This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/TE1mk8OMQ-AFSeYSxaRjCT-JMBY.roa File: TE1mk8OMQ-AFSeYSxaRjCT-JMBY.roa (raw, json) Hash identifier: +OLGI5HPjva1QCNnk16poRDsJUrrhAXiZgKlpTVLOyE= Subject key identifier: 4C:4D:66:93:C3:8C:43:E0:05:49:E6:12:C5:A4:63:09:3F:89:30:16 Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B7E386E4F43763352B990745B5749C902 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/TE1mk8OMQ-AFSeYSxaRjCT-JMBY.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32181 IP address blocks: 91.238.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6e:4f:43:76:33:52:b9:90:74:5b:57:49:c9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c4d6693c38c43e00549e612c5a463093f893016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:9f:e2:f4:58:70:e5:70:94:e0:dd:98:4f: ff:99:d3:69:ae:1d:2f:74:31:ff:54:b2:da:23:fe: d1:02:77:14:6e:9c:0a:a0:d0:c6:e7:e3:38:06:10: 1d:e9:8e:eb:c9:4d:c6:e9:94:3c:de:e0:89:7f:94: a4:ac:55:75:81:6f:f6:80:d2:53:e8:08:be:f1:88: 6d:4c:f0:aa:e2:69:8a:2e:59:d3:ee:94:6d:e5:13: 5b:8d:4a:49:3f:0a:0a:9b:b4:42:40:2a:68:57:53: 3a:6c:c4:40:69:68:c4:9a:2a:e2:be:00:73:bf:c6: d5:1d:e5:8c:94:af:93:88:2c:dc:3c:90:04:f2:79: c1:1c:7f:c7:27:d4:6e:9c:22:e6:31:2e:71:54:45: f5:e9:c6:54:ee:f7:6a:e6:1a:c8:94:53:a2:3a:e6: 1f:4e:97:30:ce:7f:8e:26:da:a8:d2:80:f2:17:f3: 38:80:3f:fa:dc:21:a3:cc:74:23:05:2d:2d:5c:2a: 6f:d4:24:8f:16:95:20:30:34:18:bb:38:f1:bd:ae: b1:35:a6:1b:86:be:cb:1b:90:e8:4b:a0:a8:89:34: 77:cc:11:8e:78:e7:7f:ad:99:13:28:57:3b:c8:79: 84:d5:1a:27:70:99:06:35:03:11:51:ad:60:36:ab: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4D:66:93:C3:8C:43:E0:05:49:E6:12:C5:A4:63:09:3F:89:30:16 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/TE1mk8OMQ-AFSeYSxaRjCT-JMBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.71.0/24 Signature Algorithm: sha256WithRSAEncryption 02:da:3d:aa:db:67:7c:4c:d7:49:ca:54:c0:dd:01:c0:a8:e4: 65:37:80:22:39:0f:55:bf:17:45:83:16:d4:07:9e:ab:85:ca: 90:06:cb:ab:6d:c9:fb:71:57:a5:dc:09:23:86:b5:c3:71:a7: 77:0a:1f:e4:68:f8:6e:a5:50:ac:34:ff:d9:70:4f:ee:43:9e: 9b:da:9b:c6:b7:02:5a:d1:3e:1f:c8:3c:1f:24:20:b4:d1:6d: b2:bf:4f:17:06:8b:fe:6b:69:27:27:77:c8:05:b5:45:50:e0: 26:17:35:e6:18:c3:77:25:69:36:5b:ed:7b:5d:dd:6e:17:c1: 65:98:04:a6:76:d2:7c:08:38:f3:56:90:6f:93:80:0d:1c:18: 62:03:93:2b:f8:ed:ed:3d:c4:72:61:35:0a:cd:ff:76:2f:b1: 3e:f8:e4:42:65:b3:fc:6e:e1:a5:6c:c7:7a:3d:34:37:ef:dd: 13:75:91:0e:5f:d0:62:cf:b5:0a:6d:ab:6d:97:7e:1a:aa:f9: 1c:5e:e7:36:6f:3b:d1:5a:11:b0:b0:7f:11:9e:21:03:51:6f: b9:f4:d8:47:a4:80:e9:33:60:1c:79:0c:a0:6a:2e:a9:8c:aa: 04:e3:fd:78:db:5d:a3:71:5e:52:75:06:c2:ed:9e:21:e7:29: 1f:d7:77:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OG5PQ3YzUrmQdFtXSckCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzRkNjY5M2MzOGM0M2UwMDU0OWU2MTJjNWE0NjMwOTNmODkzMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly2f4vRYcOVwlODdmE//mdNprh0v dDH/VLLaI/7RAncUbpwKoNDG5+M4BhAd6Y7ryU3G6ZQ83uCJf5SkrFV1gW/2gNJT 6Ai+8YhtTPCq4mmKLlnT7pRt5RNbjUpJPwoKm7RCQCpoV1M6bMRAaWjEmirivgBz v8bVHeWMlK+TiCzcPJAE8nnBHH/HJ9RunCLmMS5xVEX16cZU7vdq5hrIlFOiOuYf Tpcwzn+OJtqo0oDyF/M4gD/63CGjzHQjBS0tXCpv1CSPFpUgMDQYuzjxva6xNaYb hr7LG5DoS6CoiTR3zBGOeOd/rZkTKFc7yHmE1RoncJkGNQMRUa1gNqsZ1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFExNZpPDjEPgBUnmEsWkYwk/iTAWMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVEUxbWs4T01RLUFGU2VZU3hhUmpDVC1KTUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+5HMA0G CSqGSIb3DQEBCwUAA4IBAQAC2j2q22d8TNdJylTA3QHAqORlN4AiOQ9VvxdFgxbU B56rhcqQBsurbcn7cVel3AkjhrXDcad3Ch/kaPhupVCsNP/ZcE/uQ56b2pvGtwJa 0T4fyDwfJCC00W2yv08XBov+a2knJ3fIBbVFUOAmFzXmGMN3JWk2W+17Xd1uF8Fl mASmdtJ8CDjzVpBvk4ANHBhiA5Mr+O3tPcRyYTUKzf92L7E++ORCZbP8buGlbMd6 PTQ3790TdZEOX9Biz7UKbattl34aqvkcXuc2bzvRWhGwsH8RniEDUW+59NhHpIDp M2AceQygai6pjKoE4/14212jcV5SdQbC7Z4h5ykf13eF -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:55 2026 by rpki-client