This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/_09CYID6_CGhAezIzwAbTFbsCi8.roa File: _09CYID6_CGhAezIzwAbTFbsCi8.roa (raw, json) Hash identifier: dZSTZUSxmSRc4nvVBTT8GAEBkxmPLHGJ4SuadjBnT94= Subject key identifier: FF:4F:42:60:80:FA:FC:21:A1:01:EC:C8:CF:00:1B:4C:56:EC:0A:2F Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a Certificate serial: 019B797E95FBAA77F597DC6A4BF5BEB1BA5D Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/_09CYID6_CGhAezIzwAbTFbsCi8.roa Signing time: Thu 01 Jan 2026 12:18:17 +0000 ROA not before: Thu 01 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204062 IP address blocks: 91.103.148.0/24 maxlen: 24 91.103.149.0/24 maxlen: 24 91.103.150.0/24 maxlen: 24 185.115.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:95:fb:aa:77:f5:97:dc:6a:4b:f5:be:b1:ba:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff4f426080fafc21a101ecc8cf001b4c56ec0a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:ea:07:05:1a:63:94:76:86:78:02:8f:cc: 07:15:57:9b:c8:a6:b8:87:44:43:af:2d:9c:33:8b: 68:20:07:7d:b9:35:a1:7d:70:cd:fb:38:81:21:e2: 9f:cd:d9:af:19:d2:61:45:44:71:72:d9:c2:a8:ba: 63:f6:06:d2:af:d0:82:dd:59:25:8c:d0:33:62:c6: 96:38:28:ea:0d:4c:93:64:77:50:23:2d:5a:b5:f2: ff:b7:19:9b:3a:cd:c0:e2:c3:fb:bd:41:05:3b:7e: e0:96:ed:a6:7f:51:78:99:b2:b5:35:34:e8:eb:ec: 0d:e1:f3:49:95:ac:c6:81:e5:e1:54:ff:3f:69:4a: 05:49:5f:b7:c7:32:74:03:e3:da:56:27:27:b0:e8: 2f:97:9f:1c:51:92:94:43:bd:b9:f3:2f:b1:f4:40: 98:ec:fe:c4:38:46:0e:b8:eb:80:9e:44:a4:a1:24: 91:60:59:95:f8:b6:df:a1:49:ce:38:59:ee:68:3f: 15:0e:2b:fe:33:d0:80:a4:53:e3:ba:ff:bb:93:d8: ba:15:06:be:d0:07:52:13:f1:08:19:9b:6c:9b:05: 3b:08:c1:07:33:9b:2d:08:b6:30:2e:ea:da:15:85: ba:9d:2f:0e:d7:77:2f:fb:02:88:56:70:74:8c:b0: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:42:60:80:FA:FC:21:A1:01:EC:C8:CF:00:1B:4C:56:EC:0A:2F X509v3 Authority Key Identifier: keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/_09CYID6_CGhAezIzwAbTFbsCi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.148.0-91.103.150.255 185.115.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:79:47:e9:6a:2f:f4:75:73:53:e4:81:3d:fb:f6:7f:e1:00: cd:06:b1:b3:40:07:e2:d5:c7:8c:54:b1:0a:9e:12:f4:9f:87: 2d:f8:66:99:73:1b:60:32:e4:7c:a6:e7:13:d5:23:ab:c3:5d: ee:22:ac:e3:eb:62:a4:de:68:9f:4d:38:d0:38:de:97:bf:87: 8d:ec:71:15:0f:b0:19:c5:c6:ef:63:8b:80:36:76:a8:4d:8f: 28:26:2f:8f:2d:0d:44:cf:aa:7f:b4:3b:a8:ba:44:12:ea:27: 1c:55:5e:50:4a:28:80:97:f9:3d:16:9f:0f:bf:8c:de:84:bd: 2f:fd:93:4d:aa:a6:6f:76:7c:bf:c8:86:82:1b:1b:9b:a7:c5: ff:08:58:f4:6d:57:81:95:c8:90:14:5f:95:c5:53:cf:2b:cf: 8f:40:6c:5b:14:fe:b0:f6:da:15:d7:18:54:e9:be:25:db:53: f7:40:26:9b:54:0c:b2:1c:ab:c2:60:5e:9f:48:a4:5b:07:6e: f0:72:6f:7c:2c:ad:5d:25:9c:4e:fc:23:b5:14:e2:0f:e7:4d: 56:69:5a:cd:33:ec:ba:5e:eb:f7:06:ff:93:d5:b8:9b:d3:71: 35:01:bf:58:9f:e6:2b:d9:09:64:b7:62:91:5b:91:34:9f:79: 94:e5:da:4c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fpX7qnf1l9xqS/W+sbpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Y2U0YzBhYmUyNzg1ZDQ2YTU1NzE4NTIxNzAzNzA0MjNi NWM1OWEwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjRmNDI2MDgwZmFmYzIxYTEwMWVjYzhjZjAwMWI0YzU2ZWMwYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjqBwUaY5R2hngCj8wHFVebyKa4 h0RDry2cM4toIAd9uTWhfXDN+ziBIeKfzdmvGdJhRURxctnCqLpj9gbSr9CC3Vkl jNAzYsaWOCjqDUyTZHdQIy1atfL/txmbOs3A4sP7vUEFO37glu2mf1F4mbK1NTTo 6+wN4fNJlazGgeXhVP8/aUoFSV+3xzJ0A+PaVicnsOgvl58cUZKUQ7258y+x9ECY 7P7EOEYOuOuAnkSkoSSRYFmV+LbfoUnOOFnuaD8VDiv+M9CApFPjuv+7k9i6FQa+ 0AdSE/EIGZtsmwU7CMEHM5stCLYwLuraFYW6nS8O13cv+wKIVnB0jLCktQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFP9PQmCA+vwhoQHsyM8AG0xW7AovMB8GA1UdIwQY MBaAFDnOTAq+J4XUalVxhSFwNwQjtcWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYt OWY0NDI5ZjMzODFlLzEvXzA5Q1lJRDZfQ0doQWV6SXp3QWJURmJzQ2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYtOWY0NDI5ZjMzODFl LzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJbZ5QD BABbZ5YDBAK5c+gwDQYJKoZIhvcNAQELBQADggEBAB15R+lqL/R1c1PkgT379n/h AM0GsbNAB+LVx4xUsQqeEvSfhy34ZplzG2Ay5Hym5xPVI6vDXe4irOPrYqTeaJ9N ONA43pe/h43scRUPsBnFxu9ji4A2dqhNjygmL48tDUTPqn+0O6i6RBLqJxxVXlBK KICX+T0Wnw+/jN6EvS/9k02qpm92fL/IhoIbG5unxf8IWPRtV4GVyJAUX5XFU88r z49AbFsU/rD22hXXGFTpviXbU/dAJptUDLIcq8JgXp9IpFsHbvByb3wsrV0lnE78 I7UU4g/nTVZpWs0z7Lpe6/cG/5PVuJvTcTUBv1if5ivZCWS3YpFbkTSfeZTl2kw= -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:15 2026 by rpki-client