This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/buuNqOKeytQjK-fw0E6NNtyOW_g.roa File: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (raw, json) Hash identifier: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs= Subject key identifier: 6E:EB:8D:A8:E2:9E:CA:D4:23:2B:E7:F0:D0:4E:8D:36:DC:8E:5B:F8 Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Certificate serial: 019B77C66FAC19F541D8AED8421DED1AB98D Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/buuNqOKeytQjK-fw0E6NNtyOW_g.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31424 IP address blocks: 91.202.120.0/22 maxlen: 22 2001:67c:2e38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:ac:19:f5:41:d8:ae:d8:42:1d:ed:1a:b9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eeb8da8e29ecad4232be7f0d04e8d36dc8e5bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:75:57:c1:e0:34:4e:b9:c0:ec:c5:a5:53: 43:c4:4d:97:b0:66:ab:1f:ac:6c:ec:1c:4d:1f:c4: 11:60:81:4e:b1:09:8d:c5:21:ba:4f:f7:f3:26:b2: c8:6b:9c:8d:85:2a:55:31:5b:b5:95:d2:21:7c:9a: 0a:9f:38:9c:82:da:1f:90:a5:de:58:2f:0f:e5:40: 22:4d:ab:32:c2:3e:4f:8b:6c:6b:7b:6f:9d:ae:ab: bf:b7:60:97:73:48:e1:cd:a3:2f:eb:cd:91:32:a6: 92:71:7c:7b:f7:d7:fc:4e:9e:74:d2:ed:b8:76:47: 11:1f:2e:df:73:6b:74:a1:e8:3f:0b:a1:bd:f6:ba: 11:d6:ea:00:78:b8:9f:da:f3:26:93:8c:bc:81:30: 40:c9:73:f3:d9:ea:91:75:fa:62:d9:31:35:2f:47: 1c:94:41:48:83:b1:cb:29:f4:37:a3:49:80:39:05: c0:65:b1:bf:8b:27:61:4a:68:37:af:dd:36:11:ca: d8:78:fd:da:7a:09:96:68:e6:43:ca:91:ab:76:7c: 39:f9:a1:7b:a7:ca:5c:25:79:4e:d6:9c:ec:d0:46: cc:22:42:ba:b0:1f:26:49:6f:fe:c7:2f:7b:8d:3e: ff:b0:a2:5d:35:d0:04:d9:24:05:ab:c9:09:65:a0: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EB:8D:A8:E2:9E:CA:D4:23:2B:E7:F0:D0:4E:8D:36:DC:8E:5B:F8 X509v3 Authority Key Identifier: keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/buuNqOKeytQjK-fw0E6NNtyOW_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.120.0/22 IPv6: 2001:67c:2e38::/48 Signature Algorithm: sha256WithRSAEncryption 32:90:d8:c6:80:59:98:7f:b3:54:43:42:6e:9a:b6:8c:2b:fa: e2:9f:2d:5f:86:16:ea:9a:24:94:b8:43:66:34:2d:4c:fe:0b: 86:ab:85:03:a1:db:34:4f:95:e8:e9:22:54:27:4c:89:a7:6d: 22:a9:5b:37:08:3d:23:3d:3d:16:ce:92:8d:a8:04:a4:d0:97: 8c:26:7d:29:80:d8:07:a4:3a:8d:7f:2e:83:b3:e3:b5:ad:d1: ce:1b:ee:95:7f:42:60:0c:89:6a:ce:0f:e4:cc:d6:be:9b:49: 31:53:b8:3a:e4:99:14:b3:85:34:5e:7a:76:c0:78:e7:ce:5b: 5a:92:3d:39:87:ff:12:98:d5:72:ce:9b:ad:3a:4e:e9:95:bb: 22:1f:54:24:d8:9c:e5:6b:dc:11:fe:cd:63:01:49:e8:b8:f9: c6:df:7e:a9:eb:1a:f2:99:d0:62:e7:fb:f3:6d:c6:43:db:c4: d3:71:98:07:82:db:34:8a:84:35:17:94:6c:54:72:60:58:10: b8:42:b8:c3:fc:d9:51:85:7a:62:b4:63:63:eb:1e:bd:2b:82: 80:ad:66:21:85:35:bd:c8:16:a7:3b:f5:96:dc:4c:b4:d8:fd: 91:5d:4d:58:cc:ed:dc:e0:22:18:d8:bc:cb:b8:a2:92:5d:b3: 84:3f:23:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xm+sGfVB2K7YQh3tGrmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTc3NzdjN2FmYjdkNDM5YjQ2ZjY4MWM0YzdiZjZhODI1 MmUzMTUwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWViOGRhOGUyOWVjYWQ0MjMyYmU3ZjBkMDRlOGQzNmRjOGU1YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTl1V8HgNE65wOzFpVNDxE2XsGar H6xs7BxNH8QRYIFOsQmNxSG6T/fzJrLIa5yNhSpVMVu1ldIhfJoKnzicgtofkKXe WC8P5UAiTasywj5Pi2xre2+drqu/t2CXc0jhzaMv682RMqaScXx799f8Tp500u24 dkcRHy7fc2t0oeg/C6G99roR1uoAeLif2vMmk4y8gTBAyXPz2eqRdfpi2TE1L0cc lEFIg7HLKfQ3o0mAOQXAZbG/iydhSmg3r902EcrYeP3aegmWaOZDypGrdnw5+aF7 p8pcJXlO1pzs0EbMIkK6sB8mSW/+xy97jT7/sKJdNdAE2SQFq8kJZaCBqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG7rjajinsrUIyvn8NBOjTbcjlv4MB8GA1UdIwQY MBaAFKTnd3x6+31Dm0b2gcTHv2qCUuMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjct NjQxY2ZiNmUzZDliLzEvYnV1TnFPS2V5dFFqSy1mdzBFNk5OdHlPV19nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDli LzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW8p4MA8E AgACMAkDBwAgAQZ8LjgwDQYJKoZIhvcNAQELBQADggEBADKQ2MaAWZh/s1RDQm6a towr+uKfLV+GFuqaJJS4Q2Y0LUz+C4arhQOh2zRPlejpIlQnTImnbSKpWzcIPSM9 PRbOko2oBKTQl4wmfSmA2AekOo1/LoOz47Wt0c4b7pV/QmAMiWrOD+TM1r6bSTFT uDrkmRSzhTReenbAeOfOW1qSPTmH/xKY1XLOm606TumVuyIfVCTYnOVr3BH+zWMB Sei4+cbffqnrGvKZ0GLn+/NtxkPbxNNxmAeC2zSKhDUXlGxUcmBYELhCuMP82VGF emK0Y2PrHr0rgoCtZiGFNb3IFqc79ZbcTLTY/ZFdTVjM7dzgIhjYvMu4opJds4Q/ I78= -----END CERTIFICATE-----Generated at Mon Jan 26 12:20:55 2026 by rpki-client