This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa File: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (raw, json) Hash identifier: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg= Subject key identifier: 73:4A:A3:9F:13:24:1F:7A:3B:05:90:3D:9A:30:C1:F0:F8:DC:2B:D4 Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e Certificate serial: 019B7EA758EA6706F52E2F265EF1BF86CE06 Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43656 IP address blocks: 91.198.83.0/24 maxlen: 24 194.28.4.0/23 maxlen: 23 194.28.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:58:ea:67:06:f5:2e:2f:26:5e:f1:bf:86:ce:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=734aa39f13241f7a3b05903d9a30c1f0f8dc2bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:14:c3:0d:9a:1e:06:81:03:77:6b:c8:af: 31:08:72:47:3c:af:4a:3a:3b:54:35:88:e6:ea:86: 09:ec:1a:8f:e2:6e:36:f4:2d:ca:a8:1f:60:46:6a: 4d:33:4c:ef:e1:a6:cb:1c:09:08:10:de:c5:d5:ae: a0:43:06:36:bb:3f:ff:24:e9:51:5c:d6:fc:23:bf: 13:2e:5e:e9:1b:65:61:60:b9:75:8b:a4:ab:0c:ea: 3b:d6:c4:87:89:67:dd:3e:de:8b:23:35:62:fd:75: e9:f7:0d:6a:87:88:de:e0:1e:20:26:94:37:09:57: 09:7c:0f:5a:be:4e:36:63:4a:15:bd:9e:ee:87:fb: d4:6f:ba:a1:84:81:9d:38:f2:0d:64:32:9f:37:42: 4d:d4:49:05:f1:cc:45:bd:53:f7:30:90:5b:90:06: cc:5e:06:38:5c:a1:63:66:34:0a:c9:c5:57:7c:ca: 3f:63:23:84:96:a3:b0:1a:07:3d:10:ca:a1:76:6b: da:5c:a7:8e:2d:f3:f8:78:49:31:aa:ba:9f:79:29: 62:0f:5d:d2:14:88:10:76:db:be:7d:d2:82:b9:60: 63:8d:a3:5b:e4:14:d6:79:6c:54:2d:0d:8c:2a:14: 13:4f:cf:b0:d8:aa:c0:16:7c:1f:bd:1d:91:ee:9c: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4A:A3:9F:13:24:1F:7A:3B:05:90:3D:9A:30:C1:F0:F8:DC:2B:D4 X509v3 Authority Key Identifier: keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.83.0/24 194.28.4.0/22 Signature Algorithm: sha256WithRSAEncryption c4:bf:72:be:0b:0b:b3:03:95:32:d4:24:90:85:42:c9:77:35: ea:c4:71:0c:dc:03:a0:88:f7:c4:d9:d4:32:4f:1b:eb:27:b8: b5:cd:9f:aa:91:74:ad:65:76:b3:41:10:78:de:0e:f1:b5:55: 12:d5:cf:0c:38:ff:57:4d:b5:ea:58:9c:d1:f4:41:72:ae:40: 89:a9:3c:d6:f2:94:c9:dd:e4:9e:89:70:e3:b5:f2:ff:7b:3b: 6f:b2:ea:a1:02:1f:99:1c:89:5f:62:b7:91:c2:ec:ea:7f:e0: 41:fa:11:c2:da:33:cc:3f:8f:ae:68:3e:69:ba:56:00:7d:4d: ab:75:bd:d5:2f:86:6b:5e:3e:82:e3:d1:4d:07:a1:d2:0b:29: 31:c8:2f:e6:94:a7:e9:d1:b3:d9:29:06:ac:2d:82:a9:66:61: 7d:aa:c2:84:29:9e:8d:e5:7e:c5:84:0f:96:7c:35:4b:e3:cc: 60:c0:9c:96:ef:71:d0:c5:55:bc:ab:19:03:85:63:bd:c8:c7: 6e:e2:7e:d9:88:42:74:74:70:a5:40:ee:43:f6:18:03:ec:55: 52:4b:7d:16:66:7f:a8:0b:c3:f8:d0:9d:05:fc:c2:d4:95:cc: aa:13:f3:d5:4e:14:9a:87:eb:a5:0c:92:f4:ac:ee:1f:a7:9e: bd:9a:f8:dc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+p1jqZwb1Li8mXvG/hs4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MWEyMDUyMDUyNjc1ZDQ1MzliODdmNWZiOWM2OTRkYmY0 MzI2MWUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRhYTM5ZjEzMjQxZjdhM2IwNTkwM2Q5YTMwYzFmMGY4ZGMyYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwUUww2aHgaBA3dryK8xCHJHPK9K OjtUNYjm6oYJ7BqP4m429C3KqB9gRmpNM0zv4abLHAkIEN7F1a6gQwY2uz//JOlR XNb8I78TLl7pG2VhYLl1i6SrDOo71sSHiWfdPt6LIzVi/XXp9w1qh4je4B4gJpQ3 CVcJfA9avk42Y0oVvZ7uh/vUb7qhhIGdOPINZDKfN0JN1EkF8cxFvVP3MJBbkAbM XgY4XKFjZjQKycVXfMo/YyOElqOwGgc9EMqhdmvaXKeOLfP4eEkxqrqfeSliD13S FIgQdtu+fdKCuWBjjaNb5BTWeWxULQ2MKhQTT8+w2KrAFnwfvR2R7pw3XQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHNKo58TJB96OwWQPZowwfD43CvUMB8GA1UdIwQY MBaAFPgaIFIFJnXUU5uH9fucaU2/QyYeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Cb2dVZ1VtZGRSVG00ZjEtNXhwVGI5REpoNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMGRmMmVmLWZmYzktNDQ1Ny05ZjRh LTc3MTJmYmYxNjFjMS8xL2MwcWpueE1rSDNvN0JaQTltakRCOFBqY0s5US5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDkvMGRmMmVmLWZmYzktNDQ1Ny05ZjRhLTc3MTJmYmYxNjFj MS8xLzEtQm9nVWdVbWRkUlRtNGYxLTV4cFRiOURKaDQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABbxlMD BALCHAQwDQYJKoZIhvcNAQELBQADggEBAMS/cr4LC7MDlTLUJJCFQsl3NerEcQzc A6CI98TZ1DJPG+snuLXNn6qRdK1ldrNBEHjeDvG1VRLVzww4/1dNtepYnNH0QXKu QImpPNbylMnd5J6JcOO18v97O2+y6qECH5kciV9it5HC7Op/4EH6EcLaM8w/j65o Pmm6VgB9Tat1vdUvhmtePoLj0U0HodILKTHIL+aUp+nRs9kpBqwtgqlmYX2qwoQp no3lfsWED5Z8NUvjzGDAnJbvcdDFVbyrGQOFY73Ix27iftmIQnR0cKVA7kP2GAPs VVJLfRZmf6gLw/jQnQX8wtSVzKoT89VOFJqH66UMkvSs7h+nnr2a+Nw= -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:00 2026 by rpki-client