This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/ADQlbM8sNMjUliYADvZi1vFYCX8.roa File: ADQlbM8sNMjUliYADvZi1vFYCX8.roa (raw, json) Hash identifier: DFQ5JtyBKyH9OftpjAdW9wf9ak94Zl+o0z+vbeKe7Xw= Subject key identifier: 00:34:25:6C:CF:2C:34:C8:D4:96:26:00:0E:F6:62:D6:F1:58:09:7F Certificate issuer: /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652 Certificate serial: 019B77595A4F2BD236D1AC6B9D106F01FDEB Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/ADQlbM8sNMjUliYADvZi1vFYCX8.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197258 IP address blocks: 91.209.76.0/24 maxlen: 24 91.217.102.0/23 maxlen: 23 91.217.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5a:4f:2b:d2:36:d1:ac:6b:9d:10:6f:01:fd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0034256ccf2c34c8d49626000ef662d6f158097f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:64:08:a5:db:17:94:f6:67:91:eb:67:19: d8:6f:e3:cb:d0:35:45:03:5c:a2:15:c3:69:79:12: fc:7a:62:24:29:e8:5a:01:d8:8c:40:da:90:df:1f: 9d:f8:08:d1:ea:f6:68:e4:7f:7d:c6:fc:a5:d8:77: 12:62:b1:fa:4f:81:d8:6f:b7:88:e5:11:23:80:bd: a4:1e:a6:d0:ea:7d:36:f1:fa:69:7b:db:46:fa:9e: ee:fd:ee:b0:d9:61:d7:59:3f:23:b7:f8:1d:41:db: 0c:83:82:65:a9:ab:61:2c:0f:e0:05:7e:9a:58:37: 14:10:dc:98:de:87:a2:5c:32:bb:d9:35:01:5e:ad: ca:4c:15:6d:cf:e2:7d:10:ab:6f:29:a1:4b:56:9d: 08:41:29:ae:37:cf:17:4b:19:26:d7:d8:52:01:ba: f1:4f:23:da:ef:1b:32:db:5d:08:ae:79:8b:2b:5b: b9:a4:47:92:ba:c7:ba:46:c5:3f:c3:be:57:87:79: 97:d4:d1:a0:97:60:bd:9e:18:53:5f:c0:36:bd:5f: 13:6f:46:89:f7:81:3b:43:82:4c:7f:45:6d:7e:b7: 2c:f5:45:19:43:b8:42:5f:5b:5b:1f:a3:c3:cf:df: d3:4b:a2:7d:93:a1:a7:e3:a1:da:f6:1d:08:44:57: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:34:25:6C:CF:2C:34:C8:D4:96:26:00:0E:F6:62:D6:F1:58:09:7F X509v3 Authority Key Identifier: keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/ADQlbM8sNMjUliYADvZi1vFYCX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.76.0/24 91.217.102.0/23 91.217.180.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:70:65:c8:14:69:8b:a8:e0:f9:51:28:d3:23:b3:8f:6e:c8: 20:5c:58:a7:82:76:4d:cf:5e:72:e5:2a:17:cb:bc:79:5e:40: e3:71:c2:10:66:2d:2d:6b:ab:00:5a:c2:4f:2a:95:61:06:ff: 9c:36:3b:9f:81:c4:82:4b:51:bd:ab:fb:c7:95:71:5b:33:ca: 3f:52:3d:6e:bf:3f:11:9a:cf:dd:87:61:81:03:43:2b:3d:0c: 7c:8a:c3:16:b5:99:72:fe:fb:a6:26:2d:4f:44:35:89:57:34: ce:7a:9b:88:38:45:74:52:42:be:0d:84:90:08:19:0d:6e:0f: be:c7:91:f5:85:8d:71:43:c2:6c:b1:b4:81:a2:66:9f:e5:b3: 8f:18:a6:3c:2d:a7:8c:3f:0d:fe:79:79:b4:37:2c:80:dc:6d: 4e:38:62:27:0e:d0:97:38:3c:0e:5f:e3:c1:58:a2:6b:7c:d9: 83:4b:dd:0e:00:1e:62:8c:35:cd:9d:5b:81:b9:5a:7c:2a:ad: 5d:e7:d7:a6:3d:7d:e6:fe:9d:8d:22:b0:74:14:e7:82:4f:f0: 00:43:bf:4f:be:35:d9:04:7a:d7:66:28:05:a7:7e:90:e7:22: 1a:ca:5c:95:f6:ad:b4:64:ba:40:89:a8:d6:8f:d8:0c:27:52: bd:57:b5:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WVpPK9I20axrnRBvAf3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZTFjZmVjYzkyYjEwNGZjZmE5ZWZlYzZhNThmMGMxOTc5 MDE2NTIwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDM0MjU2Y2NmMmMzNGM4ZDQ5NjI2MDAwZWY2NjJkNmYxNTgwOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4RkCKXbF5T2Z5HrZxnYb+PL0DVF A1yiFcNpeRL8emIkKehaAdiMQNqQ3x+d+AjR6vZo5H99xvyl2HcSYrH6T4HYb7eI 5REjgL2kHqbQ6n028fppe9tG+p7u/e6w2WHXWT8jt/gdQdsMg4JlqathLA/gBX6a WDcUENyY3oeiXDK72TUBXq3KTBVtz+J9EKtvKaFLVp0IQSmuN88XSxkm19hSAbrx TyPa7xsy210IrnmLK1u5pEeSuse6RsU/w75Xh3mX1NGgl2C9nhhTX8A2vV8Tb0aJ 94E7Q4JMf0Vtfrcs9UUZQ7hCX1tbH6PDz9/TS6J9k6Gn46Ha9h0IRFfskQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAA0JWzPLDTI1JYmAA72YtbxWAl/MB8GA1UdIwQY MBaAFM3hz+zJKxBPz6nv7GpY8MGXkBZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYt ODc0NWRlMmY0MzIxLzEvQURRbGJNOHNOTWpVbGlZQUR2WmkxdkZZQ1g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYtODc0NWRlMmY0MzIx LzEvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9FMAwQB W9lmAwQAW9m0MA0GCSqGSIb3DQEBCwUAA4IBAQB+cGXIFGmLqOD5USjTI7OPbsgg XFingnZNz15y5SoXy7x5XkDjccIQZi0ta6sAWsJPKpVhBv+cNjufgcSCS1G9q/vH lXFbM8o/Uj1uvz8Rms/dh2GBA0MrPQx8isMWtZly/vumJi1PRDWJVzTOepuIOEV0 UkK+DYSQCBkNbg++x5H1hY1xQ8JssbSBomaf5bOPGKY8LaeMPw3+eXm0NyyA3G1O OGInDtCXODwOX+PBWKJrfNmDS90OAB5ijDXNnVuBuVp8Kq1d59emPX3m/p2NIrB0 FOeCT/AAQ79PvjXZBHrXZigFp36Q5yIaylyV9q20ZLpAiajWj9gMJ1K9V7Xh -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:53 2026 by rpki-client