This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_3HkKCfyg2p0JgvR26Gejd3Jyr0.roa File: _3HkKCfyg2p0JgvR26Gejd3Jyr0.roa (raw, json) Hash identifier: IvyxG/8DsPEwSYh6UOg3Oba63B6pRVilCWEvL9ZX0K4= Subject key identifier: FF:71:E4:28:27:F2:83:6A:74:26:0B:D1:DB:A1:9E:8D:DD:C9:CA:BD Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1B01E185A01AD0619690EF28D94F Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_3HkKCfyg2p0JgvR26Gejd3Jyr0.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33973 IP address blocks: 91.120.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1b:01:e1:85:a0:1a:d0:61:96:90:ef:28:d9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff71e42827f2836a74260bd1dba19e8dddc9cabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:9b:0f:94:33:87:4b:e7:a7:fd:c3:f5:d7: 5d:da:8c:26:e3:ef:ae:34:4e:82:69:60:67:7e:ab: 0c:bf:01:37:8f:23:5b:c2:d7:be:6f:74:be:e9:a8: 8d:c8:fd:b2:52:47:6e:81:a1:8f:15:a5:a0:09:f1: e6:16:55:c9:82:73:9f:aa:a6:fe:b6:cc:15:c8:f2: 1b:7b:48:5e:51:e4:45:0c:36:b7:a9:57:d1:b4:bd: 20:c2:c1:c5:f9:2d:24:82:8f:fc:21:04:8c:46:fc: dd:8e:67:fe:d6:2d:cd:ba:22:63:21:01:96:da:45: 2b:40:b3:2c:99:82:7c:cc:ab:29:88:f4:90:ab:5d: f1:6b:d2:07:79:6f:ec:f3:f9:d4:24:54:0f:41:53: 83:b8:1f:84:28:60:f1:c8:52:f2:87:7f:75:69:44: c2:77:16:2f:73:3c:08:27:1e:1d:ed:db:bf:1b:e1: 8c:9a:78:64:02:13:e2:b0:10:90:49:d5:38:51:18: 02:84:fb:7e:dd:6b:ad:67:55:91:2b:ee:1d:99:18: fc:7e:11:eb:08:14:b2:6f:67:a8:7d:3c:41:d2:c4: a7:57:ee:5b:fa:f0:99:af:0d:15:9f:4d:a8:fc:85: ab:3a:44:b4:e2:9f:64:1a:9f:e4:bc:49:c4:c1:44: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:71:E4:28:27:F2:83:6A:74:26:0B:D1:DB:A1:9E:8D:DD:C9:CA:BD X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_3HkKCfyg2p0JgvR26Gejd3Jyr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.120.43.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:71:9d:65:8b:21:13:0e:07:cb:c2:14:2a:e7:51:19:bc:98: 16:a0:47:19:94:8e:c8:4e:db:73:60:99:b1:bc:a9:5a:0a:ec: 9c:ff:4e:cd:ec:34:96:4b:d3:1a:e9:99:09:0c:9c:f0:22:24: bd:81:4b:50:94:c0:7f:2b:ed:cd:dc:25:99:2a:6e:bc:8b:c3: 16:e8:81:23:f9:81:20:47:7b:3f:19:35:95:e3:e2:1c:54:f8: 57:d7:6e:67:2a:7d:86:53:b6:db:9d:88:d7:70:dd:0f:b2:42: da:b5:69:e7:cb:6b:ca:b1:af:c7:9f:4f:26:0b:1d:af:a3:ec: f3:f5:e6:56:0f:02:46:f5:dc:7e:f6:03:3c:9b:46:d2:f4:03: cc:9f:ac:f5:0d:7e:9a:17:2b:7b:6d:7c:89:f7:94:b3:ca:57: 05:d8:75:1d:9b:3e:3f:19:0a:a7:d3:c1:0c:be:4a:01:eb:58: 9f:47:9a:7b:32:e4:ef:63:49:6f:f0:11:a8:6e:f7:74:be:d0: 72:9d:bd:ef:ed:d3:b3:83:7a:c8:f2:59:be:d0:8b:4b:e6:24: c9:89:02:42:b8:a7:ce:f7:84:4d:36:10:06:95:ee:d6:61:c6: a4:dd:9b:4f:6f:cd:71:34:fb:5b:d5:37:a0:7a:23:2b:24:a8: be:1b:6e:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRsB4YWgGtBhlpDvKNlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjcxZTQyODI3ZjI4MzZhNzQyNjBiZDFkYmExOWU4ZGRkYzljYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveWbD5Qzh0vnp/3D9ddd2owm4++u NE6CaWBnfqsMvwE3jyNbwte+b3S+6aiNyP2yUkdugaGPFaWgCfHmFlXJgnOfqqb+ tswVyPIbe0heUeRFDDa3qVfRtL0gwsHF+S0kgo/8IQSMRvzdjmf+1i3NuiJjIQGW 2kUrQLMsmYJ8zKspiPSQq13xa9IHeW/s8/nUJFQPQVODuB+EKGDxyFLyh391aUTC dxYvczwIJx4d7du/G+GMmnhkAhPisBCQSdU4URgChPt+3WutZ1WRK+4dmRj8fhHr CBSyb2eofTxB0sSnV+5b+vCZrw0Vn02o/IWrOkS04p9kGp/kvEnEwUT37wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9x5Cgn8oNqdCYL0duhno3dycq9MB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvXzNIa0tDZnlnMnAwSmd2UjI2R2VqZDNKeXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3grMA0G CSqGSIb3DQEBCwUAA4IBAQB+cZ1liyETDgfLwhQq51EZvJgWoEcZlI7ITttzYJmx vKlaCuyc/07N7DSWS9Ma6ZkJDJzwIiS9gUtQlMB/K+3N3CWZKm68i8MW6IEj+YEg R3s/GTWV4+IcVPhX125nKn2GU7bbnYjXcN0PskLatWnny2vKsa/Hn08mCx2vo+zz 9eZWDwJG9dx+9gM8m0bS9APMn6z1DX6aFyt7bXyJ95SzylcF2HUdmz4/GQqn08EM vkoB61ifR5p7MuTvY0lv8BGobvd0vtBynb3v7dOzg3rI8lm+0ItL5iTJiQJCuKfO 94RNNhAGle7WYcak3ZtPb81xNPtb1TegeiMrJKi+G27C -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:45 2026 by rpki-client