This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/aX-bCk9kbXqytG_4jbY-UgtjVKY.roa File: aX-bCk9kbXqytG_4jbY-UgtjVKY.roa (raw, json) Hash identifier: ZuwhAjD2QMVYYccyvC88HRDcRNRXFhvyNan7F7qqMoQ= Subject key identifier: 69:7F:9B:0A:4F:64:6D:7A:B2:B4:6F:F8:8D:B6:3E:52:0B:63:54:A6 Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861 Certificate serial: 019B791139CA7AABBC53FA7AE4CFBF013B65 Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/aX-bCk9kbXqytG_4jbY-UgtjVKY.roa Signing time: Thu 01 Jan 2026 10:18:50 +0000 ROA not before: Thu 01 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41835 IP address blocks: 91.210.244.0/22 maxlen: 22 193.203.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:39:ca:7a:ab:bc:53:fa:7a:e4:cf:bf:01:3b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=697f9b0a4f646d7ab2b46ff88db63e520b6354a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:30:ae:fb:db:ff:c0:18:8c:dc:ba:57:38: 96:a9:3d:0d:db:ed:83:dc:18:22:63:fe:f7:a1:a6: af:e2:21:c1:ab:ca:28:00:75:d3:5b:09:89:98:14: af:30:b2:4a:97:c2:c3:69:d0:1f:55:6b:26:55:50: a3:d7:d6:ce:56:97:6c:7c:a7:84:92:b2:fd:0d:df: 0b:e0:ca:fc:63:49:9f:d8:bc:95:41:31:27:06:cb: a5:d2:91:66:cd:91:26:1b:86:a0:02:3e:19:fb:1d: 8a:2d:cb:be:e7:0a:81:c4:b5:93:92:5a:c0:42:8f: 4f:bb:57:9c:04:02:9a:3d:e5:5f:98:e1:24:84:a0: 1d:1c:4c:ca:a3:85:7a:6f:56:13:94:a6:01:2f:3e: 2a:54:33:63:f0:d3:d5:b3:2e:8b:48:0a:ee:6c:e9: 08:9b:bc:c1:a7:13:ed:03:f5:5b:6b:61:6f:e5:4b: cc:c3:a5:60:ea:49:86:26:81:ff:e6:31:58:f4:1a: 22:d3:0a:fc:5f:e1:fe:27:12:ba:30:94:fc:f4:98: 69:79:dc:7c:2e:82:1f:1b:45:b2:6d:74:a3:f4:0e: 90:3b:13:9a:20:9e:9b:49:50:4f:db:f7:4a:a1:51: 88:82:62:c5:45:c8:eb:4e:c1:45:bd:ba:23:3b:3c: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7F:9B:0A:4F:64:6D:7A:B2:B4:6F:F8:8D:B6:3E:52:0B:63:54:A6 X509v3 Authority Key Identifier: keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/aX-bCk9kbXqytG_4jbY-UgtjVKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.244.0/22 193.203.206.0/23 Signature Algorithm: sha256WithRSAEncryption 39:77:ec:b4:8a:de:21:0e:34:bc:02:23:fd:c2:ad:6e:ba:ae: 48:af:c0:dd:f5:95:aa:5c:eb:0f:2d:7e:d4:c4:23:ac:dc:17: 6e:c8:2c:83:24:b4:a7:bd:39:1e:71:95:20:c3:93:22:78:c6: 09:a5:fd:e9:c3:ea:ea:90:cb:b8:e9:bb:2f:32:5d:e7:b2:10: ee:b1:d8:64:86:df:40:62:c6:aa:42:d3:ff:d5:53:3a:6b:09: e6:e4:f0:75:fa:21:91:0e:2c:cc:29:07:30:fc:c1:bd:8e:32: 8c:43:bd:d1:37:b3:eb:bc:85:0a:26:f9:c2:72:cf:ec:7f:6c: 5b:2d:3b:85:32:15:6c:5a:75:de:fd:79:07:32:a5:e6:b8:d8: e5:21:d8:bb:43:5c:cc:80:0e:2d:ff:c2:e7:d5:37:96:d0:7e: 5b:9e:0e:3e:7d:0f:d0:15:61:1e:ea:69:31:bb:ee:d8:00:71: 6d:29:f5:70:c4:38:db:6c:17:73:d7:31:03:43:9d:f8:05:41: 52:13:2f:46:89:ad:9a:a2:ee:82:74:3c:23:db:b7:31:be:9c: fe:9f:f2:c6:a7:ed:14:62:20:20:78:9f:ab:59:4d:37:00:92: e6:dc:f2:a1:25:99:7d:d9:d4:f3:e7:a0:b1:63:b2:8d:9a:53: cc:37:43:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ETnKequ8U/p65M+/ATtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDMyNjhiYjY2NmIxYmQ0MjMwNzllNWRmMmJkNWE1NGUx ZTk4NjEwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTdmOWIwYTRmNjQ2ZDdhYjJiNDZmZjg4ZGI2M2U1MjBiNjM1NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Ywrvvb/8AYjNy6VziWqT0N2+2D 3BgiY/73oaav4iHBq8ooAHXTWwmJmBSvMLJKl8LDadAfVWsmVVCj19bOVpdsfKeE krL9Dd8L4Mr8Y0mf2LyVQTEnBsul0pFmzZEmG4agAj4Z+x2KLcu+5wqBxLWTklrA Qo9Pu1ecBAKaPeVfmOEkhKAdHEzKo4V6b1YTlKYBLz4qVDNj8NPVsy6LSArubOkI m7zBpxPtA/Vba2Fv5UvMw6Vg6kmGJoH/5jFY9Boi0wr8X+H+JxK6MJT89Jhpedx8 LoIfG0WybXSj9A6QOxOaIJ6bSVBP2/dKoVGIgmLFRcjrTsFFvbojOzwL9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGl/mwpPZG16srRv+I22PlILY1SmMB8GA1UdIwQY MBaAFMoDJou2ZrG9QjB55d8r1aVOHphhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iMzlhNTktYjQyNC00MTNiLWE2OTMt MzlkNGIzZjU3MTBmLzEvYVgtYkNrOWtiWHF5dEdfNGpiWS1VZ3RqVktZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iMzlhNTktYjQyNC00MTNiLWE2OTMtMzlkNGIzZjU3MTBm LzEveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9L0AwQB wcvOMA0GCSqGSIb3DQEBCwUAA4IBAQA5d+y0it4hDjS8AiP9wq1uuq5Ir8Dd9ZWq XOsPLX7UxCOs3BduyCyDJLSnvTkecZUgw5MieMYJpf3pw+rqkMu46bsvMl3nshDu sdhkht9AYsaqQtP/1VM6awnm5PB1+iGRDizMKQcw/MG9jjKMQ73RN7PrvIUKJvnC cs/sf2xbLTuFMhVsWnXe/XkHMqXmuNjlIdi7Q1zMgA4t/8Ln1TeW0H5bng4+fQ/Q FWEe6mkxu+7YAHFtKfVwxDjbbBdz1zEDQ534BUFSEy9Gia2aou6CdDwj27cxvpz+ n/LGp+0UYiAgeJ+rWU03AJLm3PKhJZl92dTz56CxY7KNmlPMN0OS -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:36 2026 by rpki-client