This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/c9DEUEWEQPqrGgYUimiiQviSMgM.roa File: c9DEUEWEQPqrGgYUimiiQviSMgM.roa (raw, json) Hash identifier: wakxrbqHUtPpN1M0QZFEdKnthWi1t40kvnk8QYdL7EU= Subject key identifier: 73:D0:C4:50:45:84:40:FA:AB:1A:06:14:8A:68:A2:42:F8:92:32:03 Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1 Certificate serial: 019B7DC9FC901537605EB5B2CF925296CF6D Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/c9DEUEWEQPqrGgYUimiiQviSMgM.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198684 IP address blocks: 91.238.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fc:90:15:37:60:5e:b5:b2:cf:92:52:96:cf:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73d0c450458440faab1a06148a68a242f8923203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:19:95:a6:57:df:db:44:b5:dc:97:1b:04: 56:2e:db:6e:fb:cb:01:bb:76:a5:49:5b:fd:29:98: 5b:8b:1c:92:4f:0d:f8:aa:03:e5:34:55:ef:8b:ce: cc:09:90:71:d8:30:26:83:32:7e:f9:2f:62:fe:3d: b7:01:9f:21:96:97:34:b3:7a:49:2b:d5:e9:38:1c: c0:19:2d:1c:07:42:a1:3c:a5:36:69:93:9d:69:13: b4:07:3c:28:8f:53:99:59:47:81:d3:97:ed:17:58: 9f:15:ed:36:ab:66:49:ae:3d:52:54:80:51:e7:2f: c8:b8:d4:ef:bd:08:df:bb:da:2e:f8:69:84:bc:66: ff:00:8b:86:bc:6d:36:21:08:85:5e:16:42:d0:63: cc:f2:d9:55:88:b0:74:cc:90:f1:86:76:e3:16:6c: 89:90:7d:41:53:ab:87:46:bc:5e:ee:07:13:42:cf: 94:e5:c2:10:4b:28:1d:51:4d:c2:e9:71:a4:13:5e: 04:c4:43:71:25:48:57:7a:62:e9:ab:0a:f9:d2:b5: 3a:95:1b:c6:dd:60:ac:17:35:47:15:f2:97:28:03: 06:9d:86:7f:e9:9a:99:44:f1:9c:27:c7:d0:de:8b: 25:3b:60:b7:6a:85:62:35:e5:95:2f:d5:05:0f:1f: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D0:C4:50:45:84:40:FA:AB:1A:06:14:8A:68:A2:42:F8:92:32:03 X509v3 Authority Key Identifier: keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/c9DEUEWEQPqrGgYUimiiQviSMgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.132.0/24 Signature Algorithm: sha256WithRSAEncryption 64:51:ed:ae:69:2a:71:26:61:09:a4:91:8b:2c:45:38:c3:aa: 2b:3f:f9:52:28:d0:6d:a1:34:98:b3:20:2f:fa:d0:87:f6:e0: 45:46:56:66:43:21:c7:e5:ad:48:18:e5:01:db:1c:d9:34:19: 69:f9:cb:c8:6e:49:c6:2d:41:f8:95:3d:ea:9a:1f:d4:35:95: 91:bf:85:4a:65:30:0b:a2:ee:73:d1:81:8b:67:95:f6:03:05: e1:28:6d:db:24:23:da:da:b1:89:f2:18:af:2e:76:8a:31:38: 95:66:0a:ca:43:79:1e:55:ee:ad:76:63:2f:20:fa:6b:6b:83: 57:96:07:93:3a:b2:69:16:cb:c1:7e:b2:f0:46:ef:8e:f2:86: 59:61:b5:85:89:bc:e4:62:aa:6a:af:3b:b3:14:37:13:90:9c: 9e:19:a3:c0:35:ec:1b:0b:8c:57:80:6a:00:d4:df:71:56:9f: e9:ef:54:5e:48:ae:6a:90:be:c7:ca:be:15:5f:8b:ad:a5:73: c3:aa:bd:91:b0:a5:32:4c:fe:e2:04:b9:a2:01:d1:2a:48:00: 19:4f:a3:0f:41:0f:36:de:87:f1:1b:b0:f4:3d:2d:53:f4:b5: f3:78:34:f2:08:0a:e1:a3:9e:b4:97:81:d9:07:99:5b:40:06: 3e:51:71:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yfyQFTdgXrWyz5JSls9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZWI3ZjliNTg5NTJiOWU4MGFmY2Y3YmJkYmEzMmIyNmEz NGQwYTEwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2QwYzQ1MDQ1ODQ0MGZhYWIxYTA2MTQ4YTY4YTI0MmY4OTIzMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG0ZlaZX39tEtdyXGwRWLttu+8sB u3alSVv9KZhbixySTw34qgPlNFXvi87MCZBx2DAmgzJ++S9i/j23AZ8hlpc0s3pJ K9XpOBzAGS0cB0KhPKU2aZOdaRO0Bzwoj1OZWUeB05ftF1ifFe02q2ZJrj1SVIBR 5y/IuNTvvQjfu9ou+GmEvGb/AIuGvG02IQiFXhZC0GPM8tlViLB0zJDxhnbjFmyJ kH1BU6uHRrxe7gcTQs+U5cIQSygdUU3C6XGkE14ExENxJUhXemLpqwr50rU6lRvG 3WCsFzVHFfKXKAMGnYZ/6ZqZRPGcJ8fQ3oslO2C3aoViNeWVL9UFDx+pvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHPQxFBFhED6qxoGFIpookL4kjIDMB8GA1UdIwQY MBaAFCHrf5tYlSuegK/Pe726MrJqNNChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTct ZjdkYWJiMGQyNzg3LzEvYzlERVVFV0VRUHFyR2dZVWltaWlRdmlTTWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTctZjdkYWJiMGQyNzg3 LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+6EMA0G CSqGSIb3DQEBCwUAA4IBAQBkUe2uaSpxJmEJpJGLLEU4w6orP/lSKNBtoTSYsyAv +tCH9uBFRlZmQyHH5a1IGOUB2xzZNBlp+cvIbknGLUH4lT3qmh/UNZWRv4VKZTAL ou5z0YGLZ5X2AwXhKG3bJCPa2rGJ8hivLnaKMTiVZgrKQ3keVe6tdmMvIPpra4NX lgeTOrJpFsvBfrLwRu+O8oZZYbWFibzkYqpqrzuzFDcTkJyeGaPANewbC4xXgGoA 1N9xVp/p71ReSK5qkL7Hyr4VX4utpXPDqr2RsKUyTP7iBLmiAdEqSAAZT6MPQQ82 3ofxG7D0PS1T9LXzeDTyCArho560l4HZB5lbQAY+UXG8 -----END CERTIFICATE-----Generated at Sat Jan 10 04:21:09 2026 by rpki-client