This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/v9xxAs53z8-Lo-M8MAasS_fTI5w.roa File: v9xxAs53z8-Lo-M8MAasS_fTI5w.roa (raw, json) Hash identifier: W5P7f8MNnL6/RnaFt8r/SNRF065+Vy7YUi1ouIgirhU= Subject key identifier: BF:DC:71:02:CE:77:CF:CF:8B:A3:E3:3C:30:06:AC:4B:F7:D3:23:9C Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Certificate serial: 019B7F83F66329CEAC46B0794F135264C805 Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/v9xxAs53z8-Lo-M8MAasS_fTI5w.roa Signing time: Fri 02 Jan 2026 16:21:53 +0000 ROA not before: Fri 02 Jan 2026 16:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211580 IP address blocks: 91.197.120.0/24 maxlen: 24 91.197.121.0/24 maxlen: 24 91.197.122.0/24 maxlen: 24 91.197.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f6:63:29:ce:ac:46:b0:79:4f:13:52:64:c8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Validity Not Before: Jan 2 16:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfdc7102ce77cfcf8ba3e33c3006ac4bf7d3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:a0:d2:9b:bf:97:47:0a:55:ec:c8:13:a1: 3b:96:64:6c:b8:ea:1a:44:a3:b0:eb:cf:ff:61:1f: f1:f7:ef:bb:2d:86:bf:19:d4:94:93:9e:04:5f:5e: ad:a8:06:64:1e:73:46:7e:d5:60:9c:35:d1:83:e7: 18:f6:1a:54:41:94:1a:33:9f:68:ac:98:73:07:65: cc:11:94:13:ef:74:e7:b7:d0:80:e7:20:a4:44:d7: 91:53:b9:1b:ee:53:08:08:2a:f3:ea:51:9d:da:69: cb:9f:0e:9a:28:f0:a3:81:26:e8:6e:5b:e7:8f:a2: 22:c2:7e:51:37:17:03:d9:9b:f0:ca:6d:2c:01:cf: 99:d5:70:ed:c9:96:79:96:f5:ad:c6:63:f8:4e:1e: bb:0b:32:60:1a:a6:43:f4:8a:f5:1a:37:48:9b:de: a4:86:95:61:61:6d:05:30:5e:7a:d3:3a:94:a9:dc: e2:f5:54:63:6f:9a:fe:b7:e6:cc:93:96:85:40:87: 18:f5:bc:9b:0c:22:9f:a4:0e:ed:bf:59:e9:a9:dc: 5d:9d:fa:b7:1c:90:cf:1d:6c:08:65:4e:cb:2f:cf: ec:66:2c:57:33:3e:d4:30:36:83:90:b4:5f:9a:87: a3:b7:58:f6:f9:e9:76:e7:3d:9e:54:7b:ef:ca:73: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DC:71:02:CE:77:CF:CF:8B:A3:E3:3C:30:06:AC:4B:F7:D3:23:9C X509v3 Authority Key Identifier: keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/v9xxAs53z8-Lo-M8MAasS_fTI5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.120.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:f9:6b:67:57:9f:1a:49:73:95:aa:80:c2:d6:8d:f3:70:75: 85:a4:08:be:57:57:e9:2e:01:2f:d6:fe:32:01:c0:7f:e8:45: bb:49:5b:17:93:e9:d0:a8:88:e4:0d:17:8c:c3:61:1b:f1:d5: a8:15:07:1f:96:e8:ce:3f:fa:40:04:70:45:02:74:8e:9a:d6: 6d:e5:64:6c:3f:cf:b7:e0:90:7e:30:a0:b2:a7:b8:b9:21:03: f6:47:d8:82:a9:42:ce:c7:53:b4:15:ea:b5:ed:ae:a5:0c:f5: f2:84:4e:47:3d:52:28:3d:21:df:41:e2:ee:0b:3c:85:30:a2: 2f:99:71:0c:a7:4a:25:e3:13:40:e7:02:cd:53:59:e4:65:6a: 27:89:0b:b2:48:9e:70:10:6b:92:46:c8:8f:5e:c3:2c:e5:78: be:82:af:f6:6f:e9:56:65:48:9b:e5:d3:7f:84:1b:f7:cc:fd: 86:15:10:67:f1:61:39:93:df:83:58:8e:98:1d:cc:21:56:2e: 88:2a:97:16:4b:55:f2:98:91:6e:96:bc:1c:4c:85:13:82:8c: 56:43:4d:3b:d2:fc:30:55:d9:b8:10:ae:96:45:98:ec:b0:e0: 5a:85:e8:7c:24:28:58:56:1e:9e:1d:71:76:7e:f2:4c:62:f0: 53:a6:34:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g/ZjKc6sRrB5TxNSZMgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiOWI1OGVlMDhlODNmMWE5YWQ0ZTk2NDNlODBkM2I0 MGNiM2UwHhcNMjYwMTAyMTYyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmRjNzEwMmNlNzdjZmNmOGJhM2UzM2MzMDA2YWM0YmY3ZDMyMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW6g0pu/l0cKVezIE6E7lmRsuOoa RKOw68//YR/x9++7LYa/GdSUk54EX16tqAZkHnNGftVgnDXRg+cY9hpUQZQaM59o rJhzB2XMEZQT73Tnt9CA5yCkRNeRU7kb7lMICCrz6lGd2mnLnw6aKPCjgSboblvn j6Iiwn5RNxcD2Zvwym0sAc+Z1XDtyZZ5lvWtxmP4Th67CzJgGqZD9Ir1GjdIm96k hpVhYW0FMF560zqUqdzi9VRjb5r+t+bMk5aFQIcY9bybDCKfpA7tv1npqdxdnfq3 HJDPHWwIZU7LL8/sZixXMz7UMDaDkLRfmoejt1j2+el25z2eVHvvynNANQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/ccQLOd8/Pi6PjPDAGrEv30yOcMB8GA1UdIwQY MBaAFARiubWO4I6D8amtTpZD6A07QMs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYt MGVlMmVhN2Q0ODg0LzEvdjl4eEFzNTN6OC1Mby1NOE1BYXNTX2ZUSTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYtMGVlMmVhN2Q0ODg0 LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8V4MA0G CSqGSIb3DQEBCwUAA4IBAQBq+WtnV58aSXOVqoDC1o3zcHWFpAi+V1fpLgEv1v4y AcB/6EW7SVsXk+nQqIjkDReMw2Eb8dWoFQcflujOP/pABHBFAnSOmtZt5WRsP8+3 4JB+MKCyp7i5IQP2R9iCqULOx1O0Feq17a6lDPXyhE5HPVIoPSHfQeLuCzyFMKIv mXEMp0ol4xNA5wLNU1nkZWoniQuySJ5wEGuSRsiPXsMs5Xi+gq/2b+lWZUib5dN/ hBv3zP2GFRBn8WE5k9+DWI6YHcwhVi6IKpcWS1XymJFulrwcTIUTgoxWQ0070vww Vdm4EK6WRZjssOBaheh8JChYVh6eHXF2fvJMYvBTpjQv -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:23 2026 by rpki-client