This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/jBtjySCq2ld1Ntg6smiqyHDsdNs.roa File: jBtjySCq2ld1Ntg6smiqyHDsdNs.roa (raw, json) Hash identifier: zVyG6ZDReg9r2lMt4sCY0P5PMeh7pF+y9sNnS21ueDQ= Subject key identifier: 8C:1B:63:C9:20:AA:DA:57:75:36:D8:3A:B2:68:AA:C8:70:EC:74:DB Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019B783484C2B53D71860950A4C07AED71CA Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/jBtjySCq2ld1Ntg6smiqyHDsdNs.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210315 IP address blocks: 91.231.200.0/24 maxlen: 24 91.231.201.0/24 maxlen: 24 91.231.202.0/23 maxlen: 23 195.88.254.0/24 maxlen: 24 195.88.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:c2:b5:3d:71:86:09:50:a4:c0:7a:ed:71:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c1b63c920aada577536d83ab268aac870ec74db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:96:23:38:5e:9e:f1:1b:07:4b:c4:81:2c: 85:92:2e:55:38:fa:2e:bb:8a:3a:6c:f3:a4:53:2d: 5e:29:cf:ef:c4:b2:fc:d1:da:b5:49:e1:1b:d2:a8: 5c:b6:1b:3c:1b:f7:fb:89:22:58:4b:21:e9:34:91: b3:d5:4c:88:b7:c9:2a:e3:45:c3:2b:f1:bd:1f:2d: ea:95:6b:5a:bb:95:74:52:86:f5:8e:40:7b:27:90: b5:1c:3b:5c:29:01:13:f6:f7:c8:e5:86:71:85:e9: f9:22:34:e9:e2:0f:d9:d6:52:11:44:eb:25:af:5c: e6:15:6e:55:7f:84:06:be:96:a4:9f:94:01:f5:07: e5:44:76:e4:fa:00:46:65:aa:53:9e:ce:49:c8:7d: b4:cc:59:aa:ee:ea:29:6f:e5:11:13:14:54:30:9a: 65:e2:4d:f0:11:63:ae:97:04:5d:95:b7:9a:f4:16: 06:2b:c1:fc:c9:2e:d9:24:4a:a2:5f:ff:3e:04:5c: d8:a4:aa:cc:1c:5f:c4:3e:e2:b3:7d:11:c2:9d:f7: 9d:fe:92:1e:93:d4:f4:68:52:52:15:e3:9a:6a:1a: 08:47:da:bb:fb:52:3b:8a:25:a3:4b:f3:c1:4c:a0: 82:0e:41:15:f6:d2:d1:72:5f:27:d4:52:e5:02:70: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1B:63:C9:20:AA:DA:57:75:36:D8:3A:B2:68:AA:C8:70:EC:74:DB X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/jBtjySCq2ld1Ntg6smiqyHDsdNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.200.0/22 195.88.254.0/23 Signature Algorithm: sha256WithRSAEncryption 16:3e:ef:da:b3:b2:db:f3:be:96:80:cf:53:a9:57:13:fd:1a: ca:d2:8a:37:49:78:f7:15:19:0a:d0:ab:64:04:ba:4e:63:15: 7a:fe:ff:bd:20:d8:99:46:4b:f8:a2:29:60:98:f7:73:7d:21: 1f:d4:c3:98:86:4a:49:57:77:32:08:0f:1c:56:9f:3b:bf:08: 86:69:e3:70:71:c1:a5:c0:44:5a:c6:19:ad:54:9c:e3:c6:cd: 8d:2d:60:48:59:19:ba:5f:c7:d0:a5:2a:08:0a:f3:71:41:25: 78:c4:a1:0a:81:25:d9:8a:33:79:3d:6e:0b:3b:70:d9:0f:b4: fc:05:96:26:74:77:d6:1e:02:c0:69:18:d5:d1:87:7e:0d:c6: 57:03:7d:72:87:94:4b:56:76:ed:5b:8d:f1:35:65:c0:ea:de: 5f:73:04:d5:34:f7:79:03:e8:95:45:a7:b0:58:8d:f2:2b:ba: 53:27:5f:8c:30:27:45:07:fd:88:29:89:66:ea:b9:e4:4b:39: 02:61:39:6b:e5:c9:20:83:c7:d8:9b:f9:33:1d:91:e0:b4:56: c3:68:7b:d5:50:1a:d7:b8:d8:84:2b:fc:4c:27:e0:ff:9d:92: dc:e7:37:2c:03:b7:56:f6:6a:78:e8:89:b6:b2:99:00:a8:e6: 7b:f7:21:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NITCtT1xhglQpMB67XHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzFiNjNjOTIwYWFkYTU3NzUzNmQ4M2FiMjY4YWFjODcwZWM3NGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvSWIzhenvEbB0vEgSyFki5VOPou u4o6bPOkUy1eKc/vxLL80dq1SeEb0qhcths8G/f7iSJYSyHpNJGz1UyIt8kq40XD K/G9Hy3qlWtau5V0Uob1jkB7J5C1HDtcKQET9vfI5YZxhen5IjTp4g/Z1lIRROsl r1zmFW5Vf4QGvpakn5QB9QflRHbk+gBGZapTns5JyH20zFmq7uopb+URExRUMJpl 4k3wEWOulwRdlbea9BYGK8H8yS7ZJEqiX/8+BFzYpKrMHF/EPuKzfRHCnfed/pIe k9T0aFJSFeOaahoIR9q7+1I7iiWjS/PBTKCCDkEV9tLRcl8n1FLlAnA9ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIwbY8kgqtpXdTbYOrJoqshw7HTbMB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvakJ0anlTQ3EybGQxTnRnNnNtaXF5SERzZE5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+fIAwQB w1j+MA0GCSqGSIb3DQEBCwUAA4IBAQAWPu/as7Lb876WgM9TqVcT/RrK0oo3SXj3 FRkK0KtkBLpOYxV6/v+9INiZRkv4oilgmPdzfSEf1MOYhkpJV3cyCA8cVp87vwiG aeNwccGlwERaxhmtVJzjxs2NLWBIWRm6X8fQpSoICvNxQSV4xKEKgSXZijN5PW4L O3DZD7T8BZYmdHfWHgLAaRjV0Yd+DcZXA31yh5RLVnbtW43xNWXA6t5fcwTVNPd5 A+iVRaewWI3yK7pTJ1+MMCdFB/2IKYlm6rnkSzkCYTlr5ckgg8fYm/kzHZHgtFbD aHvVUBrXuNiEK/xMJ+D/nZLc5zcsA7dW9mp46Im2spkAqOZ79yH2 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:11 2026 by rpki-client