This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/9MMTJC9bSYJjm0yH2SR40mWxLt4.roa File: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (raw, json) Hash identifier: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0= Subject key identifier: F4:C3:13:24:2F:5B:49:82:63:9B:4C:87:D9:24:78:D2:65:B1:2E:DE Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Certificate serial: 019B7C7F1ED630D52FBBF0B28E5B053BCB29 Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/9MMTJC9bSYJjm0yH2SR40mWxLt4.roa Signing time: Fri 02 Jan 2026 02:17:44 +0000 ROA not before: Fri 02 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51626 IP address blocks: 91.220.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:1e:d6:30:d5:2f:bb:f0:b2:8e:5b:05:3b:cb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Validity Not Before: Jan 2 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4c313242f5b4982639b4c87d92478d265b12ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:86:d1:f0:88:89:16:b4:bb:ff:7d:9e:d3: 78:9e:a6:a1:e2:e8:03:78:3b:d8:7b:1d:a2:b2:0f: 20:5f:9f:97:4f:de:ed:04:41:6f:d0:2f:06:7d:69: 42:41:8a:90:b9:23:a9:15:a3:b2:4c:a6:1c:77:df: 9b:1b:5f:8f:f6:cd:f7:ed:7d:e7:ea:63:3f:32:a3: 71:f2:38:f5:12:ad:fe:b9:29:ae:07:9c:d3:ae:1e: 91:f1:74:6a:d2:45:fd:73:4b:40:45:90:fd:c3:f9: 61:06:5f:1e:10:92:33:ad:88:c4:f4:6d:b1:fa:f9: b3:45:e0:74:55:46:7c:82:51:b8:ac:94:b4:fe:fd: ea:33:7c:ba:17:57:91:51:32:3b:b5:9b:c7:2a:34: ef:83:cc:bd:c3:0a:c7:dd:2d:dd:a8:ca:54:c9:a5: 92:f3:97:bd:92:3e:39:61:f8:2c:62:4a:89:bd:b2: 31:42:5d:99:2b:c4:ac:42:28:8c:2f:f3:b8:ec:29: de:5d:cd:57:84:c0:41:db:02:cd:d6:15:82:12:fa: c0:ff:d5:77:fd:49:a9:43:7c:6e:32:30:9d:86:c1: e3:30:09:97:97:6c:a8:4f:ad:a7:23:33:c2:2a:21: 68:4b:a0:32:a5:9a:22:4b:f5:fd:7a:14:c1:a8:65: a0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C3:13:24:2F:5B:49:82:63:9B:4C:87:D9:24:78:D2:65:B1:2E:DE X509v3 Authority Key Identifier: keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/9MMTJC9bSYJjm0yH2SR40mWxLt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.13.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:35:5f:11:fc:32:80:f4:56:82:05:3f:df:b6:bb:64:e3:cb: 27:32:f1:2c:5e:f5:28:0b:8a:47:55:ec:9a:4f:37:f2:3c:12: 70:80:2f:4f:8a:3a:b7:b1:60:88:9a:17:76:66:23:8c:df:a4: e0:5c:cb:e4:dc:e2:44:f7:12:81:e5:91:f9:b0:de:58:ac:74: 2c:e7:99:4e:26:8e:84:e0:aa:1a:45:ea:d6:26:a7:7d:97:98: 34:d0:27:15:f6:bc:74:b4:f2:c6:f9:28:40:c6:73:55:62:a8: 89:a1:c1:d8:29:a1:cb:1b:41:39:79:37:13:1e:6f:cd:b2:86: 91:96:d4:9e:66:67:09:c0:27:c1:b0:37:73:77:25:1f:d9:9d: 99:0e:c8:b2:4c:9c:2c:e7:41:e5:4a:43:e1:fc:32:03:fb:92: 82:68:61:7c:4c:dc:58:39:c8:4e:05:44:41:2a:ed:e7:d2:37: 00:66:5d:53:16:51:33:25:48:b6:ca:3a:38:e4:9f:be:f7:29: d3:ed:31:7b:fe:aa:9e:70:f4:1e:f4:17:ee:47:a7:13:55:f1: 60:a0:ec:41:d3:bc:ec:b4:59:17:74:2c:a0:a2:9f:f6:0b:cf: 74:a2:f7:ea:7e:df:86:09:43:e1:e4:67:04:b0:49:be:50:08: f6:bd:95:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fx7WMNUvu/CyjlsFO8spMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmZhZjhhMWFhM2JjMWZmM2UzZTQzMGM2N2ZiN2E2NDEw YTNkZjcwHhcNMjYwMTAyMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGMzMTMyNDJmNWI0OTgyNjM5YjRjODdkOTI0NzhkMjY1YjEyZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjeG0fCIiRa0u/99ntN4nqah4ugD eDvYex2isg8gX5+XT97tBEFv0C8GfWlCQYqQuSOpFaOyTKYcd9+bG1+P9s337X3n 6mM/MqNx8jj1Eq3+uSmuB5zTrh6R8XRq0kX9c0tARZD9w/lhBl8eEJIzrYjE9G2x +vmzReB0VUZ8glG4rJS0/v3qM3y6F1eRUTI7tZvHKjTvg8y9wwrH3S3dqMpUyaWS 85e9kj45YfgsYkqJvbIxQl2ZK8SsQiiML/O47CneXc1XhMBB2wLN1hWCEvrA/9V3 /UmpQ3xuMjCdhsHjMAmXl2yoT62nIzPCKiFoS6AypZoiS/X9ehTBqGWggwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTDEyQvW0mCY5tMh9kkeNJlsS7eMB8GA1UdIwQY MBaAFD6/r4oao7wf8+PkMMZ/t6ZBCj33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAt ZWZkMWEwOThiNDg1LzEvOU1NVEpDOWJTWUpqbTB5SDJTUjQwbVd4THQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAtZWZkMWEwOThiNDg1 LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wNMA0G CSqGSIb3DQEBCwUAA4IBAQA/NV8R/DKA9FaCBT/ftrtk48snMvEsXvUoC4pHVeya TzfyPBJwgC9Pijq3sWCImhd2ZiOM36TgXMvk3OJE9xKB5ZH5sN5YrHQs55lOJo6E 4KoaRerWJqd9l5g00CcV9rx0tPLG+ShAxnNVYqiJocHYKaHLG0E5eTcTHm/NsoaR ltSeZmcJwCfBsDdzdyUf2Z2ZDsiyTJws50HlSkPh/DID+5KCaGF8TNxYOchOBURB Ku3n0jcAZl1TFlEzJUi2yjo45J++9ynT7TF7/qqecPQe9BfuR6cTVfFgoOxB07zs tFkXdCygop/2C890ovfqft+GCUPh5GcEsEm+UAj2vZVS -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:44 2026 by rpki-client