This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa File: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (raw, json) Hash identifier: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM= Subject key identifier: 8B:24:BC:4B:A2:B3:2B:A8:51:F1:98:2E:8D:64:0A:D9:91:6F:1F:71 Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Certificate serial: 019B79ECA209A933867B4FEBB809F4509C40 Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210626 IP address blocks: 91.242.247.0/24 maxlen: 24 2a11:af40::/29 maxlen: 29 2a11:af40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a2:09:a9:33:86:7b:4f:eb:b8:09:f4:50:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b24bc4ba2b32ba851f1982e8d640ad9916f1f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:9d:a2:84:16:75:4c:d9:7f:11:04:29:f0: d8:9e:39:69:f6:f4:07:e9:5d:e1:53:5e:07:58:73: c3:a9:7e:59:9b:11:f8:66:73:2d:9b:97:c1:c9:a9: 6c:d5:e6:32:d5:92:ac:0e:3e:35:7e:e6:3a:ed:fe: 30:92:bf:0c:e4:fe:1c:53:fe:e5:7f:8b:cc:c5:35: 50:a3:ca:84:19:92:46:3b:7a:2a:32:0a:d9:de:fc: fb:ae:88:ac:ff:02:ec:c6:a3:3d:0a:db:21:b6:d6: 41:51:4a:71:c4:e1:fd:e9:77:62:6a:d6:56:26:71: f9:5c:73:a0:66:5a:69:4e:0d:9c:c5:0a:aa:a7:e8: db:d8:a2:00:64:c2:17:9f:97:b8:04:71:51:08:38: 39:a5:20:7d:dc:81:81:55:f0:09:94:ef:67:39:bf: 7e:6c:6d:b9:50:a5:81:94:0d:84:44:90:d3:83:da: 4c:20:35:b7:8d:fc:00:a6:d1:ea:44:f8:2a:a0:49: f4:08:de:55:f4:b3:c4:29:3e:a8:1d:27:9c:cd:14: 6d:88:2a:a1:dc:7a:29:3e:c8:ba:9c:17:1c:8c:ab: 22:4c:51:7c:1f:dc:05:48:65:2a:7b:1b:86:6d:e5: 64:24:fe:4c:46:7e:b0:52:ae:28:10:6c:fc:ba:04: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:24:BC:4B:A2:B3:2B:A8:51:F1:98:2E:8D:64:0A:D9:91:6F:1F:71 X509v3 Authority Key Identifier: keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.247.0/24 IPv6: 2a11:af40::/29 Signature Algorithm: sha256WithRSAEncryption b9:8f:3f:db:9b:71:6b:53:49:7d:89:99:49:50:a0:22:34:1a: bc:76:79:4e:91:6a:01:57:97:80:a4:1e:46:9e:2f:63:32:9b: 1a:b0:42:58:37:64:e9:c8:ac:05:bf:71:3b:b2:53:12:26:c6: 8f:d5:4d:fb:fb:58:3a:80:65:46:b2:4f:77:b3:dc:49:30:fc: 37:80:30:4b:b0:59:21:ff:9e:79:74:7a:b4:dc:01:9e:25:bb: 3d:f9:39:42:f5:4b:28:19:9f:c7:42:be:7b:79:75:85:1d:ce: 6e:48:0c:9f:ec:e4:bd:c6:8c:cc:80:02:ef:45:91:7b:14:44: 8f:4e:1a:9c:9c:80:c1:63:b3:01:b7:5c:32:9e:41:80:cd:d5: cb:78:f5:7d:bf:b3:95:90:d8:0a:c0:6e:79:28:38:3f:4a:89: 81:dd:cc:39:34:ab:51:ca:82:80:4a:91:30:b8:19:fe:0a:af: 6b:28:bb:8d:fd:fc:3f:71:56:44:db:bb:86:2b:9c:5e:91:6f: 7e:47:57:cf:77:71:01:d7:54:b0:08:78:b0:67:3d:07:9c:0e: 07:3d:37:8f:5f:cc:18:ca:e1:1c:32:bf:45:04:56:06:aa:82: 5d:d0:f8:9d:5d:ad:54:0d:5c:c9:dd:0b:82:65:26:60:77:da: ff:7a:2b:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57KIJqTOGe0/ruAn0UJxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWZhNDExZjA5MzZhNDY2ZDg0MWVjMjkwY2Q4MGNjNTUw YTdmNmUwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjI0YmM0YmEyYjMyYmE4NTFmMTk4MmU4ZDY0MGFkOTkxNmYxZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tadooQWdUzZfxEEKfDYnjlp9vQH 6V3hU14HWHPDqX5ZmxH4ZnMtm5fByals1eYy1ZKsDj41fuY67f4wkr8M5P4cU/7l f4vMxTVQo8qEGZJGO3oqMgrZ3vz7rois/wLsxqM9CtshttZBUUpxxOH96XdiatZW JnH5XHOgZlppTg2cxQqqp+jb2KIAZMIXn5e4BHFRCDg5pSB93IGBVfAJlO9nOb9+ bG25UKWBlA2ERJDTg9pMIDW3jfwAptHqRPgqoEn0CN5V9LPEKT6oHSeczRRtiCqh 3HopPsi6nBccjKsiTFF8H9wFSGUqexuGbeVkJP5MRn6wUq4oEGz8ugQq/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIskvEuisyuoUfGYLo1kCtmRbx9xMB8GA1UdIwQY MBaAFGzvpBHwk2pGbYQewpDNgMxVCn9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEt ZTgxMWQ5NDA3ZTdhLzEvaXlTOFM2S3pLNmhSOFpndWpXUUsyWkZ2SDNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81M2IxM2UtZGViYi00NTZhLThkYzEtZTgxMWQ5NDA3ZTdh LzEvYk8ta0VmQ1Rha1p0aEI3Q2tNMkF6RlVLZjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW/L3MA0E AgACMAcDBQMqEa9AMA0GCSqGSIb3DQEBCwUAA4IBAQC5jz/bm3FrU0l9iZlJUKAi NBq8dnlOkWoBV5eApB5Gni9jMpsasEJYN2TpyKwFv3E7slMSJsaP1U37+1g6gGVG sk93s9xJMPw3gDBLsFkh/555dHq03AGeJbs9+TlC9UsoGZ/HQr57eXWFHc5uSAyf 7OS9xozMgALvRZF7FESPThqcnIDBY7MBt1wynkGAzdXLePV9v7OVkNgKwG55KDg/ SomB3cw5NKtRyoKASpEwuBn+Cq9rKLuN/fw/cVZE27uGK5xekW9+R1fPd3EB11Sw CHiwZz0HnA4HPTePX8wYyuEcMr9FBFYGqoJd0PidXa1UDVzJ3QuCZSZgd9r/eit6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:21 2026 by rpki-client