This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/aYMmtg2F_--bVu8hSyKAFciGf7U.roa File: aYMmtg2F_--bVu8hSyKAFciGf7U.roa (raw, json) Hash identifier: CxDcGIhoZfPolf9XmBJFl0rGdo9uyrgJav1ZUiVhwxo= Subject key identifier: 69:83:26:B6:0D:85:FF:EF:9B:56:EF:21:4B:22:80:15:C8:86:7F:B5 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1A0ABB1093E80284187E2560A783 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/aYMmtg2F_--bVu8hSyKAFciGf7U.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 91.108.240.0/24 maxlen: 24 91.108.241.0/24 maxlen: 24 91.108.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:0a:bb:10:93:e8:02:84:18:7e:25:60:a7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=698326b60d85ffef9b56ef214b228015c8867fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4c:3d:74:ca:50:87:96:9e:18:8d:3d:c0:ca: 6c:64:d8:c3:26:e1:9f:33:84:e3:28:f3:6f:1e:0f: 7a:c3:45:f0:a6:71:3a:b7:5b:a6:d3:ee:8b:f1:c5: c2:82:6c:e4:9e:b2:3f:f0:a5:e5:14:ff:07:7a:30: eb:d7:d2:47:89:91:98:ba:17:ef:c3:f4:99:66:44: fd:9e:17:da:6d:31:32:ed:6d:5c:87:e4:db:53:cf: fb:a3:d8:29:ad:31:e2:b6:1f:e8:a8:57:fc:5a:15: 8a:00:68:95:17:6b:4e:ee:68:d2:bb:a8:f5:3c:bd: be:bb:97:0c:93:fc:1f:76:c1:5a:64:b4:c9:89:a1: 69:71:14:0f:c0:aa:fa:72:c9:75:79:cc:b4:61:9b: ab:41:2b:95:28:fc:f9:e1:bb:c3:49:42:2d:20:39: e1:70:4b:fd:18:7b:6c:74:6c:78:aa:34:31:0e:2b: 1b:49:6a:c2:03:42:36:b8:14:66:36:3c:b2:e6:5a: 31:5d:f9:bd:c5:4b:bd:82:bb:c1:66:88:66:d0:29: 8b:7a:15:09:65:ab:2c:17:e6:73:7a:f2:67:9b:45: ae:0d:f9:c0:0e:8b:e2:44:8b:04:2c:21:7f:0e:7d: 96:76:32:67:ad:f7:4a:58:62:e6:aa:fd:69:ee:f1: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:26:B6:0D:85:FF:EF:9B:56:EF:21:4B:22:80:15:C8:86:7F:B5 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/aYMmtg2F_--bVu8hSyKAFciGf7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.240.0-91.108.242.255 Signature Algorithm: sha256WithRSAEncryption 1a:3c:f4:f8:8a:35:75:df:eb:c8:67:f8:24:48:1c:00:dc:56: ff:88:89:b1:b1:f9:72:fd:de:22:2d:b2:20:71:3d:39:32:fd: 32:02:7a:a0:6a:4f:12:9b:95:89:27:6d:7c:80:87:a8:68:f1: 89:fe:a5:f6:b4:ae:60:55:15:62:12:63:20:85:02:cd:25:24: 4c:28:e9:80:f7:e6:8a:16:40:03:ff:46:69:ac:d6:9c:92:a4: 7f:eb:aa:27:6a:05:90:9a:2a:87:5d:fa:03:38:74:3d:f8:4e: c5:ed:c7:b9:26:11:a7:54:60:f0:24:c3:d3:b3:41:cb:1a:3e: 1c:91:f1:f5:f1:64:39:f5:ee:47:92:e0:90:e5:b8:f1:ca:d3: 30:dd:86:eb:3e:ec:24:8b:ce:63:3d:72:25:b3:cd:dc:cf:22: 9d:e7:f7:1b:25:7a:b9:3d:7b:44:57:b3:dd:7d:01:52:fc:09: 82:ba:b0:e6:9d:1b:73:69:fc:c6:a0:82:4a:d5:c6:41:0f:16: b7:16:d6:d0:96:af:41:1c:43:6d:a8:f2:70:3a:f6:6a:9a:84: 2e:c6:72:28:23:32:d8:a8:6e:0b:79:a9:4d:f5:e5:fc:aa:fe: 1e:5e:bd:03:12:2a:f2:ea:2b:43:39:53:85:c0:75:68:11:00: 7e:ba:8f:9f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26xoKuxCT6AKEGH4lYKeDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTgzMjZiNjBkODVmZmVmOWI1NmVmMjE0YjIyODAxNWM4ODY3ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEw9dMpQh5aeGI09wMpsZNjDJuGf M4TjKPNvHg96w0XwpnE6t1um0+6L8cXCgmzknrI/8KXlFP8HejDr19JHiZGYuhfv w/SZZkT9nhfabTEy7W1ch+TbU8/7o9gprTHith/oqFf8WhWKAGiVF2tO7mjSu6j1 PL2+u5cMk/wfdsFaZLTJiaFpcRQPwKr6csl1ecy0YZurQSuVKPz54bvDSUItIDnh cEv9GHtsdGx4qjQxDisbSWrCA0I2uBRmNjyy5loxXfm9xUu9grvBZohm0CmLehUJ ZassF+ZzevJnm0WuDfnADoviRIsELCF/Dn2WdjJnrfdKWGLmqv1p7vHSOQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGmDJrYNhf/vm1bvIUsigBXIhn+1MB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvYVlNbXRnMkZfLS1iVnU4aFN5S0FGY2lHZjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARbbPAD BABbbPIwDQYJKoZIhvcNAQELBQADggEBABo89PiKNXXf68hn+CRIHADcVv+IibGx +XL93iItsiBxPTky/TICeqBqTxKblYknbXyAh6ho8Yn+pfa0rmBVFWISYyCFAs0l JEwo6YD35ooWQAP/Rmms1pySpH/rqidqBZCaKodd+gM4dD34TsXtx7kmEadUYPAk w9OzQcsaPhyR8fXxZDn17keS4JDluPHK0zDdhus+7CSLzmM9ciWzzdzPIp3n9xsl erk9e0RXs919AVL8CYK6sOadG3Np/MaggkrVxkEPFrcW1tCWr0EcQ22o8nA69mqa hC7GcigjMtiobgt5qU315fyq/h5evQMSKvLqK0M5U4XAdWgRAH66j58= -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:40 2026 by rpki-client