This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/d8X74tq4Ex7dEljJD2jNuzdNoAA.roa File: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (raw, json) Hash identifier: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA= Subject key identifier: 77:C5:FB:E2:DA:B8:13:1E:DD:12:58:C9:0F:68:CD:BB:37:4D:A0:00 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A37350AF5339C7DB02E51712CCBFA0 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/d8X74tq4Ex7dEljJD2jNuzdNoAA.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48894 IP address blocks: 91.132.94.0/24 maxlen: 24 2a03:f80:386::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:73:50:af:53:39:c7:db:02:e5:17:12:cc:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77c5fbe2dab8131edd1258c90f68cdbb374da000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:46:42:0b:e4:6d:bd:ce:89:0a:be:9b:40: df:14:d9:45:ef:db:6d:2f:e1:82:e0:11:f3:60:26: b1:9b:a8:a1:95:e4:21:a4:30:42:bd:df:1f:d2:fb: e2:73:34:48:01:d4:6b:00:6a:d7:7b:4f:2c:2d:33: dc:4d:e3:16:bd:84:7b:c0:d3:82:91:88:20:c6:08: 0f:a6:ca:a0:c9:e5:3c:34:e9:d7:f1:34:6b:0c:c3: 13:f7:60:de:1d:96:c1:1b:2b:db:03:9d:5a:21:2a: a4:f6:9f:7c:65:4c:4f:d5:08:01:57:3b:29:51:04: 9a:07:f6:2e:cb:34:f6:6d:f5:2b:4d:10:00:8b:fc: 2a:89:fd:4f:9f:e2:e1:ba:64:d7:52:ef:a3:2a:20: 98:7b:de:40:55:84:a2:9c:d9:79:77:dd:21:fc:47: d8:1f:73:35:42:31:51:95:c7:dd:84:3a:4e:d8:e6: 09:de:20:ac:e8:d3:ea:f8:b9:6e:b6:55:7b:0d:78: d9:ef:9c:0d:a3:3c:13:59:f7:2f:fc:c4:7b:31:dd: d2:71:48:fd:0c:f2:05:20:ea:c0:21:b6:b7:c5:ff: 47:8b:12:82:dd:17:38:99:b5:c7:5a:f4:56:58:0a: ef:91:62:a3:8b:44:5a:b2:7b:72:3e:5f:6a:6e:d0: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C5:FB:E2:DA:B8:13:1E:DD:12:58:C9:0F:68:CD:BB:37:4D:A0:00 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/d8X74tq4Ex7dEljJD2jNuzdNoAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.94.0/24 IPv6: 2a03:f80:386::/48 Signature Algorithm: sha256WithRSAEncryption 14:a7:73:e3:5c:c2:12:d9:67:e1:25:39:76:3c:1e:41:68:66: f2:91:83:88:fa:fb:3b:24:1f:d9:b7:66:67:da:4b:e1:d7:41: ab:72:e4:aa:3a:ce:5c:66:ed:e0:c5:36:28:c5:32:d9:38:28: d9:14:16:ee:ea:87:25:92:d2:bf:5d:a4:56:6e:a1:47:1c:85: 3b:80:ac:de:5b:26:b8:b9:9a:ae:b0:df:7c:0f:0f:7d:35:5f: b5:45:be:b8:a3:2a:57:5d:b5:b8:6b:50:7f:93:51:a1:cb:0c: 4a:c2:13:06:39:26:6a:52:aa:91:9e:f1:d5:05:df:75:f0:fc: ea:a4:0f:09:d5:69:21:3d:87:6c:ff:c7:db:e4:57:77:c4:c0: f7:3a:00:11:97:82:17:59:9f:65:88:cd:05:03:1d:c2:f3:bc: 18:37:82:40:3d:e9:02:9d:4a:1e:f3:b2:78:7f:7e:97:06:cb: b0:fc:53:d7:2b:09:07:2a:aa:0b:03:c3:c7:27:e6:d7:bc:c8: 36:89:9c:cb:6c:5f:d0:9d:5e:ea:db:9f:6a:79:77:d1:76:4b: 4b:2e:37:25:22:b5:ac:24:fa:73:87:c4:77:95:13:ff:83:f8: 8c:d7:97:58:71:ac:d3:a4:0f:26:55:18:e6:72:25:fc:bc:ed: 84:08:ea:ab -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4o3NQr1M5x9sC5RcSzL+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2M1ZmJlMmRhYjgxMzFlZGQxMjU4YzkwZjY4Y2RiYjM3NGRhMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zxGQgvkbb3OiQq+m0DfFNlF79tt L+GC4BHzYCaxm6ihleQhpDBCvd8f0vviczRIAdRrAGrXe08sLTPcTeMWvYR7wNOC kYggxggPpsqgyeU8NOnX8TRrDMMT92DeHZbBGyvbA51aISqk9p98ZUxP1QgBVzsp UQSaB/YuyzT2bfUrTRAAi/wqif1Pn+LhumTXUu+jKiCYe95AVYSinNl5d90h/EfY H3M1QjFRlcfdhDpO2OYJ3iCs6NPq+LlutlV7DXjZ75wNozwTWfcv/MR7Md3ScUj9 DPIFIOrAIba3xf9HixKC3Rc4mbXHWvRWWArvkWKji0RasntyPl9qbtBhjwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHfF++LauBMe3RJYyQ9ozbs3TaAAMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvZDhYNzR0cTRFeDdkRWxqSkQyak51emROb0FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW4ReMA8E AgACMAkDBwAqAw+AA4YwDQYJKoZIhvcNAQELBQADggEBABSnc+NcwhLZZ+ElOXY8 HkFoZvKRg4j6+zskH9m3ZmfaS+HXQaty5Ko6zlxm7eDFNijFMtk4KNkUFu7qhyWS 0r9dpFZuoUcchTuArN5bJri5mq6w33wPD301X7VFvrijKlddtbhrUH+TUaHLDErC EwY5JmpSqpGe8dUF33Xw/OqkDwnVaSE9h2z/x9vkV3fEwPc6ABGXghdZn2WIzQUD HcLzvBg3gkA96QKdSh7zsnh/fpcGy7D8U9crCQcqqgsDw8cn5te8yDaJnMtsX9Cd Xurbn2p5d9F2S0suNyUitawk+nOHxHeVE/+D+IzXl1hxrNOkDyZVGOZyJfy87YQI 6qs= -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:44 2026 by rpki-client