This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/f-ogC67M0j6pmdbRailAwDmYBsk.roa File: f-ogC67M0j6pmdbRailAwDmYBsk.roa (raw, json) Hash identifier: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE= Subject key identifier: 7F:EA:20:0B:AE:CC:D2:3E:A9:99:D6:D1:6A:29:40:C0:39:98:06:C9 Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779 Certificate serial: 019B76EAF88F50FF94AD609A0BE80DA6C880 Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/f-ogC67M0j6pmdbRailAwDmYBsk.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61311 IP address blocks: 91.202.176.0/22 maxlen: 24 91.202.176.0/24 maxlen: 24 91.202.177.0/24 maxlen: 24 91.202.178.0/24 maxlen: 24 91.202.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:8f:50:ff:94:ad:60:9a:0b:e8:0d:a6:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fea200baeccd23ea999d6d16a2940c0399806c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:9a:e2:3c:f3:6f:bb:f3:0d:65:b2:0b:ff: c8:ea:bd:14:8d:66:aa:ed:4f:1f:d0:65:79:d5:c0: 70:47:7f:3d:c3:f8:88:56:b0:9a:d8:38:22:c0:32: f4:f6:6f:73:f4:72:19:4c:a8:93:8c:98:bd:d2:d1: 6e:5b:58:f1:cc:34:e9:05:89:0f:fa:a6:36:b3:a3: 4b:93:1b:d4:99:1d:5d:72:e6:b8:18:35:63:3c:03: 27:d7:f0:d0:e8:47:5b:13:a1:d4:83:ac:2e:2e:6e: 5c:83:15:46:99:3d:36:1f:f4:ed:61:f0:28:9e:d5: 2d:d4:df:93:30:8c:ed:d5:bc:4e:20:19:8b:2f:20: 6b:75:2b:7f:1d:eb:ac:76:5e:a8:78:d8:30:dc:3b: 78:49:ef:08:b2:a9:99:86:18:9e:82:ee:9d:21:e8: 37:3b:a3:e9:30:ea:2a:70:07:a6:17:db:56:2f:9a: 42:21:e3:fd:50:e7:6e:50:7a:c1:b4:49:21:82:94: 37:27:78:c7:65:df:71:79:6b:03:90:bf:13:7e:1a: 8d:9a:b8:d6:d2:56:80:24:4b:e3:d2:cb:75:79:07: 90:6e:64:38:6f:66:e9:a1:b4:95:44:d2:d3:44:2a: b2:9b:9c:82:b4:3d:6c:25:e5:92:d5:63:12:c2:1d: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EA:20:0B:AE:CC:D2:3E:A9:99:D6:D1:6A:29:40:C0:39:98:06:C9 X509v3 Authority Key Identifier: keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/f-ogC67M0j6pmdbRailAwDmYBsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.176.0/22 Signature Algorithm: sha256WithRSAEncryption 20:53:3a:2c:04:85:a6:3f:f6:83:70:b2:08:ea:01:4e:a7:43: e1:10:81:79:90:2a:eb:11:47:dd:e6:6d:31:e0:df:a7:55:d8: 0f:4e:ea:0f:93:dd:0e:dc:87:14:75:d0:bc:bd:0c:68:cb:08: a4:ae:5d:3a:32:33:cb:da:f3:9a:b3:da:7d:fd:b9:04:b8:09: ee:3f:39:40:e2:2a:2d:03:89:0f:b7:2f:9e:91:a8:70:06:bc: d7:ea:14:01:fe:fa:5c:0a:bd:80:57:8e:6c:3f:da:17:0c:21: 18:53:58:42:aa:9b:6b:fe:de:ae:8e:6b:c5:9b:3f:94:a9:de: 56:6c:0f:6e:ff:73:29:34:4d:18:6c:81:38:1f:9f:2f:62:87: d3:45:00:ac:fa:af:79:2e:5a:ea:4d:45:a3:25:33:79:d4:3a: 3a:14:49:c3:f1:6b:a1:45:fe:aa:01:49:5d:ce:a5:f9:45:2c: 8b:f9:de:85:dd:f6:6d:24:df:23:3d:e0:1d:7b:40:d8:e1:3a: 2c:f0:7f:60:59:27:1b:50:88:c7:72:af:db:14:61:f6:95:ae: 2a:0f:2b:bd:93:52:05:25:5a:c7:56:9b:af:9f:0e:50:8d:31: 06:1c:e9:7c:07:94:18:21:98:6f:e7:98:4f:fb:13:f7:38:a7: c8:a1:af:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26viPUP+UrWCaC+gNpsiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2M5ZWUxYmUzMzA4ZmQ2YmQ0YTdjN2FjMmI5ZDkxMDA4 OWI3NzkwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmVhMjAwYmFlY2NkMjNlYTk5OWQ2ZDE2YTI5NDBjMDM5OTgwNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJqa4jzzb7vzDWWyC//I6r0UjWaq 7U8f0GV51cBwR389w/iIVrCa2DgiwDL09m9z9HIZTKiTjJi90tFuW1jxzDTpBYkP +qY2s6NLkxvUmR1dcua4GDVjPAMn1/DQ6EdbE6HUg6wuLm5cgxVGmT02H/TtYfAo ntUt1N+TMIzt1bxOIBmLLyBrdSt/Heusdl6oeNgw3Dt4Se8IsqmZhhiegu6dIeg3 O6PpMOoqcAemF9tWL5pCIeP9UOduUHrBtEkhgpQ3J3jHZd9xeWsDkL8TfhqNmrjW 0laAJEvj0st1eQeQbmQ4b2bpobSVRNLTRCqym5yCtD1sJeWS1WMSwh1CywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/qIAuuzNI+qZnW0WopQMA5mAbJMB8GA1UdIwQY MBaAFA48nuG+Mwj9a9Snx6wrnZEAibd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUt MDhmM2U4OTA3YzQyLzEvZi1vZ0M2N00wajZwbWRiUmFpbEF3RG1ZQnNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUtMDhmM2U4OTA3YzQy LzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8qwMA0G CSqGSIb3DQEBCwUAA4IBAQAgUzosBIWmP/aDcLII6gFOp0PhEIF5kCrrEUfd5m0x 4N+nVdgPTuoPk90O3IcUddC8vQxoywikrl06MjPL2vOas9p9/bkEuAnuPzlA4iot A4kPty+ekahwBrzX6hQB/vpcCr2AV45sP9oXDCEYU1hCqptr/t6ujmvFmz+Uqd5W bA9u/3MpNE0YbIE4H58vYofTRQCs+q95LlrqTUWjJTN51Do6FEnD8WuhRf6qAUld zqX5RSyL+d6F3fZtJN8jPeAde0DY4Tos8H9gWScbUIjHcq/bFGH2la4qDyu9k1IF JVrHVpuvnw5QjTEGHOl8B5QYIZhv55hP+xP3OKfIoa8e -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:11 2026 by rpki-client