This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/mNuOwLVGlOLps6Mhs-jRhQwC74Y.roa File: mNuOwLVGlOLps6Mhs-jRhQwC74Y.roa (raw, json) Hash identifier: +nkbYKC+zpYZO/W/WA0itD0p/vfV2f8xcHXZZ9VnVvQ= Subject key identifier: 98:DB:8E:C0:B5:46:94:E2:E9:B3:A3:21:B3:E8:D1:85:0C:02:EF:86 Certificate issuer: /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca Certificate serial: 019B7AC89B1EAB144642C8CD4D62D2059781 Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/mNuOwLVGlOLps6Mhs-jRhQwC74Y.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28865 IP address blocks: 91.235.104.0/24 maxlen: 24 91.235.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9b:1e:ab:14:46:42:c8:cd:4d:62:d2:05:97:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98db8ec0b54694e2e9b3a321b3e8d1850c02ef86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:3a:34:63:95:64:72:3c:9d:58:5c:50:e2: 1f:d5:bf:8b:5f:8a:d5:5d:08:eb:de:31:c4:54:74: ef:0c:ad:09:02:ed:56:aa:82:8b:af:27:8b:4c:02: 10:1e:52:9f:86:f1:dc:b7:24:9d:eb:7a:8c:61:a7: 9e:b9:08:e4:70:35:1b:62:2d:3e:38:24:a4:fc:fc: 9c:02:f5:82:5f:b9:4e:65:5e:75:44:7a:7e:54:2d: 5a:a0:50:da:b1:1e:46:78:5f:42:43:c3:dd:b3:e0: 0c:1b:2f:1e:ad:ed:d4:35:fd:b9:26:29:f9:a7:8f: 76:57:8e:be:38:05:c3:1c:4f:8c:4d:70:bf:fc:a2: ef:ad:ba:c5:d5:57:51:34:1f:f6:24:f7:a8:f5:4d: 98:d4:89:40:6d:05:7c:35:4c:3e:54:d6:71:fd:c9: 15:d6:c6:c4:54:2d:1f:2a:44:8b:62:df:a1:1c:6a: 2a:c6:02:73:d7:62:ff:a2:3e:9c:29:82:56:75:e1: 55:05:a1:51:07:5c:11:97:7d:d2:df:60:46:72:b5: a4:9c:ea:66:6b:d6:40:8e:9e:6f:5e:3c:2b:77:49: 10:6a:cc:c5:9e:e0:10:e6:fd:e0:d8:38:9b:41:11: 36:56:82:53:75:7f:61:2b:7f:ca:73:04:12:e5:c7: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DB:8E:C0:B5:46:94:E2:E9:B3:A3:21:B3:E8:D1:85:0C:02:EF:86 X509v3 Authority Key Identifier: keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/mNuOwLVGlOLps6Mhs-jRhQwC74Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.104.0/23 Signature Algorithm: sha256WithRSAEncryption 43:d2:ab:74:14:64:3e:50:7a:96:d0:b3:29:b5:83:bd:82:d5: 52:4a:7e:2c:c7:8d:85:52:1a:22:e7:c2:f6:c3:35:be:39:d5: 45:ba:18:15:a3:f8:ee:b5:d3:38:60:22:b4:61:24:eb:68:b6: 51:74:8b:8b:27:ce:1e:48:87:92:0f:57:57:eb:c8:8d:78:5a: 8f:e3:6a:2e:f8:a2:7d:79:ea:89:89:81:f9:76:66:db:ed:64: a2:e7:af:69:42:32:2e:26:c9:29:92:86:ce:b7:4f:c7:e4:f2: e6:71:39:d4:63:db:a2:87:c7:34:27:05:f7:46:c8:78:29:45: 6d:fa:8c:3b:00:4c:65:fa:d5:80:9f:11:2b:4f:a1:1b:2c:ec: 2d:3c:97:1c:b2:c0:50:79:8d:ca:7e:de:a7:bf:bf:a8:a2:31: 6d:0e:b6:0c:0c:e9:64:45:e7:2a:86:f2:1c:0f:1d:79:8b:6c: e5:de:02:ba:6f:81:99:af:1c:40:38:0d:bb:d7:1e:39:d3:99: af:38:ae:3f:c7:c5:41:b6:d5:cc:9d:95:b2:b4:1c:e5:5e:2c: 1d:87:68:22:75:dc:a1:b7:5b:50:9d:db:f0:d1:d6:b7:21:2b: ba:ea:97:98:85:0b:2d:36:7b:80:43:05:47:97:be:3d:4e:65: 7b:4b:c4:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJseqxRGQsjNTWLSBZeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZTdmNzFiY2Y1MmVkNmQwNWI3ZWIzYjc0MWVjNzkwNmU3 N2RjY2EwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGRiOGVjMGI1NDY5NGUyZTliM2EzMjFiM2U4ZDE4NTBjMDJlZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZw6NGOVZHI8nVhcUOIf1b+LX4rV XQjr3jHEVHTvDK0JAu1WqoKLryeLTAIQHlKfhvHctySd63qMYaeeuQjkcDUbYi0+ OCSk/PycAvWCX7lOZV51RHp+VC1aoFDasR5GeF9CQ8Pds+AMGy8ere3UNf25Jin5 p492V46+OAXDHE+MTXC//KLvrbrF1VdRNB/2JPeo9U2Y1IlAbQV8NUw+VNZx/ckV 1sbEVC0fKkSLYt+hHGoqxgJz12L/oj6cKYJWdeFVBaFRB1wRl33S32BGcrWknOpm a9ZAjp5vXjwrd0kQaszFnuAQ5v3g2DibQRE2VoJTdX9hK3/KcwQS5cejCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjbjsC1RpTi6bOjIbPo0YUMAu+GMB8GA1UdIwQY MBaAFLnn9xvPUu1tBbfrO3Qex5Bud9zKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjE2OTUtN2FkNi00ZDI0LTgwNmQt YjVjZDEzZDkxODRjLzEvbU51T3dMVkdsT0xwczZNaHMtalJoUXdDNzRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjE2OTUtN2FkNi00ZDI0LTgwNmQtYjVjZDEzZDkxODRj LzEvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+toMA0G CSqGSIb3DQEBCwUAA4IBAQBD0qt0FGQ+UHqW0LMptYO9gtVSSn4sx42FUhoi58L2 wzW+OdVFuhgVo/jutdM4YCK0YSTraLZRdIuLJ84eSIeSD1dX68iNeFqP42ou+KJ9 eeqJiYH5dmbb7WSi569pQjIuJskpkobOt0/H5PLmcTnUY9uih8c0JwX3Rsh4KUVt +ow7AExl+tWAnxErT6EbLOwtPJccssBQeY3Kft6nv7+oojFtDrYMDOlkRecqhvIc Dx15i2zl3gK6b4GZrxxAOA271x4505mvOK4/x8VBttXMnZWytBzlXiwdh2giddyh t1tQndvw0da3ISu66peYhQstNnuAQwVHl749TmV7S8Tq -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:15 2026 by rpki-client