This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SKdWJj9_mvhTxmIHK3QwnZOP0oM.roa File: SKdWJj9_mvhTxmIHK3QwnZOP0oM.roa (raw, json) Hash identifier: rO5ZlotSFs3VdGld/59aKM5B9kJWN1KSjh1y7ZzVkHg= Subject key identifier: 48:A7:56:26:3F:7F:9A:F8:53:C6:62:07:2B:74:30:9D:93:8F:D2:83 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85507B39E0E497D7D013AEA504D98D Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SKdWJj9_mvhTxmIHK3QwnZOP0oM.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 265753 IP address blocks: 91.242.71.0/24 maxlen: 24 91.242.81.0/24 maxlen: 24 91.242.107.0/24 maxlen: 24 95.214.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:50:7b:39:e0:e4:97:d7:d0:13:ae:a5:04:d9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48a756263f7f9af853c662072b74309d938fd283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:b9:b2:d9:c2:1c:41:b7:36:90:f2:2f:53: 5e:4f:7a:31:80:26:89:62:0c:5e:bf:a3:71:2a:e9: 63:4d:73:2e:b2:2f:fe:00:a7:ac:d3:e4:53:f9:69: 28:f9:04:ff:5a:db:1f:d4:77:a1:68:92:bf:da:c7: d6:50:55:29:c1:8e:ea:5c:29:c8:ec:6e:d3:8f:07: 4f:c1:c4:c4:3b:22:bd:e9:44:64:49:b6:e1:34:16: 11:b9:40:8b:a0:62:f1:58:aa:a8:d3:5d:df:e8:2c: f8:5c:ae:0e:0a:2e:96:ea:87:9d:f3:76:b8:d0:aa: ff:00:7a:d2:ed:2e:c6:4b:29:45:1c:e1:c9:3b:d0: 59:ed:6b:8f:3c:b6:fe:ce:4c:48:ab:11:d6:dd:16: 8e:da:b3:e4:b0:2c:b3:a2:1a:f4:bb:12:06:ee:ac: 97:18:2a:dd:f1:53:3e:e6:0c:dd:47:75:86:e2:20: 0d:dd:d7:01:d3:fb:a8:c1:0c:67:89:5d:7d:c1:6a: ec:ca:37:6c:e1:82:65:5a:77:83:b5:62:be:c9:ad: 9e:89:4f:4e:4e:c6:f5:6d:16:9c:d4:64:ec:63:d8: a8:ff:8d:44:4c:da:69:bd:ff:53:7c:43:fb:c3:76: a8:dc:6f:8b:75:85:c0:41:26:19:d7:ab:a7:b3:53: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:56:26:3F:7F:9A:F8:53:C6:62:07:2B:74:30:9D:93:8F:D2:83 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SKdWJj9_mvhTxmIHK3QwnZOP0oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.71.0/24 91.242.81.0/24 91.242.107.0/24 95.214.152.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:0d:13:59:96:c7:75:c4:60:b0:ec:df:f9:a7:a3:f6:a9:24: 51:0d:e0:85:4c:79:84:37:34:b2:27:cc:81:2e:37:d1:a3:e1: 3c:8f:ff:eb:93:0a:56:13:49:79:3b:d9:47:96:50:4a:ca:27: 9f:6f:3b:f5:6e:64:b2:82:75:b4:bb:d7:ac:ae:01:64:8e:8f: ec:89:19:f0:c9:20:cd:5d:e1:74:69:0a:41:62:4f:17:4d:f5: 7a:51:19:df:61:59:7e:b2:4e:d1:36:b6:a0:84:19:a8:65:ba: c8:69:f4:91:0d:7f:3e:02:fd:63:01:42:3b:f1:c9:37:34:f0: 65:cc:49:3e:61:8e:f1:e8:6d:7f:af:a1:03:74:04:a1:6d:98: 46:8e:c9:32:e3:1c:a3:15:fa:33:56:07:16:9f:01:b5:de:aa: 3a:bd:3f:78:47:f0:cd:70:a3:d2:f1:15:71:62:6f:12:82:ca: e2:7d:d1:b6:32:72:6c:11:d6:ea:d4:48:12:a9:2d:64:d2:97: 70:2a:6f:83:ee:13:8c:d6:e0:02:30:a1:a1:54:c8:15:58:5f: c0:b7:46:3e:97:32:dd:22:9a:48:79:29:89:1a:cb:a7:95:6f: 29:8c:8a:12:2f:72:93:39:fc:da:47:7c:1a:b5:82:65:da:e6: 45:80:26:19 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hVB7OeDkl9fQE66lBNmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGE3NTYyNjNmN2Y5YWY4NTNjNjYyMDcyYjc0MzA5ZDkzOGZkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Gq5stnCHEG3NpDyL1NeT3oxgCaJ Ygxev6NxKuljTXMusi/+AKes0+RT+Wko+QT/Wtsf1HehaJK/2sfWUFUpwY7qXCnI 7G7TjwdPwcTEOyK96URkSbbhNBYRuUCLoGLxWKqo013f6Cz4XK4OCi6W6oed83a4 0Kr/AHrS7S7GSylFHOHJO9BZ7WuPPLb+zkxIqxHW3RaO2rPksCyzohr0uxIG7qyX GCrd8VM+5gzdR3WG4iAN3dcB0/uowQxniV19wWrsyjds4YJlWneDtWK+ya2eiU9O Tsb1bRac1GTsY9io/41ETNppvf9TfEP7w3ao3G+LdYXAQSYZ16uns1PhsQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEinViY/f5r4U8ZiByt0MJ2Tj9KDMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvU0tkV0pqOV9tdmhUeG1JSEszUXduWk9QMG9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW/JHAwQA W/JRAwQAW/JrAwQCX9aYMA0GCSqGSIb3DQEBCwUAA4IBAQCKDRNZlsd1xGCw7N/5 p6P2qSRRDeCFTHmENzSyJ8yBLjfRo+E8j//rkwpWE0l5O9lHllBKyiefbzv1bmSy gnW0u9esrgFkjo/siRnwySDNXeF0aQpBYk8XTfV6URnfYVl+sk7RNraghBmoZbrI afSRDX8+Av1jAUI78ck3NPBlzEk+YY7x6G1/r6EDdAShbZhGjsky4xyjFfozVgcW nwG13qo6vT94R/DNcKPS8RVxYm8SgsrifdG2MnJsEdbq1EgSqS1k0pdwKm+D7hOM 1uACMKGhVMgVWF/At0Y+lzLdIppIeSmJGsunlW8pjIoSL3KTOfzaR3watYJl2uZF gCYZ -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:20 2026 by rpki-client