This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/bwrK1tRV4AWpwHJl-68qI5x7fgA.roa File: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (raw, json) Hash identifier: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE= Subject key identifier: 6F:0A:CA:D6:D4:55:E0:05:A9:C0:72:65:FB:AF:2A:23:9C:7B:7E:00 Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981 Certificate serial: 019B77C6F5A3D5FD22F63045ED440EF5ED94 Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/bwrK1tRV4AWpwHJl-68qI5x7fgA.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214280 IP address blocks: 91.196.32.0/24 maxlen: 24 91.196.33.0/24 maxlen: 24 91.196.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:a3:d5:fd:22:f6:30:45:ed:44:0e:f5:ed:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f0acad6d455e005a9c07265fbaf2a239c7b7e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:2b:e4:c7:a0:97:72:9f:cd:cc:37:79:32: 8c:14:b9:74:f3:a3:34:ef:07:3f:ea:28:80:42:30: e4:0c:bc:5e:1a:83:e9:d5:62:a8:65:f8:37:6c:24: b2:07:ea:43:c5:d1:56:7a:cb:9a:fa:79:c3:0c:83: 71:3b:ac:cc:e4:86:3c:0c:12:e9:d2:1a:b1:f9:92: dd:8f:8a:6c:dc:de:ca:37:91:83:8a:1a:6a:27:79: b9:58:22:6e:b2:69:1f:2d:2f:14:dd:25:02:bc:3f: 3b:e1:0a:53:5d:72:f9:4c:81:37:9d:84:6b:77:f2: f9:c7:5d:5b:af:46:93:d0:62:58:9e:63:d3:5e:e5: c0:fa:f6:78:cb:26:b0:d7:21:74:69:b9:dc:62:86: 50:10:fc:1a:99:be:bd:5b:c6:90:17:fb:f4:ce:b9: 94:26:5f:6c:fa:e7:85:dd:f1:50:eb:ec:2c:01:0e: b1:89:3c:9f:86:eb:a4:8a:ca:83:79:92:49:39:b6: 6e:c4:c9:62:c2:7a:bc:99:eb:bd:4f:3a:c8:01:d9: c8:11:20:2a:93:34:83:25:2d:5d:bd:e5:1f:8c:43: 72:29:39:ca:f9:1f:a1:5a:4f:e7:12:82:20:c7:ed: ce:85:b1:29:83:bf:6b:98:93:75:a1:d6:21:fe:37: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0A:CA:D6:D4:55:E0:05:A9:C0:72:65:FB:AF:2A:23:9C:7B:7E:00 X509v3 Authority Key Identifier: keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/bwrK1tRV4AWpwHJl-68qI5x7fgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.32.0-91.196.34.255 Signature Algorithm: sha256WithRSAEncryption 12:2a:d2:d2:87:be:7d:0b:35:05:73:7a:23:19:6e:b1:4b:79: 83:f2:fb:56:d5:72:12:2b:28:e3:c1:55:35:14:c4:c1:26:94: 94:f2:77:09:4a:90:fd:58:cc:ef:9a:62:bb:b3:33:d7:0c:21: 5c:eb:bb:25:ff:bd:b2:52:7d:a5:b7:b9:c2:40:d3:d3:82:64: 59:4a:ba:db:f5:b4:67:b9:04:ab:90:17:bc:70:39:7a:c7:c6: a9:8f:bb:56:ff:d9:12:1c:54:1e:43:96:a0:51:96:7e:ee:fe: f5:07:0e:18:38:e3:d2:1c:b9:bf:24:7c:54:6d:7e:cd:a8:02: d9:69:fe:18:f7:3d:26:27:e7:ac:03:f7:d8:25:7f:21:22:04: 9d:3a:b4:13:76:c1:2a:3d:a3:4a:86:6e:db:df:69:9f:03:00: a1:16:27:16:cd:c9:c6:fc:4e:2b:63:66:2c:a8:a7:37:d1:50: 59:ca:f5:f9:90:98:77:34:f2:ef:5c:1f:ae:d1:1f:dd:7f:97: 5a:dc:16:99:85:85:20:29:34:a4:94:58:5e:47:71:7f:c2:14: 52:b5:9e:61:1f:e9:0e:f8:b8:24:9d:eb:39:79:53:14:1b:63: 61:05:c1:9c:02:4f:d8:9e:f7:d6:02:b9:f6:9b:12:7f:2c:d3: f6:18:54:23 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xvWj1f0i9jBF7UQO9e2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw NGE5ODEwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjBhY2FkNmQ0NTVlMDA1YTljMDcyNjVmYmFmMmEyMzljN2I3ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ0r5Megl3Kfzcw3eTKMFLl086M0 7wc/6iiAQjDkDLxeGoPp1WKoZfg3bCSyB+pDxdFWesua+nnDDINxO6zM5IY8DBLp 0hqx+ZLdj4ps3N7KN5GDihpqJ3m5WCJusmkfLS8U3SUCvD874QpTXXL5TIE3nYRr d/L5x11br0aT0GJYnmPTXuXA+vZ4yyaw1yF0abncYoZQEPwamb69W8aQF/v0zrmU Jl9s+ueF3fFQ6+wsAQ6xiTyfhuukisqDeZJJObZuxMliwnq8meu9TzrIAdnIESAq kzSDJS1dveUfjENyKTnK+R+hWk/nEoIgx+3OhbEpg79rmJN1odYh/jcYMwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFG8KytbUVeAFqcByZfuvKiOce34AMB8GA1UdIwQY MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt ODM2YzMxMmFjOGMyLzEvYndySzF0UlY0QVdwd0hKbC02OHFJNXg3ZmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVbxCAD BABbxCIwDQYJKoZIhvcNAQELBQADggEBABIq0tKHvn0LNQVzeiMZbrFLeYPy+1bV chIrKOPBVTUUxMEmlJTydwlKkP1YzO+aYruzM9cMIVzruyX/vbJSfaW3ucJA09OC ZFlKutv1tGe5BKuQF7xwOXrHxqmPu1b/2RIcVB5DlqBRln7u/vUHDhg449Icub8k fFRtfs2oAtlp/hj3PSYn56wD99glfyEiBJ06tBN2wSo9o0qGbtvfaZ8DAKEWJxbN ycb8TitjZiyopzfRUFnK9fmQmHc08u9cH67RH91/l1rcFpmFhSApNKSUWF5HcX/C FFK1nmEf6Q74uCSd6zl5UxQbY2EFwZwCT9ie99YCufabEn8s0/YYVCM= -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:00 2026 by rpki-client