This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/RTU2OyQ9pB3VVw78xcWFm4w-wS0.roa File: RTU2OyQ9pB3VVw78xcWFm4w-wS0.roa (raw, json) Hash identifier: oZzyvKvR9r/Ihr+p+Nj3IAiIjLpAhI404TTQt+EMmaU= Subject key identifier: 45:35:36:3B:24:3D:A4:1D:D5:57:0E:FC:C5:C5:85:9B:8C:3E:C1:2D Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b Certificate serial: 019B7AC7C15285231BA65F8C02B5DACF3CFF Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/RTU2OyQ9pB3VVw78xcWFm4w-wS0.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210402 IP address blocks: 91.106.36.0/22 maxlen: 22 91.106.36.0/23 maxlen: 23 91.106.36.0/24 maxlen: 24 91.106.37.0/24 maxlen: 24 91.106.38.0/23 maxlen: 23 91.106.38.0/24 maxlen: 24 91.106.39.0/24 maxlen: 24 91.106.44.0/22 maxlen: 22 91.106.44.0/23 maxlen: 23 91.106.44.0/24 maxlen: 24 91.106.45.0/24 maxlen: 24 91.106.46.0/23 maxlen: 23 91.106.46.0/24 maxlen: 24 91.106.47.0/24 maxlen: 24 91.106.48.0/22 maxlen: 22 91.106.48.0/23 maxlen: 23 91.106.48.0/24 maxlen: 24 91.106.49.0/24 maxlen: 24 91.106.50.0/23 maxlen: 23 91.106.50.0/24 maxlen: 24 91.106.51.0/24 maxlen: 24 91.106.52.0/22 maxlen: 22 91.106.52.0/23 maxlen: 23 91.106.52.0/24 maxlen: 24 91.106.53.0/24 maxlen: 24 91.106.54.0/23 maxlen: 23 91.106.54.0/24 maxlen: 24 91.106.55.0/24 maxlen: 24 91.106.56.0/22 maxlen: 22 91.106.56.0/23 maxlen: 23 91.106.56.0/24 maxlen: 24 91.106.57.0/24 maxlen: 24 91.106.58.0/23 maxlen: 23 91.106.58.0/24 maxlen: 24 91.106.59.0/24 maxlen: 24 91.106.60.0/22 maxlen: 22 91.106.60.0/23 maxlen: 23 91.106.60.0/24 maxlen: 24 91.106.61.0/24 maxlen: 24 91.106.62.0/23 maxlen: 23 91.106.62.0/24 maxlen: 24 91.106.63.0/24 maxlen: 24 109.61.4.0/22 maxlen: 22 109.61.4.0/23 maxlen: 23 109.61.4.0/24 maxlen: 24 109.61.5.0/24 maxlen: 24 109.61.6.0/23 maxlen: 23 109.61.6.0/24 maxlen: 24 109.61.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c1:52:85:23:1b:a6:5f:8c:02:b5:da:cf:3c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4535363b243da41dd5570efcc5c5859b8c3ec12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:86:54:9d:ff:5f:a6:6c:dc:9d:83:64:66:29: 15:1c:09:97:23:1e:13:a0:51:6a:07:8f:69:29:ad: 0a:b4:c0:e2:b3:38:fe:1b:bf:20:ea:cc:73:57:52: c9:32:b5:7f:d2:64:77:7d:ca:28:4b:04:d7:18:b6: cd:7f:a8:c6:72:8f:76:99:81:4f:2a:a2:f2:3d:b8: 19:f0:a7:7c:e0:8a:5d:52:26:12:40:54:8b:bc:39: cb:71:8b:6a:f7:7b:24:e0:66:8a:2a:71:33:68:bb: 5c:e9:ee:de:0f:1a:24:df:5a:af:08:be:27:fe:af: bc:3f:dd:8e:21:ff:f9:04:74:81:b4:01:13:9a:6e: d2:5b:18:47:68:5a:d3:f1:c3:c2:c7:d5:66:6e:71: f8:c4:f9:90:aa:ff:5b:0f:b9:22:07:51:55:80:57: 76:5d:c2:9e:da:c6:92:a7:45:bc:ac:01:d6:64:9f: 4b:e9:d6:db:36:b9:ee:f0:fd:cf:17:17:e2:9c:43: d8:f7:28:98:2b:3d:86:a8:20:f6:bf:60:d0:ca:68: 39:2c:1a:7a:97:8b:7f:6c:89:6a:1b:c0:4d:25:b7: bf:52:79:71:89:e2:b0:b2:21:46:20:d7:25:a8:a3: 4d:76:49:8c:06:d8:12:3b:3e:4f:d9:e6:f2:53:36: ae:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:35:36:3B:24:3D:A4:1D:D5:57:0E:FC:C5:C5:85:9B:8C:3E:C1:2D X509v3 Authority Key Identifier: keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/RTU2OyQ9pB3VVw78xcWFm4w-wS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.36.0/22 91.106.44.0-91.106.63.255 109.61.4.0/22 Signature Algorithm: sha256WithRSAEncryption d3:78:e9:fe:b0:3a:cb:cd:26:ea:c6:3d:3c:14:ea:3c:99:23: ec:ad:27:07:f0:49:8c:63:73:1e:ae:2a:42:bf:5f:be:f0:7d: bd:13:3a:a9:5c:1a:a3:15:64:28:21:68:1d:86:b8:82:3e:5c: 7e:8c:a6:7b:3a:52:b2:e4:c7:8b:a2:d5:d1:4f:ca:b9:e3:48: 59:3e:21:53:4a:19:8f:50:c0:3e:f5:42:0d:2a:fa:06:42:1b: 0f:7d:01:f3:84:99:55:76:57:48:99:d4:0f:b6:7f:a4:7b:18: 0a:f0:3e:d1:6f:16:a0:76:e9:fa:8a:7a:b6:48:04:1d:1c:40: e3:1d:0d:ce:8a:a6:3e:a6:26:0f:b3:ae:df:98:f8:07:bf:45: 23:9a:9f:83:f4:2c:7a:cb:61:e2:af:1a:c3:ee:d2:f6:55:1c: 97:40:1c:fc:62:76:87:82:8c:90:b5:1c:1c:f3:c2:a1:65:b7: 62:41:22:2f:1b:72:4e:02:9c:b6:48:5c:97:2c:da:cc:c1:6d: 4f:07:d7:79:e7:5f:53:00:6d:2b:bc:6b:1c:c3:ee:67:9e:f4: db:21:36:3f:87:a5:95:d7:24:f5:e8:e3:a0:68:4b:26:2a:a9: 28:50:04:5f:70:ad:d0:37:29:d2:9a:65:0e:b7:7c:1f:91:88: f1:8e:ae:91 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6x8FShSMbpl+MArXazzz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOTJkOGQ1NTExYjE5ZWNlNDU2OTYwZjIzYmZhODg2ZWUx ZDU3MGIwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTM1MzYzYjI0M2RhNDFkZDU1NzBlZmNjNWM1ODU5YjhjM2VjMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oZUnf9fpmzcnYNkZikVHAmXIx4T oFFqB49pKa0KtMDiszj+G78g6sxzV1LJMrV/0mR3fcooSwTXGLbNf6jGco92mYFP KqLyPbgZ8Kd84IpdUiYSQFSLvDnLcYtq93sk4GaKKnEzaLtc6e7eDxok31qvCL4n /q+8P92OIf/5BHSBtAETmm7SWxhHaFrT8cPCx9VmbnH4xPmQqv9bD7kiB1FVgFd2 XcKe2saSp0W8rAHWZJ9L6dbbNrnu8P3PFxfinEPY9yiYKz2GqCD2v2DQymg5LBp6 l4t/bIlqG8BNJbe/UnlxieKwsiFGINclqKNNdkmMBtgSOz5P2ebyUzauiwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEU1NjskPaQd1VcO/MXFhZuMPsEtMB8GA1UdIwQY MBaAFMCS2NVRGxns5FaWDyO/qIbuHVcLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEt MjY3YTE2YjQ2MjlmLzEvUlRVMk95UTlwQjNWVnc3OHhjV0ZtNHctd1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEtMjY3YTE2YjQ2Mjlm LzEvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCW2okMAwD BAJbaiwDBAZbagADBAJtPQQwDQYJKoZIhvcNAQELBQADggEBANN46f6wOsvNJurG PTwU6jyZI+ytJwfwSYxjcx6uKkK/X77wfb0TOqlcGqMVZCghaB2GuII+XH6Mpns6 UrLkx4ui1dFPyrnjSFk+IVNKGY9QwD71Qg0q+gZCGw99AfOEmVV2V0iZ1A+2f6R7 GArwPtFvFqB26fqKerZIBB0cQOMdDc6Kpj6mJg+zrt+Y+Ae/RSOan4P0LHrLYeKv GsPu0vZVHJdAHPxidoeCjJC1HBzzwqFlt2JBIi8bck4CnLZIXJcs2szBbU8H13nn X1MAbSu8axzD7mee9NshNj+HpZXXJPXo46BoSyYqqShQBF9wrdA3KdKaZQ63fB+R iPGOrpE= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:38 2026 by rpki-client