This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/IS6G36HIKhn8504sUv9RDOVhJtc.roa File: IS6G36HIKhn8504sUv9RDOVhJtc.roa (raw, json) Hash identifier: EFw3QrJ6c/K7ZoKQsk7N9M/h7zGvXJMqojkfvWcO4v0= Subject key identifier: 21:2E:86:DF:A1:C8:2A:19:FC:E7:4E:2C:52:FF:51:0C:E5:61:26:D7 Certificate issuer: /CN=054409a1d8b072f7db024528b9720339bdbbb106 Certificate serial: 019B7AC85F034987AA5FA7187A04CCD9E9BE Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/IS6G36HIKhn8504sUv9RDOVhJtc.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3212 IP address blocks: 91.212.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5f:03:49:87:aa:5f:a7:18:7a:04:cc:d9:e9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=212e86dfa1c82a19fce74e2c52ff510ce56126d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:1a:b2:cf:19:56:43:32:d4:21:6b:b8:b5: a7:5d:5e:50:d4:5a:81:a4:29:a1:22:cc:65:4e:b1: 8c:f9:a8:15:6c:18:68:e1:65:6e:c1:90:e5:c2:29: 53:8b:cf:c5:5d:93:e3:3e:16:2d:06:99:ed:00:a9: 87:c4:fd:00:9a:9b:a9:43:6d:f7:f0:0d:0a:05:c6: 7c:b8:47:69:cd:34:a7:de:48:a6:dc:eb:5a:f7:7a: d4:61:97:53:fb:e7:00:c4:22:06:fd:2d:2b:2f:85: 54:29:b1:26:7e:b5:44:2c:13:83:0d:ad:46:0b:35: 65:a4:dd:56:f0:85:f8:b5:ed:ac:20:4c:da:1e:ff: 48:04:75:7d:06:18:39:76:c9:11:e2:2d:99:44:34: 30:e9:35:25:11:d5:a4:bb:b2:85:90:23:b4:78:fe: 54:9d:fb:14:ff:20:02:84:79:c1:cf:1d:88:75:88: 5c:7c:52:93:bb:aa:39:91:58:40:95:ed:97:2e:af: 3e:22:8e:fd:e7:1c:54:64:cf:a6:fb:8d:ec:8c:54: 37:ff:c6:76:1c:e9:19:21:d9:98:1b:cf:12:e0:17: 25:19:2f:9d:44:fe:d6:70:57:52:65:48:6c:3d:97: 12:fe:66:70:34:9f:d6:6a:27:e7:a5:cf:4c:8c:98: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2E:86:DF:A1:C8:2A:19:FC:E7:4E:2C:52:FF:51:0C:E5:61:26:D7 X509v3 Authority Key Identifier: keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/IS6G36HIKhn8504sUv9RDOVhJtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.251.0/24 Signature Algorithm: sha256WithRSAEncryption 80:da:b1:c9:71:76:86:65:49:eb:58:af:aa:6b:25:64:5b:e1: 52:33:b3:00:a6:3f:16:d1:e7:3a:ba:bb:5e:3e:6f:64:b9:3d: 60:04:2e:63:84:8d:0a:3d:59:3b:76:45:db:f0:c2:19:a3:95: d3:06:17:a8:00:64:a9:4f:64:64:73:a3:ca:54:79:04:22:db: 95:92:72:bb:fb:a6:e3:49:8d:9b:6b:9b:11:8b:18:59:4f:b2: b5:16:f3:cd:77:af:44:e6:11:a6:7d:b7:79:2b:a6:af:3b:34: 18:54:70:36:8f:03:cf:1c:b6:35:a7:3b:9a:43:de:bc:3c:fb: ad:6e:d3:2a:c2:d4:c4:65:ad:87:de:aa:90:27:bf:af:77:e8: 28:04:a6:a3:db:de:62:67:53:de:c8:a5:3e:fb:87:d6:2f:43: a0:80:e5:fb:8f:a6:0c:05:6e:62:a8:b9:83:b4:ec:32:66:ae: 9c:f4:75:09:98:6a:dc:2b:ca:80:79:17:96:aa:44:3f:89:d1: 94:11:2c:1c:02:c6:6e:e9:76:5b:16:7f:e7:f2:9a:a7:37:75: 8f:2a:04:b9:f6:65:3c:5e:a8:bf:c4:e2:58:43:23:3a:b4:4e: 9c:10:7d:f5:f3:80:22:42:36:a3:07:7e:79:31:1c:0b:87:44: b2:46:8f:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yF8DSYeqX6cYegTM2em+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDQwOWExZDhiMDcyZjdkYjAyNDUyOGI5NzIwMzM5YmRi YmIxMDYwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTJlODZkZmExYzgyYTE5ZmNlNzRlMmM1MmZmNTEwY2U1NjEyNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M8ass8ZVkMy1CFruLWnXV5Q1FqB pCmhIsxlTrGM+agVbBho4WVuwZDlwilTi8/FXZPjPhYtBpntAKmHxP0AmpupQ233 8A0KBcZ8uEdpzTSn3kim3Ota93rUYZdT++cAxCIG/S0rL4VUKbEmfrVELBODDa1G CzVlpN1W8IX4te2sIEzaHv9IBHV9Bhg5dskR4i2ZRDQw6TUlEdWku7KFkCO0eP5U nfsU/yAChHnBzx2IdYhcfFKTu6o5kVhAle2XLq8+Io795xxUZM+m+43sjFQ3/8Z2 HOkZIdmYG88S4BclGS+dRP7WcFdSZUhsPZcS/mZwNJ/Waifnpc9MjJj7TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEuht+hyCoZ/OdOLFL/UQzlYSbXMB8GA1UdIwQY MBaAFAVECaHYsHL32wJFKLlyAzm9u7EGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEt YjE2ZDIxOWIzNTkyLzEvSVM2RzM2SElLaG44NTA0c1V2OVJET1ZoSnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEtYjE2ZDIxOWIzNTky LzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9T7MA0G CSqGSIb3DQEBCwUAA4IBAQCA2rHJcXaGZUnrWK+qayVkW+FSM7MApj8W0ec6urte Pm9kuT1gBC5jhI0KPVk7dkXb8MIZo5XTBheoAGSpT2Rkc6PKVHkEItuVknK7+6bj SY2ba5sRixhZT7K1FvPNd69E5hGmfbd5K6avOzQYVHA2jwPPHLY1pzuaQ968PPut btMqwtTEZa2H3qqQJ7+vd+goBKaj295iZ1PeyKU++4fWL0OggOX7j6YMBW5iqLmD tOwyZq6c9HUJmGrcK8qAeReWqkQ/idGUESwcAsZu6XZbFn/n8pqnN3WPKgS59mU8 Xqi/xOJYQyM6tE6cEH3184AiQjajB355MRwLh0SyRo/L -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:57 2026 by rpki-client