This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/n11sLe7Mij0tIk_cwXwqcrYI4nE.roa File: n11sLe7Mij0tIk_cwXwqcrYI4nE.roa (raw, json) Hash identifier: mIg+KoW9zx0USKuS5S4U3XDpJKvtCU9K4ikguJjTQms= Subject key identifier: 9F:5D:6C:2D:EE:CC:8A:3D:2D:22:4F:DC:C1:7C:2A:72:B6:08:E2:71 Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76 Certificate serial: 019B78A2FF3207E180AAAC5878021FB75A55 Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/n11sLe7Mij0tIk_cwXwqcrYI4nE.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208098 IP address blocks: 91.194.24.0/23 maxlen: 23 91.194.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ff:32:07:e1:80:aa:ac:58:78:02:1f:b7:5a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f5d6c2deecc8a3d2d224fdcc17c2a72b608e271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:19:45:f2:09:01:02:91:2d:15:1e:c9:b0: 57:96:8d:ec:f1:ed:12:bf:d8:ae:0f:32:a6:9b:e4: 21:e0:ae:27:d3:bb:ac:d2:24:e6:49:fd:e4:b0:e3: 51:1b:80:56:fc:8b:5a:f7:88:54:22:7c:45:5c:3e: 67:4f:2b:d9:66:d8:23:26:01:b1:28:b9:1c:3c:f6: b4:82:8a:a8:19:62:1f:49:f5:5a:07:08:70:e4:96: fa:dd:f0:57:72:b2:49:62:9f:47:ec:aa:39:56:97: 30:54:65:17:9a:91:e5:a7:26:b4:4d:f3:9f:a9:21: b4:0b:37:49:bd:c8:44:b4:ca:2e:4b:90:6f:02:a4: 98:6a:b5:82:2c:9e:96:bd:36:f9:8f:45:39:71:65: de:2f:c9:4a:c2:bb:48:f4:ef:bf:72:6f:d0:3d:b9: d1:7d:f5:ad:17:75:0d:13:26:8d:da:eb:da:d7:bb: fe:67:fc:00:17:cf:6e:39:b2:f4:3a:4a:e3:47:55: 80:6e:f8:1d:d1:58:e7:7b:71:1f:1d:16:2d:bc:a7: d5:08:35:19:45:a6:c5:7f:b1:96:19:69:be:a4:5e: 7e:52:2b:a5:16:0c:4c:82:59:63:c8:28:41:05:8e: f7:7d:19:09:e2:09:3b:d1:0f:68:2c:ee:ce:70:76: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:6C:2D:EE:CC:8A:3D:2D:22:4F:DC:C1:7C:2A:72:B6:08:E2:71 X509v3 Authority Key Identifier: keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/n11sLe7Mij0tIk_cwXwqcrYI4nE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.24.0/23 Signature Algorithm: sha256WithRSAEncryption 71:14:32:2e:a4:b3:91:10:e8:28:a3:c6:b8:f1:50:00:9a:17: 2c:31:1c:a1:b9:b7:7d:4d:c9:73:89:64:88:2d:31:f5:22:d7: ef:99:16:79:ad:a0:88:f5:16:79:47:02:7c:f0:d0:68:76:ea: 8c:86:16:44:14:a9:5e:ec:ee:91:cd:05:b2:4b:7c:04:a1:02: 06:6c:28:25:b6:ac:61:62:81:58:79:ae:ff:25:c5:59:91:da: 9e:5d:a3:2e:6b:cf:3b:2a:62:56:d6:c5:9c:40:25:73:1d:f0: 33:83:66:eb:63:cd:5a:e2:4c:b6:c4:d1:25:ab:1f:4e:92:7a: 60:47:33:31:d3:6c:cd:c7:c3:ab:d8:31:9f:85:ef:8c:03:09: ad:16:95:82:6f:f6:6a:90:e2:9d:3d:69:77:f8:80:39:c9:7f: 93:59:fd:93:5f:08:2d:a7:72:31:90:30:d4:b8:80:9c:22:49: da:80:b6:a4:a2:d3:f0:1f:98:57:d3:71:d4:4a:3b:42:3a:17: bf:fe:e5:97:b1:db:df:f2:dc:09:80:0f:b4:70:5d:f0:fd:fb: ef:42:18:72:16:5f:fc:5f:75:61:be:55:bf:57:9c:c6:d7:83: d6:00:36:a1:57:39:19:8a:ce:64:05:b1:e4:0d:89:d8:bb:33: 85:99:1d:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ov8yB+GAqqxYeAIft1pVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1 MjJjNzYwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjVkNmMyZGVlY2M4YTNkMmQyMjRmZGNjMTdjMmE3MmI2MDhlMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz14ZRfIJAQKRLRUeybBXlo3s8e0S v9iuDzKmm+Qh4K4n07us0iTmSf3ksONRG4BW/Ita94hUInxFXD5nTyvZZtgjJgGx KLkcPPa0goqoGWIfSfVaBwhw5Jb63fBXcrJJYp9H7Ko5VpcwVGUXmpHlpya0TfOf qSG0CzdJvchEtMouS5BvAqSYarWCLJ6WvTb5j0U5cWXeL8lKwrtI9O+/cm/QPbnR ffWtF3UNEyaN2uva17v+Z/wAF89uObL0OkrjR1WAbvgd0Vjne3EfHRYtvKfVCDUZ RabFf7GWGWm+pF5+UiulFgxMglljyChBBY73fRkJ4gk70Q9oLO7OcHYLxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9dbC3uzIo9LSJP3MF8KnK2COJxMB8GA1UdIwQY MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It MmY1MWVjZDFhYTBlLzEvbjExc0xlN01pajB0SWtfY3dYd3FjcllJNG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8IYMA0G CSqGSIb3DQEBCwUAA4IBAQBxFDIupLOREOgoo8a48VAAmhcsMRyhubd9TclziWSI LTH1ItfvmRZ5raCI9RZ5RwJ88NBoduqMhhZEFKle7O6RzQWyS3wEoQIGbCgltqxh YoFYea7/JcVZkdqeXaMua887KmJW1sWcQCVzHfAzg2brY81a4ky2xNElqx9Oknpg RzMx02zNx8Or2DGfhe+MAwmtFpWCb/ZqkOKdPWl3+IA5yX+TWf2TXwgtp3IxkDDU uICcIknagLakotPwH5hX03HUSjtCOhe//uWXsdvf8twJgA+0cF3w/fvvQhhyFl/8 X3VhvlW/V5zG14PWADahVzkZis5kBbHkDYnYuzOFmR3T -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:35 2026 by rpki-client