This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa File: tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa (raw, json) Hash identifier: xN2ctTPtxjMiIigccibut/P5bneSpRG4NOTR23KVdug= Subject key identifier: B5:7D:76:A8:C6:19:73:25:35:73:7A:FB:21:71:D2:68:9F:AA:EE:52 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38AF6F63B84C1D3F8E76D690767026 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 91.193.252.0/24 maxlen: 24 141.105.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:af:6f:63:b8:4c:1d:3f:8e:76:d6:90:76:70:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b57d76a8c619732535737afb2171d2689faaee52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:58:a8:46:7b:dd:39:bb:b4:6f:55:a8:6a: e8:70:7e:18:84:35:f8:aa:54:4b:b4:34:6a:1a:e6: 4d:d3:a1:95:e7:fb:1e:24:38:96:26:2d:c8:a7:34: a4:a7:20:b1:52:d8:5e:e1:f9:07:ab:c4:b9:26:b3: 4b:3c:d4:e4:85:0f:72:6d:a4:95:e3:44:17:7e:0c: 49:47:13:92:dc:ca:1d:92:f9:41:93:5a:e0:7e:89: ba:58:5f:35:d1:b7:4a:60:1d:fb:43:90:55:3d:29: 60:0d:6c:13:a7:c5:3c:d1:b3:f8:22:fc:96:c8:5e: 06:94:d6:89:76:89:b1:83:f6:3a:69:0b:22:6f:06: dd:0b:9d:d3:dd:34:d9:ad:2e:66:31:24:df:2d:f3: ef:f5:3f:a3:97:d5:31:5a:d4:72:f1:e4:45:fd:cb: 03:d5:fd:58:c0:24:81:a6:b1:ab:c4:0b:73:0e:ec: 30:b6:c2:b4:6d:77:07:d5:87:18:c8:19:de:24:de: a4:fb:09:88:1f:e1:39:a2:8c:83:3d:53:fb:05:19: 51:8d:24:28:6f:5a:8a:59:d4:96:1c:cd:76:fe:af: f2:3c:b1:f0:b4:ac:d4:fb:d2:b6:0c:5b:b2:3e:cc: 64:e9:6f:9f:91:e7:63:2f:19:a3:9f:15:a5:aa:13: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:76:A8:C6:19:73:25:35:73:7A:FB:21:71:D2:68:9F:AA:EE:52 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.252.0/24 141.105.141.0/24 Signature Algorithm: sha256WithRSAEncryption 92:af:c6:91:83:09:94:7e:75:12:b4:14:fb:56:65:1f:bb:de: 86:9a:0d:ee:c4:8e:3d:0c:47:65:f9:1e:19:23:c0:77:81:b3: 23:bd:07:f6:44:aa:b2:5f:b3:23:a3:83:80:c4:00:49:6f:a8: d3:3d:fd:08:04:fb:10:22:2c:29:22:86:5c:03:6a:a7:09:d5: 0c:f9:ae:c3:ce:79:77:90:ba:f6:74:50:a6:36:f5:81:9c:d5: 41:a4:22:fc:d7:6d:c2:bb:c1:bb:d1:80:85:dd:93:77:a4:b7: 83:a4:c9:9b:30:5d:54:aa:1d:1c:e7:87:da:34:73:b9:c6:0f: 65:bc:ba:cf:11:93:cd:c7:98:66:bd:2b:57:8d:d4:6f:f6:2d: 1d:a0:09:22:5f:64:4e:ab:84:06:10:23:5c:ad:3f:95:25:aa: b1:79:ff:e0:83:22:2f:87:7f:fe:f9:4d:47:16:fc:4d:46:fa: 73:0c:ea:ce:32:18:23:18:72:b2:90:8b:be:c6:8d:2d:c3:e6: d3:cd:e0:24:f1:ca:c5:e7:f7:d0:2a:d5:25:92:9c:41:a4:4d: c7:a3:71:00:88:8e:0f:d2:2e:21:c5:76:94:06:54:0e:60:a7: 92:79:ae:bc:16:95:6d:9b:82:09:a8:11:06:f8:ae:50:1a:11: f9:b8:7b:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OK9vY7hMHT+OdtaQdnAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTdkNzZhOGM2MTk3MzI1MzU3MzdhZmIyMTcxZDI2ODlmYWFlZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSFYqEZ73Tm7tG9VqGrocH4YhDX4 qlRLtDRqGuZN06GV5/seJDiWJi3IpzSkpyCxUthe4fkHq8S5JrNLPNTkhQ9ybaSV 40QXfgxJRxOS3ModkvlBk1rgfom6WF810bdKYB37Q5BVPSlgDWwTp8U80bP4IvyW yF4GlNaJdomxg/Y6aQsibwbdC53T3TTZrS5mMSTfLfPv9T+jl9UxWtRy8eRF/csD 1f1YwCSBprGrxAtzDuwwtsK0bXcH1YcYyBneJN6k+wmIH+E5ooyDPVP7BRlRjSQo b1qKWdSWHM12/q/yPLHwtKzU+9K2DFuyPsxk6W+fkedjLxmjnxWlqhO2owIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLV9dqjGGXMlNXN6+yFx0mifqu5SMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvdFgxMnFNWVpjeVUxYzNyN0lYSFNhSi1xN2xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8H8AwQA jWmNMA0GCSqGSIb3DQEBCwUAA4IBAQCSr8aRgwmUfnUStBT7VmUfu96Gmg3uxI49 DEdl+R4ZI8B3gbMjvQf2RKqyX7Mjo4OAxABJb6jTPf0IBPsQIiwpIoZcA2qnCdUM +a7Dznl3kLr2dFCmNvWBnNVBpCL8123Cu8G70YCF3ZN3pLeDpMmbMF1Uqh0c54fa NHO5xg9lvLrPEZPNx5hmvStXjdRv9i0doAkiX2ROq4QGECNcrT+VJaqxef/ggyIv h3/++U1HFvxNRvpzDOrOMhgjGHKykIu+xo0tw+bTzeAk8crF5/fQKtUlkpxBpE3H o3EAiI4P0i4hxXaUBlQOYKeSea68FpVtm4IJqBEG+K5QGhH5uHtE -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:26 2026 by rpki-client