This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/PR91ry3J0euYdorH5rO0N-Bkpvk.roa File: PR91ry3J0euYdorH5rO0N-Bkpvk.roa (raw, json) Hash identifier: DbSkzL37Cl5yQPPXgAD1SKpuqfRlWV4g2sxvgZ9ZsC8= Subject key identifier: 3D:1F:75:AF:2D:C9:D1:EB:98:76:8A:C7:E6:B3:B4:37:E0:64:A6:F9 Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c Certificate serial: 019B7C1240E84D2174FBD3031C4F5BD0D776 Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/PR91ry3J0euYdorH5rO0N-Bkpvk.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207706 IP address blocks: 94.154.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:40:e8:4d:21:74:fb:d3:03:1c:4f:5b:d0:d7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d1f75af2dc9d1eb98768ac7e6b3b437e064a6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:95:70:f1:96:1c:bf:cc:b1:98:04:3c:39: 0a:37:22:3e:73:00:d5:8b:17:0d:cb:5c:22:a8:81: 58:9f:6b:fd:08:cd:d6:f6:d8:81:32:8e:e1:d8:06: 46:69:af:f4:2b:69:7f:6c:cd:00:9e:45:13:8b:ed: 26:c0:97:e3:d1:81:ad:db:39:08:13:a8:59:ce:4a: 2a:e8:81:87:12:34:b8:15:6a:4d:0e:78:64:42:af: a6:76:0a:73:79:7e:d1:db:d9:79:0d:40:bc:18:88: ab:82:53:c6:50:d1:cc:31:a5:cb:4b:ce:01:89:b0: 2b:08:b0:f8:02:1f:fe:c8:b4:04:ad:43:2c:48:f1: 48:d7:c1:ca:7d:3e:b2:f6:87:5a:fb:dd:48:ae:61: 91:e7:0c:f5:c6:34:55:e2:f4:8d:f1:64:ac:ad:b1: c6:38:3f:d7:5b:ff:ec:37:e5:11:0a:a8:d2:fc:56: 35:6f:8d:f9:8e:11:3a:07:9e:a8:3e:16:b9:ca:d2: 46:fd:18:b0:23:03:9d:68:6d:52:53:e0:79:ee:00: c5:6e:dc:16:b0:fb:5f:53:0a:b7:e5:46:c8:e6:34: 6e:7e:28:ae:71:d5:a4:d4:85:af:03:47:db:01:03: b3:72:9d:83:a4:ce:b4:fe:d2:0d:d6:5b:da:f7:5f: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1F:75:AF:2D:C9:D1:EB:98:76:8A:C7:E6:B3:B4:37:E0:64:A6:F9 X509v3 Authority Key Identifier: keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/PR91ry3J0euYdorH5rO0N-Bkpvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.7.0/24 Signature Algorithm: sha256WithRSAEncryption c3:fd:42:2f:0c:01:04:ef:59:f8:51:2b:e1:37:e3:7a:86:75: c3:1f:a4:3a:47:80:3a:12:da:76:2c:07:1c:b1:10:85:26:96: 9d:cd:18:ab:f3:91:70:a3:0e:d7:82:43:73:29:f1:7c:d4:1a: 8c:5d:0c:73:64:28:31:e1:03:e5:2f:95:c4:1c:04:d6:e4:41: 05:ed:6f:aa:52:f0:a7:38:43:26:e7:79:0f:fb:50:04:a8:cf: 18:22:fc:2d:b4:a0:b2:bc:8c:e4:81:6b:4b:0c:d1:8f:20:10: 75:d6:ec:26:1b:e1:e4:2d:e8:1c:a6:8d:90:98:75:93:2a:dc: 4f:5b:b3:8e:5c:69:ef:d9:00:60:73:98:80:19:dd:e5:2b:4a: 01:bb:7c:1d:4b:e3:da:4b:56:3c:bb:ea:e7:85:14:e6:74:4d: 40:06:f0:03:75:86:db:d1:ca:8d:1f:bb:8d:f1:2f:20:5c:96: ba:7f:af:59:85:6a:e8:e4:b0:5c:d7:72:35:52:1a:65:92:0a: f7:b7:6b:c0:01:14:ea:20:70:63:14:37:2b:08:61:b0:7b:15: 52:c4:65:55:e6:5b:9f:ae:e1:d2:b9:58:47:79:8b:1d:77:fc: b4:06:66:a7:e5:2b:8b:dd:8f:d2:f3:6d:6b:98:63:73:98:04: dd:06:93:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkDoTSF0+9MDHE9b0Nd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOWYxOWNjMWFkNzg3NDVhNWRhYjMxZDYzNDA1N2UyOWFi ZmVkOGMwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDFmNzVhZjJkYzlkMWViOTg3NjhhYzdlNmIzYjQzN2UwNjRhNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl2VcPGWHL/MsZgEPDkKNyI+cwDV ixcNy1wiqIFYn2v9CM3W9tiBMo7h2AZGaa/0K2l/bM0AnkUTi+0mwJfj0YGt2zkI E6hZzkoq6IGHEjS4FWpNDnhkQq+mdgpzeX7R29l5DUC8GIirglPGUNHMMaXLS84B ibArCLD4Ah/+yLQErUMsSPFI18HKfT6y9oda+91IrmGR5wz1xjRV4vSN8WSsrbHG OD/XW//sN+URCqjS/FY1b435jhE6B56oPha5ytJG/RiwIwOdaG1SU+B57gDFbtwW sPtfUwq35UbI5jRufiiucdWk1IWvA0fbAQOzcp2DpM60/tIN1lva91+3GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0fda8tydHrmHaKx+aztDfgZKb5MB8GA1UdIwQY MBaAFMufGcwa14dFpdqzHWNAV+Kav+2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTU4WnpCclhoMFdsMnJNZFkwQlg0cHFfN1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjFkNDktZDBlNC00ZDY4LThkZWUt ZGQ2OWE0ZWUxMzUwLzEvUFI5MXJ5M0owZXVZZG9ySDVyTzBOLUJrcHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZjFkNDktZDBlNC00ZDY4LThkZWUtZGQ2OWE0ZWUxMzUw LzEveTU4WnpCclhoMFdsMnJNZFkwQlg0cHFfN1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpoHMA0G CSqGSIb3DQEBCwUAA4IBAQDD/UIvDAEE71n4USvhN+N6hnXDH6Q6R4A6Etp2LAcc sRCFJpadzRir85Fwow7XgkNzKfF81BqMXQxzZCgx4QPlL5XEHATW5EEF7W+qUvCn OEMm53kP+1AEqM8YIvwttKCyvIzkgWtLDNGPIBB11uwmG+HkLegcpo2QmHWTKtxP W7OOXGnv2QBgc5iAGd3lK0oBu3wdS+PaS1Y8u+rnhRTmdE1ABvADdYbb0cqNH7uN 8S8gXJa6f69ZhWro5LBc13I1Uhplkgr3t2vAARTqIHBjFDcrCGGwexVSxGVV5luf ruHSuVhHeYsdd/y0Bman5SuL3Y/S821rmGNzmATdBpMQ -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:16 2026 by rpki-client