This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/d6fj2hsf73awFuJ9_OrVwzH3RUU.roa File: d6fj2hsf73awFuJ9_OrVwzH3RUU.roa (raw, json) Hash identifier: q5EEFAAUQDhZrlGyPfpObbd8Uk9pSouDXHiB9RSx/i0= Subject key identifier: 77:A7:E3:DA:1B:1F:EF:76:B0:16:E2:7D:FC:EA:D5:C3:31:F7:45:45 Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790 Certificate serial: 019B7E38164D57CFD7094FEE728D56A722BE Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/d6fj2hsf73awFuJ9_OrVwzH3RUU.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42507 IP address blocks: 91.151.196.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:16:4d:57:cf:d7:09:4f:ee:72:8d:56:a7:22:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77a7e3da1b1fef76b016e27dfcead5c331f74545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:71:80:14:5a:ac:7d:37:e6:df:2e:a4:87: 2d:d9:07:4e:20:c3:b2:c3:86:06:6d:31:12:7a:62: c5:bb:b5:da:e4:b3:95:f2:49:37:7c:cd:33:51:b0: 04:9d:f6:0b:11:eb:a4:84:d3:1c:58:7d:bd:1d:20: b4:7b:93:8c:f3:15:57:25:c7:c6:ba:93:0b:a1:bc: d8:c5:0c:f1:e1:92:80:f9:d5:c6:a2:4f:e3:d9:8d: 74:7c:3a:a4:ba:94:50:81:25:48:b4:8f:02:0f:33: 0a:e8:01:54:82:fc:82:af:18:dc:7b:05:b2:2d:65: 03:07:33:0a:a7:37:fd:fc:f9:dd:c4:fe:91:ee:82: cb:74:e2:88:6c:06:17:40:4c:26:b8:8a:ac:d4:23: d0:9d:b5:75:91:98:b8:85:2f:85:00:de:68:58:96: f1:57:be:a2:c6:02:5f:e3:7d:c1:87:ce:8f:d7:e2: 92:05:de:3d:5b:32:6c:2b:9e:9b:c7:3a:c6:f5:d2: 42:6d:3b:4e:98:c7:ed:76:5b:bc:4c:63:97:4a:e4: 6f:21:df:17:05:3d:c7:38:34:ca:a0:b0:ff:f8:89: 01:df:bc:65:78:14:5d:1a:20:34:e4:be:f7:2b:7f: e0:e6:a9:de:19:03:8e:7a:0c:dc:04:7b:9c:98:28: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A7:E3:DA:1B:1F:EF:76:B0:16:E2:7D:FC:EA:D5:C3:31:F7:45:45 X509v3 Authority Key Identifier: keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/d6fj2hsf73awFuJ9_OrVwzH3RUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.196.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a6:71:d7:51:b0:11:60:1f:52:36:9f:ef:b1:c3:51:00:36: 6e:78:df:72:24:93:c7:dc:49:87:72:15:d4:69:fa:ec:f9:fa: d3:6a:bc:d8:a6:33:5a:96:d7:af:3c:34:c9:6b:cb:5e:8a:46: bd:a8:fc:d6:85:dc:59:89:af:ce:fe:99:ac:dd:5e:fc:b3:26: 2f:43:39:09:a5:3e:13:f6:cc:be:41:2a:96:06:75:5f:24:77: 99:f0:74:dd:87:81:6d:3b:01:c0:a6:1d:eb:7a:6b:5d:92:b0: 02:b0:78:c4:cd:4a:4d:10:83:b1:15:c8:fc:bb:90:83:fb:6e: 36:9f:50:87:46:fe:b1:87:ca:7b:4f:15:d1:bc:73:a3:19:08: ea:5e:18:93:fb:31:df:86:d5:fc:c6:7b:e1:da:5e:95:be:35: 7a:ff:73:8d:45:e7:79:e2:66:3c:eb:47:a7:48:55:03:31:63: 67:35:e3:36:34:9f:51:0a:0c:93:2b:b3:c7:30:ec:88:49:63: da:57:87:1c:b4:77:be:df:26:1d:20:61:8e:1f:5e:39:b4:32: 9b:5e:70:4e:2b:81:23:ef:e5:f9:91:5b:6a:ca:7d:79:da:e9: 9f:89:e5:23:f6:a8:3c:6f:88:01:d3:11:0d:98:cd:3a:f9:3d: de:7e:0a:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBZNV8/XCU/uco1WpyK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi OGU3OTAwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2E3ZTNkYTFiMWZlZjc2YjAxNmUyN2RmY2VhZDVjMzMxZjc0NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QVxgBRarH035t8upIct2QdOIMOy w4YGbTESemLFu7Xa5LOV8kk3fM0zUbAEnfYLEeukhNMcWH29HSC0e5OM8xVXJcfG upMLobzYxQzx4ZKA+dXGok/j2Y10fDqkupRQgSVItI8CDzMK6AFUgvyCrxjcewWy LWUDBzMKpzf9/PndxP6R7oLLdOKIbAYXQEwmuIqs1CPQnbV1kZi4hS+FAN5oWJbx V76ixgJf433Bh86P1+KSBd49WzJsK56bxzrG9dJCbTtOmMftdlu8TGOXSuRvId8X BT3HODTKoLD/+IkB37xleBRdGiA05L73K3/g5qneGQOOegzcBHucmChCrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHen49obH+92sBbiffzq1cMx90VFMB8GA1UdIwQY MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt NzE5NDAxYmJjYTJlLzEvZDZmajJoc2Y3M2F3RnVKOV9PclZ3ekgzUlVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5fEMA0G CSqGSIb3DQEBCwUAA4IBAQA9pnHXUbARYB9SNp/vscNRADZueN9yJJPH3EmHchXU afrs+frTarzYpjNaltevPDTJa8teika9qPzWhdxZia/O/pms3V78syYvQzkJpT4T 9sy+QSqWBnVfJHeZ8HTdh4FtOwHAph3remtdkrACsHjEzUpNEIOxFcj8u5CD+242 n1CHRv6xh8p7TxXRvHOjGQjqXhiT+zHfhtX8xnvh2l6VvjV6/3ONRed54mY860en SFUDMWNnNeM2NJ9RCgyTK7PHMOyISWPaV4cctHe+3yYdIGGOH145tDKbXnBOK4Ej 7+X5kVtqyn152umfieUj9qg8b4gB0xENmM06+T3efgrK -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:06 2026 by rpki-client