This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/DrETaOYFwhHteuK_cjZBqrhBn3E.roa File: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (raw, json) Hash identifier: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q= Subject key identifier: 0E:B1:13:68:E6:05:C2:11:ED:7A:E2:BF:72:36:41:AA:B8:41:9F:71 Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B7DC955ECF6FAA5F41B0693EF3156AAEC Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/DrETaOYFwhHteuK_cjZBqrhBn3E.roa Signing time: Fri 02 Jan 2026 08:18:25 +0000 ROA not before: Fri 02 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35120 IP address blocks: 91.209.212.0/24 maxlen: 24 91.223.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:55:ec:f6:fa:a5:f4:1b:06:93:ef:31:56:aa:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Jan 2 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eb11368e605c211ed7ae2bf723641aab8419f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e3:8a:6c:0c:61:a3:63:cb:3b:d4:31:9f:f7: 56:d0:06:ee:b0:de:be:32:b7:d0:72:ae:31:ac:0e: b3:ed:de:da:a4:ee:78:91:67:77:ae:92:a3:7e:61: cd:fc:72:1a:d5:90:d6:aa:51:de:51:f6:17:af:93: 91:89:36:68:32:a5:b1:84:4b:3f:fb:2b:c2:c5:13: c6:2c:a0:20:13:4f:8f:30:cc:5c:bc:0a:a0:f5:69: 4b:31:9f:b2:88:40:8d:cb:23:42:6a:9d:cc:d5:35: 44:08:59:6e:8f:8e:fd:ba:39:19:e1:bd:2b:99:bc: 86:9c:be:cb:da:b2:a7:83:d9:a8:1d:ec:76:6c:9d: 83:c3:47:67:66:11:89:ca:03:e6:b2:f5:2c:69:c9: 33:6e:10:b2:8a:cf:95:06:07:00:5e:58:ef:f8:dd: 44:15:42:ab:cd:ab:73:03:ce:1e:51:22:ff:e8:85: 18:b1:fb:0a:81:4f:81:3f:be:5a:de:7f:8c:0f:bb: 64:42:70:59:91:e5:b4:ba:52:72:cd:ea:09:22:3c: 52:63:2a:6d:af:b8:08:2e:09:d0:d6:f4:f4:82:ea: 7f:2f:1a:3f:c9:aa:2a:a6:31:c4:18:e2:11:49:d6: 26:f4:20:b7:bc:24:6b:0c:cb:59:83:ab:85:bc:49: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B1:13:68:E6:05:C2:11:ED:7A:E2:BF:72:36:41:AA:B8:41:9F:71 X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/DrETaOYFwhHteuK_cjZBqrhBn3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.212.0/24 91.223.100.0/24 Signature Algorithm: sha256WithRSAEncryption 32:24:e4:e2:6c:48:cd:d1:b1:9d:28:8d:9d:41:3b:33:d6:a7: d4:88:87:81:45:da:b1:bd:2f:39:77:b8:f0:43:3a:e4:43:a7: 09:b4:3e:05:67:d9:ca:e8:4a:a7:d5:11:e9:2b:79:fa:40:e5: 61:1c:75:27:eb:7d:80:93:01:f5:3c:25:88:a1:9e:82:70:1c: a1:8b:0d:19:5f:bb:f4:bf:cc:cc:ad:92:44:51:d9:63:a7:01: da:7d:68:05:02:1d:b8:8d:6d:6c:a9:3b:fe:bf:11:21:0d:bf: a2:55:58:d7:9d:6e:71:47:76:b8:28:9f:24:f5:64:72:bf:be: 8f:b9:d0:e9:15:e4:80:03:ed:73:b8:a8:79:6d:ad:79:3e:a1: 78:28:f5:32:67:32:4b:65:4b:09:1e:0c:37:a9:20:bf:be:7f: d1:c3:18:4a:89:f2:a2:5c:0b:3b:9d:e8:75:2b:05:76:fa:30: b4:18:a7:42:5c:35:48:e2:a8:b1:54:ff:8c:b6:17:3f:19:64: 91:5a:ef:ce:97:14:ca:d2:fa:5e:3d:bb:33:11:4e:a9:e7:3d: 43:6e:0a:d9:d3:64:f4:38:49:92:a0:4d:8e:5f:e3:94:d3:f1: e9:c6:4a:34:8c:a7:91:6f:96:07:4d:77:2e:a4:60:89:c7:77: fa:63:2b:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yVXs9vql9BsGk+8xVqrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjYwMTAyMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWIxMTM2OGU2MDVjMjExZWQ3YWUyYmY3MjM2NDFhYWI4NDE5ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+OKbAxho2PLO9Qxn/dW0AbusN6+ MrfQcq4xrA6z7d7apO54kWd3rpKjfmHN/HIa1ZDWqlHeUfYXr5ORiTZoMqWxhEs/ +yvCxRPGLKAgE0+PMMxcvAqg9WlLMZ+yiECNyyNCap3M1TVECFluj479ujkZ4b0r mbyGnL7L2rKng9moHex2bJ2Dw0dnZhGJygPmsvUsackzbhCyis+VBgcAXljv+N1E FUKrzatzA84eUSL/6IUYsfsKgU+BP75a3n+MD7tkQnBZkeW0ulJyzeoJIjxSYypt r7gILgnQ1vT0gup/Lxo/yaoqpjHEGOIRSdYm9CC3vCRrDMtZg6uFvEkCnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA6xE2jmBcIR7Xriv3I2Qaq4QZ9xMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvRHJFVGFPWUZ3aEh0ZXVLX2NqWkJxcmhCbjNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9HUAwQA W99kMA0GCSqGSIb3DQEBCwUAA4IBAQAyJOTibEjN0bGdKI2dQTsz1qfUiIeBRdqx vS85d7jwQzrkQ6cJtD4FZ9nK6Eqn1RHpK3n6QOVhHHUn632AkwH1PCWIoZ6CcByh iw0ZX7v0v8zMrZJEUdljpwHafWgFAh24jW1sqTv+vxEhDb+iVVjXnW5xR3a4KJ8k 9WRyv76PudDpFeSAA+1zuKh5ba15PqF4KPUyZzJLZUsJHgw3qSC/vn/RwxhKifKi XAs7neh1KwV2+jC0GKdCXDVI4qixVP+Mthc/GWSRWu/OlxTK0vpePbszEU6p5z1D bgrZ02T0OEmSoE2OX+OU0/Hpxko0jKeRb5YHTXcupGCJx3f6YyuL -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:15 2026 by rpki-client