This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa File: IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa (raw, json) Hash identifier: JbEdz7DRUOFf0b29xjdSZVDAgz011LT+vbXjqHH3Ipg= Subject key identifier: 20:1E:3B:2D:C2:F9:11:80:80:5E:16:06:95:99:B3:D9:8A:AB:F5:CC Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504 Certificate serial: 019B7758C9788C39B210306259F4B73FE7CC Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198348 IP address blocks: 91.233.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c9:78:8c:39:b2:10:30:62:59:f4:b7:3f:e7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=201e3b2dc2f91180805e16069599b3d98aabf5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:e1:d4:a8:7d:a4:6e:a2:31:25:51:0c:c5: 55:7f:65:81:16:2b:12:50:e2:80:d7:2f:cb:67:45: 62:9c:59:b1:00:4b:44:dc:97:f5:2f:d3:db:12:df: bc:85:39:52:1d:89:7a:3e:ea:4a:5f:e3:79:07:85: 21:f9:c6:21:eb:13:63:5c:1c:89:a2:00:19:bf:e4: 9d:e5:e4:f3:2e:3e:2a:17:77:42:fb:9a:ca:43:4d: 45:a8:df:18:76:54:0e:c9:52:a0:7d:a9:e2:6e:bb: 65:bd:ed:12:07:9a:62:76:79:e0:34:36:e2:a9:c1: 26:3a:f3:f7:ae:d0:71:cb:93:eb:46:b9:8f:83:8d: a0:0f:99:b7:1d:b9:75:1e:0e:c3:4d:0a:9b:86:ed: b7:9b:7f:b5:d1:7c:7b:58:33:6d:66:b5:30:e8:04: 53:ae:c3:2e:14:b2:91:de:fe:60:0b:dc:3f:47:ec: 1a:e4:d6:e5:0a:2d:10:aa:33:79:de:ea:9c:de:66: ad:88:32:74:4e:6c:c9:3d:da:01:d9:48:b1:8e:ba: 8b:f1:44:3e:ef:ae:23:0c:bd:77:2d:a7:03:2c:87: 9e:1f:0b:20:6f:b4:c4:2c:da:f4:05:87:f8:0a:51: a6:a6:d7:fd:e6:f8:c2:2b:9f:5c:ae:4f:ff:ef:3c: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1E:3B:2D:C2:F9:11:80:80:5E:16:06:95:99:B3:D9:8A:AB:F5:CC X509v3 Authority Key Identifier: keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.230.0/23 Signature Algorithm: sha256WithRSAEncryption 10:5f:a3:7a:3b:3c:04:e1:da:9c:df:f1:fc:fb:07:a5:7b:9c: 20:c0:6a:d4:91:19:4d:97:da:6e:d1:ad:f9:50:88:bb:e1:8f: c2:a9:70:aa:f2:07:43:19:d0:42:5d:ff:1f:ca:33:61:f5:3c: 2f:cf:f1:cd:13:ea:6c:1a:06:3d:ae:46:4d:7f:b9:74:c0:c9: e3:b5:a5:dd:96:4a:20:ab:84:2d:de:2c:7d:46:fd:ed:2f:ac: f4:43:6b:91:e5:c2:e9:e0:64:67:f3:21:0b:b8:c9:2e:45:ef: a9:bd:cc:36:39:ce:c9:56:a9:5c:ff:6a:a0:08:da:c9:b7:8e: a4:1b:27:99:0e:08:04:23:c6:6a:4c:62:0e:07:3f:60:a5:e7: 39:aa:4a:87:ca:a3:c6:d0:5a:9f:0b:71:dd:0f:d1:66:e3:d8: b8:a8:b0:ca:c5:cb:9a:30:f7:40:f9:ea:af:52:4b:74:44:fc: c0:5b:3a:57:51:dc:25:99:e9:19:5c:68:d3:b5:8c:5f:fe:0d: 9f:35:70:75:c8:98:11:50:db:bf:72:ba:7c:ba:94:cb:17:df: 56:19:2e:39:30:7e:50:e7:b7:6c:db:5e:93:4e:88:6e:fa:97: 6f:13:07:6e:6e:b5:76:29:9b:22:cd:46:95:95:ff:64:69:36: 08:7b:5a:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMl4jDmyEDBiWfS3P+fMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTE2Mzc5YTA0MmRmNzQ0NWU0MmVmYjM2NDZkMWYyNWE2 N2Q1MDQwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDFlM2IyZGMyZjkxMTgwODA1ZTE2MDY5NTk5YjNkOThhYWJmNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd/h1Kh9pG6iMSVRDMVVf2WBFisS UOKA1y/LZ0VinFmxAEtE3Jf1L9PbEt+8hTlSHYl6PupKX+N5B4Uh+cYh6xNjXByJ ogAZv+Sd5eTzLj4qF3dC+5rKQ01FqN8YdlQOyVKgfanibrtlve0SB5pidnngNDbi qcEmOvP3rtBxy5PrRrmPg42gD5m3Hbl1Hg7DTQqbhu23m3+10Xx7WDNtZrUw6ART rsMuFLKR3v5gC9w/R+wa5NblCi0QqjN53uqc3matiDJ0TmzJPdoB2UixjrqL8UQ+ 764jDL13LacDLIeeHwsgb7TELNr0BYf4ClGmptf95vjCK59crk//7zzG7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAeOy3C+RGAgF4WBpWZs9mKq/XMMB8GA1UdIwQY MBaAFJBRY3mgQt90ReQu+zZG0fJaZ9UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYt NDRhOTFiYTE3YjA4LzEvSUI0N0xjTDVFWUNBWGhZR2xabXoyWXFyOWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYtNDRhOTFiYTE3YjA4 LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+nmMA0G CSqGSIb3DQEBCwUAA4IBAQAQX6N6OzwE4dqc3/H8+wele5wgwGrUkRlNl9pu0a35 UIi74Y/CqXCq8gdDGdBCXf8fyjNh9Twvz/HNE+psGgY9rkZNf7l0wMnjtaXdlkog q4Qt3ix9Rv3tL6z0Q2uR5cLp4GRn8yELuMkuRe+pvcw2Oc7JVqlc/2qgCNrJt46k GyeZDggEI8ZqTGIOBz9gpec5qkqHyqPG0FqfC3HdD9Fm49i4qLDKxcuaMPdA+eqv Ukt0RPzAWzpXUdwlmekZXGjTtYxf/g2fNXB1yJgRUNu/crp8upTLF99WGS45MH5Q 57ds216TTohu+pdvEwdubrV2KZsizUaVlf9kaTYIe1pP -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:10 2026 by rpki-client