This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/r91CFPjHDqMCM8CKay9171ccjWQ.roa File: r91CFPjHDqMCM8CKay9171ccjWQ.roa (raw, json) Hash identifier: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U= Subject key identifier: AF:DD:42:14:F8:C7:0E:A3:02:33:C0:8A:6B:2F:75:EF:57:1C:8D:64 Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Certificate serial: 019B7F8535F170A69D65B6ADDD5C7AF82084 Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/r91CFPjHDqMCM8CKay9171ccjWQ.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208290 IP address blocks: 45.148.208.0/24 maxlen: 24 45.148.209.0/24 maxlen: 24 45.148.210.0/24 maxlen: 24 45.148.211.0/24 maxlen: 24 2a10:9f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:35:f1:70:a6:9d:65:b6:ad:dd:5c:7a:f8:20:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afdd4214f8c70ea30233c08a6b2f75ef571c8d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:da:e8:8c:08:0f:8f:ef:27:f0:45:18:c3: af:49:00:ef:1d:f8:82:6b:a0:fc:67:a9:e2:70:87: af:1a:dc:b1:44:45:07:b0:9a:72:73:c4:50:4d:c7: be:1d:3e:fc:25:1d:a5:b4:68:e5:59:7f:90:b5:bf: 13:0c:a6:4e:d3:83:8a:5b:3b:0f:1c:89:cb:99:32: 56:e7:34:46:5c:24:f6:55:95:75:e1:a6:b6:14:2c: 55:01:d5:9f:fa:c9:53:f0:ab:16:2a:0d:d9:a1:91: c4:11:a4:4b:1f:75:40:69:6c:ea:93:0d:3f:65:b4: 7a:0e:30:27:8a:65:f1:37:ab:dd:f3:51:77:87:41: 64:85:8a:e8:12:c6:1b:31:ff:60:a5:d3:e2:97:80: 1c:d1:4c:28:39:c7:ba:37:86:b5:65:66:a0:b2:6f: d8:cf:4a:6e:08:be:00:4b:e9:fb:ef:8a:54:b8:dd: c3:98:f5:8c:d4:b4:ec:4c:54:17:a0:87:f5:f1:00: d5:bf:34:4f:28:c5:c0:47:d7:51:57:de:ac:c3:c0: d6:42:49:11:6c:06:d4:22:01:55:ea:89:2a:a9:4e: a4:5f:65:4a:fb:fb:ef:77:60:e8:15:b2:0a:8c:45: f6:1c:4c:2c:2e:32:f7:cd:d0:68:84:84:85:ad:f8: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DD:42:14:F8:C7:0E:A3:02:33:C0:8A:6B:2F:75:EF:57:1C:8D:64 X509v3 Authority Key Identifier: keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/r91CFPjHDqMCM8CKay9171ccjWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.208.0/22 IPv6: 2a10:9f00::/29 Signature Algorithm: sha256WithRSAEncryption 7b:1f:51:42:18:31:89:ba:a4:ca:7f:3b:87:2d:22:66:af:71: 62:5b:82:c6:15:35:fc:99:55:1d:ce:12:a9:44:4a:1c:e5:c6: fa:ff:01:ea:60:bc:7a:a9:12:99:45:36:63:0a:57:d8:ac:b2: 2f:f7:e4:3d:14:02:7f:89:35:bc:1e:dd:21:06:9d:1c:0c:53: 8b:a1:96:9d:21:27:3e:e5:e8:2f:5b:a0:6b:7d:9b:36:a6:db: f2:fa:7e:2d:be:76:bf:bb:aa:30:92:ba:45:d5:2b:a0:48:1d: 46:49:fc:1f:3c:f8:12:4a:33:2e:b4:d6:23:4a:46:b2:eb:4f: cb:70:94:e7:2d:68:94:84:8f:4e:e4:80:a4:4c:bc:3a:1d:01: 38:b8:3a:08:cb:36:60:4e:25:88:71:4b:a4:60:3e:6f:ce:d0: 71:9b:1f:42:70:8f:b4:32:de:1b:f7:3e:3e:df:30:1d:98:b5: 91:31:56:01:e5:a1:83:07:d5:b8:27:5a:4d:ab:d1:52:20:c6: b8:99:51:03:97:53:2f:fc:cc:82:35:a1:14:03:1a:a5:3d:f9: db:ff:c8:d3:28:16:77:67:60:c4:2d:eb:8c:99:93:6d:95:60: a9:29:e5:7c:41:d5:a9:e5:c7:f1:be:54:70:ef:35:62:3e:92: e6:2b:68:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hTXxcKadZbat3Vx6+CCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5 NWEzZjAwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmRkNDIxNGY4YzcwZWEzMDIzM2MwOGE2YjJmNzVlZjU3MWM4ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A7a6IwID4/vJ/BFGMOvSQDvHfiC a6D8Z6nicIevGtyxREUHsJpyc8RQTce+HT78JR2ltGjlWX+Qtb8TDKZO04OKWzsP HInLmTJW5zRGXCT2VZV14aa2FCxVAdWf+slT8KsWKg3ZoZHEEaRLH3VAaWzqkw0/ ZbR6DjAnimXxN6vd81F3h0FkhYroEsYbMf9gpdPil4Ac0UwoOce6N4a1ZWagsm/Y z0puCL4AS+n774pUuN3DmPWM1LTsTFQXoIf18QDVvzRPKMXAR9dRV96sw8DWQkkR bAbUIgFV6okqqU6kX2VK+/vvd2DoFbIKjEX2HEwsLjL3zdBohISFrfgCtwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK/dQhT4xw6jAjPAimsvde9XHI1kMB8GA1UdIwQY MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct Y2E1MWZiNDA4OTAxLzEvcjkxQ0ZQakhEcU1DTThDS2F5OTE3MWNjaldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZTQMA0E AgACMAcDBQMqEJ8AMA0GCSqGSIb3DQEBCwUAA4IBAQB7H1FCGDGJuqTKfzuHLSJm r3FiW4LGFTX8mVUdzhKpREoc5cb6/wHqYLx6qRKZRTZjClfYrLIv9+Q9FAJ/iTW8 Ht0hBp0cDFOLoZadISc+5egvW6BrfZs2ptvy+n4tvna/u6owkrpF1SugSB1GSfwf PPgSSjMutNYjSkay60/LcJTnLWiUhI9O5ICkTLw6HQE4uDoIyzZgTiWIcUukYD5v ztBxmx9CcI+0Mt4b9z4+3zAdmLWRMVYB5aGDB9W4J1pNq9FSIMa4mVEDl1Mv/MyC NaEUAxqlPfnb/8jTKBZ3Z2DELeuMmZNtlWCpKeV8QdWp5cfxvlRw7zViPpLmK2is -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:58 2026 by rpki-client