This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/R91GiKKyBrwfLColIYR-nu2XUnc.roa File: R91GiKKyBrwfLColIYR-nu2XUnc.roa (raw, json) Hash identifier: fqxJrQIzt273Im8ggeZoruR/46fuYNCxgpytjXWqJG0= Subject key identifier: 47:DD:46:88:A2:B2:06:BC:1F:2C:2A:25:21:84:7E:9E:ED:97:52:77 Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e Certificate serial: 019B783515D103E71518DEF94709A05454E4 Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/R91GiKKyBrwfLColIYR-nu2XUnc.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58028 IP address blocks: 193.201.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:15:d1:03:e7:15:18:de:f9:47:09:a0:54:54:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47dd4688a2b206bc1f2c2a2521847e9eed975277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:ab:b1:0b:ac:36:40:5f:05:da:b6:35:42: 4b:d4:f4:db:f3:2f:c4:5b:56:09:59:ed:a3:8c:b8: ad:17:3f:e3:f8:08:c9:86:bb:40:b5:1f:3a:dd:f2: 18:3d:0d:4f:29:e8:e8:73:31:8d:c5:bf:f8:80:47: 6b:b1:01:7c:60:19:0d:c8:d9:08:15:53:63:4c:64: ee:d8:12:8c:3c:4f:08:9e:de:ed:a8:7b:66:b9:32: 5f:2e:e9:e6:76:cb:5c:2c:a7:5e:ae:56:95:69:cf: 1b:9e:16:59:72:23:c8:cc:0e:88:1e:2b:c5:8a:98: 6f:47:0a:22:05:53:6e:23:c0:a6:24:c7:5e:3d:b3: c6:e9:83:aa:05:dc:89:da:8a:e0:6d:cf:e0:ff:9a: 42:99:be:29:e6:fe:e6:38:18:2c:cd:69:1e:33:4d: bf:02:c4:af:35:42:ae:a2:fa:f8:f4:d7:32:f2:7f: 54:56:f3:25:da:5c:01:72:4b:12:2a:92:7b:f3:b4: 96:cc:f6:3d:7c:fe:a4:86:cb:73:13:93:a8:80:80: 4d:57:07:f4:92:d1:7a:95:e6:89:39:7d:f7:34:9d: 04:28:25:26:f2:27:c0:73:27:d8:ab:5d:45:50:92: 9e:53:78:6e:d2:86:47:98:da:5f:59:48:e8:f3:b6: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DD:46:88:A2:B2:06:BC:1F:2C:2A:25:21:84:7E:9E:ED:97:52:77 X509v3 Authority Key Identifier: keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/R91GiKKyBrwfLColIYR-nu2XUnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.158.0/24 Signature Algorithm: sha256WithRSAEncryption 09:24:e7:7f:0d:64:f0:98:62:48:4f:99:7e:ea:21:bb:9c:d9: 4e:b4:da:fe:2b:a4:a1:13:41:e4:7a:bc:07:05:af:57:0d:b1: 53:df:84:52:b1:83:60:0a:d7:8e:49:ef:08:b6:5c:67:d5:4f: b6:93:ac:56:fd:e0:5c:0b:17:7b:18:ec:b3:98:83:04:b6:ea: be:a0:58:bf:e1:db:d5:b6:85:b7:99:15:84:96:34:01:00:42: c7:67:ec:76:c8:49:24:3d:3b:8f:58:44:93:c6:58:66:6d:88: 87:ea:6f:78:96:57:b2:0c:b7:98:3e:47:41:4f:4b:00:2f:56: 64:40:d3:a5:b5:d9:f8:75:23:97:84:64:fd:e5:1b:23:49:0b: a4:3b:24:15:e7:41:db:00:06:25:04:25:42:fe:02:57:55:26: e4:b0:ad:c9:4a:35:fa:ac:cc:f8:86:08:e9:2b:3e:a9:5b:f2: 76:9e:c3:3f:5c:63:d6:22:aa:d6:72:f6:cc:1b:61:3c:93:a9: 8a:6a:b3:3c:10:25:eb:f6:08:16:bb:92:0a:f1:31:23:16:1d: fc:66:fc:57:7e:9b:a9:d8:4d:a9:03:84:1b:fb:49:f6:6b:3c: 5d:bd:02:d5:ff:7e:26:44:e1:18:6b:ce:69:54:05:29:1c:e0: c1:2b:11:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRXRA+cVGN75RwmgVFTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMGY3ZTk5ZmI0ZDY1NDRmMjIyZGYzOGE4OThlYjE2MmMw ZDgxOGUwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RkNDY4OGEyYjIwNmJjMWYyYzJhMjUyMTg0N2U5ZWVkOTc1Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTOrsQusNkBfBdq2NUJL1PTb8y/E W1YJWe2jjLitFz/j+AjJhrtAtR863fIYPQ1PKejoczGNxb/4gEdrsQF8YBkNyNkI FVNjTGTu2BKMPE8Int7tqHtmuTJfLunmdstcLKderlaVac8bnhZZciPIzA6IHivF iphvRwoiBVNuI8CmJMdePbPG6YOqBdyJ2orgbc/g/5pCmb4p5v7mOBgszWkeM02/ AsSvNUKuovr49Ncy8n9UVvMl2lwBcksSKpJ787SWzPY9fP6khstzE5OogIBNVwf0 ktF6leaJOX33NJ0EKCUm8ifAcyfYq11FUJKeU3hu0oZHmNpfWUjo87ZJVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEfdRoiisga8HywqJSGEfp7tl1J3MB8GA1UdIwQY MBaAFJ8Pfpn7TWVE8iLfOKiY6xYsDYGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjIt MGRmNTY2ZWE2NGRkLzEvUjkxR2lLS3lCcndmTENvbElZUi1udTJYVW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjItMGRmNTY2ZWE2NGRk LzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcmeMA0G CSqGSIb3DQEBCwUAA4IBAQAJJOd/DWTwmGJIT5l+6iG7nNlOtNr+K6ShE0HkerwH Ba9XDbFT34RSsYNgCteOSe8Itlxn1U+2k6xW/eBcCxd7GOyzmIMEtuq+oFi/4dvV toW3mRWEljQBAELHZ+x2yEkkPTuPWESTxlhmbYiH6m94lleyDLeYPkdBT0sAL1Zk QNOltdn4dSOXhGT95RsjSQukOyQV50HbAAYlBCVC/gJXVSbksK3JSjX6rMz4hgjp Kz6pW/J2nsM/XGPWIqrWcvbMG2E8k6mKarM8ECXr9ggWu5IK8TEjFh38ZvxXfpup 2E2pA4Qb+0n2azxdvQLV/34mROEYa85pVAUpHODBKxH5 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:33 2026 by rpki-client