This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/G81NQlSOvB6uJwM_Wf5tseGTOKM.roa File: G81NQlSOvB6uJwM_Wf5tseGTOKM.roa (raw, json) Hash identifier: tj8ZjtqPksxSwo2NLMPtA0L4iClvYA+wPQN+bJR6DMw= Subject key identifier: 1B:CD:4D:42:54:8E:BC:1E:AE:27:03:3F:59:FE:6D:B1:E1:93:38:A3 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB68F1851E05E1BAC25140D293D48A Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/G81NQlSOvB6uJwM_Wf5tseGTOKM.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49729 IP address blocks: 91.228.88.0/24 maxlen: 24 195.64.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:68:f1:85:1e:05:e1:ba:c2:51:40:d2:93:d4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bcd4d42548ebc1eae27033f59fe6db1e19338a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:97:68:84:1c:dc:d4:e0:f4:92:27:2d:95: f2:f9:e9:f7:2a:92:d6:57:01:8c:77:a6:d8:90:ea: 15:5a:4d:50:1e:5d:04:5c:86:a3:3e:a0:a6:6c:bd: 55:28:5d:f3:12:d5:e9:02:ab:0f:b3:0d:33:bb:ae: eb:37:d8:da:1a:f8:6f:17:d6:fd:33:ff:ab:9c:87: ba:3e:48:a2:7c:f9:58:e8:74:c6:2f:88:04:f1:b0: f2:bf:90:5c:24:da:4a:9e:c2:b5:57:58:4f:7f:2f: 7f:ed:bb:20:ba:65:e6:bd:cd:6c:4f:1e:b7:6f:03: 2e:98:d2:87:71:90:20:6f:44:d9:00:40:47:ec:29: 99:6f:f5:b7:ae:01:f0:b4:54:52:77:51:cf:ad:ef: 71:09:c4:27:70:86:23:60:50:7d:08:12:83:fa:bc: 1a:82:24:58:97:8c:8d:5c:60:30:1d:49:aa:f5:26: 98:b6:77:ca:ea:de:44:6f:3d:9f:3f:29:49:04:9d: ff:5c:36:01:b4:3e:83:1d:e3:6f:4e:a4:9a:fa:7f: a8:07:ab:6f:72:00:3d:f0:d9:54:b4:c4:92:10:c6: 42:d4:49:98:78:cd:e5:66:e9:dd:d3:07:5d:24:97: ea:83:e2:18:4d:60:df:af:01:ab:3d:ea:f7:63:bb: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:4D:42:54:8E:BC:1E:AE:27:03:3F:59:FE:6D:B1:E1:93:38:A3 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/G81NQlSOvB6uJwM_Wf5tseGTOKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.88.0/24 195.64.126.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:ed:a0:ca:6a:67:62:b5:e5:32:b6:91:e5:66:d8:b4:55:98: 7c:ae:1a:a3:1d:6d:4a:bc:06:87:03:7e:7b:6a:3a:66:13:bc: fd:42:03:fe:5f:d6:c8:ba:c7:4d:37:31:65:51:8d:68:47:e2: f4:16:5e:a3:7a:d2:63:65:f2:07:ac:de:41:e7:f9:28:64:ee: 76:05:7f:73:48:17:55:e5:8b:07:f2:87:7f:49:55:8c:51:f3: 48:84:09:c2:e8:91:3b:a5:2d:00:fa:91:6c:4a:eb:8e:f4:89: 69:e0:fe:ac:8e:00:13:dd:70:d5:70:5d:1d:22:e7:96:cd:db: 5b:fa:58:6c:02:4a:f8:c3:4a:79:d9:7f:d0:9f:2b:bf:15:3e: 03:22:5c:66:06:c2:40:a1:c2:d9:33:c8:a0:15:78:86:be:3c: a7:74:88:a9:2e:96:35:8e:6c:c8:be:a5:3b:89:f9:eb:62:f7: 02:ca:3b:d1:f0:a9:12:e4:51:6c:eb:a8:f5:71:21:a5:29:aa: ce:fb:f7:3a:60:10:33:8d:9a:40:0a:ec:b7:3c:f5:51:15:f9: b2:22:ad:29:e3:12:4c:d1:fe:29:da:7c:26:fd:16:ad:f1:8d: 8e:c7:56:04:7f:23:08:f0:29:00:81:68:27:22:a3:8b:b4:7e: 56:9e:d9:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y2jxhR4F4brCUUDSk9SKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmNkNGQ0MjU0OGViYzFlYWUyNzAzM2Y1OWZlNmRiMWUxOTMzOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC2XaIQc3NTg9JInLZXy+en3KpLW VwGMd6bYkOoVWk1QHl0EXIajPqCmbL1VKF3zEtXpAqsPsw0zu67rN9jaGvhvF9b9 M/+rnIe6PkiifPlY6HTGL4gE8bDyv5BcJNpKnsK1V1hPfy9/7bsgumXmvc1sTx63 bwMumNKHcZAgb0TZAEBH7CmZb/W3rgHwtFRSd1HPre9xCcQncIYjYFB9CBKD+rwa giRYl4yNXGAwHUmq9SaYtnfK6t5Ebz2fPylJBJ3/XDYBtD6DHeNvTqSa+n+oB6tv cgA98NlUtMSSEMZC1EmYeM3lZund0wddJJfqg+IYTWDfrwGrPer3Y7vNAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBvNTUJUjrwericDP1n+bbHhkzijMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvRzgxTlFsU092QjZ1SndNX1dmNXRzZUdUT0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+RYAwQA w0B+MA0GCSqGSIb3DQEBCwUAA4IBAQAN7aDKamditeUytpHlZti0VZh8rhqjHW1K vAaHA357ajpmE7z9QgP+X9bIusdNNzFlUY1oR+L0Fl6jetJjZfIHrN5B5/koZO52 BX9zSBdV5YsH8od/SVWMUfNIhAnC6JE7pS0A+pFsSuuO9Ilp4P6sjgAT3XDVcF0d IueWzdtb+lhsAkr4w0p52X/Qnyu/FT4DIlxmBsJAocLZM8igFXiGvjyndIipLpY1 jmzIvqU7ifnrYvcCyjvR8KkS5FFs66j1cSGlKarO+/c6YBAzjZpACuy3PPVRFfmy Iq0p4xJM0f4p2nwm/Rat8Y2Ox1YEfyMI8CkAgWgnIqOLtH5Wntkj -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client