This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/N3jaze7YJRe2qAy_Yl4PgjOPV78.roa File: N3jaze7YJRe2qAy_Yl4PgjOPV78.roa (raw, json) Hash identifier: J9hAHBk9hnYVFJwAFN6kZ7iaHqqOjhd7Ue4bGVAtGs4= Subject key identifier: 37:78:DA:CD:EE:D8:25:17:B6:A8:0C:BF:62:5E:0F:82:33:8F:57:BF Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45 Certificate serial: 019B78A2BE6BE2248BE46421FD3A71B63166 Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/N3jaze7YJRe2qAy_Yl4PgjOPV78.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197060 IP address blocks: 91.216.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:be:6b:e2:24:8b:e4:64:21:fd:3a:71:b6:31:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3778dacdeed82517b6a80cbf625e0f82338f57bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:d0:b8:25:8c:c9:6f:c2:d6:69:88:0a:67: 43:13:d8:49:0a:7d:1e:11:4c:33:5c:29:f7:e2:6c: 50:b4:97:06:3b:4a:8a:8f:cd:d9:65:5e:56:5e:35: 97:6d:de:76:be:b4:90:44:2a:07:2f:6d:9d:21:c1: 30:cf:a4:7e:4b:26:ca:43:dd:8d:bf:bc:bf:7c:f3: 32:94:44:4c:ec:63:cc:42:75:85:ba:86:7e:5f:8d: d4:66:ed:a3:bb:72:b4:e0:23:39:c1:93:92:dc:3e: 71:d6:7e:c0:6e:78:2a:88:61:f1:9f:37:ec:d3:4b: 50:c7:ff:b0:07:1b:bf:0a:0a:47:72:df:8f:77:33: 6c:b8:a8:8d:18:fe:24:7b:19:c7:92:30:43:01:59: bb:06:2f:96:00:d1:0d:dc:5e:f9:65:03:2c:89:ff: 0b:9f:9c:c0:6b:0b:fa:71:fa:8c:41:64:39:b4:5d: bb:68:ac:d3:cf:27:ec:7e:da:cf:f1:e3:cf:d4:35: d8:d3:0d:0d:ac:0b:2e:d4:5d:07:ec:6c:8e:b9:35: 82:d4:10:88:9b:ae:ae:39:22:2a:df:f4:9a:96:6a: 95:48:77:93:b8:ba:95:e8:a0:ce:a3:73:e0:eb:b3: d0:81:3a:1e:cc:d8:92:44:2a:0e:58:be:72:69:ad: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:DA:CD:EE:D8:25:17:B6:A8:0C:BF:62:5E:0F:82:33:8F:57:BF X509v3 Authority Key Identifier: keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/N3jaze7YJRe2qAy_Yl4PgjOPV78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.86.0/24 Signature Algorithm: sha256WithRSAEncryption 26:74:b2:f5:2d:ff:17:b2:88:b4:aa:33:92:e1:32:0f:84:b4: 75:14:db:48:02:48:fd:3d:28:37:e3:90:06:b8:41:b4:00:b5: 63:36:a3:28:f7:b9:7c:13:87:3c:da:14:ba:d3:82:12:3b:e1: e2:75:c1:87:69:fa:d0:30:46:0d:6c:49:17:ea:98:72:e0:3a: dc:57:b1:13:a9:77:4a:96:26:d3:c4:a4:84:65:c7:17:d6:82: 6b:2a:ba:13:7f:d4:14:d1:16:1b:81:9e:be:92:26:90:d2:a5: 08:f6:50:d3:ba:b4:1c:83:88:e3:87:87:a8:7f:27:5a:60:61: 59:b8:81:83:f5:6a:e7:4c:12:18:50:74:1a:59:18:b7:2f:f7: d3:a0:f7:91:f7:89:1b:e7:8b:cb:df:c3:d7:4d:73:ea:68:9c: 50:da:5a:83:13:59:8b:3f:02:38:bb:35:78:2e:16:e1:75:4b: 96:30:89:77:72:d8:ba:d4:f5:bb:ff:dc:65:46:da:5e:07:66: 2d:4c:82:3c:35:4c:15:6d:7d:bd:1f:e0:29:58:14:a2:60:90: 53:52:f7:b3:3c:b7:b9:ae:11:e1:61:c1:f0:ce:48:f4:da:1d: bd:a7:90:26:d0:d9:29:83:6b:b9:48:8f:7a:d6:9b:f7:67:67: bf:88:7f:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4or5r4iSL5GQh/TpxtjFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWEwMWFiMzUyNmI4ZWJiOGFmYjE3Yjk4YTcxMjdmMGY1 NGNhNDUwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzc4ZGFjZGVlZDgyNTE3YjZhODBjYmY2MjVlMGY4MjMzOGY1N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt73QuCWMyW/C1mmICmdDE9hJCn0e EUwzXCn34mxQtJcGO0qKj83ZZV5WXjWXbd52vrSQRCoHL22dIcEwz6R+SybKQ92N v7y/fPMylERM7GPMQnWFuoZ+X43UZu2ju3K04CM5wZOS3D5x1n7AbngqiGHxnzfs 00tQx/+wBxu/CgpHct+PdzNsuKiNGP4kexnHkjBDAVm7Bi+WANEN3F75ZQMsif8L n5zAawv6cfqMQWQ5tF27aKzTzyfsftrP8ePP1DXY0w0NrAsu1F0H7GyOuTWC1BCI m66uOSIq3/SalmqVSHeTuLqV6KDOo3Pg67PQgToezNiSRCoOWL5yaa08HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDd42s3u2CUXtqgMv2JeD4Izj1e/MB8GA1UdIwQY MBaAFLmqAas1JrjruK+xe5inEn8PVMpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEt NWE3YmZiM2NkMDhiLzEvTjNqYXplN1lKUmUycUF5X1lsNFBnak9QVjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEtNWE3YmZiM2NkMDhi LzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hWMA0G CSqGSIb3DQEBCwUAA4IBAQAmdLL1Lf8Xsoi0qjOS4TIPhLR1FNtIAkj9PSg345AG uEG0ALVjNqMo97l8E4c82hS604ISO+HidcGHafrQMEYNbEkX6phy4DrcV7ETqXdK libTxKSEZccX1oJrKroTf9QU0RYbgZ6+kiaQ0qUI9lDTurQcg4jjh4eofydaYGFZ uIGD9WrnTBIYUHQaWRi3L/fToPeR94kb54vL38PXTXPqaJxQ2lqDE1mLPwI4uzV4 LhbhdUuWMIl3cti61PW7/9xlRtpeB2YtTII8NUwVbX29H+ApWBSiYJBTUvezPLe5 rhHhYcHwzkj02h29p5Am0Nkpg2u5SI961pv3Z2e/iH81 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:03 2026 by rpki-client