This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/0mgkR8Oatppf6KwkGwCdocguoA0.roa File: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (raw, json) Hash identifier: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20= Subject key identifier: D2:68:24:47:C3:9A:B6:9A:5F:E8:AC:24:1B:00:9D:A1:C8:2E:A0:0D Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6 Certificate serial: 019B7E37DB019D59CDB22BAD9D88207E8EF2 Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/0mgkR8Oatppf6KwkGwCdocguoA0.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203015 IP address blocks: 91.213.103.0/24 maxlen: 24 193.23.176.0/24 maxlen: 24 193.23.177.0/24 maxlen: 24 193.23.178.0/24 maxlen: 24 194.50.33.0/24 maxlen: 24 2a0c:82c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:db:01:9d:59:cd:b2:2b:ad:9d:88:20:7e:8e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6 Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2682447c39ab69a5fe8ac241b009da1c82ea00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:6b:a3:d5:85:0a:b4:87:e9:79:df:48:68: 6b:58:5f:ab:09:fd:33:87:d2:bd:2f:eb:44:7e:b7: 9b:55:22:d5:14:e7:84:a9:4a:e0:3d:47:40:35:bd: 18:d9:86:44:3f:3c:d8:bd:9e:6e:53:d0:9c:6d:ac: fe:9d:c6:e3:0f:99:6d:40:4b:a8:81:10:89:71:02: 98:d8:2e:e9:6d:35:24:12:6e:85:08:41:8f:27:88: 13:8f:65:fe:7c:3b:5a:88:ca:4e:12:dc:29:fd:5f: 79:43:b1:80:27:8c:64:2e:13:75:1d:d9:57:9e:df: 8e:6f:f6:d7:01:e3:1d:3f:42:34:68:7d:09:d1:60: fa:19:de:45:5e:2c:e5:75:1f:f3:2e:02:a8:0e:0b: 9b:17:a4:8b:45:35:e3:39:16:28:cd:4a:54:34:58: 37:5d:4f:1f:0b:27:b5:87:5b:d5:fd:00:f7:23:fe: 54:1e:1f:0f:05:6d:7f:5b:85:33:fa:47:dc:d3:7b: 06:cb:d7:36:fd:aa:be:7b:78:7c:57:f8:83:f5:1f: 5b:dd:e0:bb:ba:a8:17:f6:8a:cf:51:d2:69:74:29: 73:af:a8:52:fe:44:c0:68:ef:7c:51:d8:0f:81:ec: f1:5b:a1:51:dc:5c:2c:97:08:63:42:32:05:d3:d6: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:24:47:C3:9A:B6:9A:5F:E8:AC:24:1B:00:9D:A1:C8:2E:A0:0D X509v3 Authority Key Identifier: keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/0mgkR8Oatppf6KwkGwCdocguoA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.103.0/24 193.23.176.0-193.23.178.255 194.50.33.0/24 IPv6: 2a0c:82c0::/29 Signature Algorithm: sha256WithRSAEncryption 35:51:c3:ea:c8:a8:8c:73:bb:4f:e7:3f:6b:33:71:d9:33:cd: 10:aa:0f:66:76:2c:c4:c0:5c:fe:09:bf:81:ed:74:52:09:38: 1a:26:45:a9:4b:6b:7d:58:66:b2:a4:4b:da:47:89:88:6e:1d: aa:5b:bc:4a:94:9d:af:d0:8c:03:c7:3e:08:6f:46:77:b8:b1: b4:3e:9f:1f:10:8f:f0:74:b2:a5:97:b1:80:b5:56:f9:07:e9: 55:76:8b:00:ab:a0:4f:d8:1d:9c:3a:0e:3f:66:cd:c2:15:43: 72:6f:42:5e:ca:b0:f9:28:5b:52:d4:46:ea:0a:63:47:69:c3: d2:92:86:80:97:8a:fe:ec:21:06:03:47:83:4d:25:28:4a:51: aa:d7:2b:79:74:73:b6:79:9b:99:29:e4:a1:83:ce:bc:a5:0c: df:9a:1a:92:a1:5a:81:03:41:4c:2f:29:7a:0f:91:96:d0:33: 13:11:d6:e6:66:e3:b7:12:67:f6:73:d5:00:a8:8e:6f:f2:28: 84:b9:38:1d:38:25:ae:a7:ed:47:1e:d2:16:17:75:34:5e:de: 4a:e5:96:51:c8:25:d6:cc:c6:f1:fe:a6:e1:b2:44:f2:de:b7: cc:e4:b7:e5:b7:0a:05:2a:bc:48:1a:b5:58:71:83:99:3e:c7: 92:8a:10:49 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+N9sBnVnNsiutnYggfo7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi MWFhZDYwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjY4MjQ0N2MzOWFiNjlhNWZlOGFjMjQxYjAwOWRhMWM4MmVhMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu9ro9WFCrSH6XnfSGhrWF+rCf0z h9K9L+tEfrebVSLVFOeEqUrgPUdANb0Y2YZEPzzYvZ5uU9Ccbaz+ncbjD5ltQEuo gRCJcQKY2C7pbTUkEm6FCEGPJ4gTj2X+fDtaiMpOEtwp/V95Q7GAJ4xkLhN1HdlX nt+Ob/bXAeMdP0I0aH0J0WD6Gd5FXizldR/zLgKoDgubF6SLRTXjORYozUpUNFg3 XU8fCye1h1vV/QD3I/5UHh8PBW1/W4Uz+kfc03sGy9c2/aq+e3h8V/iD9R9b3eC7 uqgX9orPUdJpdClzr6hS/kTAaO98UdgPgezxW6FR3FwslwhjQjIF09Z+MQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNJoJEfDmraaX+isJBsAnaHILqANMB8GA1UdIwQY MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt NjZjY2E4MWU2YzA3LzEvMG1na1I4T2F0cHBmNkt3a0d3Q2RvY2d1b0EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3 LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQAW9VnMAwD BATBF7ADBADBF7IDBADCMiEwDQQCAAIwBwMFAyoMgsAwDQYJKoZIhvcNAQELBQAD ggEBADVRw+rIqIxzu0/nP2szcdkzzRCqD2Z2LMTAXP4Jv4HtdFIJOBomRalLa31Y ZrKkS9pHiYhuHapbvEqUna/QjAPHPghvRne4sbQ+nx8Qj/B0sqWXsYC1VvkH6VV2 iwCroE/YHZw6Dj9mzcIVQ3JvQl7KsPkoW1LURuoKY0dpw9KShoCXiv7sIQYDR4NN JShKUarXK3l0c7Z5m5kp5KGDzrylDN+aGpKhWoEDQUwvKXoPkZbQMxMR1uZm47cS Z/Zz1QCojm/yKIS5OB04Ja6n7Uce0hYXdTRe3krlllHIJdbMxvH+puGyRPLet8zk t+W3CgUqvEgatVhxg5k+x5KKEEk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:08 2026 by rpki-client