This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/IajqYEYSYPwSNp58GvQ2XhMsIz0.roa File: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (raw, json) Hash identifier: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU= Subject key identifier: 21:A8:EA:60:46:12:60:FC:12:36:9E:7C:1A:F4:36:5E:13:2C:23:3D Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c Certificate serial: 019B7E373AFE1393CE02E00E1405F3B92AD7 Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/IajqYEYSYPwSNp58GvQ2XhMsIz0.roa Signing time: Fri 02 Jan 2026 10:18:27 +0000 ROA not before: Fri 02 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 91.240.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:3a:fe:13:93:ce:02:e0:0e:14:05:f3:b9:2a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c Validity Not Before: Jan 2 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21a8ea60461260fc12369e7c1af4365e132c233d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:95:bf:a1:bd:29:fc:54:55:10:84:80:ae: c6:e4:65:f4:6d:49:42:4a:7e:5f:ef:71:ee:7d:aa: dd:e8:16:2f:5a:c4:d1:cd:02:ea:2d:19:1a:b1:44: cf:d9:34:7e:c7:ce:c5:c2:ab:0d:02:d7:c1:49:4d: 61:39:dd:5a:3a:f0:67:3e:50:5b:6a:d3:3c:ff:3e: d9:b1:bd:d1:1e:c2:8a:c8:e4:71:67:b3:56:1d:31: b0:4b:d7:b0:a9:07:cd:2e:13:b5:6e:4f:7a:b4:00: a6:5e:48:9c:30:96:87:62:0d:44:3a:30:49:ea:1a: a9:2c:eb:2b:a6:bc:11:fb:c6:78:ce:d7:79:ea:08: a9:c8:bb:cf:03:ba:8f:f3:97:8d:b8:19:46:51:4d: ce:3b:59:f0:a7:be:b2:33:6d:f9:30:62:77:e8:9c: 40:de:62:d4:f5:ee:67:2b:96:f5:fd:75:0c:bd:fa: 5a:9b:bb:d7:25:fe:74:47:b1:f4:7f:81:11:27:3e: 15:70:3d:67:a4:cf:8b:ad:4b:3e:1e:9f:6d:df:c7: b6:99:f5:20:f0:7c:03:6f:ab:99:c2:e2:3a:36:0b: c7:66:48:4d:ed:ec:c5:65:de:e0:9e:64:ac:0e:97: e0:d4:08:0f:37:31:84:63:fe:f6:47:80:13:c2:c8: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:EA:60:46:12:60:FC:12:36:9E:7C:1A:F4:36:5E:13:2C:23:3D X509v3 Authority Key Identifier: keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/IajqYEYSYPwSNp58GvQ2XhMsIz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.109.0/24 Signature Algorithm: sha256WithRSAEncryption 56:a9:e7:dc:1e:1b:ae:ce:72:01:03:23:60:df:aa:80:4e:aa: 0a:bc:9a:69:e3:b7:80:5f:7b:1b:54:c1:0e:7b:77:93:a0:a7: 12:1a:39:ee:0c:69:dc:8e:a5:b5:b6:a0:bc:82:a6:24:61:03: 99:de:12:8f:8b:75:47:45:53:3c:21:36:a5:d9:ce:57:42:56: 14:af:4e:b2:26:37:f6:1a:85:00:37:4c:4f:72:53:14:fc:cc: 4e:19:2d:d5:8e:b6:e1:06:3f:6e:be:ab:40:09:f2:65:4e:d3: 50:30:ea:f1:e9:32:8a:fe:d6:ed:3e:01:e0:ac:8e:b1:b3:46: 96:33:71:51:b1:d3:37:a3:0f:d9:3b:78:a6:52:94:ce:e7:93: 82:8c:13:7c:91:dc:e4:8b:89:2d:b3:e8:83:aa:1b:d6:f8:55: e8:d4:bd:4d:64:d3:be:6b:7b:af:f9:31:14:79:c1:6b:fb:37: 96:94:59:64:2e:3c:57:e7:17:4e:44:62:59:15:43:d6:69:7c: cf:47:f1:05:b5:9f:d9:87:04:51:f2:fd:02:ca:cb:36:de:47: cf:5f:e6:c3:09:66:86:4d:82:3d:7a:76:66:1e:3b:b8:3a:3d: b7:b5:4e:3f:9e:8c:7f:d4:09:80:6c:c9:ed:75:94:e9:ab:db: 99:aa:be:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+Nzr+E5POAuAOFAXzuSrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWU4NmIyMmMyNGJjYTc3MTMwNzFkZTk1ZDY4MjJjMzM5 Y2ZkMWMwHhcNMjYwMTAyMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWE4ZWE2MDQ2MTI2MGZjMTIzNjllN2MxYWY0MzY1ZTEzMmMyMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqeVv6G9KfxUVRCEgK7G5GX0bUlC Sn5f73Hufard6BYvWsTRzQLqLRkasUTP2TR+x87FwqsNAtfBSU1hOd1aOvBnPlBb atM8/z7Zsb3RHsKKyORxZ7NWHTGwS9ewqQfNLhO1bk96tACmXkicMJaHYg1EOjBJ 6hqpLOsrprwR+8Z4ztd56gipyLvPA7qP85eNuBlGUU3OO1nwp76yM235MGJ36JxA 3mLU9e5nK5b1/XUMvfpam7vXJf50R7H0f4ERJz4VcD1npM+LrUs+Hp9t38e2mfUg 8HwDb6uZwuI6NgvHZkhN7ezFZd7gnmSsDpfg1AgPNzGEY/72R4ATwshjaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGo6mBGEmD8EjaefBr0Nl4TLCM9MB8GA1UdIwQY MBaAFE7uhrIsJLyncTBx3pXWgiwznP0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmIt Mzg2ZWVhOGQ4ZGQ2LzEvSWFqcVlFWVNZUHdTTnA1OEd2UTJYaE1zSXowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmItMzg2ZWVhOGQ4ZGQ2 LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/BtMA0G CSqGSIb3DQEBCwUAA4IBAQBWqefcHhuuznIBAyNg36qATqoKvJpp47eAX3sbVMEO e3eToKcSGjnuDGncjqW1tqC8gqYkYQOZ3hKPi3VHRVM8ITal2c5XQlYUr06yJjf2 GoUAN0xPclMU/MxOGS3VjrbhBj9uvqtACfJlTtNQMOrx6TKK/tbtPgHgrI6xs0aW M3FRsdM3ow/ZO3imUpTO55OCjBN8kdzki4kts+iDqhvW+FXo1L1NZNO+a3uv+TEU ecFr+zeWlFlkLjxX5xdORGJZFUPWaXzPR/EFtZ/ZhwRR8v0Cyss23kfPX+bDCWaG TYI9enZmHju4Oj23tU4/nox/1AmAbMntdZTpq9uZqr5l -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:04 2026 by rpki-client