This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa File: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (raw, json) Hash identifier: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU= Subject key identifier: 6D:2E:49:9B:C6:44:FA:C5:63:D6:8D:FA:43:09:23:C1:38:B7:9D:24 Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Certificate serial: 019B7758DD17B36044E8B714E681661D1D31 Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 91.245.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dd:17:b3:60:44:e8:b7:14:e6:81:66:1d:1d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d2e499bc644fac563d68dfa430923c138b79d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:51:fb:51:dc:10:e8:50:3f:fb:1d:af:b9: 40:86:61:c6:95:07:3a:eb:74:18:64:44:02:29:0e: 5d:71:6d:de:ec:16:2c:d0:d2:a6:60:6e:2d:e0:41: a2:58:37:13:d2:57:1c:c9:3e:70:34:ad:4b:64:31: 97:ad:31:91:bc:dd:37:03:51:e8:5c:3f:d8:91:43: d0:64:9e:62:98:62:16:04:7b:18:bc:f7:31:78:37: 58:7e:c4:90:2f:8a:2b:92:ce:b5:82:37:24:e7:79: fd:dc:15:18:be:2e:fc:61:de:51:d1:48:53:31:2b: 91:d9:90:33:a7:40:85:16:e6:9b:71:2c:81:ed:e1: 3d:54:20:a4:37:33:a5:53:b2:76:06:36:7e:1f:2f: 66:ad:5b:0e:d6:34:4f:fc:9e:4a:3d:a8:d2:88:b8: 62:0f:8a:10:e0:eb:69:c1:bb:18:54:79:17:09:97: b6:a4:47:9f:21:e9:85:5e:60:ed:57:b4:d6:d8:9b: da:21:6f:a6:44:46:52:3c:18:b4:32:d9:ea:1e:7a: 38:7b:b1:1e:03:6d:66:77:d9:22:a9:94:6c:74:d8: 60:3d:94:1a:f7:7f:45:6f:e8:94:2e:2e:51:c9:a9: 9b:1b:8b:12:fb:09:ab:68:b9:fd:17:8a:87:43:68: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2E:49:9B:C6:44:FA:C5:63:D6:8D:FA:43:09:23:C1:38:B7:9D:24 X509v3 Authority Key Identifier: keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.215.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6b:20:3d:76:c7:d0:0e:92:01:53:85:79:43:8e:de:ca:e2: e7:55:4f:30:f8:53:68:f8:55:65:c4:f2:1a:98:d8:8f:f0:38: 10:2d:de:5c:3c:45:41:37:0c:c5:1e:64:b1:43:c2:45:01:1b: f4:ec:b4:d9:bd:46:f0:e4:02:a2:d7:63:ac:28:c5:23:89:6a: 05:95:a2:31:60:ac:35:8d:8c:9a:20:fb:10:56:f4:06:f3:0b: fe:56:34:10:b2:38:f3:a0:03:13:ca:76:5c:98:cb:a1:ac:6c: 76:5c:4e:a2:c9:95:60:b2:3f:6f:e3:5b:40:9f:2d:d9:1d:0e: 45:f9:ba:c2:0e:4d:dd:85:1b:e8:48:2b:6c:9e:a4:d0:21:de: 90:7c:af:69:18:e2:35:7e:01:02:5a:34:67:1f:99:75:a0:da: 52:79:0d:00:03:ff:ea:b0:5b:72:c5:5e:21:ca:fe:8f:66:14: d1:95:f4:18:ef:df:19:01:d3:75:49:78:3f:46:ea:df:a9:ec: 01:e3:be:79:a0:44:ec:66:b8:b5:92:ed:68:0e:7a:06:b8:87: a6:62:69:f5:2c:ff:d8:bd:63:7c:4d:a9:d1:af:60:99:51:e4: 83:3c:48:13:de:a5:32:52:70:ad:08:d2:e7:69:2b:9f:bd:ca: 02:d6:5d:22 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WN0Xs2BE6LcU5oFmHR0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk YTk3ZjAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDJlNDk5YmM2NDRmYWM1NjNkNjhkZmE0MzA5MjNjMTM4Yjc5ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHRR+1HcEOhQP/sdr7lAhmHGlQc6 63QYZEQCKQ5dcW3e7BYs0NKmYG4t4EGiWDcT0lccyT5wNK1LZDGXrTGRvN03A1Ho XD/YkUPQZJ5imGIWBHsYvPcxeDdYfsSQL4orks61gjck53n93BUYvi78Yd5R0UhT MSuR2ZAzp0CFFuabcSyB7eE9VCCkNzOlU7J2BjZ+Hy9mrVsO1jRP/J5KPajSiLhi D4oQ4OtpwbsYVHkXCZe2pEefIemFXmDtV7TW2JvaIW+mREZSPBi0MtnqHno4e7Ee A21md9kiqZRsdNhgPZQa939Fb+iULi5RyambG4sS+wmraLn9F4qHQ2havwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG0uSZvGRPrFY9aN+kMJI8E4t50kMB8GA1UdIwQY MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2 LTU5NWYyMTAwMTY2Yi8xL2JTNUptOFpFLXNWajFvMzZRd2tqd1RpM25TUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2LTU5NWYyMTAwMTY2 Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb9dcw DQYJKoZIhvcNAQELBQADggEBADhrID12x9AOkgFThXlDjt7K4udVTzD4U2j4VWXE 8hqY2I/wOBAt3lw8RUE3DMUeZLFDwkUBG/TstNm9RvDkAqLXY6woxSOJagWVojFg rDWNjJog+xBW9AbzC/5WNBCyOPOgAxPKdlyYy6GsbHZcTqLJlWCyP2/jW0CfLdkd DkX5usIOTd2FG+hIK2yepNAh3pB8r2kY4jV+AQJaNGcfmXWg2lJ5DQAD/+qwW3LF XiHK/o9mFNGV9Bjv3xkB03VJeD9G6t+p7AHjvnmgROxmuLWS7WgOega4h6ZiafUs /9i9Y3xNqdGvYJlR5IM8SBPepTJScK0I0udpK5+9ygLWXSI= -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:26 2026 by rpki-client