This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/s8zryRYZWYIsQn_ONtQKxXurk28.roa File: s8zryRYZWYIsQn_ONtQKxXurk28.roa (raw, json) Hash identifier: N1huOpX/AGH+GVZvQgeYwmYcYRN5tn3PBeSEQanCoWM= Subject key identifier: B3:CC:EB:C9:16:19:59:82:2C:42:7F:CE:36:D4:0A:C5:7B:AB:93:6F Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AABE9D0647096618658B6CF21DC5D Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/s8zryRYZWYIsQn_ONtQKxXurk28.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133861 IP address blocks: 91.208.236.0/24 maxlen: 24 91.208.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ab:e9:d0:64:70:96:61:86:58:b6:cf:21:dc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3ccebc9161959822c427fce36d40ac57bab936f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:2c:b7:b5:2b:42:55:b6:28:8a:ca:1a:42: 65:b9:49:1a:4a:42:2e:cc:f8:a1:6e:68:52:1b:fb: d5:a4:5c:3e:57:a3:cb:fb:21:c7:dd:d3:f9:ac:82: 10:c5:9f:cf:39:79:9e:e0:08:f7:fd:3c:96:d7:32: bf:f6:24:98:82:e2:d4:9f:43:17:d6:34:ad:1e:14: f6:8a:bc:5c:00:97:27:62:d4:14:ca:4b:05:94:22: 50:73:14:da:1f:95:81:a1:cc:bd:0f:ad:98:99:e5: 6c:03:0a:76:fb:bc:90:3a:36:83:ec:ae:d7:d8:7a: c6:56:01:0a:94:1c:6d:c5:14:3a:e4:78:87:3a:aa: f0:67:69:c6:88:fb:17:d5:b6:9b:7d:04:1c:2f:6b: 60:ce:60:b8:65:23:5d:13:85:f6:b1:e4:87:d9:59: 9c:03:0a:27:32:9f:72:a5:62:b6:77:d4:ce:3c:3c: cd:25:97:d2:da:51:ee:10:a3:44:77:27:4f:b0:44: 59:96:8f:e2:72:c2:41:63:26:af:ff:57:7a:08:f2: 12:c9:71:54:12:f6:ba:9a:f3:80:ba:9f:0c:ed:e6: d6:83:1d:6c:d4:56:28:d8:85:67:c3:29:39:57:64: ec:43:9f:60:de:12:3d:af:7c:c7:cc:00:d2:65:07: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CC:EB:C9:16:19:59:82:2C:42:7F:CE:36:D4:0A:C5:7B:AB:93:6F X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/s8zryRYZWYIsQn_ONtQKxXurk28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.236.0/24 91.208.240.0/24 Signature Algorithm: sha256WithRSAEncryption aa:2d:9b:0f:f1:8c:d2:e2:72:c6:58:5d:36:1e:e8:e5:a1:da: cf:85:12:59:33:74:5a:ef:46:3b:99:37:5e:cd:ef:83:e3:4a: 07:3d:9f:cf:6a:13:30:2c:f7:a1:23:e5:5c:dc:65:00:c4:ea: fd:20:c8:3b:07:72:07:eb:4d:0e:8f:14:b9:c1:2f:26:7b:ed: db:27:25:c1:44:54:e9:5c:a0:ed:51:fe:b6:13:46:07:02:8b: d2:30:61:26:ef:7a:f0:8a:91:07:70:5c:4e:41:6a:74:3c:a6: 1e:17:1b:9e:db:91:c0:b3:38:26:4e:9f:78:b6:b0:f9:2b:46: 76:a3:c2:94:45:12:b7:3b:e2:87:d8:08:3f:a4:fc:5b:38:5b: a9:3c:35:72:e6:b5:4b:9a:bc:57:10:28:ab:6e:bc:80:fc:d4: 3b:1f:32:f9:57:a2:3c:71:b0:ec:88:7c:f5:55:d2:5f:c8:ea: 73:ca:33:0a:78:e5:db:7e:1b:9a:bf:40:65:cb:a3:24:c4:9a: e8:2b:2d:13:5d:7f:b8:6d:c8:49:53:31:61:1f:be:27:63:74: 2a:48:9f:b1:c0:8c:bd:93:19:fb:00:a3:19:40:df:94:ac:62: 59:f4:4e:35:b7:36:f3:ce:04:39:89:f4:67:9f:bd:ba:e9:c5: 4a:3a:80:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wqvp0GRwlmGGWLbPIdxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2NjZWJjOTE2MTk1OTgyMmM0MjdmY2UzNmQ0MGFjNTdiYWI5MzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Ist7UrQlW2KIrKGkJluUkaSkIu zPihbmhSG/vVpFw+V6PL+yHH3dP5rIIQxZ/POXme4Aj3/TyW1zK/9iSYguLUn0MX 1jStHhT2irxcAJcnYtQUyksFlCJQcxTaH5WBocy9D62YmeVsAwp2+7yQOjaD7K7X 2HrGVgEKlBxtxRQ65HiHOqrwZ2nGiPsX1babfQQcL2tgzmC4ZSNdE4X2seSH2Vmc AwonMp9ypWK2d9TOPDzNJZfS2lHuEKNEdydPsERZlo/icsJBYyav/1d6CPISyXFU Eva6mvOAup8M7ebWgx1s1FYo2IVnwyk5V2TsQ59g3hI9r3zHzADSZQdpcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLPM68kWGVmCLEJ/zjbUCsV7q5NvMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvczh6cnlSWVpXWUlzUW5fT050UUt4WHVyazI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9DsAwQA W9DwMA0GCSqGSIb3DQEBCwUAA4IBAQCqLZsP8YzS4nLGWF02HujlodrPhRJZM3Ra 70Y7mTdeze+D40oHPZ/PahMwLPehI+Vc3GUAxOr9IMg7B3IH600OjxS5wS8me+3b JyXBRFTpXKDtUf62E0YHAovSMGEm73rwipEHcFxOQWp0PKYeFxue25HAszgmTp94 trD5K0Z2o8KURRK3O+KH2Ag/pPxbOFupPDVy5rVLmrxXECirbryA/NQ7HzL5V6I8 cbDsiHz1VdJfyOpzyjMKeOXbfhuav0Bly6MkxJroKy0TXX+4bchJUzFhH74nY3Qq SJ+xwIy9kxn7AKMZQN+UrGJZ9E41tzbzzgQ5ifRnn7266cVKOoC4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:44 2026 by rpki-client