This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/inGTc8Cd75E599vtC7r1u5PhkKU.roa File: inGTc8Cd75E599vtC7r1u5PhkKU.roa (raw, json) Hash identifier: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww= Subject key identifier: 8A:71:93:73:C0:9D:EF:91:39:F7:DB:ED:0B:BA:F5:BB:93:E1:90:A5 Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3 Certificate serial: 019B76EB6E2C657BF36476C9C7CAA50F9472 Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/inGTc8Cd75E599vtC7r1u5PhkKU.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47810 IP address blocks: 91.208.144.0/24 maxlen: 24 91.212.213.0/24 maxlen: 24 91.239.206.0/23 maxlen: 23 185.163.201.0/24 maxlen: 24 185.163.202.0/23 maxlen: 23 195.54.178.0/23 maxlen: 23 2a0a:4400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6e:2c:65:7b:f3:64:76:c9:c7:ca:a5:0f:94:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a719373c09def9139f7dbed0bbaf5bb93e190a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2e:a0:f1:ea:86:80:82:84:c0:d6:44:7b:89: 2f:17:bb:b9:7f:30:d0:e0:9d:36:c9:b6:18:63:d4: 22:0e:51:70:20:b2:a3:16:a9:ad:eb:29:9f:4d:8c: d9:b1:39:51:cc:59:a2:53:93:40:d3:dd:e8:72:33: 57:da:6e:b5:1b:64:7c:1c:b5:e4:6f:ca:a4:5b:cc: 02:84:c2:26:fc:18:9a:b5:2f:27:cf:ff:57:28:a9: 54:95:47:fe:dd:96:fc:7a:39:6d:16:5d:17:01:03: 79:52:5e:26:a1:73:12:14:09:27:50:d6:66:a0:cd: af:14:f7:26:e8:b8:f2:17:b2:9b:e3:e3:bb:0e:1d: 8d:13:9a:45:e6:23:23:09:28:32:a5:e8:4a:92:f2: 4d:7d:dc:e1:bc:e0:48:9c:c4:b2:48:82:dd:f7:ec: 0b:1c:df:8f:7e:07:29:aa:01:9d:5f:f9:6e:7f:40: 6c:d1:c8:0c:d7:11:db:35:25:6a:46:55:f8:49:be: 1e:00:1a:cd:e6:08:01:e9:38:5d:e1:1f:91:f5:3f: 25:7d:4b:17:80:dd:82:71:ef:f9:4c:f6:9c:e0:36: 78:fc:1e:19:35:3c:5d:a3:35:19:bb:90:b6:9e:d7: e6:26:c6:c8:d5:0b:54:53:10:d8:9b:0b:a3:f2:da: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:71:93:73:C0:9D:EF:91:39:F7:DB:ED:0B:BA:F5:BB:93:E1:90:A5 X509v3 Authority Key Identifier: keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/inGTc8Cd75E599vtC7r1u5PhkKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.144.0/24 91.212.213.0/24 91.239.206.0/23 185.163.201.0-185.163.203.255 195.54.178.0/23 IPv6: 2a0a:4400::/29 Signature Algorithm: sha256WithRSAEncryption 32:af:f9:3d:4c:28:fc:25:a4:d6:75:f1:bd:f1:ff:ab:05:ec: 24:3c:3a:00:76:8f:4a:3c:ee:4f:7b:00:25:e2:41:43:f2:c3: 0a:ed:a8:21:18:d8:01:86:2a:44:a7:22:03:eb:db:52:35:21: f8:63:b0:1e:51:4e:b5:0c:4f:4e:72:6c:d9:43:fd:c0:60:3b: a6:c5:5c:ec:d5:07:68:6d:49:69:b5:1a:0f:fa:a8:80:0f:37: e3:20:0b:cb:65:cb:d6:de:5d:80:84:7b:bf:d7:83:04:6d:a2: a8:24:6f:db:c4:09:60:7c:d9:15:01:02:73:cd:68:4a:fa:c3: f3:9e:93:fb:db:f2:b5:cf:2a:d0:8d:5d:75:ef:2c:c4:12:e3: e0:d3:cd:1c:2a:28:23:79:7f:cd:be:b9:17:51:d1:e1:96:75: 18:8c:24:e9:13:53:63:21:d1:85:33:61:3c:81:79:98:f2:42: 75:f1:55:26:fc:60:5a:54:66:47:00:ee:68:3b:e3:b0:06:66: dd:6e:26:d4:ab:9f:9f:98:0d:d4:7a:b9:e2:53:2c:68:bb:69: 6c:83:a3:25:4b:51:4f:a1:47:46:f9:08:24:db:2c:d7:72:6d: c0:e1:fc:73:5e:71:1e:28:1a:34:9f:73:4c:ec:98:fa:65:e1: 61:38:17:e5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt2624sZXvzZHbJx8qlD5RyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4 NzZlYTMwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTcxOTM3M2MwOWRlZjkxMzlmN2RiZWQwYmJhZjViYjkzZTE5MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C6g8eqGgIKEwNZEe4kvF7u5fzDQ 4J02ybYYY9QiDlFwILKjFqmt6ymfTYzZsTlRzFmiU5NA093ocjNX2m61G2R8HLXk b8qkW8wChMIm/BiatS8nz/9XKKlUlUf+3Zb8ejltFl0XAQN5Ul4moXMSFAknUNZm oM2vFPcm6LjyF7Kb4+O7Dh2NE5pF5iMjCSgypehKkvJNfdzhvOBInMSySILd9+wL HN+PfgcpqgGdX/luf0Bs0cgM1xHbNSVqRlX4Sb4eABrN5ggB6Thd4R+R9T8lfUsX gN2Cce/5TPac4DZ4/B4ZNTxdozUZu5C2ntfmJsbI1QtUUxDYmwuj8tpuhwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFIpxk3PAne+ROffb7Qu69buT4ZClMB8GA1UdIwQY MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt MTRiNzZiNzZmMmJiLzEvaW5HVGM4Q2Q3NUU1OTl2dEM3cjF1NVBoa0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQAW9CQAwQA W9TVAwQBW+/OMAwDBAC5o8kDBAK5o8gDBAHDNrIwDQQCAAIwBwMFAyoKRAAwDQYJ KoZIhvcNAQELBQADggEBADKv+T1MKPwlpNZ18b3x/6sF7CQ8OgB2j0o87k97ACXi QUPywwrtqCEY2AGGKkSnIgPr21I1IfhjsB5RTrUMT05ybNlD/cBgO6bFXOzVB2ht SWm1Gg/6qIAPN+MgC8tly9beXYCEe7/XgwRtoqgkb9vECWB82RUBAnPNaEr6w/Oe k/vb8rXPKtCNXXXvLMQS4+DTzRwqKCN5f82+uRdR0eGWdRiMJOkTU2Mh0YUzYTyB eZjyQnXxVSb8YFpUZkcA7mg747AGZt1uJtSrn5+YDdR6ueJTLGi7aWyDoyVLUU+h R0b5CCTbLNdybcDh/HNecR4oGjSfc0zsmPpl4WE4F+U= -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:00 2026 by rpki-client