This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa File: 4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa (raw, json) Hash identifier: ynXE8G+gS/lsZOLIqXkN1x5b0cy4lp5fSomJfLM7n9s= Subject key identifier: E0:8A:B5:ED:CF:C6:1E:D7:A5:D4:26:CB:8C:5C:60:C0:1D:03:9F:53 Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85 Certificate serial: 019B7C118337EF3633B7C192D010757071B4 Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51463 IP address blocks: 91.224.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:83:37:ef:36:33:b7:c1:92:d0:10:75:70:71:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78decead419807747c92ace69448113ff0928b85 Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e08ab5edcfc61ed7a5d426cb8c5c60c01d039f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:a1:51:54:e1:77:91:25:a0:9d:12:14:76: 0e:f3:af:b2:2a:61:8a:73:8a:99:3d:af:4a:3a:44: 3e:23:59:e2:ca:74:04:52:14:2c:0a:71:e3:79:01: c2:8f:33:4e:9b:a8:2f:b3:06:8e:e4:1f:42:01:0b: ca:e7:44:97:37:00:d6:25:67:db:63:bd:fe:fc:35: a5:26:ca:7b:6c:80:94:ac:b9:1c:75:b4:8d:b8:bd: b7:c0:82:39:7b:a1:4e:2f:51:30:92:08:45:eb:8b: 38:7d:99:f4:8d:5b:09:79:7a:ad:f5:87:1b:26:04: 3c:35:0f:51:f7:66:d1:be:6c:d6:3c:4a:df:fe:76: bb:a5:d4:4f:cd:f5:38:16:d1:12:74:84:dc:fd:15: 32:90:09:2e:26:9b:49:84:4e:bc:4d:3c:74:40:57: ce:57:d1:90:d3:17:57:19:11:8c:14:3e:0b:52:ef: a5:b1:45:ea:cc:84:f7:8d:eb:14:45:10:89:66:34: 81:15:6f:69:66:37:7e:84:f7:98:5c:35:1b:62:90: 5a:3b:6e:2e:d1:5c:16:83:b2:b9:b3:da:1b:f4:1c: 1a:03:a6:7a:3a:14:3b:15:f2:a4:73:ab:a6:68:9a: 7c:5b:b4:ae:76:97:2a:8d:53:fa:4d:7f:f5:ac:6b: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:B5:ED:CF:C6:1E:D7:A5:D4:26:CB:8C:5C:60:C0:1D:03:9F:53 X509v3 Authority Key Identifier: keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.91.0/24 Signature Algorithm: sha256WithRSAEncryption 57:68:66:20:a0:7b:bd:93:61:85:f2:f4:df:b3:46:f5:2e:36: 92:e1:9e:7a:7a:79:13:29:80:35:86:2e:a6:0c:76:1f:d2:d9: cf:37:9b:18:bb:4d:b1:aa:71:44:d4:2a:87:66:88:ae:e3:9f: f1:68:02:02:14:a0:7a:27:88:20:c0:b9:0b:15:04:78:41:26: 91:c9:b5:2f:32:cc:ad:e5:a3:0e:e9:7f:e4:28:d1:50:23:12: f6:30:f5:2a:2f:af:d5:14:d5:e3:ee:06:80:85:36:28:c1:00: 5d:a2:88:e7:53:af:03:8e:5f:80:8f:2f:71:61:4f:eb:54:24: 11:6c:0e:24:ba:e1:cb:f2:15:e1:02:23:7b:c5:f2:c8:35:03: 46:5f:91:63:1c:2d:2e:7a:7f:8f:ee:8e:8f:d7:53:bc:77:58: c4:06:e0:ae:1b:27:f0:0a:aa:e5:49:e5:b8:6d:29:24:de:8f: e6:c4:cd:5c:9b:4f:84:f4:0f:8d:74:ed:54:bb:29:f1:b4:3c: a2:74:b2:41:12:9c:48:fb:1b:6b:40:c1:f4:4f:1b:7b:35:db: b8:9a:f7:7a:6d:6b:1f:1b:d3:b1:1c:34:67:18:8e:70:58:41: 57:64:fe:ff:9f:dd:ab:94:81:a0:73:5b:ea:73:6a:34:55:08: be:8a:37:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYM37zYzt8GS0BB1cHG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGVjZWFkNDE5ODA3NzQ3YzkyYWNlNjk0NDgxMTNmZjA5 MjhiODUwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDhhYjVlZGNmYzYxZWQ3YTVkNDI2Y2I4YzVjNjBjMDFkMDM5ZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzumhUVThd5EloJ0SFHYO86+yKmGK c4qZPa9KOkQ+I1niynQEUhQsCnHjeQHCjzNOm6gvswaO5B9CAQvK50SXNwDWJWfb Y73+/DWlJsp7bICUrLkcdbSNuL23wII5e6FOL1EwkghF64s4fZn0jVsJeXqt9Ycb JgQ8NQ9R92bRvmzWPErf/na7pdRPzfU4FtESdITc/RUykAkuJptJhE68TTx0QFfO V9GQ0xdXGRGMFD4LUu+lsUXqzIT3jesURRCJZjSBFW9pZjd+hPeYXDUbYpBaO24u 0VwWg7K5s9ob9BwaA6Z6OhQ7FfKkc6umaJp8W7SudpcqjVP6TX/1rGtH8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCKte3Pxh7XpdQmy4xcYMAdA59TMB8GA1UdIwQY MBaAFHjezq1BmAd0fJKs5pRIET/wkouFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYt NzUzNjFhYzIwZDVlLzEvNElxMTdjX0dIdGVsMUNiTGpGeGd3QjBEbjFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYtNzUzNjFhYzIwZDVl LzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+BbMA0G CSqGSIb3DQEBCwUAA4IBAQBXaGYgoHu9k2GF8vTfs0b1LjaS4Z56enkTKYA1hi6m DHYf0tnPN5sYu02xqnFE1CqHZoiu45/xaAICFKB6J4ggwLkLFQR4QSaRybUvMsyt 5aMO6X/kKNFQIxL2MPUqL6/VFNXj7gaAhTYowQBdoojnU68Djl+Ajy9xYU/rVCQR bA4kuuHL8hXhAiN7xfLINQNGX5FjHC0uen+P7o6P11O8d1jEBuCuGyfwCqrlSeW4 bSkk3o/mxM1cm0+E9A+NdO1UuynxtDyidLJBEpxI+xtrQMH0Txt7Ndu4mvd6bWsf G9OxHDRnGI5wWEFXZP7/n92rlIGgc1vqc2o0VQi+ijfQ -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:44 2026 by rpki-client