This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pBPBsGN1DhAoK4e_Ax4RPmYQ8hU.roa File: pBPBsGN1DhAoK4e_Ax4RPmYQ8hU.roa (raw, json) Hash identifier: U+ObXrWLr4WrcPpV6+v8erlo98NekocTZSIA9H9yjXI= Subject key identifier: A4:13:C1:B0:63:75:0E:10:28:2B:87:BF:03:1E:11:3E:66:10:F2:15 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8469F31E3FA5C5EAEDD1FACCEF3CB0 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pBPBsGN1DhAoK4e_Ax4RPmYQ8hU.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61135 IP address blocks: 91.93.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:69:f3:1e:3f:a5:c5:ea:ed:d1:fa:cc:ef:3c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a413c1b063750e10282b87bf031e113e6610f215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:42:32:68:08:9a:c5:7c:2b:61:0a:bf:2c:de: 01:1f:9a:9a:e5:af:67:a3:33:02:4f:98:8d:25:76: 64:f4:2a:1f:7a:56:0c:7b:1c:00:89:ac:23:cd:a8: aa:8c:78:00:dc:9c:a9:6b:ca:c9:91:91:3d:a0:3a: bb:9b:c9:b3:19:16:31:20:59:02:16:b2:43:58:2f: 37:46:0c:29:df:0f:e8:7e:45:2e:dd:55:55:d6:4e: f7:67:57:ce:59:03:e2:52:82:90:2e:7e:38:fa:66: 9f:eb:f7:08:38:9c:3b:d6:ac:ad:29:98:cb:91:61: 47:e7:98:55:cf:ef:64:5b:bc:4d:d6:72:87:23:33: 42:bb:71:6e:1f:3a:e3:4c:49:f4:90:5d:33:03:cf: bc:6a:1b:6f:cf:2e:53:b1:4c:a8:81:17:88:63:14: 43:fb:82:4d:bc:ba:ea:0d:34:a3:75:d5:ab:a5:80: f7:e1:8a:aa:52:f8:b4:b1:e2:3d:54:5a:06:65:c9: d6:ec:9e:64:32:da:04:c3:8c:76:8f:20:e9:20:b0: 16:61:ce:71:5b:0f:46:af:f0:34:fb:af:93:6f:69: bf:ed:05:38:e1:32:d3:c3:f6:7f:95:4e:8d:e2:71: 78:00:bc:18:df:23:1f:6d:63:8e:2e:45:4a:16:bf: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:13:C1:B0:63:75:0E:10:28:2B:87:BF:03:1E:11:3E:66:10:F2:15 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pBPBsGN1DhAoK4e_Ax4RPmYQ8hU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.93.155.0/24 Signature Algorithm: sha256WithRSAEncryption 66:7c:ad:2f:22:70:3b:c0:63:c1:12:7d:1b:9b:26:03:b0:bd: 3c:6a:f0:84:8e:94:a4:3f:ea:e6:0d:02:9f:c3:36:b1:5d:3b: da:c5:2b:22:e7:8e:91:46:2b:27:b1:97:7b:3a:e3:18:17:1d: 5f:12:bf:69:ac:05:54:1d:5a:80:56:b8:ea:54:d5:cf:19:50: 4d:00:31:21:69:52:fc:fd:83:d6:d4:02:1c:b4:e5:d8:42:50: cd:f7:a1:e1:15:08:9a:0e:ca:96:98:35:27:52:3a:e1:b2:d7: 9b:7c:dc:69:11:01:f9:fa:ba:d2:92:e3:93:f3:b4:fd:a6:54: bf:8f:e3:79:fd:0a:fc:26:d7:35:e2:a0:71:97:f6:0a:c7:78: 6a:2c:e1:35:b7:6e:0c:1d:20:9d:4b:7f:51:89:05:06:f3:41: 3b:f3:ee:16:d6:a0:38:5c:6e:86:8c:f9:4a:1a:a7:f8:9a:7b: bf:15:3d:ac:1e:3b:9f:08:18:72:53:7c:7f:8e:6b:c8:c8:3d: 9e:bf:40:ae:37:03:25:db:15:da:c0:47:ee:7f:49:50:63:d5: 9f:b6:27:87:ee:df:d2:d1:14:81:2f:83:1f:b5:2c:3e:fd:fc: 21:7d:d9:7c:5c:87:c8:7f:68:b3:de:ca:94:de:4e:f2:9d:d8: c8:fc:b4:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGnzHj+lxert0frM7zywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDEzYzFiMDYzNzUwZTEwMjgyYjg3YmYwMzFlMTEzZTY2MTBmMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EIyaAiaxXwrYQq/LN4BH5qa5a9n ozMCT5iNJXZk9CofelYMexwAiawjzaiqjHgA3Jypa8rJkZE9oDq7m8mzGRYxIFkC FrJDWC83Rgwp3w/ofkUu3VVV1k73Z1fOWQPiUoKQLn44+maf6/cIOJw71qytKZjL kWFH55hVz+9kW7xN1nKHIzNCu3FuHzrjTEn0kF0zA8+8ahtvzy5TsUyogReIYxRD +4JNvLrqDTSjddWrpYD34YqqUvi0seI9VFoGZcnW7J5kMtoEw4x2jyDpILAWYc5x Ww9Gr/A0+6+Tb2m/7QU44TLTw/Z/lU6N4nF4ALwY3yMfbWOOLkVKFr9NDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQTwbBjdQ4QKCuHvwMeET5mEPIVMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvcEJQQnNHTjFEaEFvSzRlX0F4NFJQbVlROGhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW12bMA0G CSqGSIb3DQEBCwUAA4IBAQBmfK0vInA7wGPBEn0bmyYDsL08avCEjpSkP+rmDQKf wzaxXTvaxSsi546RRisnsZd7OuMYFx1fEr9prAVUHVqAVrjqVNXPGVBNADEhaVL8 /YPW1AIctOXYQlDN96HhFQiaDsqWmDUnUjrhstebfNxpEQH5+rrSkuOT87T9plS/ j+N5/Qr8Jtc14qBxl/YKx3hqLOE1t24MHSCdS39RiQUG80E78+4W1qA4XG6GjPlK Gqf4mnu/FT2sHjufCBhyU3x/jmvIyD2ev0CuNwMl2xXawEfuf0lQY9WftieH7t/S 0RSBL4MftSw+/fwhfdl8XIfIf2iz3sqU3k7yndjI/LQb -----END CERTIFICATE-----Generated at Wed Jan 21 22:21:09 2026 by rpki-client