This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/bR0s0-L9ef3k54ai6yItY5Z4Pzs.roa File: bR0s0-L9ef3k54ai6yItY5Z4Pzs.roa (raw, json) Hash identifier: itNDBxOaBMe/lzeU5kgu9WeWmeWtpuj90zWY8a7xSm8= Subject key identifier: 6D:1D:2C:D3:E2:FD:79:FD:E4:E7:86:A2:EB:22:2D:63:96:78:3F:3B Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B277FE0607C6B01863A14F3C657EB Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/bR0s0-L9ef3k54ai6yItY5Z4Pzs.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212363 IP address blocks: 91.148.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:27:7f:e0:60:7c:6b:01:86:3a:14:f3:c6:57:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d1d2cd3e2fd79fde4e786a2eb222d6396783f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:42:5a:db:38:d9:c4:ff:5b:b0:8a:8a:9d: ea:14:59:7e:d5:fb:ca:87:63:c3:c1:f6:c3:06:dd: 27:49:24:c2:8d:ac:af:79:85:1f:64:60:b8:cb:f1: 74:6e:72:35:a0:ec:e1:c2:1a:41:d0:18:6f:43:c7: 19:d8:3c:10:52:65:58:34:99:6c:e9:3c:6d:cc:36: b7:9a:6a:24:39:87:e5:20:2f:b3:e9:b5:3a:1f:2d: 0f:fc:76:c0:80:d7:97:a2:ad:8f:c3:89:8b:36:52: ca:e0:48:af:08:18:d0:bd:51:b7:81:b0:ae:3c:f4: f7:b1:a9:4d:ad:46:54:3c:61:54:34:7e:d7:29:93: 91:af:a5:93:09:53:3c:f6:38:fb:98:59:68:63:42: 8f:85:bd:56:14:73:9d:28:b1:d4:29:eb:e2:91:06: 07:80:41:23:41:10:a0:8d:9b:aa:b2:88:d6:20:26: de:00:51:da:53:e4:f9:1c:92:7c:11:fe:3c:e5:03: bf:00:7b:88:6a:3f:80:75:3c:c6:8a:02:bb:2e:f6: 7e:e3:e1:6e:1d:3d:0c:ce:ee:8c:f8:42:6d:31:a3: 63:9f:a7:c4:0b:40:47:1d:9b:f1:2c:96:e5:f1:93: e8:b8:cf:bc:f5:b3:d3:a4:69:e7:67:fa:70:4f:ee: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1D:2C:D3:E2:FD:79:FD:E4:E7:86:A2:EB:22:2D:63:96:78:3F:3B X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/bR0s0-L9ef3k54ai6yItY5Z4Pzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.148.184.0/24 Signature Algorithm: sha256WithRSAEncryption b7:6a:ce:99:2b:a2:2a:db:c7:04:ab:e6:79:3c:b9:27:c4:eb: 8a:fc:88:e9:5a:69:a2:48:bd:4d:27:11:7a:fa:cd:4e:dc:61: 48:88:40:21:e7:91:7f:9e:f0:fc:ae:7b:eb:85:47:a5:ca:75: 59:69:94:ec:f9:c9:34:84:39:46:8a:5a:e1:52:f5:89:2b:cb: 4e:da:a8:d9:fd:14:53:10:fe:99:44:c4:ae:7b:33:ee:f6:d3: 2e:86:4e:6c:47:2d:01:62:85:e9:dc:f2:55:2a:bb:39:c8:46: 45:4b:47:c8:d5:77:5b:91:1a:5e:45:a5:60:75:63:a1:4b:13: 39:c7:9f:6c:85:9c:78:1c:6b:c9:fd:9e:ee:58:42:b8:ee:3f: b1:8f:67:9f:8b:d6:49:fe:9f:85:28:9c:b8:eb:38:18:65:32: 63:b4:a7:4b:7b:e3:58:3d:2a:3f:9f:0d:8d:91:b3:6b:f2:3e: fe:55:e4:0c:75:12:ad:39:0d:7d:54:51:43:f1:3d:99:43:46: 21:89:48:1c:e2:70:c7:db:a0:66:6b:1c:11:9f:8d:6a:5a:da: 9f:92:c5:40:8e:be:32:0b:e5:df:24:d9:60:47:95:28:13:a1: 9f:c4:32:08:e9:46:2d:26:61:6a:13:4b:b4:d7:70:17:47:d8: 76:62:a8:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wyd/4GB8awGGOhTzxlfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDFkMmNkM2UyZmQ3OWZkZTRlNzg2YTJlYjIyMmQ2Mzk2NzgzZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBpCWts42cT/W7CKip3qFFl+1fvK h2PDwfbDBt0nSSTCjayveYUfZGC4y/F0bnI1oOzhwhpB0BhvQ8cZ2DwQUmVYNJls 6TxtzDa3mmokOYflIC+z6bU6Hy0P/HbAgNeXoq2Pw4mLNlLK4EivCBjQvVG3gbCu PPT3salNrUZUPGFUNH7XKZORr6WTCVM89jj7mFloY0KPhb1WFHOdKLHUKevikQYH gEEjQRCgjZuqsojWICbeAFHaU+T5HJJ8Ef485QO/AHuIaj+AdTzGigK7LvZ+4+Fu HT0Mzu6M+EJtMaNjn6fEC0BHHZvxLJbl8ZPouM+89bPTpGnnZ/pwT+7lCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0dLNPi/Xn95OeGousiLWOWeD87MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvYlIwczAtTDllZjNrNTRhaTZ5SXRZNVo0UHpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5S4MA0G CSqGSIb3DQEBCwUAA4IBAQC3as6ZK6Iq28cEq+Z5PLknxOuK/IjpWmmiSL1NJxF6 +s1O3GFIiEAh55F/nvD8rnvrhUelynVZaZTs+ck0hDlGilrhUvWJK8tO2qjZ/RRT EP6ZRMSuezPu9tMuhk5sRy0BYoXp3PJVKrs5yEZFS0fI1XdbkRpeRaVgdWOhSxM5 x59shZx4HGvJ/Z7uWEK47j+xj2efi9ZJ/p+FKJy46zgYZTJjtKdLe+NYPSo/nw2N kbNr8j7+VeQMdRKtOQ19VFFD8T2ZQ0YhiUgc4nDH26BmaxwRn41qWtqfksVAjr4y C+XfJNlgR5UoE6GfxDII6UYtJmFqE0u013AXR9h2Yqgh -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:56 2026 by rpki-client