This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa File: Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa (raw, json) Hash identifier: EsZORo0khgTEum2xHY+MdLQ0jyUTYVdE3AQ38NpK21M= Subject key identifier: 25:EF:F2:F3:0C:50:BE:A0:A0:B3:E0:7F:5F:F2:43:0F:2E:9E:E0:DE Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452 Certificate serial: 019B7A5B17468564D2B2DD93F686554269D1 Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56409 IP address blocks: 91.223.128.0/24 maxlen: 24 2001:67c:16f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:17:46:85:64:d2:b2:dd:93:f6:86:55:42:69:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25eff2f30c50bea0a0b3e07f5ff2430f2e9ee0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:7f:17:36:a5:ef:5b:be:18:e6:af:a8:62: fa:03:40:f1:c6:e4:00:8d:ac:a3:1f:a6:62:69:a7: fa:f1:1b:9e:86:b2:69:dd:34:91:f8:c7:d9:a9:26: 34:e8:4b:91:32:50:49:43:eb:2d:f9:13:2c:fb:9e: 98:b0:bb:3e:a0:0c:a1:72:9b:9f:be:50:0f:05:7a: 6b:8b:da:64:d3:be:5c:7f:55:1f:90:df:d6:e8:e1: 68:1e:4c:3b:9a:90:0d:6d:e9:19:af:f7:78:3f:b2: 8c:0b:de:5a:b1:ec:09:b9:e7:91:7b:d3:aa:e4:38: 8b:7a:ea:ec:51:08:f0:d7:8f:d6:ba:b2:56:71:aa: df:b3:67:06:5e:ac:6e:bb:37:a8:36:f0:17:9f:19: 9f:aa:ec:c2:80:ae:ce:9c:de:a2:9f:45:70:32:3b: b4:6f:05:aa:7b:ab:0d:e8:3e:ad:d2:2f:3b:39:94: 8a:9f:aa:b3:f8:3d:a0:60:85:11:75:ba:4d:34:fd: 51:c2:d8:35:ce:77:32:9e:4b:92:02:ee:18:a3:43: 3f:b9:f6:e0:df:60:fb:5c:bb:4c:7b:19:22:39:e2: 52:89:a4:70:70:4f:b6:7e:b3:43:0d:5b:f8:94:72: bb:74:28:97:cd:6b:d3:01:82:d9:3e:82:15:ab:67: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:F2:F3:0C:50:BE:A0:A0:B3:E0:7F:5F:F2:43:0F:2E:9E:E0:DE X509v3 Authority Key Identifier: keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.128.0/24 IPv6: 2001:67c:16f0::/48 Signature Algorithm: sha256WithRSAEncryption 4d:8a:98:7f:03:55:94:ad:a1:ee:8c:1a:f0:cd:31:6c:cb:1c: 91:31:d9:c2:b3:bf:2e:7d:65:8a:42:a4:db:0e:04:7b:db:a3: 45:b5:05:fe:c3:a8:63:52:25:62:80:4c:68:66:13:01:db:0a: 27:af:4f:73:3f:55:e5:f4:7b:11:37:b1:e3:d8:97:ed:96:4b: ae:ca:ec:2e:1b:92:2c:d1:39:4f:16:dc:73:40:7d:88:68:3d: 7c:a9:ea:14:32:c8:2f:1c:9b:07:da:2a:8c:86:b0:26:16:2f: 5a:23:77:34:ea:63:2d:03:dd:3b:ae:db:30:c7:33:56:07:81: ee:7f:f1:5c:33:40:a0:bc:59:1e:de:96:33:91:52:7c:eb:ea: 67:6d:51:7b:69:21:d4:9a:5d:90:55:1f:00:a9:3e:63:91:35: 13:ff:cf:01:25:53:2c:b0:a7:6f:79:98:8d:89:a8:97:ff:44: 6a:7a:d7:b6:0f:03:ef:d5:1f:a6:10:69:80:9e:e1:e4:b4:87: b8:18:7e:9d:64:00:99:0c:24:f9:ff:80:54:9f:40:d6:ad:ca: e2:61:9a:73:52:8c:8e:cf:1a:c4:67:cc:fc:cd:27:68:07:80: 94:72:8a:ca:0e:2d:89:54:b5:31:91:70:17:bb:72:c9:38:cd: 91:81:d4:e4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WxdGhWTSst2T9oZVQmnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjg1MGRlYjI4YmRiMmY2NTVlMmYxYjAyZDM3YzEzYzZk NDM0NTIwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWVmZjJmMzBjNTBiZWEwYTBiM2UwN2Y1ZmYyNDMwZjJlOWVlMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwV/Fzal71u+GOavqGL6A0DxxuQA jayjH6Ziaaf68RuehrJp3TSR+MfZqSY06EuRMlBJQ+st+RMs+56YsLs+oAyhcpuf vlAPBXpri9pk075cf1UfkN/W6OFoHkw7mpANbekZr/d4P7KMC95asewJueeRe9Oq 5DiLeursUQjw14/WurJWcarfs2cGXqxuuzeoNvAXnxmfquzCgK7OnN6in0VwMju0 bwWqe6sN6D6t0i87OZSKn6qz+D2gYIURdbpNNP1Rwtg1zncynkuSAu4Yo0M/ufbg 32D7XLtMexkiOeJSiaRwcE+2frNDDVv4lHK7dCiXzWvTAYLZPoIVq2fp0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCXv8vMMUL6goLPgf1/yQw8unuDeMB8GA1UdIwQY MBaAFGy4UN6yi9svZV4vGwLTfBPG1DRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iMmQ3MGQtNDk1My00ZDYxLWI4Yzkt ODhiMmQyY2Y3YzMxLzEvSmVfeTh3eFF2cUNncy1CX1hfSkREeTZlNE40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iMmQ3MGQtNDk1My00ZDYxLWI4YzktODhiMmQyY2Y3YzMx LzEvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9+AMA8E AgACMAkDBwAgAQZ8FvAwDQYJKoZIhvcNAQELBQADggEBAE2KmH8DVZStoe6MGvDN MWzLHJEx2cKzvy59ZYpCpNsOBHvbo0W1Bf7DqGNSJWKATGhmEwHbCievT3M/VeX0 exE3sePYl+2WS67K7C4bkizROU8W3HNAfYhoPXyp6hQyyC8cmwfaKoyGsCYWL1oj dzTqYy0D3Tuu2zDHM1YHge5/8VwzQKC8WR7eljORUnzr6mdtUXtpIdSaXZBVHwCp PmORNRP/zwElUyywp295mI2JqJf/RGp617YPA+/VH6YQaYCe4eS0h7gYfp1kAJkM JPn/gFSfQNatyuJhmnNSjI7PGsRnzPzNJ2gHgJRyisoOLYlUtTGRcBe7csk4zZGB 1OQ= -----END CERTIFICATE-----Generated at Wed Jan 21 01:30:37 2026 by rpki-client