This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/jm7CLkDkWjLyx0drk5u0jmFrhNY.roa File: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (raw, json) Hash identifier: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I= Subject key identifier: 8E:6E:C2:2E:40:E4:5A:32:F2:C7:47:6B:93:9B:B4:8E:61:6B:84:D6 Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a Certificate serial: 019B7DCA0736627BB630F67EBB29EB8E783D Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/jm7CLkDkWjLyx0drk5u0jmFrhNY.roa Signing time: Fri 02 Jan 2026 08:19:10 +0000 ROA not before: Fri 02 Jan 2026 08:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56754 IP address blocks: 91.227.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:07:36:62:7b:b6:30:f6:7e:bb:29:eb:8e:78:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e6ec22e40e45a32f2c7476b939bb48e616b84d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:7e:a8:b4:87:46:b0:96:a0:32:2b:45:cb: d0:a4:2a:9f:f0:23:1a:27:42:fa:30:9c:34:dc:58: 02:82:6b:4a:24:af:35:5f:1f:8a:3d:7e:c7:39:74: f9:67:0a:66:8e:84:00:2e:ea:81:84:72:c5:a4:49: 47:a2:d0:6b:a5:89:03:8c:83:bf:ab:ce:22:f9:dc: cb:74:a5:d6:9a:a7:3e:31:f2:52:12:d3:96:1e:c5: d3:ce:52:c7:ef:ae:3a:98:64:61:9b:88:d8:fd:d1: cd:06:05:02:8f:d5:ef:78:d3:09:74:54:0f:4b:7c: 44:73:26:ba:a1:f5:1a:45:8d:67:e8:76:28:80:3c: b2:ce:29:db:c4:44:f5:95:f9:d8:ca:04:85:6f:15: d1:43:79:64:db:ee:f3:6e:e5:f9:29:0e:40:bb:db: 84:fd:6d:39:73:10:4a:0e:c6:5a:2a:53:a6:1f:30: 59:eb:9c:e5:c2:9e:60:93:ac:71:06:d1:d7:f8:35: 20:b0:52:24:ea:17:08:c1:ee:94:11:35:a9:0e:fd: 42:55:9f:8f:58:7e:7c:2e:17:c4:9f:b0:a2:ef:37: 89:df:02:e0:e6:e6:7a:3d:ee:bf:ec:73:a0:0c:f6: 9d:97:7d:49:74:2c:c0:d2:86:a8:6a:c9:52:de:bd: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6E:C2:2E:40:E4:5A:32:F2:C7:47:6B:93:9B:B4:8E:61:6B:84:D6 X509v3 Authority Key Identifier: keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/jm7CLkDkWjLyx0drk5u0jmFrhNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.109.0/24 Signature Algorithm: sha256WithRSAEncryption 33:5b:ef:24:40:24:74:78:f6:c1:c8:30:d5:12:ef:0d:af:68: 37:c3:bb:17:32:5b:74:3c:f6:88:04:5c:28:c2:3d:09:b7:3f: 59:16:a6:53:99:64:de:56:b9:17:d8:9b:7c:63:9b:45:e8:58: 33:c6:d6:3b:26:47:c8:c6:41:5e:4e:64:5b:bb:29:58:ef:c0: 2a:f5:74:9a:d3:f1:89:99:6f:1c:d6:9b:3f:77:f3:d9:61:f5: 7c:be:ae:93:c4:21:56:ce:ee:9f:45:6d:c8:fe:b1:69:69:98: 30:9f:d5:4d:f0:42:84:dc:16:cd:a6:5c:60:7a:5d:eb:e5:01: ef:ad:81:91:92:c1:fd:c7:bf:0f:26:ee:c2:09:04:24:de:ac: b9:4e:0f:9d:f1:b9:82:34:fc:85:d5:08:b7:b5:02:3c:e6:51: 6a:74:93:b0:3a:a6:72:ab:7c:38:16:6a:11:8b:fd:4f:25:85: 51:e0:15:6e:0c:05:d2:9a:d3:f5:b8:06:36:c7:91:9f:ac:fe: cb:a5:88:d8:31:ea:21:7d:33:4b:4c:36:fd:c0:ea:09:d2:c6: 36:d6:1e:f4:48:0b:08:e0:da:21:6c:e2:fd:e6:4a:b1:32:6b: 91:89:bd:c2:25:9e:50:e9:7b:0b:d5:1f:c9:e9:f4:ae:4f:5f: ea:4c:dd:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ygc2Ynu2MPZ+uynrjng9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0 YzBiOGEwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTZlYzIyZTQwZTQ1YTMyZjJjNzQ3NmI5MzliYjQ4ZTYxNmI4NGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kV+qLSHRrCWoDIrRcvQpCqf8CMa J0L6MJw03FgCgmtKJK81Xx+KPX7HOXT5ZwpmjoQALuqBhHLFpElHotBrpYkDjIO/ q84i+dzLdKXWmqc+MfJSEtOWHsXTzlLH7646mGRhm4jY/dHNBgUCj9XveNMJdFQP S3xEcya6ofUaRY1n6HYogDyyzinbxET1lfnYygSFbxXRQ3lk2+7zbuX5KQ5Au9uE /W05cxBKDsZaKlOmHzBZ65zlwp5gk6xxBtHX+DUgsFIk6hcIwe6UETWpDv1CVZ+P WH58LhfEn7Ci7zeJ3wLg5uZ6Pe6/7HOgDPadl31JdCzA0oaoaslS3r10lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI5uwi5A5Foy8sdHa5ObtI5ha4TWMB8GA1UdIwQY MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt OGYxZjJjOTE0ZjA0LzEvam03Q0xrRGtXakx5eDBkcms1dTBqbUZyaE5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0 LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NtMA0G CSqGSIb3DQEBCwUAA4IBAQAzW+8kQCR0ePbByDDVEu8Nr2g3w7sXMlt0PPaIBFwo wj0Jtz9ZFqZTmWTeVrkX2Jt8Y5tF6FgzxtY7JkfIxkFeTmRbuylY78Aq9XSa0/GJ mW8c1ps/d/PZYfV8vq6TxCFWzu6fRW3I/rFpaZgwn9VN8EKE3BbNplxgel3r5QHv rYGRksH9x78PJu7CCQQk3qy5Tg+d8bmCNPyF1Qi3tQI85lFqdJOwOqZyq3w4FmoR i/1PJYVR4BVuDAXSmtP1uAY2x5GfrP7LpYjYMeohfTNLTDb9wOoJ0sY21h70SAsI 4NohbOL95kqxMmuRib3CJZ5Q6XsL1R/J6fSuT1/qTN3X -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:14 2026 by rpki-client