This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/B2wOUgohqeye9MfPxQxtz9YTAls.roa File: B2wOUgohqeye9MfPxQxtz9YTAls.roa (raw, json) Hash identifier: 1bpwvIgjEWlAzlHrAhdbiAA3AdkV/y3b10LOBBviIzw= Subject key identifier: 07:6C:0E:52:0A:21:A9:EC:9E:F4:C7:CF:C5:0C:6D:CF:D6:13:02:5B Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c Certificate serial: 019B7F15592CF8333BF3DA191AB0840CAE52 Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/B2wOUgohqeye9MfPxQxtz9YTAls.roa Signing time: Fri 02 Jan 2026 14:21:04 +0000 ROA not before: Fri 02 Jan 2026 14:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43007 IP address blocks: 91.194.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:59:2c:f8:33:3b:f3:da:19:1a:b0:84:0c:ae:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=076c0e520a21a9ec9ef4c7cfc50c6dcfd613025b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:da:b2:b0:46:23:f0:e4:f6:29:32:52:04: e1:de:1d:b2:e2:9c:e3:54:a3:ca:93:c3:50:28:1a: a5:8c:f9:ad:ba:a5:ea:a3:00:3d:18:2c:60:55:87: e8:7a:46:d7:1b:9e:42:49:97:c9:48:59:79:fd:6c: df:c7:12:08:1d:88:5c:0a:63:f3:8e:8c:aa:9b:73: 42:a7:9a:d7:d5:4e:29:6d:8f:93:3d:35:e0:3e:31: f3:5f:79:de:7c:82:08:6e:e0:05:9d:1e:58:d9:8d: d0:48:de:f4:1a:a2:b3:d9:6a:fb:07:0a:0e:6d:ef: 28:28:12:79:f3:e2:0e:de:00:09:de:f5:c9:de:3b: c0:fb:72:95:2a:e0:b7:32:db:5d:67:e8:71:ea:79: 55:69:3b:0f:00:9b:09:e5:09:86:cc:c9:34:ff:d8: 69:6b:6c:5a:fb:48:63:a5:a3:a4:36:7b:c0:fb:a2: ba:70:2a:3f:8f:86:02:12:01:c8:62:86:f7:3b:1f: 5d:ed:72:e0:8b:15:15:d4:d6:a5:c5:d0:2e:2d:9c: 23:05:92:48:86:a2:1b:83:8f:28:b9:88:06:60:85: c0:13:82:96:64:55:b4:d0:7d:e1:86:69:5d:54:a3: 8a:b0:b7:c9:00:2c:8c:61:c3:ad:02:7f:0a:be:62: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:0E:52:0A:21:A9:EC:9E:F4:C7:CF:C5:0C:6D:CF:D6:13:02:5B X509v3 Authority Key Identifier: keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/B2wOUgohqeye9MfPxQxtz9YTAls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.28.0/23 Signature Algorithm: sha256WithRSAEncryption 07:60:50:d5:a5:27:ba:96:b7:d2:c8:2d:99:51:15:07:e2:23: 76:13:30:e9:fc:a8:de:b8:38:1f:3c:b9:8b:93:1a:1e:80:57: 13:52:26:9d:c7:a7:31:54:c1:c6:3c:f1:fd:0f:83:cb:7d:a6: 84:70:b3:78:87:27:6f:77:ba:69:87:7e:95:c3:b2:96:7e:38: a3:b6:c6:27:e2:d7:5f:98:bb:e3:20:b6:ea:2b:57:12:8a:15: 93:51:98:09:f0:00:40:11:a6:33:4b:06:fd:b3:e8:13:09:2e: 9f:99:e6:f9:64:f2:26:61:19:e4:ec:e4:37:47:97:6b:c2:45: 0e:4b:e6:f8:f2:cb:ce:21:50:bc:8d:3f:35:d3:8b:e6:c4:1d: a2:0f:30:17:4b:a5:69:71:2b:80:9b:93:f3:ac:2b:61:96:b3: 1f:7a:cd:51:d0:f3:40:2e:26:e7:28:5a:82:20:bc:8b:95:89: b4:32:fd:d7:0b:ed:73:69:a2:db:d5:d9:11:9c:8c:a4:74:6d: 07:98:65:b8:25:cf:ec:dd:eb:53:e9:8b:65:18:7f:37:4d:a3: f2:2b:54:e0:e6:51:a5:4c:db:d7:92:7e:a8:57:e1:05:ea:16: fd:a2:58:53:d8:35:ee:16:12:f3:b9:3c:f7:d0:3f:3d:97:e2: c0:11:51:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVks+DM789oZGrCEDK5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDA0NWMxM2MwM2RjYjM3M2QyYTdkODVkMWUwMWI2ZTBh YzdlMWMwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzZjMGU1MjBhMjFhOWVjOWVmNGM3Y2ZjNTBjNmRjZmQ2MTMwMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG3asrBGI/Dk9ikyUgTh3h2y4pzj VKPKk8NQKBqljPmtuqXqowA9GCxgVYfoekbXG55CSZfJSFl5/WzfxxIIHYhcCmPz joyqm3NCp5rX1U4pbY+TPTXgPjHzX3nefIIIbuAFnR5Y2Y3QSN70GqKz2Wr7BwoO be8oKBJ58+IO3gAJ3vXJ3jvA+3KVKuC3MttdZ+hx6nlVaTsPAJsJ5QmGzMk0/9hp a2xa+0hjpaOkNnvA+6K6cCo/j4YCEgHIYob3Ox9d7XLgixUV1NalxdAuLZwjBZJI hqIbg48ouYgGYIXAE4KWZFW00H3hhmldVKOKsLfJACyMYcOtAn8KvmKz5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdsDlIKIansnvTHz8UMbc/WEwJbMB8GA1UdIwQY MBaAFGfQRcE8A9yzc9Kn2F0eAbbgrH4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMt MTZmZjcyM2FmMzM1LzEvQjJ3T1Vnb2hxZXllOU1mUHhReHR6OVlUQWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMtMTZmZjcyM2FmMzM1 LzEvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8IcMA0G CSqGSIb3DQEBCwUAA4IBAQAHYFDVpSe6lrfSyC2ZURUH4iN2EzDp/KjeuDgfPLmL kxoegFcTUiadx6cxVMHGPPH9D4PLfaaEcLN4hydvd7pph36Vw7KWfjijtsYn4tdf mLvjILbqK1cSihWTUZgJ8ABAEaYzSwb9s+gTCS6fmeb5ZPImYRnk7OQ3R5drwkUO S+b48svOIVC8jT8104vmxB2iDzAXS6VpcSuAm5PzrCthlrMfes1R0PNALibnKFqC ILyLlYm0Mv3XC+1zaaLb1dkRnIykdG0HmGW4Jc/s3etT6YtlGH83TaPyK1Tg5lGl TNvXkn6oV+EF6hb9olhT2DXuFhLzuTz30D89l+LAEVE7 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:14 2026 by rpki-client