This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/_INJbAc8J1GlVJj3H9NgFo3whMQ.roa File: _INJbAc8J1GlVJj3H9NgFo3whMQ.roa (raw, json) Hash identifier: EaYDZF2jCqkSbziQmnKumCHsSxNiwX5pOfKhIg/jyd8= Subject key identifier: FC:83:49:6C:07:3C:27:51:A5:54:98:F7:1F:D3:60:16:8D:F0:84:C4 Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Certificate serial: 019B78A221558FCF18291797B6C84AF89001 Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/_INJbAc8J1GlVJj3H9NgFo3whMQ.roa Signing time: Thu 01 Jan 2026 08:17:29 +0000 ROA not before: Thu 01 Jan 2026 08:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198606 IP address blocks: 91.237.96.0/24 maxlen: 24 2001:67c:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:21:55:8f:cf:18:29:17:97:b6:c8:4a:f8:90:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc83496c073c2751a55498f71fd360168df084c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:b6:f3:7b:3c:84:07:6b:3e:8f:ab:14:3a: 7c:bf:d4:28:82:87:68:d9:86:e2:b8:7b:7a:a4:f1: d1:e4:6e:51:92:46:8c:be:70:06:9c:e0:38:99:14: 26:e2:7b:a2:b5:78:17:3c:bb:56:42:34:70:0b:2a: 42:22:da:fd:0d:7f:32:aa:ed:c5:47:b8:fa:fd:ac: 19:ad:0d:d4:96:a5:dd:ee:ff:42:70:fe:33:7b:f4: 36:b6:4f:f4:cf:49:52:b0:52:2d:e6:74:fa:57:71: d3:6a:cb:2b:29:b5:5f:60:e9:27:9e:b2:30:36:1b: e6:e6:9f:c5:e5:0c:e5:b6:d8:7f:af:a8:f2:5f:bc: cd:f0:cc:72:86:b1:a8:e9:23:55:aa:30:3d:d2:8a: b0:65:63:99:0a:86:56:a7:a0:f2:c1:da:95:d6:35: 3e:74:d1:67:b7:11:35:5d:5c:8e:8e:72:9d:15:85: a6:f4:b6:ca:25:3d:2c:53:17:0c:2b:ba:4f:d6:15: c1:58:fd:47:12:43:84:ab:25:d7:7a:03:59:bc:20: 0a:27:23:99:2b:b9:d8:96:55:53:ab:80:57:fd:78: d5:53:cc:1b:f0:62:96:95:8d:0e:96:d0:d5:10:78: ba:5c:77:3f:da:36:73:db:5d:b6:10:da:3f:9a:c6: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:49:6C:07:3C:27:51:A5:54:98:F7:1F:D3:60:16:8D:F0:84:C4 X509v3 Authority Key Identifier: keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/_INJbAc8J1GlVJj3H9NgFo3whMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.96.0/24 IPv6: 2001:67c:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:cf:30:ef:0a:a9:8d:b0:83:5a:5b:10:6f:1c:a6:2b:e1:78: de:f9:4b:26:22:92:a8:a6:1f:54:e5:04:a0:88:4f:9d:73:94: 38:c2:b7:80:1a:4b:da:9c:f9:7c:e5:cb:43:d1:7d:84:d7:cb: 83:f5:54:75:13:a2:f4:0f:e2:e7:49:68:95:87:87:0c:7e:61: f9:12:5a:6d:c8:48:61:8b:62:2a:0f:d7:d4:0b:aa:dd:b2:80: 84:0c:2e:ab:3e:fa:d4:51:ec:41:e0:19:9b:2f:53:d2:e7:2f: 50:95:11:b8:8f:42:6e:61:2f:df:ca:a8:74:c4:07:69:d2:2f: 87:91:2c:9e:e2:bf:00:c1:d2:4a:0a:5c:79:f6:eb:5b:55:3d: b0:c7:0b:e6:ca:ae:c7:ec:c6:ce:b2:77:06:1a:94:59:ed:13: 57:b2:50:79:d7:f5:06:c2:dd:cc:70:e7:1b:af:6c:23:0a:e1: 48:37:4b:5c:f4:68:77:95:3f:c2:8e:b3:6b:13:f8:1c:10:4b: 73:b5:02:9f:d4:fa:dc:36:03:7e:bc:73:92:75:3a:34:88:59: 8d:ad:25:7b:0a:93:05:ef:dd:5f:00:29:55:9d:4e:3e:06:31: 60:c9:ec:b8:d8:3f:66:da:d9:8f:af:f4:3f:39:e8:c4:68:f8: d6:bc:d1:7a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oiFVj88YKReXtshK+JABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTRlNTcxMGE0NjUzNmJlZjJhZjM2YmY2M2YxOTQwYmMz N2JkNDIwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzgzNDk2YzA3M2MyNzUxYTU1NDk4ZjcxZmQzNjAxNjhkZjA4NGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPy283s8hAdrPo+rFDp8v9Qogodo 2YbiuHt6pPHR5G5RkkaMvnAGnOA4mRQm4nuitXgXPLtWQjRwCypCItr9DX8yqu3F R7j6/awZrQ3UlqXd7v9CcP4ze/Q2tk/0z0lSsFIt5nT6V3HTassrKbVfYOknnrIw Nhvm5p/F5Qzltth/r6jyX7zN8MxyhrGo6SNVqjA90oqwZWOZCoZWp6DywdqV1jU+ dNFntxE1XVyOjnKdFYWm9LbKJT0sUxcMK7pP1hXBWP1HEkOEqyXXegNZvCAKJyOZ K7nYllVTq4BX/XjVU8wb8GKWlY0OltDVEHi6XHc/2jZz2122ENo/msb3EwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPyDSWwHPCdRpVSY9x/TYBaN8ITEMB8GA1UdIwQY MBaAFFqk5XEKRlNr7yrza/Y/GUC8N71CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmIt NDRkYzUyYTE5Y2U1LzEvX0lOSmJBYzhKMUdsVkpqM0g5TmdGbzN3aE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmItNDRkYzUyYTE5Y2U1 LzEvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW+1gMA8E AgACMAkDBwAgAQZ8KMAwDQYJKoZIhvcNAQELBQADggEBAGvPMO8KqY2wg1pbEG8c pivheN75SyYikqimH1TlBKCIT51zlDjCt4AaS9qc+Xzly0PRfYTXy4P1VHUTovQP 4udJaJWHhwx+YfkSWm3ISGGLYioP19QLqt2ygIQMLqs++tRR7EHgGZsvU9LnL1CV EbiPQm5hL9/KqHTEB2nSL4eRLJ7ivwDB0koKXHn261tVPbDHC+bKrsfsxs6ydwYa lFntE1eyUHnX9QbC3cxw5xuvbCMK4Ug3S1z0aHeVP8KOs2sT+BwQS3O1Ap/U+tw2 A368c5J1OjSIWY2tJXsKkwXv3V8AKVWdTj4GMWDJ7LjYP2ba2Y+v9D856MRo+Na8 0Xo= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:26 2026 by rpki-client