This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/cIV9JudTZTeo9lnx0IX_Ab60GOI.roa File: cIV9JudTZTeo9lnx0IX_Ab60GOI.roa (raw, json) Hash identifier: GAzyxWMmilZxJ4YPCp2wTRguWAAeRpdhD/FOnsIN73s= Subject key identifier: 70:85:7D:26:E7:53:65:37:A8:F6:59:F1:D0:85:FF:01:BE:B4:18:E2 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB1B924D5F8467E3E34FD81030CE18 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/cIV9JudTZTeo9lnx0IX_Ab60GOI.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 91.108.200.0/22 maxlen: 22 91.108.200.0/24 maxlen: 24 91.108.204.0/22 maxlen: 22 91.108.204.0/24 maxlen: 24 91.108.216.0/22 maxlen: 22 91.108.216.0/24 maxlen: 24 91.108.220.0/22 maxlen: 22 91.108.220.0/24 maxlen: 24 91.108.228.0/22 maxlen: 22 91.108.232.0/22 maxlen: 22 91.108.236.0/24 maxlen: 24 91.108.238.0/24 maxlen: 24 91.108.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1b:92:4d:5f:84:67:e3:e3:4f:d8:10:30:ce:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70857d26e7536537a8f659f1d085ff01beb418e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e1:01:42:b2:cc:1b:d6:10:80:78:c4:f9:99: aa:58:08:76:bd:1a:76:ac:ad:f2:29:fc:19:5c:29: 17:16:04:8e:cc:57:d7:1e:8a:a1:cc:ed:16:07:6a: 72:22:ea:c6:22:f7:61:02:18:f6:71:29:aa:7c:60: a7:b1:ab:dc:93:57:64:cb:b4:fc:50:9d:f7:fb:1d: 66:f6:74:f3:01:85:d8:a2:07:82:22:bd:52:42:00: ea:90:0e:2e:85:24:21:1b:42:d4:91:14:be:c0:91: ee:d4:8e:e4:d3:fd:29:e3:10:97:00:84:d4:fe:ef: e9:55:d9:b8:b4:a5:98:b0:f4:f3:14:96:81:73:5e: 96:0b:86:11:23:78:4f:39:4b:58:46:7e:0a:49:a5: 94:ba:4e:71:95:39:72:11:ab:b2:ac:67:37:81:a3: 84:be:a5:68:02:38:f6:a8:b9:de:0b:96:c9:c6:f6: a1:79:41:d7:21:c1:92:c2:0f:f2:fe:f6:d6:13:fa: 07:9c:32:09:1a:65:e1:90:79:bb:e0:49:b7:fe:00: dc:8a:7b:f2:69:c5:ad:3f:d9:d3:e3:44:1b:75:cb: 0b:54:68:0c:fe:75:77:95:32:ce:d6:83:3b:8f:62: aa:9a:cd:f6:37:92:7d:22:17:e8:24:26:b2:8f:09: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:7D:26:E7:53:65:37:A8:F6:59:F1:D0:85:FF:01:BE:B4:18:E2 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/cIV9JudTZTeo9lnx0IX_Ab60GOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.200.0/21 91.108.216.0/21 91.108.228.0-91.108.236.255 91.108.238.0/24 91.108.255.0/24 Signature Algorithm: sha256WithRSAEncryption 54:16:44:f8:41:84:b7:91:52:5e:51:88:1a:d6:e0:dc:ac:80: 09:8c:fb:69:bb:8a:e1:78:6d:9a:35:4b:ce:88:c8:17:bf:91: 63:42:31:df:58:ec:f5:e9:91:85:a3:98:ba:44:ce:7f:a5:7b: df:5c:d0:02:bf:b3:cd:1c:1c:9b:8f:45:7e:fe:3a:b2:f1:ab: 80:c0:76:fd:f6:be:9c:9a:de:92:0d:f4:f5:c1:9d:ce:9e:1c: bd:ae:ff:70:a1:83:0e:46:81:f2:83:82:bd:b8:45:6b:a2:b1: da:2b:51:f8:e8:ce:ca:6e:ed:f9:5a:1e:6e:1c:64:76:1a:07: 5e:57:97:6e:c7:3b:4b:ec:20:c8:f5:ba:db:36:7f:f9:c8:5d: ee:af:ef:8d:1b:3f:74:61:c2:bb:c7:2e:cc:f0:38:89:86:0a: 82:ce:37:ab:e1:14:7c:67:aa:07:c8:87:42:36:93:d8:6f:d9: 5c:66:46:ec:34:9a:be:f4:d8:9a:4f:0f:bc:1b:ad:6a:ca:c8: ad:70:f0:d5:34:89:1e:14:ae:f2:bf:7c:e6:a5:ea:b3:7e:53: 30:78:22:ec:c4:69:c1:9e:01:3d:12:a6:76:22:66:ba:1a:ed: 0a:c5:fd:2a:06:21:08:b2:82:6e:43:f6:3e:6a:84:0f:fb:d8: c3:68:6d:75 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt26xuSTV+EZ+PjT9gQMM4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDg1N2QyNmU3NTM2NTM3YThmNjU5ZjFkMDg1ZmYwMWJlYjQxOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+EBQrLMG9YQgHjE+ZmqWAh2vRp2 rK3yKfwZXCkXFgSOzFfXHoqhzO0WB2pyIurGIvdhAhj2cSmqfGCnsavck1dky7T8 UJ33+x1m9nTzAYXYogeCIr1SQgDqkA4uhSQhG0LUkRS+wJHu1I7k0/0p4xCXAITU /u/pVdm4tKWYsPTzFJaBc16WC4YRI3hPOUtYRn4KSaWUuk5xlTlyEauyrGc3gaOE vqVoAjj2qLneC5bJxvaheUHXIcGSwg/y/vbWE/oHnDIJGmXhkHm74Em3/gDcinvy acWtP9nT40QbdcsLVGgM/nV3lTLO1oM7j2Kqms32N5J9IhfoJCayjwnKiQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFHCFfSbnU2U3qPZZ8dCF/wG+tBjiMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvY0lWOUp1ZFRaVGVvOWxueDBJWF9BYjYwR09JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDW2zIAwQD W2zYMAwDBAJbbOQDBABbbOwDBABbbO4DBABbbP8wDQYJKoZIhvcNAQELBQADggEB AFQWRPhBhLeRUl5RiBrW4NysgAmM+2m7iuF4bZo1S86IyBe/kWNCMd9Y7PXpkYWj mLpEzn+le99c0AK/s80cHJuPRX7+OrLxq4DAdv32vpya3pIN9PXBnc6eHL2u/3Ch gw5GgfKDgr24RWuisdorUfjozspu7flaHm4cZHYaB15Xl27HO0vsIMj1uts2f/nI Xe6v740bP3RhwrvHLszwOImGCoLON6vhFHxnqgfIh0I2k9hv2VxmRuw0mr702JpP D7wbrWrKyK1w8NU0iR4UrvK/fOal6rN+UzB4IuzEacGeAT0SpnYiZroa7QrF/SoG IQiygm5D9j5qhA/72MNobXU= -----END CERTIFICATE-----Generated at Tue Jan 20 15:46:21 2026 by rpki-client