This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/93B0q9sUDm_tucnqwBBNRLq_pWU.roa File: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (raw, json) Hash identifier: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A= Subject key identifier: F7:70:74:AB:DB:14:0E:6F:ED:B9:C9:EA:C0:10:4D:44:BA:BF:A5:65 Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143 Certificate serial: 019B7B36E3D2819913772BCCC3D72DB7CC24 Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/93B0q9sUDm_tucnqwBBNRLq_pWU.roa Signing time: Thu 01 Jan 2026 20:19:13 +0000 ROA not before: Thu 01 Jan 2026 20:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197323 IP address blocks: 91.220.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e3:d2:81:99:13:77:2b:cc:c3:d7:2d:b7:cc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143 Validity Not Before: Jan 1 20:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f77074abdb140e6fedb9c9eac0104d44babfa565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:d1:9a:69:b7:66:4d:2b:ec:7d:b7:75:a8: 60:83:78:a9:80:60:c8:e8:63:a8:5e:b6:22:ea:e0: f8:c4:c5:4c:f8:e3:9b:98:1b:7c:5c:86:c5:24:e8: 4f:d7:e2:9f:87:c8:c3:21:27:8f:e0:cb:5a:2b:2e: 6e:bd:e4:64:25:33:f4:4d:2a:b4:c4:73:25:b5:77: 75:46:62:2a:af:b5:69:17:49:85:75:98:6c:d9:d2: 9e:a2:53:c6:5a:da:97:d1:da:09:ed:22:cb:83:20: 8c:3e:16:2c:de:8d:fb:cf:e1:be:c7:88:7d:b3:24: 69:fb:0b:e0:b6:69:00:a3:13:6b:dc:1e:07:94:1e: b1:b5:73:5a:32:f1:ff:50:84:8c:89:56:f7:4c:65: 1a:42:25:ce:a4:e3:91:dc:e8:83:c2:15:a1:23:29: 69:87:8c:2a:9a:53:f4:ea:a0:cf:70:4f:08:aa:ea: 37:8d:55:cc:3a:e8:dc:64:90:91:13:08:e7:7c:df: a7:fb:09:32:05:5f:3e:11:73:49:3c:8a:20:96:22: 1d:a3:3f:86:d0:23:45:2f:a9:b5:39:6c:6d:3e:71: 0a:42:e4:6c:fa:17:73:9e:a9:a4:48:02:5d:51:44: d3:1c:4a:2a:49:f0:fd:52:a5:11:19:3a:2c:02:94: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:70:74:AB:DB:14:0E:6F:ED:B9:C9:EA:C0:10:4D:44:BA:BF:A5:65 X509v3 Authority Key Identifier: keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/93B0q9sUDm_tucnqwBBNRLq_pWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.47.0/24 Signature Algorithm: sha256WithRSAEncryption d9:3d:22:bd:8b:7f:d8:3f:e3:60:84:40:b7:ef:4f:67:aa:5a: 92:56:d2:8f:d3:f5:ed:57:7f:22:48:3e:66:10:19:0e:de:f7: f1:24:43:97:1b:06:3d:69:63:7d:1e:89:a0:3a:50:25:17:2c: 1b:78:6e:91:32:7c:78:1c:19:d2:fd:84:3e:32:a1:c0:1d:6e: 15:77:f7:5d:37:c8:a9:b7:e7:57:1d:f9:de:9f:d8:c7:10:3c: 74:90:b2:28:f8:e7:9b:2d:44:7b:ba:f0:3a:04:55:3e:05:1d: 7b:74:46:61:c3:1b:14:a1:3a:d6:8a:22:bd:dc:d5:cf:d9:91: 99:0e:36:2f:71:b7:99:5b:b0:50:7b:fb:7f:6a:31:69:2a:ca: 1c:02:cb:71:b8:ae:fe:8e:5e:74:97:9e:37:5c:e7:33:68:d3: 2b:30:1a:50:60:73:83:f7:6e:6e:9d:89:02:8b:0c:d9:6c:e1: d1:3f:99:1d:66:d9:35:15:bd:4e:16:7d:af:5a:57:db:86:97: d2:4c:52:74:4f:e1:ea:5c:f6:2c:a0:b0:d3:99:2a:cd:68:ec: 94:6c:89:ec:91:8f:47:a2:a9:19:0e:73:3b:15:fa:30:0c:55: dd:78:10:19:a4:ba:1f:fd:74:90:98:2f:8f:dc:6c:c9:a9:b1: e1:19:3f:62 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NuPSgZkTdyvMw9ctt8wkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0 NWMxNDMwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzcwNzRhYmRiMTQwZTZmZWRiOWM5ZWFjMDEwNGQ0NGJhYmZhNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDRmmm3Zk0r7H23dahgg3ipgGDI 6GOoXrYi6uD4xMVM+OObmBt8XIbFJOhP1+Kfh8jDISeP4MtaKy5uveRkJTP0TSq0 xHMltXd1RmIqr7VpF0mFdZhs2dKeolPGWtqX0doJ7SLLgyCMPhYs3o37z+G+x4h9 syRp+wvgtmkAoxNr3B4HlB6xtXNaMvH/UISMiVb3TGUaQiXOpOOR3OiDwhWhIylp h4wqmlP06qDPcE8Iquo3jVXMOujcZJCREwjnfN+n+wkyBV8+EXNJPIogliIdoz+G 0CNFL6m1OWxtPnEKQuRs+hdznqmkSAJdUUTTHEoqSfD9UqURGTosApS2cwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPdwdKvbFA5v7bnJ6sAQTUS6v6VlMB8GA1UdIwQY MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy LTk5MTFlNTEwYThhOS8xLzkzQjBxOXNVRG1fdHVjbnF3QkJOUkxxX3BXVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQyLTk5MTFlNTEwYThh OS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb3C8w DQYJKoZIhvcNAQELBQADggEBANk9Ir2Lf9g/42CEQLfvT2eqWpJW0o/T9e1XfyJI PmYQGQ7e9/EkQ5cbBj1pY30eiaA6UCUXLBt4bpEyfHgcGdL9hD4yocAdbhV39103 yKm351cd+d6f2McQPHSQsij455stRHu68DoEVT4FHXt0RmHDGxShOtaKIr3c1c/Z kZkONi9xt5lbsFB7+39qMWkqyhwCy3G4rv6OXnSXnjdc5zNo0yswGlBgc4P3bm6d iQKLDNls4dE/mR1m2TUVvU4Wfa9aV9uGl9JMUnRP4epc9iygsNOZKs1o7JRsieyR j0eiqRkOczsV+jAMVd14EBmkuh/9dJCYL4/cbMmpseEZP2I= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:03 2026 by rpki-client