This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/8d-0n5QXgWSBRoTXLSmO5ePVF_Q.roa File: 8d-0n5QXgWSBRoTXLSmO5ePVF_Q.roa (raw, json) Hash identifier: 4bi8HBY89WSg/0IezYkrsaa7KDMO+ZPuMjHVuXQc5nM= Subject key identifier: F1:DF:B4:9F:94:17:81:64:81:46:84:D7:2D:29:8E:E5:E3:D5:17:F4 Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950 Certificate serial: 019B7CEE0006CBD31909E56CB9264B74CA91 Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/8d-0n5QXgWSBRoTXLSmO5ePVF_Q.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197881 IP address blocks: 91.227.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:00:06:cb:d3:19:09:e5:6c:b9:26:4b:74:ca:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1dfb49f94178164814684d72d298ee5e3d517f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:5c:f7:77:f9:02:ed:e4:9b:50:c3:aa:c8: bb:e1:7f:1b:8d:08:ac:2a:f3:57:a9:16:67:4e:c6: eb:24:95:b1:9d:7f:0c:fa:34:1f:51:e3:5f:c6:56: 45:f3:1a:7a:d1:57:9c:2e:88:2e:e3:73:69:1f:b7: 8a:a1:dd:82:49:5a:77:b0:93:36:a8:9b:3b:97:7e: e5:97:e6:27:4c:5d:0c:1e:34:95:12:3a:53:be:9f: 99:ae:c1:a7:33:39:3b:43:de:8b:d3:73:57:28:10: b9:7e:8a:b2:2d:70:95:33:cd:a6:56:ff:91:52:7d: 51:bc:e9:8a:3c:c2:cd:b1:30:14:c3:c0:d8:ce:c3: 83:80:86:b3:49:ac:20:ad:60:21:91:d2:54:dc:4d: 6a:5d:b9:7a:bf:92:8f:cb:41:b3:02:aa:fe:9c:83: 50:78:8d:2f:c6:0f:30:20:73:f4:80:09:13:84:fe: 65:35:77:72:a9:18:30:51:d2:91:1a:bb:1f:35:23: 2d:47:33:da:d2:df:73:e6:ee:e4:c4:0d:8c:b5:b6: e1:f2:80:77:a4:12:94:63:d8:14:40:06:a8:d3:42: 4a:bd:b7:47:fd:85:51:89:4a:42:07:6c:97:8e:99: 93:6d:03:7a:37:36:19:e3:08:0d:7c:c6:1c:32:07: 0e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:B4:9F:94:17:81:64:81:46:84:D7:2D:29:8E:E5:E3:D5:17:F4 X509v3 Authority Key Identifier: keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/8d-0n5QXgWSBRoTXLSmO5ePVF_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.110.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:2a:38:40:f6:b5:47:2d:fb:33:7c:db:92:96:1b:11:7b:9a: 34:4b:05:4a:e4:f1:db:d8:0a:99:a6:74:61:0d:d6:5c:87:41: c1:05:fe:29:5c:74:aa:d9:b1:ae:de:be:0c:48:fc:18:30:26: 76:db:1a:9d:1d:c5:25:11:03:d3:83:e7:2b:d5:6d:b9:a6:72: 53:41:b5:78:5a:32:9d:05:63:eb:6d:45:63:cd:4c:71:04:e3: 89:46:e9:c9:d0:c5:0b:4a:47:70:d9:01:55:cb:8e:0e:93:de: 5c:3e:ac:a3:fa:c5:88:b8:49:74:c3:58:37:1c:4f:c5:ae:a2: d4:92:79:a3:65:7e:83:f5:f6:4d:06:43:4b:2a:75:10:24:cf: a8:22:e6:84:17:27:ef:b9:6c:a4:7d:b6:cd:ba:73:82:34:95: ed:63:79:6a:67:b9:a7:0c:3f:f7:40:ae:37:fc:90:29:de:23: 79:3a:6a:58:55:e2:37:7c:f6:8c:52:d0:7f:ed:5e:d1:5c:35: 8e:94:1f:2e:65:8a:b1:61:b7:95:3a:09:19:da:ef:50:5f:b6: 29:b5:ee:5e:eb:75:23:95:8c:14:7f:11:76:a6:6b:90:2f:c3: a2:4e:58:15:61:af:eb:0f:d8:fa:58:a7:66:13:b3:bd:a4:75: 1b:40:e5:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gAGy9MZCeVsuSZLdMqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Zjc4MzYxYTA3N2IwZDc4OTEzNWNjZDY4YjEyNjFkYjEz OGY5NTAwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWRmYjQ5Zjk0MTc4MTY0ODE0Njg0ZDcyZDI5OGVlNWUzZDUxN2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UNc93f5Au3km1DDqsi74X8bjQis KvNXqRZnTsbrJJWxnX8M+jQfUeNfxlZF8xp60VecLogu43NpH7eKod2CSVp3sJM2 qJs7l37ll+YnTF0MHjSVEjpTvp+ZrsGnMzk7Q96L03NXKBC5foqyLXCVM82mVv+R Un1RvOmKPMLNsTAUw8DYzsODgIazSawgrWAhkdJU3E1qXbl6v5KPy0GzAqr+nINQ eI0vxg8wIHP0gAkThP5lNXdyqRgwUdKRGrsfNSMtRzPa0t9z5u7kxA2Mtbbh8oB3 pBKUY9gUQAao00JKvbdH/YVRiUpCB2yXjpmTbQN6NzYZ4wgNfMYcMgcO6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPHftJ+UF4FkgUaE1y0pjuXj1Rf0MB8GA1UdIwQY MBaAFDT3g2Ggd7DXiRNczWixJh2xOPlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgt YTU3MTY4NjVmZDM1LzEvOGQtMG41UVhnV1NCUm9UWExTbU81ZVBWRl9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgtYTU3MTY4NjVmZDM1 LzEvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+NuMA0G CSqGSIb3DQEBCwUAA4IBAQAfKjhA9rVHLfszfNuSlhsRe5o0SwVK5PHb2AqZpnRh DdZch0HBBf4pXHSq2bGu3r4MSPwYMCZ22xqdHcUlEQPTg+cr1W25pnJTQbV4WjKd BWPrbUVjzUxxBOOJRunJ0MULSkdw2QFVy44Ok95cPqyj+sWIuEl0w1g3HE/FrqLU knmjZX6D9fZNBkNLKnUQJM+oIuaEFyfvuWykfbbNunOCNJXtY3lqZ7mnDD/3QK43 /JAp3iN5OmpYVeI3fPaMUtB/7V7RXDWOlB8uZYqxYbeVOgkZ2u9QX7Ypte5e63Uj lYwUfxF2pmuQL8OiTlgVYa/rD9j6WKdmE7O9pHUbQOWp -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:50 2026 by rpki-client