This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/tYY3v3FYeEJG-TBamWZejszkIgw.roa File: tYY3v3FYeEJG-TBamWZejszkIgw.roa (raw, json) Hash identifier: juOXizKulXrce5HNFN8Wotujs/vL+cqOkraeCjdfCq0= Subject key identifier: B5:86:37:BF:71:58:78:42:46:F9:30:5A:99:66:5E:8E:CC:E4:22:0C Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C13353E218D93D09F724AA7E9082433 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/tYY3v3FYeEJG-TBamWZejszkIgw.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43444 IP address blocks: 91.132.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:35:3e:21:8d:93:d0:9f:72:4a:a7:e9:08:24:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b58637bf7158784246f9305a99665e8ecce4220c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:33:40:64:d1:97:be:9d:81:af:0d:94:a0: b2:5d:40:fc:f3:51:8f:48:55:a5:ae:0d:c6:fc:fd: bc:06:fa:31:f9:a3:3b:15:7a:ce:c4:2a:79:9f:1d: 07:86:fc:30:98:41:59:ad:8e:3a:63:89:23:e4:99: b3:6c:2f:2d:69:57:b8:3e:e3:35:ea:3e:f9:59:9a: 70:b8:0c:e4:db:0a:5f:61:55:6b:c5:e0:b8:7d:09: 23:c4:26:c8:db:08:b0:bc:30:7c:2a:74:8c:fb:91: 62:2d:03:03:a0:44:01:42:58:a7:98:5c:37:2e:27: 66:3f:bb:76:a0:0d:bd:56:ca:a2:62:db:86:5f:27: 31:79:e8:96:1b:8b:17:8b:fa:cf:ab:e1:6b:96:34: 6c:d7:f7:6d:d4:e5:6f:e7:d3:da:34:8d:fa:4f:fd: 37:79:39:31:0a:f0:ef:d8:9c:a1:db:aa:7d:26:40: 18:d2:ba:3f:77:50:81:ec:a2:8c:ab:b9:ae:ce:59: fa:5f:bc:af:17:dc:1f:c4:88:77:a7:20:43:5d:d3: 12:ef:9e:5e:56:f2:30:db:6b:3e:b7:9b:39:2c:40: f6:ee:cb:3c:9a:4f:48:42:86:f0:d8:1d:f6:cb:3e: df:2d:d8:db:f6:0c:98:34:de:fe:bf:80:0b:4e:ed: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:86:37:BF:71:58:78:42:46:F9:30:5A:99:66:5E:8E:CC:E4:22:0C X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/tYY3v3FYeEJG-TBamWZejszkIgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.198.0/24 Signature Algorithm: sha256WithRSAEncryption 82:ea:02:33:9b:16:ce:df:d9:7a:3b:6e:29:1c:a3:a4:53:f0: 9b:ea:fa:ae:50:76:6e:d3:d4:e5:cc:87:56:d6:33:1c:5d:f4: b6:2e:c1:1c:9a:c2:33:26:84:df:9e:85:e1:63:5e:e3:42:c4: 92:ac:ff:e4:25:48:45:4f:82:b7:b8:46:bc:66:2f:35:53:b2: 01:2c:8f:9f:fa:34:3d:2b:e1:ae:f4:2b:a1:08:ac:22:06:d6: 23:73:4a:26:17:88:60:02:a5:7e:7c:25:98:35:8d:2e:cd:ef: 9b:b7:ff:9c:88:8c:a6:0c:8a:e0:b5:18:bd:e3:57:75:b3:58: a1:f7:4a:f6:dd:f6:7f:78:fb:b8:a7:0e:57:5c:a9:36:92:02: c7:8e:bc:4a:dd:52:9e:55:8a:ef:0f:b3:9f:71:ea:4d:0a:a8: d7:46:6d:2e:7a:eb:c8:4b:98:17:3f:36:40:e0:61:fe:62:35: a4:86:cf:07:92:2a:0e:7e:91:48:6c:3c:b6:35:d9:82:77:8a: 3b:d8:11:be:42:fe:25:b8:67:9e:5b:8a:58:76:87:bc:ad:e0: 43:5d:df:82:33:be:72:cc:99:16:74:1d:35:95:ba:48:07:b4: a7:6c:cd:26:4e:a8:f4:4b:82:76:af:d5:11:33:4a:eb:50:16: fc:0d:92:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzU+IY2T0J9ySqfpCCQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTg2MzdiZjcxNTg3ODQyNDZmOTMwNWE5OTY2NWU4ZWNjZTQyMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf0zQGTRl76dga8NlKCyXUD881GP SFWlrg3G/P28Bvox+aM7FXrOxCp5nx0HhvwwmEFZrY46Y4kj5JmzbC8taVe4PuM1 6j75WZpwuAzk2wpfYVVrxeC4fQkjxCbI2wiwvDB8KnSM+5FiLQMDoEQBQlinmFw3 LidmP7t2oA29VsqiYtuGXycxeeiWG4sXi/rPq+FrljRs1/dt1OVv59PaNI36T/03 eTkxCvDv2Jyh26p9JkAY0ro/d1CB7KKMq7muzln6X7yvF9wfxIh3pyBDXdMS755e VvIw22s+t5s5LED27ss8mk9IQobw2B32yz7fLdjb9gyYNN7+v4ALTu0/KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLWGN79xWHhCRvkwWplmXo7M5CIMMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvdFlZM3YzRlllRUpHLVRCYW1XWmVqc3prSWd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4TGMA0G CSqGSIb3DQEBCwUAA4IBAQCC6gIzmxbO39l6O24pHKOkU/Cb6vquUHZu09TlzIdW 1jMcXfS2LsEcmsIzJoTfnoXhY17jQsSSrP/kJUhFT4K3uEa8Zi81U7IBLI+f+jQ9 K+Gu9CuhCKwiBtYjc0omF4hgAqV+fCWYNY0uze+bt/+ciIymDIrgtRi941d1s1ih 90r23fZ/ePu4pw5XXKk2kgLHjrxK3VKeVYrvD7OfcepNCqjXRm0ueuvIS5gXPzZA 4GH+YjWkhs8HkioOfpFIbDy2NdmCd4o72BG+Qv4luGeeW4pYdoe8reBDXd+CM75y zJkWdB01lbpIB7SnbM0mTqj0S4J2r9URM0rrUBb8DZKU -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:15 2026 by rpki-client