This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/Ch0DBTwPBELRLNgplM4F3s9-zYY.roa File: Ch0DBTwPBELRLNgplM4F3s9-zYY.roa (raw, json) Hash identifier: 9L/0ugpJ1EuWwvVV5p15VHSh4bTMj4enT9HVoaEisEA= Subject key identifier: 0A:1D:03:05:3C:0F:04:42:D1:2C:D8:29:94:CE:05:DE:CF:7E:CD:86 Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8 Certificate serial: 019B7C12B564E62465A2E863C316A2B29CD8 Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/Ch0DBTwPBELRLNgplM4F3s9-zYY.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208116 IP address blocks: 91.204.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b5:64:e6:24:65:a2:e8:63:c3:16:a2:b2:9c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a1d03053c0f0442d12cd82994ce05decf7ecd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:56:44:ec:16:e2:60:58:73:b3:29:fa:3a: 70:70:6e:52:6a:b6:7c:80:0a:6f:a9:0a:0d:25:57: a7:bd:88:48:bb:b7:03:29:24:75:8b:5d:20:02:fa: c6:6a:09:d6:13:8a:bd:ae:ee:ba:d4:f8:e4:73:05: d8:3d:fe:2b:44:ac:37:c0:9c:c3:50:3e:ce:3f:37: a5:2a:65:0a:cd:13:90:86:28:fe:9b:4c:2a:8c:3f: 2c:f3:c6:21:6e:78:c7:6a:7f:45:d8:0a:d6:92:f3: 12:e7:40:34:58:00:f3:08:5c:c0:e2:61:33:2f:67: 9e:41:bc:ba:21:51:0e:fb:e9:bb:08:57:27:38:6d: 92:90:2d:ff:6f:31:7a:50:8a:fd:87:2d:a1:93:14: 75:0d:80:fb:fa:c5:be:3f:0f:52:44:25:4f:1c:80: ac:0a:fc:d8:44:cb:a0:c8:7d:9d:56:e4:9e:a5:bf: 32:c1:92:35:9e:94:30:0d:63:61:89:3b:f2:c9:25: 82:7a:b3:c2:ea:6f:4a:25:0f:e6:e7:e8:54:1f:49: 84:b2:f8:ce:8c:23:12:84:8c:8a:63:10:d3:60:69: 05:d0:08:a8:54:8f:33:9d:e0:b2:12:48:54:b0:ef: 7f:35:74:30:16:9b:e1:c6:cb:7f:d9:9f:03:0d:fc: 3f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1D:03:05:3C:0F:04:42:D1:2C:D8:29:94:CE:05:DE:CF:7E:CD:86 X509v3 Authority Key Identifier: keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/Ch0DBTwPBELRLNgplM4F3s9-zYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.82.0/24 Signature Algorithm: sha256WithRSAEncryption 22:da:4f:cb:41:59:c6:a7:ac:d9:a6:ce:b9:ad:d2:89:ba:17: ba:1c:9f:60:63:07:1d:8c:1f:5e:e2:cd:7f:ab:9f:6a:d9:d2: 70:d3:5e:37:44:c4:74:24:b0:22:ad:4c:8d:01:0c:e7:ba:7a: 32:ca:8f:bd:b0:66:3e:c5:24:6a:ca:d9:47:79:98:18:d5:09: 12:dc:5e:6e:b4:1d:92:26:55:27:cb:0f:78:ac:3a:1a:21:10: ee:59:5d:01:e7:a9:80:7e:ab:a1:98:31:92:8b:df:f6:b6:8f: e3:99:01:0a:3e:26:8d:71:08:52:f4:54:c7:a9:18:33:bc:cb: 24:6b:73:78:49:86:4f:8d:d0:00:66:bb:f1:f6:5f:47:c7:75: 96:25:fa:74:01:45:9e:97:06:85:68:12:06:4b:48:16:66:4d: fc:39:c5:a6:08:c4:0c:28:ae:2d:9d:da:25:81:17:25:46:f4: e1:1b:3b:64:f3:ba:9c:8f:3c:ce:cc:dc:9b:1d:e4:d9:db:80: e0:9a:5f:c2:00:c8:31:d9:b9:59:f8:f2:42:e7:36:ae:38:74: 13:2b:2f:bf:2a:ff:f0:0d:1b:13:d6:02:fd:c4:b2:87:45:c8: 97:19:59:ce:c7:29:05:62:d8:3a:f1:e2:ba:38:12:fd:e8:a4: 2e:09:f5:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErVk5iRlouhjwxaispzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTQ2ZjRhODI2ZDYyMmEzMzhlZDgzZTBhZmNkZjc4Yzg3 NjA0ZjgwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTFkMDMwNTNjMGYwNDQyZDEyY2Q4Mjk5NGNlMDVkZWNmN2VjZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSZWROwW4mBYc7Mp+jpwcG5SarZ8 gApvqQoNJVenvYhIu7cDKSR1i10gAvrGagnWE4q9ru661PjkcwXYPf4rRKw3wJzD UD7OPzelKmUKzROQhij+m0wqjD8s88YhbnjHan9F2ArWkvMS50A0WADzCFzA4mEz L2eeQby6IVEO++m7CFcnOG2SkC3/bzF6UIr9hy2hkxR1DYD7+sW+Pw9SRCVPHICs CvzYRMugyH2dVuSepb8ywZI1npQwDWNhiTvyySWCerPC6m9KJQ/m5+hUH0mEsvjO jCMShIyKYxDTYGkF0AioVI8zneCyEkhUsO9/NXQwFpvhxst/2Z8DDfw/mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAodAwU8DwRC0SzYKZTOBd7Pfs2GMB8GA1UdIwQY MBaAFBqUb0qCbWIqM47YPgr833jIdgT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BSdlNvSnRZaW96anRnLUN2emZlTWgyQlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YmE2YTMtMjVlMC00OTlhLWE3YTkt OTgzOThmZGJjOWZiLzEvQ2gwREJUd1BCRUxSTE5ncGxNNEYzczktellZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82YmE2YTMtMjVlMC00OTlhLWE3YTktOTgzOThmZGJjOWZi LzEvR3BSdlNvSnRZaW96anRnLUN2emZlTWgyQlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8xSMA0G CSqGSIb3DQEBCwUAA4IBAQAi2k/LQVnGp6zZps65rdKJuhe6HJ9gYwcdjB9e4s1/ q59q2dJw0143RMR0JLAirUyNAQznunoyyo+9sGY+xSRqytlHeZgY1QkS3F5utB2S JlUnyw94rDoaIRDuWV0B56mAfquhmDGSi9/2to/jmQEKPiaNcQhS9FTHqRgzvMsk a3N4SYZPjdAAZrvx9l9Hx3WWJfp0AUWelwaFaBIGS0gWZk38OcWmCMQMKK4tndol gRclRvThGztk87qcjzzOzNybHeTZ24Dgml/CAMgx2blZ+PJC5zauOHQTKy+/Kv/w DRsT1gL9xLKHRciXGVnOxykFYtg68eK6OBL96KQuCfVE -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:37 2026 by rpki-client