This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/06iciWMnCvsa1G81d73kMnybKl0.roa File: 06iciWMnCvsa1G81d73kMnybKl0.roa (raw, json) Hash identifier: 9/zv2guSkQOWznP9YeG/uAwYzC8tOeda3ReFt/vmKVQ= Subject key identifier: D3:A8:9C:89:63:27:0A:FB:1A:D4:6F:35:77:BD:E4:32:7C:9B:2A:5D Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Certificate serial: 019B7C11411401C9FC98949063328552EEB4 Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/06iciWMnCvsa1G81d73kMnybKl0.roa Signing time: Fri 02 Jan 2026 00:17:44 +0000 ROA not before: Fri 02 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31633 IP address blocks: 91.192.128.0/22 maxlen: 22 91.192.128.0/24 maxlen: 24 91.192.129.0/24 maxlen: 24 91.192.130.0/24 maxlen: 24 91.192.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:41:14:01:c9:fc:98:94:90:63:32:85:52:ee:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Validity Not Before: Jan 2 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3a89c8963270afb1ad46f3577bde4327c9b2a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a3:f0:44:fc:63:95:22:7b:11:06:44:f1:b5: fc:34:53:33:bf:32:fa:da:8c:c3:e8:0f:a4:f7:6a: f1:1e:a3:93:74:94:d4:53:0a:6c:37:ab:22:68:7d: 19:ba:66:65:55:58:75:99:ec:bc:0e:98:90:71:06: 46:e9:b4:fd:81:9e:4a:94:6d:f9:e9:e8:a1:5f:b5: d6:96:52:e4:cc:68:40:dc:7a:72:0f:b4:91:f7:fe: 4e:ce:e8:04:15:cf:d0:8f:b0:49:41:55:09:10:1f: 25:09:90:c8:b0:c4:8d:30:b5:41:06:41:39:ec:91: d4:bf:fb:b0:7f:96:a7:7e:4c:bf:7a:2f:a2:d9:c9: 7c:2f:86:52:7a:d9:df:ee:b2:5b:d9:92:88:25:af: 6e:85:88:38:9d:8f:b8:31:81:c4:af:ac:65:db:b2: da:eb:e8:df:f6:b0:60:6e:58:60:56:d6:a3:14:f2: 16:05:c0:e7:2a:52:14:65:dc:54:63:3b:26:99:e6: 8a:e4:f5:1e:5e:a3:c5:24:71:66:3f:cb:6d:2b:17: 60:91:47:e3:53:69:ed:43:39:e1:54:10:06:4c:be: ee:c9:0c:67:c3:84:04:0e:a4:92:5b:9d:b9:29:22: b1:7e:0d:70:9f:0c:40:af:f1:a8:b6:af:db:cd:5a: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:9C:89:63:27:0A:FB:1A:D4:6F:35:77:BD:E4:32:7C:9B:2A:5D X509v3 Authority Key Identifier: keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/06iciWMnCvsa1G81d73kMnybKl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.128.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:f9:a1:2b:48:63:b2:e4:f0:61:c8:75:b6:0b:25:d0:44:e0: 36:12:36:a4:11:c3:89:83:7f:61:81:c9:ee:53:4f:51:ad:dd: f8:b1:31:38:8e:31:06:a6:f5:7d:b7:2d:1d:0f:ec:99:94:85: 61:11:6c:8e:e1:55:ab:4d:eb:2d:63:a6:8b:21:a7:94:24:01: 0b:bb:83:0a:8d:65:a7:a8:28:85:6a:c1:3e:c0:e8:b0:3f:b9: ae:f3:17:3c:b3:18:06:ca:da:fa:17:de:40:ef:9e:9d:cf:b0: 42:b8:ae:43:78:51:6d:07:aa:80:da:42:32:d4:e3:bf:f8:0c: 9b:46:f0:23:a1:e7:9c:3f:bc:0f:76:24:9a:c9:3a:b2:f1:b6: d3:20:46:42:9c:b9:6d:a7:18:9b:51:65:14:20:9b:6f:a6:c2: 70:21:63:cb:d9:e9:15:2d:0a:cd:8f:a1:ba:16:83:75:5b:67: f1:57:86:54:fb:06:0e:4e:29:27:64:22:2e:21:6f:fa:45:57: 16:68:3e:8e:fc:b6:bf:23:84:3c:35:f0:f8:cd:bf:06:3e:6b: 52:db:d2:5b:fd:be:9a:a6:bf:c7:ff:56:f5:a8:21:d9:87:b3: 8b:13:c7:ea:5e:c2:ce:55:8f:da:ec:6d:a2:2c:a4:9e:b9:6c: 3e:96:5e:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EUEUAcn8mJSQYzKFUu60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm NzdjZDcwHhcNMjYwMTAyMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2E4OWM4OTYzMjcwYWZiMWFkNDZmMzU3N2JkZTQzMjdjOWIyYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6PwRPxjlSJ7EQZE8bX8NFMzvzL6 2ozD6A+k92rxHqOTdJTUUwpsN6siaH0ZumZlVVh1mey8DpiQcQZG6bT9gZ5KlG35 6eihX7XWllLkzGhA3HpyD7SR9/5OzugEFc/Qj7BJQVUJEB8lCZDIsMSNMLVBBkE5 7JHUv/uwf5anfky/ei+i2cl8L4ZSetnf7rJb2ZKIJa9uhYg4nY+4MYHEr6xl27La 6+jf9rBgblhgVtajFPIWBcDnKlIUZdxUYzsmmeaK5PUeXqPFJHFmP8ttKxdgkUfj U2ntQznhVBAGTL7uyQxnw4QEDqSSW525KSKxfg1wnwxAr/Gotq/bzVr3mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOonIljJwr7GtRvNXe95DJ8mypdMB8GA1UdIwQY MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt NGE0YTNiMDQwOGE2LzEvMDZpY2lXTW5DdnNhMUc4MWQ3M2tNbnliS2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2 LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8CAMA0G CSqGSIb3DQEBCwUAA4IBAQAd+aErSGOy5PBhyHW2CyXQROA2EjakEcOJg39hgcnu U09Rrd34sTE4jjEGpvV9ty0dD+yZlIVhEWyO4VWrTestY6aLIaeUJAELu4MKjWWn qCiFasE+wOiwP7mu8xc8sxgGytr6F95A756dz7BCuK5DeFFtB6qA2kIy1OO/+Ayb RvAjoeecP7wPdiSayTqy8bbTIEZCnLltpxibUWUUIJtvpsJwIWPL2ekVLQrNj6G6 FoN1W2fxV4ZU+wYOTiknZCIuIW/6RVcWaD6O/La/I4Q8NfD4zb8GPmtS29Jb/b6a pr/H/1b1qCHZh7OLE8fqXsLOVY/a7G2iLKSeuWw+ll5O -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:05 2026 by rpki-client