This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/i0k6OLD9jm7dmK5ZTslomwJsJy0.roa File: i0k6OLD9jm7dmK5ZTslomwJsJy0.roa (raw, json) Hash identifier: 4XCLTUAHRsCpdD5hqCYPM31FfnBCqXw88p7tpNLGYwA= Subject key identifier: 8B:49:3A:38:B0:FD:8E:6E:DD:98:AE:59:4E:C9:68:9B:02:6C:27:2D Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 019B797EBF0E63103944624B3C06A3C78EB0 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/i0k6OLD9jm7dmK5ZTslomwJsJy0.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213837 IP address blocks: 91.203.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bf:0e:63:10:39:44:62:4b:3c:06:a3:c7:8e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b493a38b0fd8e6edd98ae594ec9689b026c272d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:d0:6a:11:1a:be:c6:ce:a3:8a:dc:41:85: 33:99:9a:ca:14:39:cc:2b:40:3d:53:a0:dd:72:2a: a1:48:37:cc:65:b7:29:17:a4:2b:5d:86:b6:aa:5a: 71:6e:d2:13:c8:55:dc:42:aa:08:8c:2b:33:51:bc: f7:17:db:f9:aa:b8:02:97:44:c8:46:0e:58:25:73: d6:c5:32:a6:cf:25:99:9f:ac:8d:8c:5e:4d:50:32: 70:ff:cc:a5:90:44:32:31:99:25:d8:fb:85:1e:c5: d5:6f:ee:dd:38:eb:fb:79:ae:55:e8:15:28:99:ea: c2:ea:2c:9c:55:4c:73:2f:a2:c3:06:aa:83:86:d3: d3:67:b0:c1:2a:6b:0d:cd:4f:76:05:ef:34:58:c5: b3:63:6e:96:0d:ab:14:ab:7a:7f:2e:d0:32:95:b7: cd:96:88:94:18:d5:f7:07:4d:c5:4f:68:f1:00:c8: b1:cc:b4:09:51:9f:cf:c5:22:ee:02:a3:2d:91:d7: b0:9b:84:0d:4e:6a:99:c6:16:e6:4b:43:23:ab:0a: 06:5f:1e:22:72:b7:f8:ed:b8:33:61:b7:d1:00:2f: a5:13:76:fa:45:e3:b8:bb:73:08:35:c7:26:14:51: 07:67:c6:43:32:35:d6:97:fb:6d:1d:61:31:93:45: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:49:3A:38:B0:FD:8E:6E:DD:98:AE:59:4E:C9:68:9B:02:6C:27:2D X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/i0k6OLD9jm7dmK5ZTslomwJsJy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.120.0/24 Signature Algorithm: sha256WithRSAEncryption 50:74:10:1b:b9:2a:63:fc:14:a9:87:76:84:a3:0c:e3:d4:52: 72:94:db:46:c5:34:a7:7f:ca:0d:73:6b:06:72:e5:7a:05:22: 5e:f4:2c:1b:94:fc:64:e4:d5:29:66:90:57:ed:50:00:1e:03: 80:c4:84:ea:3c:18:bb:a3:e6:93:6f:fa:4a:a3:65:df:5a:6a: 46:77:66:82:52:80:d7:ca:20:5e:67:4e:6f:7a:14:6d:52:71: 7e:5c:4b:79:ef:96:ba:30:6a:2e:d8:54:0b:9a:3b:62:0b:fd: 76:b6:04:13:0b:50:12:93:19:e2:f0:97:18:cb:c0:36:39:72: 28:8d:bf:cd:92:c7:80:c5:a4:42:9a:ba:cd:85:46:75:fd:1a: 44:fe:c0:a9:f3:e3:37:18:67:d2:40:54:65:93:2b:bc:b7:bb: f3:39:b2:3c:a1:ef:8c:e6:27:31:ef:22:51:54:4c:c7:3d:27: ba:d2:cc:81:f8:99:5f:76:59:fe:a0:18:28:bf:6c:d5:33:a0: 37:90:49:14:76:52:0b:99:5b:13:15:d6:b7:e5:b1:f4:70:3d: 88:e6:08:c2:44:53:22:01:6f:ff:3a:cb:1e:0d:4e:b3:1c:4c: 3e:e0:d3:54:d4:7d:95:7e:9e:69:36:86:be:17:a0:e4:7b:05: e8:0a:2b:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr8OYxA5RGJLPAajx46wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQ5M2EzOGIwZmQ4ZTZlZGQ5OGFlNTk0ZWM5Njg5YjAyNmMyNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXrQahEavsbOo4rcQYUzmZrKFDnM K0A9U6DdciqhSDfMZbcpF6QrXYa2qlpxbtITyFXcQqoIjCszUbz3F9v5qrgCl0TI Rg5YJXPWxTKmzyWZn6yNjF5NUDJw/8ylkEQyMZkl2PuFHsXVb+7dOOv7ea5V6BUo merC6iycVUxzL6LDBqqDhtPTZ7DBKmsNzU92Be80WMWzY26WDasUq3p/LtAylbfN loiUGNX3B03FT2jxAMixzLQJUZ/PxSLuAqMtkdewm4QNTmqZxhbmS0MjqwoGXx4i crf47bgzYbfRAC+lE3b6ReO4u3MINccmFFEHZ8ZDMjXWl/ttHWExk0WNtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFItJOjiw/Y5u3ZiuWU7JaJsCbCctMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvaTBrNk9MRDlqbTdkbUs1WlRzbG9td0pzSnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8t4MA0G CSqGSIb3DQEBCwUAA4IBAQBQdBAbuSpj/BSph3aEowzj1FJylNtGxTSnf8oNc2sG cuV6BSJe9CwblPxk5NUpZpBX7VAAHgOAxITqPBi7o+aTb/pKo2XfWmpGd2aCUoDX yiBeZ05vehRtUnF+XEt575a6MGou2FQLmjtiC/12tgQTC1ASkxni8JcYy8A2OXIo jb/NkseAxaRCmrrNhUZ1/RpE/sCp8+M3GGfSQFRlkyu8t7vzObI8oe+M5icx7yJR VEzHPSe60syB+Jlfdln+oBgov2zVM6A3kEkUdlILmVsTFda35bH0cD2I5gjCRFMi AW//OsseDU6zHEw+4NNU1H2Vfp5pNoa+F6DkewXoCiup -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:58 2026 by rpki-client