This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/P_IQf465IziNUba5nDDuA9mYb2E.roa File: P_IQf465IziNUba5nDDuA9mYb2E.roa (raw, json) Hash identifier: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg= Subject key identifier: 3F:F2:10:7F:8E:B9:23:38:8D:51:B6:B9:9C:30:EE:03:D9:98:6F:61 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019B76EAC8CE85D38ECF55F9B6459D9B3582 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/P_IQf465IziNUba5nDDuA9mYb2E.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14789 IP address blocks: 141.101.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c8:ce:85:d3:8e:cf:55:f9:b6:45:9d:9b:35:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ff2107f8eb923388d51b6b99c30ee03d9986f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:90:89:94:03:01:c4:29:68:a1:c2:19:4f: f5:be:ed:25:85:26:64:ad:69:6f:3e:88:49:8a:6b: d6:25:42:b8:ea:87:f4:ec:ee:4e:d9:ac:7d:64:2c: 9b:79:dc:74:14:4d:3c:66:9e:d1:8b:ad:fc:e6:5c: d3:e1:d9:ab:e9:1c:1a:92:db:63:aa:1b:31:73:95: b0:75:b7:32:ac:47:eb:07:00:0d:f0:ae:70:8a:e3: 55:64:8c:42:02:05:6b:89:e3:0d:8a:98:7d:fe:07: 32:fe:c2:7a:92:a7:04:cc:58:c6:6b:9a:e9:58:7a: 8f:54:45:3e:59:a9:d2:11:d7:98:bb:d3:a0:81:cb: 91:ce:b8:e3:09:35:a9:86:f3:64:c6:e0:4b:63:bf: f4:72:08:72:02:47:14:b2:1f:9a:da:d1:7b:47:e6: 71:a3:2e:ae:b7:eb:c8:36:1a:9b:b4:9a:47:18:77: 95:39:0b:1a:ff:ea:55:31:5a:ef:8b:bf:b6:1a:30: 43:ef:c3:4a:1c:2e:e2:69:e0:d0:98:63:f3:f9:09: 63:fd:75:54:5b:00:a7:f4:87:f7:a3:18:2c:65:10: 97:1a:ce:96:d8:1d:fc:26:fd:bd:00:1e:2c:70:95: 0b:4e:2b:8f:ce:8f:a8:c6:28:86:14:22:57:0e:ee: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F2:10:7F:8E:B9:23:38:8D:51:B6:B9:9C:30:EE:03:D9:98:6F:61 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/P_IQf465IziNUba5nDDuA9mYb2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.101.108.0/24 Signature Algorithm: sha256WithRSAEncryption 06:45:16:32:2c:ab:6f:0f:61:f2:3f:da:b5:b2:e3:d6:c0:8b: 63:4e:89:2f:66:c8:ab:2c:4f:85:c0:47:ad:3c:4f:e5:67:6f: 9b:b2:8a:9e:83:e7:db:c0:13:50:dd:63:ed:07:34:c9:16:68: 42:d8:d6:91:04:e9:b7:e1:00:a5:5f:db:fb:71:a7:68:e3:86: b5:e2:d8:73:bd:fa:08:59:bd:1f:7f:e7:6d:ea:1e:98:08:2d: 3b:b5:87:da:2c:ae:ce:a0:87:cb:2c:d8:c7:a2:bb:2b:9b:99: e4:59:7a:4c:6b:ae:35:db:72:d2:cd:8b:ec:d6:1e:33:2b:1e: bb:de:90:c1:8f:dc:68:cc:c5:06:e0:45:9e:b7:e1:cc:9c:89: 62:4a:61:ab:1a:29:df:80:8f:a8:35:9c:c3:b9:02:83:bc:29: c7:45:10:bb:e1:51:f0:e4:05:63:66:ad:3d:36:ef:77:75:84: 1d:a8:cd:f3:07:7b:d7:14:01:00:ed:b6:de:cb:0a:9a:79:2e: b4:bc:97:53:e4:c5:7f:0e:b7:a6:b0:80:15:f8:dd:c3:77:d7: b2:39:2d:3a:5f:87:1e:38:e0:2b:5f:25:d4:78:e4:1d:78:eb: e2:f3:52:d7:16:cb:18:7c:63:52:75:ad:4e:4c:f7:0e:71:88: 06:e9:b7:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sjOhdOOz1X5tkWdmzWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmYyMTA3ZjhlYjkyMzM4OGQ1MWI2Yjk5YzMwZWUwM2Q5OTg2ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCQiZQDAcQpaKHCGU/1vu0lhSZk rWlvPohJimvWJUK46of07O5O2ax9ZCybedx0FE08Zp7Ri6385lzT4dmr6Rwakttj qhsxc5WwdbcyrEfrBwAN8K5wiuNVZIxCAgVrieMNiph9/gcy/sJ6kqcEzFjGa5rp WHqPVEU+WanSEdeYu9OggcuRzrjjCTWphvNkxuBLY7/0cghyAkcUsh+a2tF7R+Zx oy6ut+vINhqbtJpHGHeVOQsa/+pVMVrvi7+2GjBD78NKHC7iaeDQmGPz+Qlj/XVU WwCn9If3oxgsZRCXGs6W2B38Jv29AB4scJULTiuPzo+oxiiGFCJXDu72yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/yEH+OuSM4jVG2uZww7gPZmG9hMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvUF9JUWY0NjVJemlOVWJhNW5ERHVBOW1ZYjJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWVsMA0G CSqGSIb3DQEBCwUAA4IBAQAGRRYyLKtvD2HyP9q1suPWwItjTokvZsirLE+FwEet PE/lZ2+bsoqeg+fbwBNQ3WPtBzTJFmhC2NaRBOm34QClX9v7cado44a14thzvfoI Wb0ff+dt6h6YCC07tYfaLK7OoIfLLNjHorsrm5nkWXpMa64123LSzYvs1h4zKx67 3pDBj9xozMUG4EWet+HMnIliSmGrGinfgI+oNZzDuQKDvCnHRRC74VHw5AVjZq09 Nu93dYQdqM3zB3vXFAEA7bbeywqaeS60vJdT5MV/DremsIAV+N3Dd9eyOS06X4ce OOArXyXUeOQdeOvi81LXFssYfGNSda1OTPcOcYgG6bdt -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:25 2026 by rpki-client