This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/tTnZl8uF6ADN5gv_dFCnGczPy10.roa File: tTnZl8uF6ADN5gv_dFCnGczPy10.roa (raw, json) Hash identifier: yFxKga5LtYoglKO/yUWDlJacjL9nZm+MXR5rVDyXPDw= Subject key identifier: B5:39:D9:97:CB:85:E8:00:CD:E6:0B:FF:74:50:A7:19:CC:CF:CB:5D Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Certificate serial: 019B7834DD52A6689A134E3FCBA7BDBDEEB6 Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/tTnZl8uF6ADN5gv_dFCnGczPy10.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44684 IP address blocks: 91.244.180.0/24 maxlen: 24 2001:67c:7a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dd:52:a6:68:9a:13:4e:3f:cb:a7:bd:bd:ee:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b539d997cb85e800cde60bff7450a719cccfcb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:c4:94:3d:f5:e5:ad:75:5c:11:ea:91:55: 93:ca:01:13:1a:db:27:1b:3d:32:68:69:c8:07:69: 01:27:f3:f0:71:e5:12:40:1a:d6:3f:d7:c8:b5:0e: 9d:14:4b:f5:af:a0:d7:48:14:53:9c:b4:89:1a:67: f2:21:f6:98:c5:41:f7:28:24:ae:63:ae:58:64:f7: c4:db:22:e6:80:63:6f:70:08:fe:af:e6:ce:16:4e: 1d:3f:30:29:fd:4a:7c:58:d5:8a:e1:ce:8e:21:d2: 04:d7:99:8b:0d:17:6f:df:25:35:a3:a0:88:2e:cf: 7f:c8:a1:8c:b6:f9:36:cc:80:24:3b:83:75:93:50: 21:64:ef:5b:ac:ea:54:5d:54:2d:50:93:51:48:74: fe:d5:0e:4f:80:51:d3:e3:78:51:35:29:fb:7d:0e: 26:d4:85:fc:10:c9:5f:ca:64:a7:e0:29:85:78:cd: c0:f5:50:2b:5f:c6:e4:12:e6:ed:e2:18:98:c6:07: 5d:6d:af:de:ca:5f:c5:02:9c:f4:07:cb:c9:62:03: 82:aa:6f:85:46:13:ef:27:b5:c1:6d:39:ca:fd:7e: 4d:0c:8e:f5:5c:25:43:48:30:6a:5a:60:dd:ac:24: b7:c4:07:01:77:16:fc:00:c3:ee:3c:1a:fd:95:94: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:39:D9:97:CB:85:E8:00:CD:E6:0B:FF:74:50:A7:19:CC:CF:CB:5D X509v3 Authority Key Identifier: keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/tTnZl8uF6ADN5gv_dFCnGczPy10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.180.0/24 IPv6: 2001:67c:7a4::/48 Signature Algorithm: sha256WithRSAEncryption 56:8d:ad:79:8a:16:ea:ee:d8:31:59:f9:84:97:6e:22:0b:05: 28:1e:b3:36:4a:87:1b:9a:32:de:15:4d:23:7c:d4:36:44:6d: 2f:6e:46:da:21:2c:04:a1:ee:32:47:d9:db:f7:a7:33:8c:e5: 81:f4:3d:ab:65:ff:f5:82:3b:a6:f7:23:1e:b9:92:0e:12:80: 34:72:39:9e:ff:b1:ed:16:7c:80:0b:fb:f1:12:30:15:b2:55: a5:42:f9:f5:90:e4:ad:0e:a2:a4:bb:db:f1:df:e0:7e:33:ba: ad:96:a2:d1:1c:8e:75:0f:0d:34:36:69:60:b1:fa:5d:96:8f: 71:3f:2f:f7:22:9f:77:39:a5:7b:6b:c0:6f:71:b9:59:96:4e: 6f:5a:94:03:7b:a2:d1:39:b7:3f:da:ba:04:68:e9:23:4f:7b: ff:68:e4:c0:30:e4:34:91:05:01:76:0c:e0:84:59:b5:ff:72: ad:ff:8c:16:1e:22:76:11:81:13:00:c3:38:b7:aa:db:df:ed: fa:dd:4c:6a:46:33:40:10:80:99:03:93:5c:cd:b6:42:bc:02: 58:79:99:40:2b:a8:ea:f7:20:ac:5a:27:5f:f8:30:99:46:8d: 3f:50:58:a9:62:bc:2d:04:17:12:e6:db:0d:4a:69:0c:32:a5: 1b:33:da:1d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NN1SpmiaE04/y6e9ve62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl YmQ2MWMwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTM5ZDk5N2NiODVlODAwY2RlNjBiZmY3NDUwYTcxOWNjY2ZjYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXDElD315a11XBHqkVWTygETGtsn Gz0yaGnIB2kBJ/PwceUSQBrWP9fItQ6dFEv1r6DXSBRTnLSJGmfyIfaYxUH3KCSu Y65YZPfE2yLmgGNvcAj+r+bOFk4dPzAp/Up8WNWK4c6OIdIE15mLDRdv3yU1o6CI Ls9/yKGMtvk2zIAkO4N1k1AhZO9brOpUXVQtUJNRSHT+1Q5PgFHT43hRNSn7fQ4m 1IX8EMlfymSn4CmFeM3A9VArX8bkEubt4hiYxgddba/eyl/FApz0B8vJYgOCqm+F RhPvJ7XBbTnK/X5NDI71XCVDSDBqWmDdrCS3xAcBdxb8AMPuPBr9lZQr/wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLU52ZfLhegAzeYL/3RQpxnMz8tdMB8GA1UdIwQY MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt MGJkOWRkZjM5NzBlLzEvdFRuWmw4dUY2QURONWd2X2RGQ25HY3pQeTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/S0MA8E AgACMAkDBwAgAQZ8B6QwDQYJKoZIhvcNAQELBQADggEBAFaNrXmKFuru2DFZ+YSX biILBSgeszZKhxuaMt4VTSN81DZEbS9uRtohLASh7jJH2dv3pzOM5YH0Patl//WC O6b3Ix65kg4SgDRyOZ7/se0WfIAL+/ESMBWyVaVC+fWQ5K0OoqS72/Hf4H4zuq2W otEcjnUPDTQ2aWCx+l2Wj3E/L/cin3c5pXtrwG9xuVmWTm9alAN7otE5tz/augRo 6SNPe/9o5MAw5DSRBQF2DOCEWbX/cq3/jBYeInYRgRMAwzi3qtvf7frdTGpGM0AQ gJkDk1zNtkK8Alh5mUArqOr3IKxaJ1/4MJlGjT9QWKlivC0EFxLm2w1KaQwypRsz 2h0= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:46 2026 by rpki-client