This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/mImUBsIy_K7hP2R4qNRN0dtJq4M.roa File: mImUBsIy_K7hP2R4qNRN0dtJq4M.roa (raw, json) Hash identifier: RhFRQt0PkCizfyNCWeuFtu6GmF01B1uaXSkERKXxJrM= Subject key identifier: 98:89:94:06:C2:32:FC:AE:E1:3F:64:78:A8:D4:4D:D1:DB:49:AB:83 Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Certificate serial: 019B7F80CE9C351A40B55BEF14EEDA17FFC9 Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/mImUBsIy_K7hP2R4qNRN0dtJq4M.roa Signing time: Fri 02 Jan 2026 16:18:26 +0000 ROA not before: Fri 02 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197615 IP address blocks: 91.223.167.0/24 maxlen: 24 91.224.180.0/23 maxlen: 23 91.230.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:ce:9c:35:1a:40:b5:5b:ef:14:ee:da:17:ff:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Validity Not Before: Jan 2 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98899406c232fcaee13f6478a8d44dd1db49ab83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:74:be:6b:88:37:0f:b2:eb:f9:87:41:86: d6:a9:ee:30:0d:51:3e:e0:02:ac:97:b6:a5:a4:97: af:9c:1e:15:59:f7:62:23:92:14:d1:ad:7c:78:d2: f9:9a:b2:7a:99:e0:72:6c:f2:dd:35:34:1b:84:a4: fe:19:a1:28:61:3c:63:81:70:9c:28:43:d2:06:b4: 28:2e:59:d9:76:ee:3a:80:e7:d6:08:25:9f:46:29: c6:a3:4e:82:c0:7c:cd:c3:ac:22:fd:b0:98:28:c5: 5e:26:01:7f:5a:67:c0:19:df:a4:d0:ca:a7:4b:0b: d0:a8:ea:f1:e1:e4:db:73:4c:ae:15:9b:bb:43:c2: 69:80:bd:4d:03:70:26:bc:1b:31:fb:08:81:2a:18: 52:19:8f:5c:75:6f:6e:42:00:0c:dc:83:d7:9f:d4: c5:ea:63:a5:7c:7a:1d:15:ad:71:87:54:fb:e4:95: 34:2c:85:99:01:e5:83:03:3e:53:a3:99:fc:83:e1: 6a:33:16:aa:54:7e:13:03:2a:77:d2:c5:2a:2c:6a: 99:30:e6:6a:b1:2c:cd:51:6c:7b:5b:48:d0:d7:e5: af:17:67:fb:8c:65:6e:db:ed:be:46:de:f2:20:0b: da:3f:b2:39:87:9f:f3:8c:19:f8:15:ff:10:09:05: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:89:94:06:C2:32:FC:AE:E1:3F:64:78:A8:D4:4D:D1:DB:49:AB:83 X509v3 Authority Key Identifier: keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/mImUBsIy_K7hP2R4qNRN0dtJq4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.167.0/24 91.224.180.0/23 91.230.88.0/23 Signature Algorithm: sha256WithRSAEncryption b3:2b:16:6d:31:90:4f:3d:e9:3c:81:72:11:79:08:21:20:7f: 08:46:05:83:25:66:83:f2:79:47:06:2b:73:35:00:05:42:d7: ec:a4:62:03:f4:b8:85:d0:0c:7f:92:f4:f4:0f:81:21:07:52: 56:c6:6e:d2:64:94:ad:83:3d:f4:aa:0d:d1:9a:d2:7d:9d:46: 7e:51:0b:70:71:e4:e5:39:6c:eb:b4:bf:23:33:ed:6d:9e:8a: a1:9d:27:35:34:48:fb:61:ae:f5:c3:6a:97:83:53:04:70:04: 1b:be:ef:ad:44:a4:2f:1e:e7:78:dc:21:c9:fd:69:c6:11:f0: cc:eb:93:f1:9c:e9:aa:14:80:71:38:be:44:82:5f:04:d7:3c: b6:c1:9d:18:12:0f:98:5e:91:4d:b1:fc:01:97:b6:ac:72:5d: db:a5:5d:7f:87:00:3c:8a:65:8e:0d:4c:9d:8f:51:98:35:44: 92:75:ad:0d:4b:b3:0a:8a:de:fe:a6:36:42:3f:97:88:8f:1f: 35:cd:9e:56:25:ee:c0:54:9b:17:93:0b:5d:37:b3:4a:d2:1d: ca:13:8c:fb:4c:a4:d4:ee:30:fa:47:f7:f5:35:30:1c:75:5d: 5c:42:71:be:91:41:46:7d:c6:b9:4e:a6:71:cb:eb:b2:8e:0f: b0:a0:28:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gM6cNRpAtVvvFO7aF//JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTk1OWRjMTY3MTVjOGE1NGM4MDk0MjY3YjhlNDkxZmUz MjFkMmMwHhcNMjYwMTAyMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODg5OTQwNmMyMzJmY2FlZTEzZjY0NzhhOGQ0NGRkMWRiNDlhYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjF0vmuINw+y6/mHQYbWqe4wDVE+ 4AKsl7alpJevnB4VWfdiI5IU0a18eNL5mrJ6meBybPLdNTQbhKT+GaEoYTxjgXCc KEPSBrQoLlnZdu46gOfWCCWfRinGo06CwHzNw6wi/bCYKMVeJgF/WmfAGd+k0Mqn SwvQqOrx4eTbc0yuFZu7Q8JpgL1NA3AmvBsx+wiBKhhSGY9cdW9uQgAM3IPXn9TF 6mOlfHodFa1xh1T75JU0LIWZAeWDAz5To5n8g+FqMxaqVH4TAyp30sUqLGqZMOZq sSzNUWx7W0jQ1+WvF2f7jGVu2+2+Rt7yIAvaP7I5h5/zjBn4Ff8QCQW/wQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJiJlAbCMvyu4T9keKjUTdHbSauDMB8GA1UdIwQY MBaAFPKpWdwWcVyKVMgJQme45JH+Mh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt NGViZWVjN2U4Mjc1LzEvbUltVUJzSXlfSzdoUDJSNHFOUk4wZHRKcTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1 LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9+nAwQB W+C0AwQBW+ZYMA0GCSqGSIb3DQEBCwUAA4IBAQCzKxZtMZBPPek8gXIReQghIH8I RgWDJWaD8nlHBitzNQAFQtfspGID9LiF0Ax/kvT0D4EhB1JWxm7SZJStgz30qg3R mtJ9nUZ+UQtwceTlOWzrtL8jM+1tnoqhnSc1NEj7Ya71w2qXg1MEcAQbvu+tRKQv Hud43CHJ/WnGEfDM65PxnOmqFIBxOL5Egl8E1zy2wZ0YEg+YXpFNsfwBl7ascl3b pV1/hwA8imWODUydj1GYNUSSda0NS7MKit7+pjZCP5eIjx81zZ5WJe7AVJsXkwtd N7NK0h3KE4z7TKTU7jD6R/f1NTAcdV1cQnG+kUFGfca5TqZxy+uyjg+woCgl -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:47 2026 by rpki-client