This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/pInkCUNgtUwuBuyF0FBGq4Od_LA.roa File: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (raw, json) Hash identifier: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc= Subject key identifier: A4:89:E4:09:43:60:B5:4C:2E:06:EC:85:D0:50:46:AB:83:9D:FC:B0 Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb Certificate serial: 019BE78E222878B1CFDA542BBE7F03FAD285 Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/pInkCUNgtUwuBuyF0FBGq4Od_LA.roa Signing time: Thu 22 Jan 2026 21:13:30 +0000 ROA not before: Thu 22 Jan 2026 21:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6698 IP address blocks: 91.230.121.0/24 maxlen: 24 91.235.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e7:8e:22:28:78:b1:cf:da:54:2b:be:7f:03:fa:d2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb Validity Not Before: Jan 22 21:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a489e4094360b54c2e06ec85d05046ab839dfcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:71:3b:a6:ef:be:30:90:a6:5e:fe:fe:ea: e6:aa:cc:9d:0b:f2:38:92:73:18:cd:83:6b:78:49: c7:9f:57:60:77:74:cc:dc:dc:17:5c:fb:b0:85:45: 53:ac:91:b6:92:ba:3d:e6:0e:c4:6c:a2:c5:10:04: 9b:7c:26:1b:30:d8:90:8f:c9:ad:13:40:08:c5:32: d8:13:e0:d9:90:df:2b:5b:ff:f4:4d:e0:c9:8a:c4: 5b:c3:2d:23:bc:79:c8:99:a0:a9:4a:ba:78:bb:66: 13:65:cb:bb:11:77:e9:5c:a7:8b:00:a8:4e:a2:4a: ac:86:85:92:ab:e2:e0:6a:3c:2a:61:b4:ec:9a:83: 09:79:e7:55:1f:df:be:e3:49:e6:ee:61:f7:11:5f: 9c:62:d2:ab:28:b3:93:76:3a:d3:28:f5:55:ce:33: a2:c2:58:ba:12:ca:69:ac:d1:77:d7:72:52:72:f9: d3:a0:08:dc:0e:07:5a:46:3e:8e:34:94:37:52:fd: ba:d2:b8:aa:98:a9:d8:5a:2d:7f:fd:c0:26:a0:b4: 0f:20:be:01:82:59:05:fa:2d:2f:b6:cb:89:29:b6: b5:2b:93:30:73:46:88:a4:81:22:5a:0f:f5:c2:9c: 43:5b:c6:79:31:56:94:d6:5b:a6:c4:d5:1b:db:79: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:89:E4:09:43:60:B5:4C:2E:06:EC:85:D0:50:46:AB:83:9D:FC:B0 X509v3 Authority Key Identifier: keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/pInkCUNgtUwuBuyF0FBGq4Od_LA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.121.0/24 91.235.142.0/23 Signature Algorithm: sha256WithRSAEncryption 79:e8:d6:84:9d:4a:78:70:2f:08:db:93:5f:0c:6e:d5:fa:ab: 41:23:8d:11:c4:4c:7a:0f:d6:e4:5e:ee:a2:d2:a6:e8:76:12: 67:88:59:cd:96:0f:2e:11:6c:e7:fa:3d:da:0d:46:d1:57:7e: d9:04:2f:e0:02:a1:5f:f6:58:6e:29:43:bd:ab:13:90:ed:b3: b1:73:9e:97:bf:bd:ed:90:85:73:d9:d6:8d:87:ba:ce:ae:e9: 0d:4c:f6:0e:8d:59:b4:2d:93:49:6c:6a:58:03:51:09:17:0a: 80:a6:cd:3e:92:93:96:a7:cf:97:00:0f:fb:f0:49:fa:3b:0a: 35:f5:fd:bf:90:73:84:0f:6b:9a:a2:9b:fa:76:a1:fc:6a:5f: 31:a5:b4:d8:db:63:96:9d:58:17:4c:ca:39:e1:54:96:3c:d5: ba:bf:65:ab:9e:76:32:1c:8a:eb:df:d0:a9:9f:d0:67:c3:4a: aa:bb:ca:fc:31:fa:12:0e:e2:6e:ee:80:d3:63:f9:86:7f:d9: a8:e8:3d:06:6a:e5:c3:ea:eb:60:3d:3b:fe:be:c7:44:07:bb: c6:e2:db:2a:06:f4:11:dd:24:4e:48:99:3c:47:f8:40:13:77: a1:6d:7e:d8:4e:e6:05:0d:13:cf:e6:00:2b:ce:0e:1c:d0:7e: 40:ec:67:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvnjiIoeLHP2lQrvn8D+tKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NmZhZTQzZjczZGEzNWZlMWEyZTQyOTY2MmFlMGI5MTc1 MWUzZmIwHhcNMjYwMTIyMjExMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDg5ZTQwOTQzNjBiNTRjMmUwNmVjODVkMDUwNDZhYjgzOWRmY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNZxO6bvvjCQpl7+/urmqsydC/I4 knMYzYNreEnHn1dgd3TM3NwXXPuwhUVTrJG2kro95g7EbKLFEASbfCYbMNiQj8mt E0AIxTLYE+DZkN8rW//0TeDJisRbwy0jvHnImaCpSrp4u2YTZcu7EXfpXKeLAKhO okqshoWSq+LgajwqYbTsmoMJeedVH9++40nm7mH3EV+cYtKrKLOTdjrTKPVVzjOi wli6EspprNF313JScvnToAjcDgdaRj6ONJQ3Uv260riqmKnYWi1//cAmoLQPIL4B glkF+i0vtsuJKba1K5Mwc0aIpIEiWg/1wpxDW8Z5MVaU1lumxNUb23nW3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKSJ5AlDYLVMLgbshdBQRquDnfywMB8GA1UdIwQY MBaAFHdvrkP3PaNf4aLkKWYq4LkXUeP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQt NGUwY2M1ODE2M2IwLzEvcElua0NVTmd0VXd1QnV5RjBGQkdxNE9kX0xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQtNGUwY2M1ODE2M2Iw LzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+Z5AwQB W+uOMA0GCSqGSIb3DQEBCwUAA4IBAQB56NaEnUp4cC8I25NfDG7V+qtBI40RxEx6 D9bkXu6i0qbodhJniFnNlg8uEWzn+j3aDUbRV37ZBC/gAqFf9lhuKUO9qxOQ7bOx c56Xv73tkIVz2daNh7rOrukNTPYOjVm0LZNJbGpYA1EJFwqAps0+kpOWp8+XAA/7 8En6Owo19f2/kHOED2uaopv6dqH8al8xpbTY22OWnVgXTMo54VSWPNW6v2WrnnYy HIrr39Cpn9Bnw0qqu8r8MfoSDuJu7oDTY/mGf9mo6D0GauXD6utgPTv+vsdEB7vG 4tsqBvQR3SROSJk8R/hAE3ehbX7YTuYFDRPP5gArzg4c0H5A7Gfn -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:55 2026 by rpki-client