This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/morW-cTcXn9j0w3YiN8Pqjknz1E.roa File: morW-cTcXn9j0w3YiN8Pqjknz1E.roa (raw, json) Hash identifier: K7SxdB8wVRK7jw0mHGT7FTxfXTfnjpyJATGOAJ53i3w= Subject key identifier: 9A:8A:D6:F9:C4:DC:5E:7F:63:D3:0D:D8:88:DF:0F:AA:39:27:CF:51 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA32466570A5F051C8EF2924F95B782 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/morW-cTcXn9j0w3YiN8Pqjknz1E.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 91.209.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:24:66:57:0a:5f:05:1c:8e:f2:92:4f:95:b7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a8ad6f9c4dc5e7f63d30dd888df0faa3927cf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:1f:1f:be:36:a9:a2:04:77:52:cf:75:19: b3:00:1b:e2:82:40:17:71:85:ba:9f:99:d1:58:53: fa:c8:e5:03:c7:85:f1:9d:91:34:6f:72:6f:08:4d: 39:dc:3e:19:cb:7c:a6:7c:8c:dc:0d:28:05:d3:34: 47:8a:62:9e:25:42:95:d8:26:0a:3d:33:da:b3:a0: e6:2b:8c:0f:91:97:d8:b9:c7:ca:c6:70:e1:79:6b: 90:2e:37:50:78:16:50:da:08:6c:6a:0c:43:39:8d: a5:ba:1f:74:d7:24:80:4e:b8:b4:8f:9e:e3:b3:72: f3:d0:9d:8c:2e:71:11:8e:40:7c:a0:16:69:fc:fa: 7d:55:27:17:76:8f:20:dd:b3:de:d1:83:ae:15:5f: 14:5a:c9:15:77:1b:7b:06:e9:1a:d4:43:08:71:6a: d1:3c:ed:ae:eb:e4:b5:96:9d:d3:9f:03:3f:6c:21: 46:e7:d8:ee:b8:50:e4:4b:3e:e5:82:1c:cf:77:0d: d9:1d:44:04:23:54:00:ec:5e:4d:bd:c2:6a:3e:ab: 68:9c:05:ca:0e:c1:f6:21:e0:75:6a:85:7a:bf:90: e3:f5:c0:6f:03:5a:b4:35:79:f8:67:29:19:5a:ae: 67:ff:3b:53:56:6f:4c:a2:ae:ec:9b:f8:7d:7b:46: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8A:D6:F9:C4:DC:5E:7F:63:D3:0D:D8:88:DF:0F:AA:39:27:CF:51 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/morW-cTcXn9j0w3YiN8Pqjknz1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.135.0/24 Signature Algorithm: sha256WithRSAEncryption 81:00:fd:54:d0:ef:85:59:94:05:41:d9:b1:4c:c1:d9:2d:70: 5a:69:e7:a3:b0:17:83:54:63:d5:9e:ac:80:2b:a4:7f:8c:a9: 42:6e:e2:9a:1b:89:03:04:3f:3b:49:3f:40:46:37:8a:ac:59: ab:28:91:ee:39:6e:77:99:4a:7f:2a:40:1d:b7:d6:a0:cb:19: d5:7b:4b:93:c5:79:9a:ac:39:24:7f:f9:da:ff:7e:24:d7:b5: 05:08:6b:50:6f:54:87:9a:b6:e7:fc:77:f9:38:1d:25:a2:b1: 2a:f2:d4:e8:71:b4:be:c8:55:bf:81:ab:92:be:56:fe:23:72: bf:5b:fd:5c:fd:81:2a:b9:11:d0:b9:6b:76:2e:2a:2e:99:32: eb:17:2a:0f:a7:66:d3:da:58:3b:cf:43:e1:00:fc:a4:a7:77: 63:a6:31:04:28:99:cd:e0:af:f0:64:d5:62:0c:3a:c9:a0:7f: 99:48:e0:86:81:5a:45:5b:9c:a7:a9:38:37:bf:2c:97:4a:10: 44:3b:87:50:34:b1:0c:54:c1:7d:06:4a:35:3e:fc:4b:6d:20: b0:2c:50:2f:79:5d:9b:31:0a:85:70:41:81:5b:d2:b3:6b:b5: d1:72:ab:32:79:1b:0d:9e:9c:17:90:05:e3:98:a6:1c:8c:4f: 09:5a:96:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyRmVwpfBRyO8pJPlbeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YThhZDZmOWM0ZGM1ZTdmNjNkMzBkZDg4OGRmMGZhYTM5MjdjZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR8fH742qaIEd1LPdRmzABvigkAX cYW6n5nRWFP6yOUDx4XxnZE0b3JvCE053D4Zy3ymfIzcDSgF0zRHimKeJUKV2CYK PTPas6DmK4wPkZfYucfKxnDheWuQLjdQeBZQ2ghsagxDOY2luh901ySATri0j57j s3Lz0J2MLnERjkB8oBZp/Pp9VScXdo8g3bPe0YOuFV8UWskVdxt7Buka1EMIcWrR PO2u6+S1lp3TnwM/bCFG59juuFDkSz7lghzPdw3ZHUQEI1QA7F5NvcJqPqtonAXK DsH2IeB1aoV6v5Dj9cBvA1q0NXn4ZykZWq5n/ztTVm9Moq7sm/h9e0Z5ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJqK1vnE3F5/Y9MN2IjfD6o5J89RMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvbW9yVy1jVGNYbjlqMHczWWlOOFBxamtuejFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GHMA0G CSqGSIb3DQEBCwUAA4IBAQCBAP1U0O+FWZQFQdmxTMHZLXBaaeejsBeDVGPVnqyA K6R/jKlCbuKaG4kDBD87ST9ARjeKrFmrKJHuOW53mUp/KkAdt9agyxnVe0uTxXma rDkkf/na/34k17UFCGtQb1SHmrbn/Hf5OB0lorEq8tTocbS+yFW/gauSvlb+I3K/ W/1c/YEquRHQuWt2LioumTLrFyoPp2bT2lg7z0PhAPykp3djpjEEKJnN4K/wZNVi DDrJoH+ZSOCGgVpFW5ynqTg3vyyXShBEO4dQNLEMVMF9Bko1PvxLbSCwLFAveV2b MQqFcEGBW9Kza7XRcqsyeRsNnpwXkAXjmKYcjE8JWpZx -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:35 2026 by rpki-client