This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa File: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (raw, json) Hash identifier: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM= Subject key identifier: 57:CE:72:F4:B7:83:A9:2E:53:FF:B2:69:DE:46:77:28:15:49:03:F4 Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c Certificate serial: 019B7B363AFED264AFEF08BFE3ABD6CEE94D Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51083 IP address blocks: 91.216.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3a:fe:d2:64:af:ef:08:bf:e3:ab:d6:ce:e9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57ce72f4b783a92e53ffb269de467728154903f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:c9:83:01:53:4d:ef:4b:10:8f:a1:54:29: de:fb:72:8a:cf:7a:7a:31:9e:47:c3:5d:0f:3f:e9: dc:1e:64:e0:0a:2e:30:3a:af:0b:6f:0d:32:96:a1: d9:cf:f0:4b:dc:12:b7:c8:29:c7:c7:66:5e:86:7b: f0:59:52:15:91:33:8d:88:ed:d1:d1:89:c1:26:57: bc:b8:39:2b:e2:84:c4:1c:1e:7a:84:27:6d:21:c9: e9:81:77:e2:35:19:9c:47:03:47:c8:da:f0:bb:d6: f2:9b:ea:37:be:aa:98:ae:b8:7e:b0:7d:55:c9:36: e9:c9:1e:05:b2:8e:4b:5e:0b:07:aa:f5:f1:c7:17: 4e:c4:54:9b:db:ce:33:7e:ba:60:94:5b:f2:8f:c0: 8e:33:70:02:f9:1f:f1:64:6d:c6:a0:a6:5f:73:c9: 47:09:80:5b:9e:fc:45:63:82:8e:2d:6f:e0:97:9a: 94:11:6f:a1:f2:82:1d:e0:3e:b8:94:72:1f:74:05: 60:b4:a8:b6:f0:ea:e2:73:0e:8f:40:7d:58:92:37: 0c:2b:a5:f9:55:56:88:10:89:b2:52:46:6e:21:68: 93:bd:67:6c:fd:38:a6:be:22:3d:53:30:ca:db:a7: fc:91:0f:ff:2f:e9:11:e6:d4:60:99:58:bc:bf:16: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CE:72:F4:B7:83:A9:2E:53:FF:B2:69:DE:46:77:28:15:49:03:F4 X509v3 Authority Key Identifier: keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.110.0/24 Signature Algorithm: sha256WithRSAEncryption 34:dc:06:a0:d6:0f:df:69:0d:66:d3:e2:88:b8:de:06:73:eb: 4c:48:6c:42:da:0a:2f:d1:da:a5:4e:c6:13:b5:eb:61:3e:00: 73:c7:db:aa:c8:d5:71:da:5e:72:d4:f2:cb:f7:2e:21:81:03: 42:87:43:92:57:bb:82:a4:83:d1:61:c3:27:dd:bf:ef:ee:f5: 3c:ab:4d:23:12:49:56:c1:55:30:ba:43:7b:82:23:e3:8a:3d: 87:e2:04:96:5c:aa:86:9a:85:74:0f:c4:a2:12:40:ce:2c:90: 6b:ec:11:0f:60:d1:0b:ec:d6:49:06:72:75:68:50:ff:ac:ab: 9f:8b:45:1a:c3:3c:d2:58:a0:27:66:4c:7b:e6:27:3c:8f:69: 79:4b:b3:d5:59:26:27:0d:27:a6:b5:23:db:0b:6a:a0:a4:15: a6:c3:ca:fa:0b:83:ad:2a:80:a1:09:b6:b9:d8:58:9c:f3:79: 29:d6:6e:b7:99:75:00:15:17:3a:9e:28:e5:9b:aa:f5:fd:cc: 4d:1a:cf:79:22:83:7b:2d:7f:b4:4c:70:d0:49:b2:9e:5e:cd: 02:0b:98:9d:2e:34:94:3a:79:70:f9:31:75:05:71:18:a9:03: 69:5c:c3:b9:47:f0:84:ed:02:1e:85:85:56:b4:ce:85:95:3c: dd:8e:5d:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Njr+0mSv7wi/46vWzulNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx ZGVlM2MwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2NlNzJmNGI3ODNhOTJlNTNmZmIyNjlkZTQ2NzcyODE1NDkwM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKHJgwFTTe9LEI+hVCne+3KKz3p6 MZ5Hw10PP+ncHmTgCi4wOq8Lbw0ylqHZz/BL3BK3yCnHx2ZehnvwWVIVkTONiO3R 0YnBJle8uDkr4oTEHB56hCdtIcnpgXfiNRmcRwNHyNrwu9bym+o3vqqYrrh+sH1V yTbpyR4Fso5LXgsHqvXxxxdOxFSb284zfrpglFvyj8COM3AC+R/xZG3GoKZfc8lH CYBbnvxFY4KOLW/gl5qUEW+h8oId4D64lHIfdAVgtKi28Oricw6PQH1YkjcMK6X5 VVaIEImyUkZuIWiTvWds/TimviI9UzDK26f8kQ//L+kR5tRgmVi8vxYGAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfOcvS3g6kuU/+yad5GdygVSQP0MB8GA1UdIwQY MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt MDliZjQwNzFhZWEyLzEvVjg1eTlMZURxUzVUXzdKcDNrWjNLQlZKQV9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9huMA0G CSqGSIb3DQEBCwUAA4IBAQA03Aag1g/faQ1m0+KIuN4Gc+tMSGxC2gov0dqlTsYT tethPgBzx9uqyNVx2l5y1PLL9y4hgQNCh0OSV7uCpIPRYcMn3b/v7vU8q00jEklW wVUwukN7giPjij2H4gSWXKqGmoV0D8SiEkDOLJBr7BEPYNEL7NZJBnJ1aFD/rKuf i0UawzzSWKAnZkx75ic8j2l5S7PVWSYnDSemtSPbC2qgpBWmw8r6C4OtKoChCba5 2Fic83kp1m63mXUAFRc6nijlm6r1/cxNGs95IoN7LX+0THDQSbKeXs0CC5idLjSU Onlw+TF1BXEYqQNpXMO5R/CE7QIehYVWtM6FlTzdjl0c -----END CERTIFICATE-----Generated at Thu Jan 29 16:28:47 2026 by rpki-client