This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/abtquT29kdz8HKSwyxp8MDLf-rM.roa File: abtquT29kdz8HKSwyxp8MDLf-rM.roa (raw, json) Hash identifier: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU= Subject key identifier: 69:BB:6A:B9:3D:BD:91:DC:FC:1C:A4:B0:CB:1A:7C:30:32:DF:FA:B3 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA321FC9889B8A841FD720E3D0BF327 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/abtquT29kdz8HKSwyxp8MDLf-rM.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49418 IP address blocks: 91.209.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:21:fc:98:89:b8:a8:41:fd:72:0e:3d:0b:f3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69bb6ab93dbd91dcfc1ca4b0cb1a7c3032dffab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:a7:83:54:4b:22:0f:8f:f1:22:f8:d9:0c: d3:85:17:4f:5b:73:4b:fb:ab:39:31:1a:04:a7:43: 0f:2c:84:f3:b4:1e:72:c5:2c:b3:1b:73:aa:27:1c: c7:61:35:c0:ac:5d:54:9e:69:0a:ea:81:0c:78:0e: e8:e6:74:cd:59:bb:ac:f3:51:4e:ab:27:94:97:54: f2:22:d9:9b:c2:1e:0e:b4:58:b9:cf:e2:73:e0:ad: e3:8b:fc:18:3e:c3:be:de:a8:35:aa:4f:80:63:74: 74:07:ac:5b:44:81:83:72:25:e8:2a:82:db:aa:16: 17:b4:53:43:9b:23:a8:40:25:f0:78:be:b3:d3:36: 33:9d:63:a1:a6:23:13:de:dd:79:84:ae:5d:77:38: 93:1c:7b:03:c8:86:c2:6d:c4:44:5a:db:82:75:cb: 33:73:c0:25:19:e1:59:ba:ef:76:ca:43:a5:3a:8d: 78:fb:76:81:b4:71:25:9e:03:19:3f:43:86:ae:c8: 66:5b:5f:3d:ed:b2:48:81:80:2b:76:24:8e:59:20: 24:d4:7c:ea:74:98:90:fc:6b:14:e4:a2:47:b9:7f: 51:64:61:71:31:31:02:72:2c:5d:20:ac:c4:27:da: 47:46:4f:95:05:a1:31:19:e5:fe:1f:08:b1:21:aa: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BB:6A:B9:3D:BD:91:DC:FC:1C:A4:B0:CB:1A:7C:30:32:DF:FA:B3 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/abtquT29kdz8HKSwyxp8MDLf-rM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.135.0/24 Signature Algorithm: sha256WithRSAEncryption 32:45:94:6a:02:64:82:1d:92:ac:fe:1c:8d:1e:e5:9b:aa:7f: 9e:76:0d:25:a1:e8:67:b0:6f:e7:e6:3b:5f:95:41:20:30:15: 5e:e8:62:84:3f:42:d8:0d:65:69:9e:18:b2:f3:80:69:90:54: 42:58:c4:f3:5e:2f:75:da:bd:4e:6f:85:f1:b6:f2:6c:80:1a: 4a:fd:ce:5b:02:3f:f4:22:72:d4:86:40:90:5e:b3:2b:7d:c3: b5:e1:41:39:c2:31:a5:0e:8d:de:30:0b:cf:63:1a:38:2c:70: ba:8b:db:0e:28:8d:8f:5e:18:dc:dc:41:d1:f0:85:14:b5:ee: a1:c2:52:4e:90:66:48:ca:de:0d:f2:72:b4:9e:1c:66:2f:ef: e2:a4:b0:bc:3d:c4:02:81:09:ec:08:54:59:26:67:7d:c7:b9: ec:57:5f:03:b3:d1:f3:87:d3:64:f7:cd:bd:fa:f7:20:eb:d3: 0f:4b:29:c6:da:a7:c2:2e:18:55:97:69:ce:2e:56:ee:d8:dd: 8c:46:a7:40:f5:8b:31:da:00:ec:99:f1:49:3e:73:42:33:a2: 23:17:46:c2:fb:63:a5:6d:d2:90:ce:d4:5f:98:75:f9:0a:fe: 0d:63:c9:b3:42:94:08:e3:fa:b9:55:ff:99:b1:23:19:ef:36: d4:c4:30:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyH8mIm4qEH9cg49C/MnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWJiNmFiOTNkYmQ5MWRjZmMxY2E0YjBjYjFhN2MzMDMyZGZmYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ang1RLIg+P8SL42QzThRdPW3NL +6s5MRoEp0MPLITztB5yxSyzG3OqJxzHYTXArF1UnmkK6oEMeA7o5nTNWbus81FO qyeUl1TyItmbwh4OtFi5z+Jz4K3ji/wYPsO+3qg1qk+AY3R0B6xbRIGDciXoKoLb qhYXtFNDmyOoQCXweL6z0zYznWOhpiMT3t15hK5ddziTHHsDyIbCbcREWtuCdcsz c8AlGeFZuu92ykOlOo14+3aBtHElngMZP0OGrshmW1897bJIgYArdiSOWSAk1Hzq dJiQ/GsU5KJHuX9RZGFxMTECcixdIKzEJ9pHRk+VBaExGeX+HwixIaoN6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGm7ark9vZHc/ByksMsafDAy3/qzMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYWJ0cXVUMjlrZHo4SEtTd3l4cDhNRExmLXJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GHMA0G CSqGSIb3DQEBCwUAA4IBAQAyRZRqAmSCHZKs/hyNHuWbqn+edg0loehnsG/n5jtf lUEgMBVe6GKEP0LYDWVpnhiy84BpkFRCWMTzXi912r1Ob4XxtvJsgBpK/c5bAj/0 InLUhkCQXrMrfcO14UE5wjGlDo3eMAvPYxo4LHC6i9sOKI2PXhjc3EHR8IUUte6h wlJOkGZIyt4N8nK0nhxmL+/ipLC8PcQCgQnsCFRZJmd9x7nsV18Ds9Hzh9Nk9829 +vcg69MPSynG2qfCLhhVl2nOLlbu2N2MRqdA9Ysx2gDsmfFJPnNCM6IjF0bC+2Ol bdKQztRfmHX5Cv4NY8mzQpQI4/q5Vf+ZsSMZ7zbUxDCD -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:11 2026 by rpki-client