This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/sgkOUU34-98oBXZ_m0jBmS5vUec.roa File: sgkOUU34-98oBXZ_m0jBmS5vUec.roa (raw, json) Hash identifier: E8ZXuT+H7colqnHoMLtcicaB+wl08+ImLIK4sH1PrIs= Subject key identifier: B2:09:0E:51:4D:F8:FB:DF:28:05:76:7F:9B:48:C1:99:2E:6F:51:E7 Certificate issuer: /CN=901f843ac9448cb07791917b90354015ffe23db7 Certificate serial: 019B76EB574ABEC7CCCBDCE80EF2C162EAC5 Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/sgkOUU34-98oBXZ_m0jBmS5vUec.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34717 IP address blocks: 91.223.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:57:4a:be:c7:cc:cb:dc:e8:0e:f2:c1:62:ea:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2090e514df8fbdf2805767f9b48c1992e6f51e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:db:96:38:ad:bc:f0:1a:cf:b0:b6:08:e6: 96:40:40:84:35:fb:7f:03:2d:21:f7:5a:63:b9:16: 2f:c4:73:7c:54:8c:b8:6c:a0:db:16:b2:67:a7:91: d9:a7:d0:d5:d8:e1:20:4a:70:a0:6d:16:e3:46:fc: 58:3f:38:e8:63:91:a9:a4:e6:77:2a:8b:48:ef:44: e2:2e:8a:06:3d:1f:1f:76:49:4f:60:92:40:1c:1b: fb:aa:5c:91:ca:06:57:0b:73:b9:09:d0:11:a5:1e: 06:d7:42:47:d5:ea:4c:bd:b6:fb:6d:33:76:be:96: d9:21:2b:30:e3:aa:7e:75:76:67:6a:5b:ef:b8:46: 35:e5:8e:51:b6:19:1e:a2:a9:4b:d9:5e:58:8e:99: 1a:31:cd:93:0b:e5:09:53:72:55:7d:7a:e9:05:9f: 45:40:89:1e:c6:68:d5:89:f7:b8:a6:19:e7:c8:e0: 37:18:77:2a:9c:6e:ff:ca:b5:f4:af:89:7e:4d:af: 0e:65:32:3e:ab:0c:1d:d3:5f:30:84:3a:df:ff:86: 3f:05:3c:ec:fc:d4:9c:28:c9:a1:bf:4b:30:74:01: 45:20:0a:d7:66:ca:0d:9c:7f:b3:15:b3:32:ea:fb: 1c:4e:6a:5f:a5:3c:58:ac:45:b8:a7:d1:c7:ce:65: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:0E:51:4D:F8:FB:DF:28:05:76:7F:9B:48:C1:99:2E:6F:51:E7 X509v3 Authority Key Identifier: keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/sgkOUU34-98oBXZ_m0jBmS5vUec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.166.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:5b:8a:75:6e:5c:cb:84:1d:d5:08:0a:90:e2:9c:72:59:fe: ef:34:37:e1:29:4a:fc:97:6f:c4:db:7b:7b:bf:b6:5c:a6:92: 83:3c:6f:91:31:63:21:c5:49:11:52:be:04:51:f5:d5:73:b2: de:d9:24:82:05:8d:39:4a:27:48:b9:ef:a1:61:b8:87:84:9a: e5:44:00:34:e7:14:ee:50:7d:f5:98:43:7c:e4:c7:47:61:33: 01:bf:ce:3e:4e:a2:ad:69:3b:30:a3:6e:06:5e:b3:8f:95:2e: c2:80:50:bf:0a:f0:4a:30:b3:b0:82:0b:0a:76:07:ba:17:0f: 8d:7e:5b:40:77:7d:62:8b:dd:2e:9f:e9:7f:f7:53:9a:06:8e: 8e:c1:9e:a8:f2:2a:04:bf:0e:56:a6:1f:5a:e0:6d:f0:5e:01: df:ec:73:2b:4d:63:bb:f4:45:34:d7:2d:84:4b:b9:c8:b5:23: 36:30:82:19:5b:4c:9a:78:d8:13:cf:0d:12:9a:dd:63:d7:61: c2:93:ba:5b:1f:a8:4a:2d:4a:1f:0f:73:c0:fa:c5:92:32:b4: eb:18:69:ba:95:4f:c2:ca:c1:e0:f1:d4:56:42:39:39:54:a1: 49:5f:07:4c:b0:e1:39:d1:dc:7f:a7:9b:14:fa:6d:7d:55:46: 43:25:ab:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261dKvsfMy9zoDvLBYurFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMWY4NDNhYzk0NDhjYjA3NzkxOTE3YjkwMzU0MDE1ZmZl MjNkYjcwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjA5MGU1MTRkZjhmYmRmMjgwNTc2N2Y5YjQ4YzE5OTJlNmY1MWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyLbljitvPAaz7C2COaWQECENft/ Ay0h91pjuRYvxHN8VIy4bKDbFrJnp5HZp9DV2OEgSnCgbRbjRvxYPzjoY5GppOZ3 KotI70TiLooGPR8fdklPYJJAHBv7qlyRygZXC3O5CdARpR4G10JH1epMvbb7bTN2 vpbZISsw46p+dXZnalvvuEY15Y5RthkeoqlL2V5YjpkaMc2TC+UJU3JVfXrpBZ9F QIkexmjVife4phnnyOA3GHcqnG7/yrX0r4l+Ta8OZTI+qwwd018whDrf/4Y/BTzs /NScKMmhv0swdAFFIArXZsoNnH+zFbMy6vscTmpfpTxYrEW4p9HHzmU0ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIJDlFN+PvfKAV2f5tIwZkub1HnMB8GA1UdIwQY MBaAFJAfhDrJRIywd5GRe5A1QBX/4j23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEt YjIwNGY5ZmNhZGI2LzEvc2drT1VVMzQtOThvQlhaX20wakJtUzV2VWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEtYjIwNGY5ZmNhZGI2 LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+mMA0G CSqGSIb3DQEBCwUAA4IBAQA/W4p1blzLhB3VCAqQ4pxyWf7vNDfhKUr8l2/E23t7 v7ZcppKDPG+RMWMhxUkRUr4EUfXVc7Le2SSCBY05SidIue+hYbiHhJrlRAA05xTu UH31mEN85MdHYTMBv84+TqKtaTswo24GXrOPlS7CgFC/CvBKMLOwggsKdge6Fw+N fltAd31ii90un+l/91OaBo6OwZ6o8ioEvw5Wph9a4G3wXgHf7HMrTWO79EU01y2E S7nItSM2MIIZW0yaeNgTzw0Smt1j12HCk7pbH6hKLUofD3PA+sWSMrTrGGm6lU/C ysHg8dRWQjk5VKFJXwdMsOE50dx/p5sU+m19VUZDJaud -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:18 2026 by rpki-client