This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/0md0kPLpOYmMIz1N6P6G4TqZeLs.roa File: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (raw, json) Hash identifier: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8= Subject key identifier: D2:67:74:90:F2:E9:39:89:8C:23:3D:4D:E8:FE:86:E1:3A:99:78:BB Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545 Certificate serial: 019B7A5B7BE1E669FF68816985BA0D1B3727 Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/0md0kPLpOYmMIz1N6P6G4TqZeLs.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207199 IP address blocks: 91.239.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7b:e1:e6:69:ff:68:81:69:85:ba:0d:1b:37:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2677490f2e939898c233d4de8fe86e13a9978bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:74:72:a3:c2:d1:4d:f9:ff:07:8e:02:9b: 12:44:15:5b:60:af:6f:ed:94:3b:17:f2:34:db:7f: 14:37:91:c3:09:e3:c8:ad:b5:d1:38:13:5a:38:8c: 90:54:52:f0:8a:90:41:73:0e:d2:93:52:2b:c3:7b: 84:04:89:2d:a1:55:e3:91:7f:bf:53:86:f9:bf:0c: b2:f4:46:13:18:06:3c:ef:9b:bf:ac:96:5f:aa:9b: 9c:8b:53:fa:31:9a:e4:fe:db:29:55:ea:ff:31:ce: b2:02:9f:b7:10:9f:60:3b:ca:57:bf:28:1e:0d:0b: 4f:cc:d4:0d:28:ba:4b:a9:6f:e1:99:6d:07:0d:ee: 9a:6e:cc:41:3a:fe:36:da:d7:0e:6c:7c:e7:79:2f: 80:66:e8:44:39:e6:12:14:a4:cb:92:d7:2e:6b:58: d6:5e:0a:11:e6:ec:19:68:09:89:2c:c8:6d:37:17: f2:4e:fd:4f:e6:d0:7f:59:88:bb:4d:d8:81:0e:09: 64:48:3f:c0:f3:31:cc:fb:43:be:27:66:de:fd:8b: ef:54:a4:9b:57:a9:58:5b:8c:d4:37:5c:9f:43:f8: 88:5a:37:1a:20:3d:3f:ef:52:f9:60:91:2a:b4:87: 38:52:d9:20:89:a7:6e:b1:2e:6f:34:72:1e:ff:50: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:67:74:90:F2:E9:39:89:8C:23:3D:4D:E8:FE:86:E1:3A:99:78:BB X509v3 Authority Key Identifier: keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/0md0kPLpOYmMIz1N6P6G4TqZeLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.122.0/24 Signature Algorithm: sha256WithRSAEncryption ac:13:a6:13:17:4a:8d:70:76:6f:27:10:c7:2d:27:42:f7:6a: 9b:1d:aa:c7:6c:f7:e8:69:dd:92:ba:e0:a5:3f:89:50:c2:4e: b4:e3:de:40:95:41:db:84:3e:3e:15:ab:0b:e0:ec:06:9a:4c: f8:8c:19:2c:52:7b:37:ee:f9:96:4c:b0:aa:2b:db:bb:35:47: 49:41:b6:ae:ec:2a:82:bb:5a:6d:b4:3b:89:b1:9f:17:8d:33: cc:bf:64:d8:44:fe:ee:65:12:07:c0:59:d4:48:07:3c:cb:35: ab:ba:4a:5b:ba:a4:86:53:6f:1c:7e:2e:62:b4:0f:59:61:2f: d0:77:58:2a:7e:bc:9f:c8:fc:20:d4:e2:78:65:c1:57:41:d2: 15:ce:bd:b0:a0:ae:04:c2:e7:d1:84:2f:bb:cd:b3:2e:1f:b3: c4:cb:a5:55:cd:3c:62:f4:ae:6c:75:57:42:1f:b0:fe:f2:31: 28:20:46:64:2b:11:b2:97:27:18:6a:a9:82:e6:3f:1c:c0:fc: 56:03:91:00:ba:69:91:7d:22:ba:fa:39:57:15:e9:3c:e8:b8: cd:d9:77:7f:a5:d0:d3:22:27:1b:61:86:47:2a:fc:a5:8b:97: 63:aa:9b:99:4e:f0:48:38:41:62:68:68:7b:95:3b:6a:3e:54: bc:79:46:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3vh5mn/aIFphboNGzcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5 M2Q1NDUwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjY3NzQ5MGYyZTkzOTg5OGMyMzNkNGRlOGZlODZlMTNhOTk3OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXh0cqPC0U35/weOApsSRBVbYK9v 7ZQ7F/I0238UN5HDCePIrbXROBNaOIyQVFLwipBBcw7Sk1Irw3uEBIktoVXjkX+/ U4b5vwyy9EYTGAY875u/rJZfqpuci1P6MZrk/tspVer/Mc6yAp+3EJ9gO8pXvyge DQtPzNQNKLpLqW/hmW0HDe6absxBOv422tcObHzneS+AZuhEOeYSFKTLktcua1jW XgoR5uwZaAmJLMhtNxfyTv1P5tB/WYi7TdiBDglkSD/A8zHM+0O+J2be/YvvVKSb V6lYW4zUN1yfQ/iIWjcaID0/71L5YJEqtIc4UtkgiadusS5vNHIe/1CmrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJndJDy6TmJjCM9Tej+huE6mXi7MB8GA1UdIwQY MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt OTM3ZGNmZjUxZTJkLzEvMG1kMGtQTHBPWW1NSXoxTjZQNkc0VHFaZUxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+96MA0G CSqGSIb3DQEBCwUAA4IBAQCsE6YTF0qNcHZvJxDHLSdC92qbHarHbPfoad2SuuCl P4lQwk60495AlUHbhD4+FasL4OwGmkz4jBksUns37vmWTLCqK9u7NUdJQbau7CqC u1pttDuJsZ8XjTPMv2TYRP7uZRIHwFnUSAc8yzWrukpbuqSGU28cfi5itA9ZYS/Q d1gqfryfyPwg1OJ4ZcFXQdIVzr2woK4EwufRhC+7zbMuH7PEy6VVzTxi9K5sdVdC H7D+8jEoIEZkKxGylycYaqmC5j8cwPxWA5EAummRfSK6+jlXFek86LjN2Xd/pdDT IicbYYZHKvyli5djqpuZTvBIOEFiaGh7lTtqPlS8eUZ0 -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:16 2026 by rpki-client