This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/aVRqpMHpdie8kn2Zv8LidnFaG0U.roa File: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (raw, json) Hash identifier: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I= Subject key identifier: 69:54:6A:A4:C1:E9:76:27:BC:92:7D:99:BF:C2:E2:76:71:5A:1B:45 Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df Certificate serial: 019B7C80680B2378F6CFED7A542D74A74A4D Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/aVRqpMHpdie8kn2Zv8LidnFaG0U.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 91.90.162.0/24 maxlen: 24 209.145.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:68:0b:23:78:f6:cf:ed:7a:54:2d:74:a7:4a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69546aa4c1e97627bc927d99bfc2e276715a1b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:69:13:4a:f4:0e:a4:70:a9:c6:0f:e4:99: db:58:ed:96:6d:02:e7:8c:08:19:bf:bb:ef:30:f0: b4:b7:dc:aa:85:ae:4a:73:80:58:55:4e:90:8d:21: 24:39:40:51:e1:13:84:ec:d2:e1:3c:92:d2:5b:de: 3f:67:08:4c:3b:3b:f5:d0:aa:42:c4:28:84:53:20: 97:d0:e3:c7:b4:a7:da:7b:35:79:3a:e0:1a:66:32: c5:b1:b8:c7:b5:ef:3f:3f:98:09:c1:9d:45:60:4a: 2e:9c:c9:2e:42:d1:fa:af:d6:1a:94:7e:f1:2b:92: 9e:58:50:f8:3f:d1:78:11:e4:0b:9c:f7:27:0b:3e: 93:df:b4:83:79:02:15:a5:91:b9:16:e8:60:1b:12: 06:9c:f4:1e:12:29:8f:93:1b:a4:e1:e4:86:24:95: d8:a5:8d:8b:9b:bd:b4:4c:e0:12:18:6a:c8:1d:4b: 3a:7e:02:d2:72:db:19:e6:c4:f3:25:8d:4b:1b:b9: f2:4f:a1:5b:17:a0:ab:1c:57:ce:f4:e6:09:51:63: 2d:ab:77:18:1a:bd:0b:69:fc:96:2b:88:25:42:ff: 99:c0:c0:cf:1b:1a:7b:3a:3e:41:65:e3:9a:1b:f0: 32:d3:02:5f:d7:07:c3:b5:50:9a:b6:21:d4:25:00: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:54:6A:A4:C1:E9:76:27:BC:92:7D:99:BF:C2:E2:76:71:5A:1B:45 X509v3 Authority Key Identifier: keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/aVRqpMHpdie8kn2Zv8LidnFaG0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.162.0/24 209.145.40.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ba:db:60:3f:b3:28:89:5b:5f:0f:31:f1:3c:92:1e:90:0a: 39:8c:ac:dd:d5:90:41:a0:c6:34:18:fc:ef:9f:09:55:de:b2: fb:96:2b:45:68:ec:cd:ce:31:47:fe:d9:35:d6:11:76:0d:cd: ce:bc:76:19:3d:fe:fc:70:5f:93:e4:2e:8a:ef:47:67:05:bd: b9:33:c8:30:1f:2a:bc:53:6f:b4:8b:73:9e:e1:06:fc:fc:9d: 54:44:52:40:90:64:d5:5b:ab:4d:75:17:0f:6a:99:50:06:2c: f8:53:67:94:27:6a:3b:e0:2b:d5:28:9c:b1:b2:21:a2:99:ce: a0:55:94:eb:69:59:51:a3:4b:91:8a:f1:0c:82:37:2f:c6:7b: 47:f4:62:42:9f:78:d1:5f:b6:f7:8c:3d:03:bc:ec:c1:0f:86: ae:13:c9:f8:6e:87:90:76:c7:53:cd:4a:c3:d1:48:44:4c:a6: ec:b1:6c:4e:63:a2:f6:d2:14:17:eb:79:6d:a0:ef:c6:36:9d: 6f:77:28:ce:b9:e7:34:7c:6c:60:71:60:30:0a:e0:12:dc:67: 3c:d9:38:14:a0:a6:46:3e:47:47:ce:0e:26:d4:d8:e1:01:d4: 06:d3:89:4d:01:d5:56:50:3a:e3:56:69:c9:33:1f:63:81:17: 9e:92:e9:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gGgLI3j2z+16VC10p0pNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmI1NjkzYjgyNjFmYjUzOWZlYTNiMTNjODE3MTE1ZjAw YzE4ZGYwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTU0NmFhNGMxZTk3NjI3YmM5MjdkOTliZmMyZTI3NjcxNWExYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjahpE0r0DqRwqcYP5JnbWO2WbQLn jAgZv7vvMPC0t9yqha5Kc4BYVU6QjSEkOUBR4ROE7NLhPJLSW94/ZwhMOzv10KpC xCiEUyCX0OPHtKfaezV5OuAaZjLFsbjHte8/P5gJwZ1FYEounMkuQtH6r9YalH7x K5KeWFD4P9F4EeQLnPcnCz6T37SDeQIVpZG5FuhgGxIGnPQeEimPkxuk4eSGJJXY pY2Lm720TOASGGrIHUs6fgLSctsZ5sTzJY1LG7nyT6FbF6CrHFfO9OYJUWMtq3cY Gr0LafyWK4glQv+ZwMDPGxp7Oj5BZeOaG/Ay0wJf1wfDtVCatiHUJQAj0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGlUaqTB6XYnvJJ9mb/C4nZxWhtFMB8GA1UdIwQY MBaAFJgrVpO4Jh+1Of6jsTyBcRXwDBjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYt MWRhNGI5Mjc5OWY2LzEvYVZScXBNSHBkaWU4a24yWnY4TGlkbkZhRzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYtMWRhNGI5Mjc5OWY2 LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1qiAwQA 0ZEoMA0GCSqGSIb3DQEBCwUAA4IBAQAWuttgP7MoiVtfDzHxPJIekAo5jKzd1ZBB oMY0GPzvnwlV3rL7litFaOzNzjFH/tk11hF2Dc3OvHYZPf78cF+T5C6K70dnBb25 M8gwHyq8U2+0i3Oe4Qb8/J1URFJAkGTVW6tNdRcPaplQBiz4U2eUJ2o74CvVKJyx siGimc6gVZTraVlRo0uRivEMgjcvxntH9GJCn3jRX7b3jD0DvOzBD4auE8n4boeQ dsdTzUrD0UhETKbssWxOY6L20hQX63ltoO/GNp1vdyjOuec0fGxgcWAwCuAS3Gc8 2TgUoKZGPkdHzg4m1NjhAdQG04lNAdVWUDrjVmnJMx9jgReekul7 -----END CERTIFICATE-----Generated at Tue Jan 27 02:49:56 2026 by rpki-client