This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa File: bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa (raw, json) Hash identifier: brHlGv5imLHwbxwJPoUHI3T7npY3uz8hyi909TKqiCI= Subject key identifier: 6F:12:75:7C:82:CA:67:77:66:C5:B1:52:D9:93:9C:FC:77:EB:F4:89 Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Certificate serial: 019B7DCB2B0EAF03F3E8577946BECF90CBCD Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48078 IP address blocks: 91.210.24.0/22 maxlen: 22 91.210.24.0/24 maxlen: 24 91.210.25.0/24 maxlen: 24 91.210.26.0/24 maxlen: 24 91.210.27.0/24 maxlen: 24 91.215.88.0/22 maxlen: 22 91.215.88.0/24 maxlen: 24 91.215.89.0/24 maxlen: 24 91.215.90.0/24 maxlen: 24 91.215.91.0/24 maxlen: 24 185.15.60.0/22 maxlen: 22 185.15.60.0/24 maxlen: 24 185.15.61.0/24 maxlen: 24 185.15.62.0/24 maxlen: 24 185.15.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2b:0e:af:03:f3:e8:57:79:46:be:cf:90:cb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f12757c82ca677766c5b152d9939cfc77ebf489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:0d:dc:cf:bc:2e:94:e8:fa:a1:25:e5:da: fb:fd:08:a1:99:e5:32:d8:de:45:6b:0e:52:0b:53: 72:6b:ab:2d:58:89:6e:d3:ad:3f:29:14:8b:ed:d2: ba:36:a8:4b:3c:73:ca:0b:03:c1:d8:1a:a9:5b:7c: 16:5c:70:97:60:90:21:40:8a:6c:77:5c:56:7c:2c: d3:74:48:c7:3c:96:0d:fe:58:22:e9:de:6c:f2:7c: 95:6e:f9:6b:cb:78:87:e0:6a:da:59:ea:a5:7e:5b: 7a:32:26:06:2f:c0:84:c8:b2:37:48:61:ca:4c:b1: 14:8f:5f:2d:f9:19:84:95:d8:e7:85:47:5e:a1:29: 76:04:c0:fa:5c:f9:6e:03:09:45:d6:9b:a3:23:45: 46:74:57:b3:51:17:e6:d0:e4:a9:78:b6:c7:ed:0c: a5:e0:ce:95:11:89:11:c1:33:dd:91:0e:44:6a:44: 10:d4:53:d1:91:ae:a6:8a:51:1a:ab:02:b7:ee:47: b3:61:70:ce:80:50:f7:d1:cc:7c:cc:3e:08:6a:4e: ed:9e:ee:78:cc:7f:c3:96:0c:a6:95:bf:af:a7:39: aa:f5:32:ac:5e:f9:63:26:f2:34:75:5c:fe:cf:cc: b3:f1:75:44:d3:83:f0:b3:40:b4:13:66:f1:50:34: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:75:7C:82:CA:67:77:66:C5:B1:52:D9:93:9C:FC:77:EB:F4:89 X509v3 Authority Key Identifier: keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.24.0/22 91.215.88.0/22 185.15.60.0/22 Signature Algorithm: sha256WithRSAEncryption 09:4c:36:62:3c:13:82:28:50:5e:0f:1f:83:11:24:c5:ee:72: f4:28:49:7f:36:a0:d7:7e:b4:6a:11:c8:5c:47:58:a9:52:d7: 94:63:11:4c:e4:9b:b2:70:de:a8:5a:56:f3:84:ef:bb:5b:c7: cd:da:8a:7f:d6:e2:02:6a:e2:85:ea:5b:c1:73:d5:47:14:46: 2c:81:c5:c2:ab:3f:e4:9e:30:94:62:cb:b7:b7:f4:19:44:b1: 86:95:10:b9:ba:44:5c:9b:64:22:8a:ef:46:ca:7e:09:fe:3b: 71:cc:78:f8:23:24:3a:8a:85:04:b0:db:b1:4c:c3:35:31:72: 28:90:d8:b4:2c:29:20:68:56:43:b7:13:fc:eb:91:0f:e7:93: 1f:63:db:02:62:2c:6a:1d:76:e3:ed:0a:8c:7f:a5:2c:9b:55: c0:e3:f9:8d:e3:ac:7e:15:0e:07:48:7d:79:75:01:f4:32:dc: 11:68:77:13:47:44:4f:ad:64:38:7e:08:60:00:ef:09:81:3f: 63:ee:ee:63:40:3d:60:ae:b6:93:c4:92:5d:10:ab:2c:61:4c: 26:63:bd:88:eb:43:48:9e:bc:73:dc:49:92:9e:40:db:a7:b2: 92:b5:90:b0:ba:1e:64:44:aa:c1:7b:d3:34:e5:a7:cc:41:fd: 51:7b:5c:d2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yysOrwPz6Fd5Rr7PkMvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTlkNTA4NjM2OTA3NmE3OGQ3NjE2MzhiMzJhOGE5Yjhl ZjcwZTcwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjEyNzU3YzgyY2E2Nzc3NjZjNWIxNTJkOTkzOWNmYzc3ZWJmNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxUN3M+8LpTo+qEl5dr7/QihmeUy 2N5Faw5SC1Nya6stWIlu060/KRSL7dK6NqhLPHPKCwPB2BqpW3wWXHCXYJAhQIps d1xWfCzTdEjHPJYN/lgi6d5s8nyVbvlry3iH4GraWeqlflt6MiYGL8CEyLI3SGHK TLEUj18t+RmEldjnhUdeoSl2BMD6XPluAwlF1pujI0VGdFezURfm0OSpeLbH7Qyl 4M6VEYkRwTPdkQ5EakQQ1FPRka6milEaqwK37kezYXDOgFD30cx8zD4Iak7tnu54 zH/Dlgymlb+vpzmq9TKsXvljJvI0dVz+z8yz8XVE04Pws0C0E2bxUDRlxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG8SdXyCymd3ZsWxUtmTnPx36/SJMB8GA1UdIwQY MBaAFK7p1QhjaQdqeNdhY4syqKm473DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODct MjAxMzYxOGMwNGZmLzEvYnhKMWZJTEtaM2RteGJGUzJaT2NfSGZyOUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODctMjAxMzYxOGMwNGZm LzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW9IYAwQC W9dYAwQCuQ88MA0GCSqGSIb3DQEBCwUAA4IBAQAJTDZiPBOCKFBeDx+DESTF7nL0 KEl/NqDXfrRqEchcR1ipUteUYxFM5JuycN6oWlbzhO+7W8fN2op/1uICauKF6lvB c9VHFEYsgcXCqz/knjCUYsu3t/QZRLGGlRC5ukRcm2Qiiu9Gyn4J/jtxzHj4IyQ6 ioUEsNuxTMM1MXIokNi0LCkgaFZDtxP865EP55MfY9sCYixqHXbj7QqMf6Usm1XA 4/mN46x+FQ4HSH15dQH0MtwRaHcTR0RPrWQ4fghgAO8JgT9j7u5jQD1grraTxJJd EKssYUwmY72I60NInrxz3EmSnkDbp7KStZCwuh5kRKrBe9M05afMQf1Re1zS -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:51 2026 by rpki-client