e4:31:20:34: 91:49:d9:ea:86:23:f6:b0:e7:62:a0:d4:c5:ba:c0:e8:76:a6: e9:61:08:71:8b:72:9a:db:76:b7:a6:d3:83:09:f0:6c:20:a3: af:26:89:f0:90:60:92:4f:b0:60:ed:67:97:16:91:7f:33:a0: 44:e9:50:9e:26:48:13:04:cd:3d:94:54:b4:58:7d:eb:0d:08: 22:a0:3d:fc:16:6d:f2:85:92:ba:e9:d4:a3:09:27:b4:cc:42: 72:18:b3:d4:92:bf:10:c4:7a:60:34:db:90:39:c1:f5:df:e3: ca:f5:9c:e4:ac:2e:10:a3:a8:2a:b6:96:44:59:72:a1:ad:d4: 34:7b:c0:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WHYHMTJHmBIx8iTGOqVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzFlOWUwYmM1ZjVkYTE4ZTMyNGExODEyNWI0Mjc4MDFh ODA3ZjEwHhcNMjYwMTAxMDIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQ0ZGIwZWNmOTQ5ODcxNmJlZmNlMTlhMmExNDQ3ODk4MWRlMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtno429Vsfvec1/jJAtJv5ordGDU kdrMQhyYyLOREEhPDZzKa5rQJCUZoTiissYNtQYQGtbUyo1FPf0fBLxLo/y5c3fa xULScbqVEzkdLlJhRhvUYX791hLN2OEF8a+mo0Qy+GUpbfrr9Nt7gteyocsOQChi KUE3u70aI0OiiHCLU2gnETDli/ESdNR0ZWhSdiHC2d64Nb1Q5tbsZO3o2Gil+cwG NIsa0Q+Di8U8QXnqx6SFEK9OS8eNTWR8UhByAholLoUqBGfwy3vqR9xHczYRXTZc IBNCquF1i/RCYzLhXUDMK7jTX0CKFIjJzYWAfjD7bfKTswBJeEvMZLOm4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvU2w7PlJhxa+/OGaKhRHiYHeH7MB8GA1UdIwQY MBaAFMjB6eC8X12hjjJKGBJbQngBqAfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYt ZTFlMzlmOTU2MDgxLzEvaTlUYkRzLVVtSEZyNzg0Wm9xRkVlSmdkNGZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYtZTFlMzlmOTU2MDgx LzEveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9kyMA0G CSqGSIb3DQEBCwUAA4IBAQCzu5pXz/pPrQwMFs2Megk0Y57nUywEGpoGm1/AqCG7 eWLrxJaiy3vHuA4ap8dQxrTEv91LPWPhr5AnLAfMKV12x7mAfTzy3ElFFXF+rYYi 6o8c/xrCcocqCddwJztfwrksZRfCQQ6tZFPub5sXVn9imMaGM0LBtsotFuQxIDSR SdnqhiP2sOdioNTFusDodqbpYQhxi3Ka23a3ptODCfBsIKOvJonwkGCST7Bg7WeX FpF/M6BE6VCeJkgTBM09lFS0WH3rDQgioD38Fm3yhZK66dSjCSe0zEJyGLPUkr8Q xHpgNNuQOcH13+PK9ZzkrC4Qo6gqtpZEWXKhrdQ0e8Dn -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:36 2026 by rpki-client