This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/yRWW-moCgPUIO1qGpfD2Ai-UULY.roa File: yRWW-moCgPUIO1qGpfD2Ai-UULY.roa (raw, json) Hash identifier: Nrjz7sO2yA4cZKnrgRighLexSPRAMLTfxywMQlg7oPw= Subject key identifier: C9:15:96:FA:6A:02:80:F5:08:3B:5A:86:A5:F0:F6:02:2F:94:50:B6 Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7 Certificate serial: 019BFA14906BA44A0AF65063920F594F86C0 Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/yRWW-moCgPUIO1qGpfD2Ai-UULY.roa Signing time: Mon 26 Jan 2026 11:33:30 +0000 ROA not before: Mon 26 Jan 2026 11:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31477 IP address blocks: 91.209.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:14:90:6b:a4:4a:0a:f6:50:63:92:0f:59:4f:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7 Validity Not Before: Jan 26 11:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c91596fa6a0280f5083b5a86a5f0f6022f9450b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:c6:b4:20:ad:32:f6:f1:7e:33:25:fe:02: ad:25:dd:73:83:97:0f:74:ae:37:3d:ca:fb:74:1d: 90:b3:2e:ac:e4:27:b9:2f:90:4c:79:63:70:33:e4: 8e:38:41:53:b5:25:01:bc:69:03:17:34:7e:a3:79: 9c:20:41:fa:d7:3c:52:d9:d7:c8:ed:6b:95:52:6a: b3:8c:ca:bf:8d:76:f6:92:60:5b:41:50:be:58:54: f8:50:fd:9b:2d:d3:7f:72:97:e1:1e:3c:8a:e8:e8: 9d:43:ac:9d:b9:24:67:54:5d:44:a6:31:5e:8c:df: b1:2d:8c:82:f6:a9:53:c8:c8:90:c9:0e:2f:9e:47: d6:c4:ab:dc:ae:59:bd:fd:85:c1:03:17:67:f4:18: f5:8c:f2:58:9e:56:ad:30:82:23:d3:3c:b9:8d:a9: 88:e6:d3:c9:5c:77:34:89:11:88:02:5b:ba:10:c9: 8d:cf:c8:39:eb:9a:ad:61:b1:9b:45:fa:a9:e8:82: 60:7d:20:90:f8:5f:10:95:1a:8c:a6:b9:27:a8:69: 96:65:d5:1b:b4:34:2e:3f:9c:1c:c2:45:6c:dd:60: f3:b3:4a:6e:e5:16:b1:aa:1f:b6:51:2c:0b:00:aa: 03:ed:ea:c2:ed:50:5f:9c:7f:56:00:da:8f:e1:29: 14:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:96:FA:6A:02:80:F5:08:3B:5A:86:A5:F0:F6:02:2F:94:50:B6 X509v3 Authority Key Identifier: keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/yRWW-moCgPUIO1qGpfD2Ai-UULY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.168.0/24 Signature Algorithm: sha256WithRSAEncryption 33:77:97:90:01:e7:e3:85:78:24:57:ac:07:1b:55:56:b6:2f: e2:73:57:52:cf:59:d8:b6:5b:d4:f2:dd:0b:cf:dc:e7:97:52: 9c:fe:3b:48:9e:52:a3:1b:72:09:92:86:c0:b9:e8:7d:0f:ad: be:a0:7d:96:ba:40:51:c3:59:20:aa:08:c5:5c:43:02:40:e5: 6d:49:2f:9d:90:69:5c:6a:53:a7:a0:a7:80:87:35:4f:24:b4: c0:db:9f:72:99:a4:51:10:68:a2:2c:45:11:ef:3f:16:d3:97: 56:dc:8a:d3:32:ed:74:29:3d:7d:65:45:3c:ac:d3:e4:99:2b: 74:b9:18:05:5c:8d:5c:c3:c5:63:45:81:d1:15:08:9b:89:be: 88:8f:ec:ce:f5:a6:c7:bb:99:55:7f:93:82:4c:6e:dc:48:97: f3:fb:6f:c8:3b:33:86:ba:95:25:74:83:18:f7:7a:09:11:8b: 0b:5a:3f:97:af:62:bd:6e:f4:6a:af:db:3e:d1:5a:95:f9:5b: e8:a8:5b:58:e7:a7:72:cd:71:7d:67:16:f5:85:0d:d6:d9:4a: 5e:8a:97:5d:9d:99:6d:07:64:69:0d:77:40:f3:03:fd:fb:60: 69:1e:0d:8f:e7:de:e9:ff:82:ba:ad:fa:bb:67:43:a1:8f:52: 9b:4c:87:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6FJBrpEoK9lBjkg9ZT4bAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTM4YmIyMTBiN2MxYThmMDY2NmUwNzU5ZjQ3NWYwMDY0 ZGYxZjcwHhcNMjYwMTI2MTEzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTE1OTZmYTZhMDI4MGY1MDgzYjVhODZhNWYwZjYwMjJmOTQ1MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDzGtCCtMvbxfjMl/gKtJd1zg5cP dK43Pcr7dB2Qsy6s5Ce5L5BMeWNwM+SOOEFTtSUBvGkDFzR+o3mcIEH61zxS2dfI 7WuVUmqzjMq/jXb2kmBbQVC+WFT4UP2bLdN/cpfhHjyK6OidQ6yduSRnVF1EpjFe jN+xLYyC9qlTyMiQyQ4vnkfWxKvcrlm9/YXBAxdn9Bj1jPJYnlatMIIj0zy5jamI 5tPJXHc0iRGIAlu6EMmNz8g565qtYbGbRfqp6IJgfSCQ+F8QlRqMprknqGmWZdUb tDQuP5wcwkVs3WDzs0pu5Raxqh+2USwLAKoD7erC7VBfnH9WANqP4SkUzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMkVlvpqAoD1CDtahqXw9gIvlFC2MB8GA1UdIwQY MBaAFMQTi7IQt8Go8GZuB1n0dfAGTfH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUt ZmIxZjJhYWM1NjdlLzEveVJXVy1tb0NnUFVJTzFxR3BmRDJBaS1VVUxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUtZmIxZjJhYWM1Njdl LzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GoMA0G CSqGSIb3DQEBCwUAA4IBAQAzd5eQAefjhXgkV6wHG1VWti/ic1dSz1nYtlvU8t0L z9znl1Kc/jtInlKjG3IJkobAueh9D62+oH2WukBRw1kgqgjFXEMCQOVtSS+dkGlc alOnoKeAhzVPJLTA259ymaRREGiiLEUR7z8W05dW3IrTMu10KT19ZUU8rNPkmSt0 uRgFXI1cw8VjRYHRFQibib6Ij+zO9abHu5lVf5OCTG7cSJfz+2/IOzOGupUldIMY 93oJEYsLWj+Xr2K9bvRqr9s+0VqV+VvoqFtY56dyzXF9Zxb1hQ3W2UpeipddnZlt B2RpDXdA8wP9+2BpHg2P597p/4K6rfq7Z0Ohj1KbTIfg -----END CERTIFICATE-----Generated at Wed Feb 4 09:33:28 2026 by rpki-client