This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/JOlDCsZlCcmTT2OjiCTDsMx6-fY.roa File: JOlDCsZlCcmTT2OjiCTDsMx6-fY.roa (raw, json) Hash identifier: RRlU0j5a3qBKVa1zgiaVLc9i2Imk7rlPX9bHpL9EoYc= Subject key identifier: 24:E9:43:0A:C6:65:09:C9:93:4F:63:A3:88:24:C3:B0:CC:7A:F9:F6 Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d Certificate serial: 019B7C80CDBF7B2BD23EFA62D3D2D38B9800 Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/JOlDCsZlCcmTT2OjiCTDsMx6-fY.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47819 IP address blocks: 91.208.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:cd:bf:7b:2b:d2:3e:fa:62:d3:d2:d3:8b:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24e9430ac66509c9934f63a38824c3b0cc7af9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:ef:ea:9d:f8:86:33:11:25:db:2b:a2:d9: ae:cb:35:32:57:ad:f9:29:6e:d6:02:6d:33:b7:03: 38:a9:0b:69:ba:94:eb:3c:c3:ec:58:e5:5c:9d:b5: e9:42:69:d0:85:0c:ca:bf:93:08:5b:75:b8:ba:d5: 02:e4:80:ba:1b:9b:a9:a1:a4:f6:ce:29:8f:84:a2: 6d:21:6f:46:70:1b:82:4a:c7:0a:1c:22:01:a9:86: 59:6b:bc:08:c8:15:1b:e4:1d:fd:16:04:e3:e2:45: a1:33:6c:e1:64:3e:bc:ef:27:da:a3:11:3f:ac:bd: e2:6f:8b:5e:ea:bb:fc:1d:6a:bf:15:51:d2:15:36: 8d:55:d9:dd:28:1a:c9:96:2c:1c:89:c5:39:b9:61: 32:2c:d3:e6:8a:42:0c:36:dc:1e:0e:25:b0:6d:73: 65:a0:d3:7c:a8:b7:3c:18:69:25:62:12:78:fe:c7: 5e:ab:a0:71:ef:33:22:27:02:1b:b6:72:d1:1f:51: be:3a:90:c8:58:26:e1:f3:d6:d1:0e:c3:ae:eb:37: 43:57:ba:1e:40:4c:98:7d:e2:59:dc:f6:61:19:db: 57:15:6c:d8:0b:51:a4:9e:69:67:e1:7b:05:92:5c: 89:d2:ac:68:af:32:8a:67:2f:23:8b:63:bd:be:00: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E9:43:0A:C6:65:09:C9:93:4F:63:A3:88:24:C3:B0:CC:7A:F9:F6 X509v3 Authority Key Identifier: keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/JOlDCsZlCcmTT2OjiCTDsMx6-fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.23.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:5d:bc:85:7d:1b:69:48:df:38:9f:e9:bb:ba:56:85:ac:01: 12:92:19:c3:c0:ab:52:3f:70:5c:a5:94:32:78:f8:1f:2f:f6: 70:f4:1c:ee:0b:91:01:73:0a:ec:07:fb:22:fc:7e:21:e3:05: e8:70:5b:43:e9:97:bb:0c:7d:06:d9:8d:ce:e0:79:2a:b1:07: 10:f0:ae:5b:ad:42:f2:d2:2f:36:d0:77:c1:f3:94:15:92:bf: 55:f6:d7:a4:5f:fe:9e:76:80:d8:c2:6c:76:17:50:44:61:06: d3:cb:15:12:9d:32:8a:fd:25:48:17:4c:71:07:43:bf:f6:d9: 4b:c9:e8:5a:41:5c:90:c1:cd:aa:45:02:7c:aa:fa:5d:5a:34: 79:47:4f:93:bf:23:9a:28:b6:c0:4e:06:d3:2a:da:ba:53:4c: e4:64:09:a7:4c:bc:36:81:04:3b:d0:0f:26:75:32:ec:93:f6: f8:08:38:0d:43:98:f5:8a:0c:19:05:c7:f3:b6:8c:13:f4:67: 25:d2:69:e1:c8:1a:7a:dc:7b:a5:12:54:2d:43:e0:45:5d:26: 92:6c:1d:9a:e6:56:20:04:46:43:c1:92:04:95:16:30:3f:78: 51:f7:be:ec:96:ca:7d:67:fc:3f:94:93:3d:4a:d1:49:b3:cc: 84:eb:76:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gM2/eyvSPvpi09LTi5gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGMzZGNjY2JmMDJiYTg1MDFhYjFjNzA2ZDMxZTEzN2Zk ZGY0MWQwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGU5NDMwYWM2NjUwOWM5OTM0ZjYzYTM4ODI0YzNiMGNjN2FmOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPXv6p34hjMRJdsrotmuyzUyV635 KW7WAm0ztwM4qQtpupTrPMPsWOVcnbXpQmnQhQzKv5MIW3W4utUC5IC6G5upoaT2 zimPhKJtIW9GcBuCSscKHCIBqYZZa7wIyBUb5B39FgTj4kWhM2zhZD687yfaoxE/ rL3ib4te6rv8HWq/FVHSFTaNVdndKBrJliwcicU5uWEyLNPmikIMNtweDiWwbXNl oNN8qLc8GGklYhJ4/sdeq6Bx7zMiJwIbtnLRH1G+OpDIWCbh89bRDsOu6zdDV7oe QEyYfeJZ3PZhGdtXFWzYC1Gknmln4XsFklyJ0qxorzKKZy8ji2O9vgCKfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTpQwrGZQnJk09jo4gkw7DMevn2MB8GA1UdIwQY MBaAFIdMPczL8CuoUBqxxwbTHhN/3fQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzct YTA0NzYyMDk1ZWU2LzEvSk9sRENzWmxDY21UVDJPamlDVERzTXg2LWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzctYTA0NzYyMDk1ZWU2 LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AXMA0G CSqGSIb3DQEBCwUAA4IBAQBdXbyFfRtpSN84n+m7ulaFrAESkhnDwKtSP3BcpZQy ePgfL/Zw9BzuC5EBcwrsB/si/H4h4wXocFtD6Ze7DH0G2Y3O4HkqsQcQ8K5brULy 0i820HfB85QVkr9V9tekX/6edoDYwmx2F1BEYQbTyxUSnTKK/SVIF0xxB0O/9tlL yehaQVyQwc2qRQJ8qvpdWjR5R0+TvyOaKLbATgbTKtq6U0zkZAmnTLw2gQQ70A8m dTLsk/b4CDgNQ5j1igwZBcfztowT9Gcl0mnhyBp63HulElQtQ+BFXSaSbB2a5lYg BEZDwZIElRYwP3hR977slsp9Z/w/lJM9StFJs8yE63aB -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:56 2026 by rpki-client