This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa File: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (raw, json) Hash identifier: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY= Subject key identifier: 08:1E:1A:2D:32:93:B7:E4:30:17:1A:12:88:FC:F5:5A:15:F2:24:62 Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067 Certificate serial: 019C2F7F87873A03955D34BF90DFC5EA6750 Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa Signing time: Thu 05 Feb 2026 20:30:12 +0000 ROA not before: Thu 05 Feb 2026 20:30:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 91.206.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:7f:87:87:3a:03:95:5d:34:bf:90:df:c5:ea:67:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067 Validity Not Before: Feb 5 20:30:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=081e1a2d3293b7e430171a1288fcf55a15f22462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:cd:b3:aa:ef:7a:ce:c1:b4:a8:d8:10:6b: 25:b6:a3:36:5b:69:09:f3:70:c8:0e:d9:8d:9c:d6: bc:73:b9:fb:3a:dd:02:11:35:c5:6e:4f:bb:b6:b4: 14:79:73:0e:af:21:73:40:6b:2c:54:d1:6c:3a:e5: 94:2b:ec:aa:8f:8a:56:d8:43:d6:b5:52:0a:5f:49: 6d:80:c8:2a:8c:03:16:11:6d:26:07:63:2e:85:f2: 73:00:c8:d5:d5:da:7f:50:d4:14:25:1f:f9:4d:76: eb:49:89:09:31:f3:74:4e:ba:6a:af:56:7c:f8:b0: 23:ee:1a:b6:05:eb:7b:96:23:32:a2:04:57:cb:22: db:6c:ec:c6:0e:1b:f9:f1:83:90:61:e8:a2:4a:83: d3:19:b3:7f:72:28:58:05:7a:9c:4c:64:40:49:51: 5c:bf:a2:ab:b1:99:9b:4f:08:fc:dc:8b:c3:5b:40: f5:df:ce:d0:2d:b8:0d:02:a4:fb:85:12:e6:9b:e3: e2:86:c5:37:22:74:ba:c0:1b:32:98:23:8e:94:25: d3:12:06:56:3f:05:83:a0:30:b5:c3:59:3a:64:ea: 63:3c:40:9f:28:80:31:dd:3b:ad:9d:bd:51:a4:24: 95:75:05:f0:22:f0:1e:a8:c8:c2:39:bf:7b:bd:46: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1E:1A:2D:32:93:B7:E4:30:17:1A:12:88:FC:F5:5A:15:F2:24:62 X509v3 Authority Key Identifier: keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.111.0/24 Signature Algorithm: sha256WithRSAEncryption 14:85:f3:3e:05:ba:ab:3a:8c:df:b8:ff:7f:e2:9c:c8:9e:f1: 51:37:91:45:ec:cb:2e:2f:6a:11:3a:ef:30:6d:2c:85:e7:32: c2:26:b1:cb:2e:e0:34:f4:c7:75:c5:5b:31:91:05:e0:04:f9: 08:2b:34:42:76:03:da:de:db:a9:c1:09:c4:fe:08:83:dd:2c: d9:eb:37:36:84:c8:c1:f7:de:fa:47:f5:ec:51:cb:b6:00:e7: b5:9b:c1:86:c5:ca:64:af:76:06:d5:74:be:11:4c:4a:61:70: ee:fc:37:28:60:45:96:77:a1:76:fc:14:03:71:29:08:cc:c7: 54:2a:98:65:d1:da:e9:8c:e3:53:2c:84:09:9e:ba:cc:90:87: b1:de:1e:a9:1c:27:e0:36:70:c3:7c:d3:39:0d:fe:d1:9c:45: d9:82:0a:6f:b0:b2:5b:7f:1f:f3:84:95:9b:b5:71:d8:79:5f: 15:be:b1:e6:78:c1:ce:00:4c:14:cd:58:6b:0e:74:24:b8:b2: 2b:79:29:6e:a1:b7:78:b3:ca:bb:c9:0c:6f:a9:08:85:ec:d6: 65:bb:94:b6:74:f4:7c:56:14:39:e0:d4:e9:b9:a1:6a:f5:32: 92:1b:7a:39:86:17:fd:25:c3:cf:15:33:1d:bc:b7:d3:26:05: 49:0f:85:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwvf4eHOgOVXTS/kN/F6mdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YTgwMDY4YmQ3MzI4ZWY0MTEyMGY0Nzg4YzI4ZDNhOTIw NDcwNjcwHhcNMjYwMjA1MjAzMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODFlMWEyZDMyOTNiN2U0MzAxNzFhMTI4OGZjZjU1YTE1ZjIyNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaDNs6rves7BtKjYEGsltqM2W2kJ 83DIDtmNnNa8c7n7Ot0CETXFbk+7trQUeXMOryFzQGssVNFsOuWUK+yqj4pW2EPW tVIKX0ltgMgqjAMWEW0mB2MuhfJzAMjV1dp/UNQUJR/5TXbrSYkJMfN0Trpqr1Z8 +LAj7hq2Bet7liMyogRXyyLbbOzGDhv58YOQYeiiSoPTGbN/cihYBXqcTGRASVFc v6KrsZmbTwj83IvDW0D1387QLbgNAqT7hRLmm+PihsU3InS6wBsymCOOlCXTEgZW PwWDoDC1w1k6ZOpjPECfKIAx3Tutnb1RpCSVdQXwIvAeqMjCOb97vUa7rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgeGi0yk7fkMBcaEoj89VoV8iRiMB8GA1UdIwQY MBaAFNeoAGi9cyjvQRIPR4jCjTqSBHBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYt ZWYzMzJhMDI1NmQ2LzEvQ0I0YUxUS1R0LVF3RnhvU2lQejFXaFh5SkdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYtZWYzMzJhMDI1NmQ2 LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85vMA0G CSqGSIb3DQEBCwUAA4IBAQAUhfM+BbqrOozfuP9/4pzInvFRN5FF7MsuL2oROu8w bSyF5zLCJrHLLuA09Md1xVsxkQXgBPkIKzRCdgPa3tupwQnE/giD3SzZ6zc2hMjB 9976R/XsUcu2AOe1m8GGxcpkr3YG1XS+EUxKYXDu/DcoYEWWd6F2/BQDcSkIzMdU Kphl0drpjONTLIQJnrrMkIex3h6pHCfgNnDDfNM5Df7RnEXZggpvsLJbfx/zhJWb tXHYeV8VvrHmeMHOAEwUzVhrDnQkuLIreSluobd4s8q7yQxvqQiF7NZlu5S2dPR8 VhQ54NTpuaFq9TKSG3o5hhf9JcPPFTMdvLfTJgVJD4UM -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:30 2026 by rpki-client