This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa File: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (raw, json) Hash identifier: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c= Subject key identifier: F7:52:8F:1E:58:20:C1:36:9E:42:6E:C1:F5:9F:80:AB:33:FD:10:14 Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019B7F14578BD3B5E8BAB0B99BAD2D448B2E Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa Signing time: Fri 02 Jan 2026 14:19:57 +0000 ROA not before: Fri 02 Jan 2026 14:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 2a05:a880:dc20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:57:8b:d3:b5:e8:ba:b0:b9:9b:ad:2d:44:8b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7528f1e5820c1369e426ec1f59f80ab33fd1014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:a6:e3:f9:2c:d6:91:22:d0:98:a0:91:75: 3a:01:11:2a:b3:bc:a0:1a:40:69:4b:7d:7d:0e:a3: 2d:68:9d:19:c6:f4:4a:d4:49:54:45:32:11:ba:56: 32:90:a6:d7:32:40:65:c2:4e:ae:89:c1:b6:3c:0c: 68:6c:fa:1e:e1:c9:4d:18:75:ee:f2:47:7f:80:36: c9:1b:61:e5:b0:36:51:38:09:f3:e7:da:0f:a3:0d: 42:6e:55:d3:8b:3e:40:16:88:c2:54:60:eb:d7:0f: 35:5b:cc:c7:3e:76:f4:f5:13:ee:65:09:9c:3b:72: 6c:c8:98:d2:4b:4e:4f:ac:a9:4f:a1:ec:28:09:28: 42:46:13:46:63:04:ca:b7:fe:13:70:19:04:60:aa: 24:1e:0b:fd:c9:de:e7:cc:a8:fa:e7:92:b6:d5:e0: 09:d6:df:54:4e:b0:10:2f:1a:3f:ae:e1:2d:53:f7: 72:42:95:2c:83:26:ea:cf:ef:19:ea:0e:5b:c5:00: 6a:70:5f:64:ff:e6:dc:3c:3d:a0:3e:cf:ed:f5:d6: f8:f1:51:90:2b:b7:6d:24:ec:46:7a:d0:8a:77:37: 20:ac:26:43:6d:48:36:ab:ea:af:fd:1e:44:8b:2e: 2d:f2:3f:25:33:1a:a2:60:e2:35:b1:6a:62:d1:39: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:52:8F:1E:58:20:C1:36:9E:42:6E:C1:F5:9F:80:AB:33:FD:10:14 X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:a880:dc20::/48 Signature Algorithm: sha256WithRSAEncryption 5b:86:70:10:31:91:41:a6:4c:a6:c3:c8:fb:ce:7b:b5:f4:64: f5:d9:fc:6b:ce:f4:b4:1d:b8:e9:51:64:53:54:61:1e:1d:d9: 9f:b2:1f:e5:61:c7:9b:64:94:25:dd:f5:9a:d7:72:ee:83:23: 72:ac:bf:8a:1b:23:28:3e:a3:f0:6a:7f:9b:e1:d0:e2:cd:1a: 07:c7:21:c1:7b:42:c7:5e:a5:f0:1b:df:6e:6e:ce:a7:aa:a8: 1e:89:e6:6a:26:c9:95:54:e8:7b:8e:45:a3:ab:41:54:c7:46: 0a:9e:c5:69:52:fa:62:a3:ea:1f:c6:3a:2b:b4:bf:b9:9d:b2: 58:f7:49:70:cf:be:6e:7b:df:99:6f:3d:1a:5f:2f:59:c8:23: a0:e4:6e:91:85:05:f0:9f:1c:0f:1a:b6:55:f7:f5:e6:b6:1b: 4c:3f:27:c5:c6:2b:d8:9a:5d:42:16:dd:8b:62:a1:26:33:1e: 1b:56:be:d8:14:f7:5c:6d:18:97:25:c4:80:9c:b9:80:1c:bd: 11:cd:50:7d:ba:bb:6e:27:f8:b3:50:f1:ac:8a:e6:76:f9:87: f7:d2:7e:14:43:1b:02:8a:92:57:33:fb:1d:65:79:9a:4b:22: 07:d2:9a:76:87:40:33:52:40:07:79:e8:80:14:91:eb:11:e8: 9f:b7:fc:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FFeL07XourC5m60tRIsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzUyOGYxZTU4MjBjMTM2OWU0MjZlYzFmNTlmODBhYjMzZmQxMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfKm4/ks1pEi0JigkXU6AREqs7yg GkBpS319DqMtaJ0ZxvRK1ElURTIRulYykKbXMkBlwk6uicG2PAxobPoe4clNGHXu 8kd/gDbJG2HlsDZROAnz59oPow1CblXTiz5AFojCVGDr1w81W8zHPnb09RPuZQmc O3JsyJjSS05PrKlPoewoCShCRhNGYwTKt/4TcBkEYKokHgv9yd7nzKj655K21eAJ 1t9UTrAQLxo/ruEtU/dyQpUsgybqz+8Z6g5bxQBqcF9k/+bcPD2gPs/t9db48VGQ K7dtJOxGetCKdzcgrCZDbUg2q+qv/R5Eiy4t8j8lMxqiYOI1sWpi0TkG5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPdSjx5YIME2nkJuwfWfgKsz/RAUMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvOTFLUEhsZ2d3VGFlUW03QjlaLUFxelA5RUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWogNwg MA0GCSqGSIb3DQEBCwUAA4IBAQBbhnAQMZFBpkymw8j7znu19GT12fxrzvS0Hbjp UWRTVGEeHdmfsh/lYcebZJQl3fWa13LugyNyrL+KGyMoPqPwan+b4dDizRoHxyHB e0LHXqXwG99ubs6nqqgeieZqJsmVVOh7jkWjq0FUx0YKnsVpUvpio+ofxjortL+5 nbJY90lwz75ue9+Zbz0aXy9ZyCOg5G6RhQXwnxwPGrZV9/XmthtMPyfFxivYml1C Ft2LYqEmMx4bVr7YFPdcbRiXJcSAnLmAHL0RzVB9urtuJ/izUPGsiuZ2+Yf30n4U QxsCipJXM/sdZXmaSyIH0pp2h0AzUkAHeeiAFJHrEeift/wd -----END CERTIFICATE-----Generated at Mon Jan 12 01:22:25 2026 by rpki-client