This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/b4x9At5aHU384b0djamWkOwy0Gk.roa File: b4x9At5aHU384b0djamWkOwy0Gk.roa (raw, json) Hash identifier: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ= Subject key identifier: 6F:8C:7D:02:DE:5A:1D:4D:FC:E1:BD:1D:8D:A9:96:90:EC:32:D0:69 Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Certificate serial: 019B7BA3F34CE3BC12258B745D9E064E87CB Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/b4x9At5aHU384b0djamWkOwy0Gk.roa Signing time: Thu 01 Jan 2026 22:18:20 +0000 ROA not before: Thu 01 Jan 2026 22:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213250 IP address blocks: 91.200.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f3:4c:e3:bc:12:25:8b:74:5d:9e:06:4e:87:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Validity Not Before: Jan 1 22:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8c7d02de5a1d4dfce1bd1d8da99690ec32d069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:83:2b:3a:e6:d1:db:1a:fc:8e:5e:17:63: dc:55:d0:e8:fa:d9:6b:23:4a:4f:84:53:e6:10:51: 80:18:ca:3f:48:5a:0a:71:7b:a1:58:4d:f2:13:c2: a6:35:f1:a5:e7:dc:9e:94:a7:9a:e5:05:1c:c6:53: 7c:74:26:e5:cd:fb:32:51:e1:d3:6f:5c:68:8b:64: a6:ca:10:0e:93:8e:4a:a8:67:9b:47:23:ff:bf:56: b6:91:ec:be:a6:81:47:f5:ac:a9:b4:5e:f4:86:d2: e3:e3:be:91:71:41:47:67:fa:f9:2e:72:41:7d:5f: d6:72:93:f3:ea:f8:01:7a:e7:39:46:97:ce:53:b3: 40:18:97:d4:12:91:4e:0c:85:2e:77:3e:2f:6d:70: 58:71:5c:b6:4d:b4:61:34:70:82:d5:c8:4d:15:99: d9:dc:38:66:da:ea:66:3d:10:03:00:1b:17:73:12: 76:5d:bd:ce:3e:24:e5:04:39:30:7f:4e:f3:ec:ed: ae:77:9a:e0:94:61:55:15:cd:21:6d:f6:6a:08:2f: 99:3d:10:37:74:e7:91:28:a4:27:42:a0:80:d9:76: 1f:1d:31:e1:ec:43:1b:0e:22:24:14:cf:7f:c4:79: 2b:32:ab:04:ad:2c:4f:04:e4:57:01:a2:ca:a4:50: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:7D:02:DE:5A:1D:4D:FC:E1:BD:1D:8D:A9:96:90:EC:32:D0:69 X509v3 Authority Key Identifier: keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/b4x9At5aHU384b0djamWkOwy0Gk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.100.0/22 Signature Algorithm: sha256WithRSAEncryption a0:13:02:cf:77:65:b3:37:2a:95:eb:e7:21:93:57:d8:70:d5: 8f:8c:eb:ac:de:9a:fd:6b:cf:b9:46:33:1b:06:bf:86:7a:07: cf:f6:8e:c6:d1:89:d2:36:07:0a:ff:c2:bd:55:06:fb:a7:eb: f3:15:c6:c1:42:d0:03:66:06:35:99:ee:cc:4a:f6:58:5c:86: f4:5f:e4:a2:f1:c6:51:a8:29:34:08:c5:13:84:b4:3b:2e:5b: 0e:a2:d5:d7:35:fc:a9:6d:41:07:f6:17:c7:fe:1a:e2:22:3c: a1:b9:ba:9a:fd:4f:37:92:a4:d9:2b:82:7c:0a:a9:4c:fd:3c: 8e:cc:b6:7d:f5:f4:5a:25:03:e2:dc:3a:93:5e:2d:8b:80:d1: 5e:74:d7:cf:e4:d4:94:a9:d2:86:b0:1a:81:03:06:06:6f:04: b8:d6:f1:2f:e6:0d:88:00:3a:10:2d:93:67:76:88:00:11:f1: 83:84:f5:61:52:de:57:3a:a0:56:03:b3:a7:d5:7c:d9:67:91: 5d:e3:b5:29:7c:e8:97:31:83:ce:0c:32:fc:59:f8:f8:fb:08: df:e8:ea:4e:3e:61:73:31:6f:f5:d7:6a:a0:f0:a7:2d:87:43: 00:55:9d:ff:8f:cd:39:6e:0a:f8:13:be:a9:f0:18:9c:f0:23: d5:34:60:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o/NM47wSJYt0XZ4GTofLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0 MTViZjUwHhcNMjYwMTAxMjIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjhjN2QwMmRlNWExZDRkZmNlMWJkMWQ4ZGE5OTY5MGVjMzJkMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo+DKzrm0dsa/I5eF2PcVdDo+tlr I0pPhFPmEFGAGMo/SFoKcXuhWE3yE8KmNfGl59yelKea5QUcxlN8dCblzfsyUeHT b1xoi2SmyhAOk45KqGebRyP/v1a2key+poFH9ayptF70htLj476RcUFHZ/r5LnJB fV/WcpPz6vgBeuc5RpfOU7NAGJfUEpFODIUudz4vbXBYcVy2TbRhNHCC1chNFZnZ 3Dhm2upmPRADABsXcxJ2Xb3OPiTlBDkwf07z7O2ud5rglGFVFc0hbfZqCC+ZPRA3 dOeRKKQnQqCA2XYfHTHh7EMbDiIkFM9/xHkrMqsErSxPBORXAaLKpFBqhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+MfQLeWh1N/OG9HY2plpDsMtBpMB8GA1UdIwQY MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt OGFkYWMxN2U5MGFlLzEvYjR4OUF0NWFIVTM4NGIwZGphbVdrT3d5MEdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8hkMA0G CSqGSIb3DQEBCwUAA4IBAQCgEwLPd2WzNyqV6+chk1fYcNWPjOus3pr9a8+5RjMb Br+GegfP9o7G0YnSNgcK/8K9VQb7p+vzFcbBQtADZgY1me7MSvZYXIb0X+Si8cZR qCk0CMUThLQ7LlsOotXXNfypbUEH9hfH/hriIjyhubqa/U83kqTZK4J8CqlM/TyO zLZ99fRaJQPi3DqTXi2LgNFedNfP5NSUqdKGsBqBAwYGbwS41vEv5g2IADoQLZNn dogAEfGDhPVhUt5XOqBWA7On1XzZZ5Fd47UpfOiXMYPODDL8Wfj4+wjf6OpOPmFz MW/112qg8Kcth0MAVZ3/j805bgr4E76p8Bic8CPVNGBY -----END CERTIFICATE-----Generated at Wed Jan 21 02:47:22 2026 by rpki-client