This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa File: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (raw, json) Hash identifier: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4= Subject key identifier: F0:BA:B7:94:84:39:ED:5D:B1:E5:74:40:B6:1C:17:86:37:5F:3D:9D Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Certificate serial: 019B77C6C5C7CE5A30B8E36C277D12AAAEF2 Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29075 IP address blocks: 91.226.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:c7:ce:5a:30:b8:e3:6c:27:7d:12:aa:ae:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0bab7948439ed5db1e57440b61c1786375f3d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:0f:d0:1b:c7:78:05:f9:8c:d1:6c:7f:8b: e3:b6:ee:20:5d:52:c6:b2:f7:a4:c0:62:8d:63:b1: 86:d4:53:10:2a:57:b3:cf:9d:49:d6:7c:68:ce:b7: 97:01:70:b5:80:85:f5:98:24:9d:d9:92:52:2d:b6: 7b:ba:be:bc:e2:6c:cc:a6:a7:98:29:2e:f8:ad:0b: c1:0f:cf:ca:a7:de:fd:61:f5:84:48:f8:63:f4:40: ba:37:0b:01:6b:06:28:12:87:99:94:51:39:48:13: 03:24:8f:55:cc:66:1d:c1:6a:d9:85:a3:4b:7d:de: 51:8c:45:40:d4:30:92:b3:26:76:30:0a:1b:c3:01: 74:cf:44:eb:ee:6d:f9:fc:03:44:d2:dc:57:46:dd: 32:07:7d:9a:a0:a3:88:a3:6b:57:be:28:7a:bf:d8: e0:0b:91:79:05:44:78:b0:ae:73:e0:3e:1b:9d:6c: 85:d4:43:dc:bf:54:27:58:74:f7:ef:e2:03:fe:bc: 3a:d0:ff:3b:6c:44:a9:da:20:92:49:04:61:1e:fc: 90:5d:46:26:8e:5a:12:7c:42:43:4a:f8:86:7e:cf: 99:34:d7:9a:6f:de:4a:e0:46:86:49:55:26:a3:70: a8:f7:c2:c1:df:41:76:af:f0:a7:61:a0:10:95:59: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BA:B7:94:84:39:ED:5D:B1:E5:74:40:B6:1C:17:86:37:5F:3D:9D X509v3 Authority Key Identifier: keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.98.0/24 Signature Algorithm: sha256WithRSAEncryption 52:7a:e2:8d:cf:ed:6e:2c:4f:7e:cc:7c:ca:5c:a1:63:e3:01: 2d:ff:99:b6:34:43:a5:9f:86:f0:98:ff:85:60:27:16:f7:1f: ba:07:95:01:d6:ef:0b:00:67:35:69:14:0f:6e:b6:9c:e8:83: 65:07:86:3e:9a:fa:f1:4c:d7:ac:1a:0c:97:7a:5b:62:23:97: e9:14:53:f8:f3:cf:e6:8d:e5:93:48:8b:8c:62:7e:01:9b:28: e5:d8:f1:3c:59:d5:96:ec:32:a7:3d:78:a7:a8:ae:11:6b:cb: 58:03:78:19:cf:3c:60:09:31:e1:fe:74:e9:28:04:b1:91:14: ac:93:7d:8e:56:a2:3d:1d:eb:85:61:af:fd:ad:a4:96:3e:27: dc:d2:3b:43:35:58:39:c9:00:3b:be:9b:3a:9b:f2:7d:0e:78: ee:fb:8e:58:d5:7c:1f:8c:d3:2e:d8:c7:2a:73:17:bc:8b:38: ae:1b:26:41:0c:bf:86:86:f1:98:8a:9b:ad:82:1d:ac:a0:3d: 4c:59:96:9c:d5:ba:8f:91:e8:7a:46:e6:ab:a7:0b:ae:73:ab: 33:9c:04:b8:60:3c:77:10:f4:09:4e:7b:06:f1:53:57:91:ec: dd:9a:53:3a:58:77:0c:26:2b:25:8f:28:20:9a:90:01:df:a2: bf:36:ad:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsXHzlowuONsJ30Sqq7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh ZDAxYzUwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGJhYjc5NDg0MzllZDVkYjFlNTc0NDBiNjFjMTc4NjM3NWYzZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrAP0BvHeAX5jNFsf4vjtu4gXVLG svekwGKNY7GG1FMQKlezz51J1nxozreXAXC1gIX1mCSd2ZJSLbZ7ur684mzMpqeY KS74rQvBD8/Kp979YfWESPhj9EC6NwsBawYoEoeZlFE5SBMDJI9VzGYdwWrZhaNL fd5RjEVA1DCSsyZ2MAobwwF0z0Tr7m35/ANE0txXRt0yB32aoKOIo2tXvih6v9jg C5F5BUR4sK5z4D4bnWyF1EPcv1QnWHT37+ID/rw60P87bESp2iCSSQRhHvyQXUYm jloSfEJDSviGfs+ZNNeab95K4EaGSVUmo3Co98LB30F2r/CnYaAQlVkoZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPC6t5SEOe1dseV0QLYcF4Y3Xz2dMB8GA1UdIwQY MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt MjRiNjc2YjU2NzgzLzEvOExxM2xJUTU3VjJ4NVhSQXRod1hoamRmUFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+JiMA0G CSqGSIb3DQEBCwUAA4IBAQBSeuKNz+1uLE9+zHzKXKFj4wEt/5m2NEOln4bwmP+F YCcW9x+6B5UB1u8LAGc1aRQPbrac6INlB4Y+mvrxTNesGgyXeltiI5fpFFP488/m jeWTSIuMYn4Bmyjl2PE8WdWW7DKnPXinqK4Ra8tYA3gZzzxgCTHh/nTpKASxkRSs k32OVqI9HeuFYa/9raSWPifc0jtDNVg5yQA7vps6m/J9Dnju+45Y1XwfjNMu2Mcq cxe8iziuGyZBDL+GhvGYiputgh2soD1MWZac1bqPkeh6Ruarpwuuc6sznAS4YDx3 EPQJTnsG8VNXkezdmlM6WHcMJisljyggmpAB36K/Nq00 -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:18 2026 by rpki-client