This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/iFIpSvQSW1RGvQvGhAG9Or8gNdQ.roa File: iFIpSvQSW1RGvQvGhAG9Or8gNdQ.roa (raw, json) Hash identifier: AKoFVd13S9dMKwOd2Np277Q02eWKDsmmGTyxPX7hYBA= Subject key identifier: 88:52:29:4A:F4:12:5B:54:46:BD:0B:C6:84:01:BD:3A:BF:20:35:D4 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB19A7C53C17B0B7C8EE37C57E9F1D Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/iFIpSvQSW1RGvQvGhAG9Or8gNdQ.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 91.108.192.0/24 maxlen: 24 91.108.193.0/24 maxlen: 24 91.108.194.0/24 maxlen: 24 91.108.195.0/24 maxlen: 24 91.108.196.0/22 maxlen: 22 91.108.200.0/22 maxlen: 22 91.108.200.0/24 maxlen: 24 91.108.204.0/22 maxlen: 22 91.108.204.0/24 maxlen: 24 91.108.208.0/22 maxlen: 22 91.108.208.0/24 maxlen: 24 91.108.212.0/22 maxlen: 22 91.108.216.0/22 maxlen: 22 91.108.216.0/24 maxlen: 24 91.108.220.0/22 maxlen: 22 91.108.220.0/24 maxlen: 24 91.108.224.0/24 maxlen: 24 91.108.228.0/22 maxlen: 22 91.108.232.0/22 maxlen: 22 91.108.236.0/24 maxlen: 24 91.108.238.0/24 maxlen: 24 91.108.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:a7:c5:3c:17:b0:b7:c8:ee:37:c5:7e:9f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8852294af4125b5446bd0bc68401bd3abf2035d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9b:5e:2f:7d:c2:1a:0b:1a:b2:00:3b:33:d3: a9:72:0b:3d:45:5b:ad:5d:92:2e:e5:12:1d:36:24: 9e:c2:e8:2c:0c:1f:bb:ce:27:e6:d5:f1:04:28:24: d3:2c:03:8a:95:4d:f1:88:ff:9f:e7:b3:1f:e3:47: 91:2e:d9:17:d5:e9:7e:1c:6d:57:83:e3:d6:3c:ef: b0:33:b3:8d:6a:d5:59:ff:05:63:01:52:82:82:a8: 0a:a0:09:91:fc:2a:72:77:21:35:ab:22:f8:26:d4: a9:ce:6a:fc:c9:9e:24:01:19:1b:ab:02:d1:e9:f7: a2:12:f4:56:99:9a:bb:f6:b9:86:62:93:d3:73:33: bc:e2:f7:6f:8e:db:5e:67:5e:23:d2:b5:4f:ff:fa: 1e:c4:4c:37:34:a6:01:52:1c:7d:60:d0:6a:f7:35: bd:2f:46:c8:ac:14:55:06:42:16:9c:bf:0c:8a:de: fc:0d:ec:3d:2e:37:44:f9:ba:15:ef:0c:7b:f6:20: b7:b5:db:4f:30:9e:e3:fd:c6:a5:79:5e:1a:46:b3: 6b:36:ad:c0:07:e9:0b:bc:6a:8c:be:0a:4b:96:5a: 12:fd:79:2a:67:dd:0b:0e:01:be:5b:68:7e:81:89: 64:1f:f9:7a:e2:5d:ec:bb:e6:4b:23:4b:78:48:b1: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:52:29:4A:F4:12:5B:54:46:BD:0B:C6:84:01:BD:3A:BF:20:35:D4 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/iFIpSvQSW1RGvQvGhAG9Or8gNdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.192.0-91.108.224.255 91.108.228.0-91.108.236.255 91.108.238.0/24 91.108.255.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:a9:15:33:19:7f:4c:a4:10:23:c8:4b:1e:79:af:98:25:c1: c6:e1:93:be:cc:86:5f:13:3e:a6:b9:35:65:a2:71:91:e5:04: ce:bb:46:54:0b:10:6c:04:d8:99:8c:c5:2e:f6:d0:5e:29:2d: ce:ef:6f:bb:e1:b7:d8:85:f3:0c:0a:92:bf:07:41:58:b2:38: 93:e5:87:b6:dd:48:2e:8f:39:8b:05:c0:9e:e8:69:6a:c4:37: 92:53:82:08:46:b9:ca:a0:05:29:9e:d7:eb:d5:7e:ed:01:3f: 4a:33:f5:4d:d7:7c:e1:67:9c:14:1c:26:82:92:f4:13:9d:d4: cd:5e:60:57:7d:42:97:fb:ec:b8:bf:2a:82:f4:35:d1:b8:5c: e3:cb:e1:e3:fe:cc:cc:3a:81:45:0a:df:0b:91:8c:d0:62:e0: e8:03:a3:78:20:0f:cf:ee:fe:ab:81:83:1a:7f:74:18:2b:a7: 92:dd:05:c6:73:80:c8:b0:06:02:88:d6:5c:47:38:59:b2:ce: 92:11:24:e9:6b:14:c5:b0:0b:f8:dd:f1:af:36:ad:f4:07:28: 91:f3:da:9f:e6:18:01:5b:b6:e6:19:5d:44:55:d6:09:2b:be: ea:f1:8d:48:69:dd:c1:a8:07:1c:26:f4:73:23:11:ba:dd:a2: 4b:85:f1:ae -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt26xmnxTwXsLfI7jfFfp8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODUyMjk0YWY0MTI1YjU0NDZiZDBiYzY4NDAxYmQzYWJmMjAzNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZteL33CGgsasgA7M9Opcgs9RVut XZIu5RIdNiSewugsDB+7zifm1fEEKCTTLAOKlU3xiP+f57Mf40eRLtkX1el+HG1X g+PWPO+wM7ONatVZ/wVjAVKCgqgKoAmR/CpydyE1qyL4JtSpzmr8yZ4kARkbqwLR 6feiEvRWmZq79rmGYpPTczO84vdvjtteZ14j0rVP//oexEw3NKYBUhx9YNBq9zW9 L0bIrBRVBkIWnL8Mit78Dew9LjdE+boV7wx79iC3tdtPMJ7j/caleV4aRrNrNq3A B+kLvGqMvgpLlloS/XkqZ90LDgG+W2h+gYlkH/l64l3su+ZLI0t4SLG7KQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFIhSKUr0EltURr0LxoQBvTq/IDXUMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvaUZJcFN2UVNXMVJHdlF2R2hBRzlPcjhnTmRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAZbbMAD BABbbOAwDAMEAlts5AMEAFts7AMEAFts7gMEAFts/zANBgkqhkiG9w0BAQsFAAOC AQEAHKkVMxl/TKQQI8hLHnmvmCXBxuGTvsyGXxM+prk1ZaJxkeUEzrtGVAsQbATY mYzFLvbQXiktzu9vu+G32IXzDAqSvwdBWLI4k+WHtt1ILo85iwXAnuhpasQ3klOC CEa5yqAFKZ7X69V+7QE/SjP1Tdd84WecFBwmgpL0E53UzV5gV31Cl/vsuL8qgvQ1 0bhc48vh4/7MzDqBRQrfC5GM0GLg6AOjeCAPz+7+q4GDGn90GCunkt0FxnOAyLAG AojWXEc4WbLOkhEk6WsUxbAL+N3xrzat9AcokfPan+YYAVu25hldRFXWCSu+6vGN SGndwagHHCb0cyMRut2iS4Xxrg== -----END CERTIFICATE-----Generated at Tue Jan 20 15:46:36 2026 by rpki-client