This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/j9TBm7xlc93nIZuNOs3NlUyZzEs.roa File: j9TBm7xlc93nIZuNOs3NlUyZzEs.roa (raw, json) Hash identifier: OJvrZsHB8fK3Xgo6IhUOmrDOAtYYR5DtLBMAzJ8x9HU= Subject key identifier: 8F:D4:C1:9B:BC:65:73:DD:E7:21:9B:8D:3A:CD:CD:95:4C:99:CC:4B Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894 Certificate serial: 019B7758C88343906A4A213F71374C1A34CA Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/j9TBm7xlc93nIZuNOs3NlUyZzEs.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39406 IP address blocks: 91.212.68.0/24 maxlen: 24 188.68.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:83:43:90:6a:4a:21:3f:71:37:4c:1a:34:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fd4c19bbc6573dde7219b8d3acdcd954c99cc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:18:bc:d9:50:b2:1b:ea:b0:f0:22:c5:55: d0:a0:01:39:ce:c4:09:b4:b7:22:4c:cb:e6:25:01: 09:4e:b8:d5:3d:cc:e7:70:f6:85:73:1b:86:04:19: 34:51:ef:3a:81:a2:7e:18:9a:dd:0b:46:c6:a5:62: b6:bc:12:f6:4b:5d:31:12:0a:e0:06:f7:ed:01:3f: 3b:7b:97:0b:40:94:25:05:5a:3f:d2:71:82:e7:76: b4:46:75:91:0c:22:81:a4:78:1b:90:de:af:ce:ff: 6a:6f:b4:84:52:83:eb:a2:7c:b4:01:1b:f4:ea:46: cb:8e:62:6c:66:d6:43:6b:7e:e0:89:3c:d5:15:5e: 29:e3:43:f1:9c:ce:ff:06:7a:7b:4c:37:21:96:c6: 84:4b:0f:3b:02:fe:c3:21:f0:e2:27:6f:fe:c2:4b: c5:7f:30:99:31:a6:92:43:7c:ea:cd:ac:2d:5e:3c: 4a:cd:7a:a1:c7:d3:08:4c:80:83:e7:68:c9:00:03: 89:d4:2f:c7:b7:5f:ba:32:02:5a:86:6d:48:e0:c6: d5:7a:d9:2f:43:ae:0a:04:67:61:6b:1f:b2:27:1b: 49:bb:a8:94:3a:96:92:cb:82:5c:e0:fc:b9:e8:35: 35:01:c6:1f:20:24:98:23:79:a9:eb:99:2d:8c:df: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D4:C1:9B:BC:65:73:DD:E7:21:9B:8D:3A:CD:CD:95:4C:99:CC:4B X509v3 Authority Key Identifier: keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/j9TBm7xlc93nIZuNOs3NlUyZzEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.68.0/24 188.68.82.0/23 Signature Algorithm: sha256WithRSAEncryption 42:29:a7:b0:16:9a:32:b3:9f:53:3b:31:59:11:72:34:a8:35: b2:19:fa:67:7e:44:12:b7:66:13:cf:fb:74:95:71:fd:c4:f2: f3:27:4e:90:68:1b:32:51:1b:54:78:59:3b:37:ad:a4:d0:84: 52:d9:40:6f:c5:5b:0b:48:d2:d2:9b:3c:9b:4e:e2:2b:6e:c0: cc:14:5d:39:5d:72:09:cb:29:5b:a5:34:c3:01:cf:2c:94:97: 3f:b6:06:25:f7:ea:58:99:09:c5:fe:32:44:72:30:7b:b5:2a: 53:97:b2:bc:e8:d1:54:44:98:f4:40:4a:9c:4d:49:f5:51:cc: f7:ac:b2:50:6c:67:01:0d:81:ef:67:4f:b0:98:0c:2c:a0:e9: 7a:44:75:29:d0:10:35:3b:3b:66:b9:c0:e9:4f:6c:a3:e3:24: 10:78:a8:bf:e3:b9:cf:cf:a8:fb:a5:c2:bd:a1:5b:40:fd:08: db:13:99:00:fe:47:6b:0c:d3:a5:fb:cb:d7:8f:45:f7:f3:17: 57:16:02:14:3b:cc:59:e2:b5:93:70:30:19:b6:78:46:02:fe: 2f:f7:e8:2e:1d:86:9f:f6:d0:b1:1d:b1:0d:46:37:53:03:db: bc:71:08:77:56:31:f1:ae:8c:4e:41:9b:1a:f8:81:a3:c1:ed: f0:05:32:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WMiDQ5BqSiE/cTdMGjTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1 NDg4OTQwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmQ0YzE5YmJjNjU3M2RkZTcyMTliOGQzYWNkY2Q5NTRjOTljYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaoYvNlQshvqsPAixVXQoAE5zsQJ tLciTMvmJQEJTrjVPczncPaFcxuGBBk0Ue86gaJ+GJrdC0bGpWK2vBL2S10xEgrg BvftAT87e5cLQJQlBVo/0nGC53a0RnWRDCKBpHgbkN6vzv9qb7SEUoProny0ARv0 6kbLjmJsZtZDa37giTzVFV4p40PxnM7/Bnp7TDchlsaESw87Av7DIfDiJ2/+wkvF fzCZMaaSQ3zqzawtXjxKzXqhx9MITICD52jJAAOJ1C/Ht1+6MgJahm1I4MbVetkv Q64KBGdhax+yJxtJu6iUOpaSy4Jc4Py56DU1AcYfICSYI3mp65ktjN8TyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI/UwZu8ZXPd5yGbjTrNzZVMmcxLMB8GA1UdIwQY MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt MWVmN2VmMTdmYTQzLzEvajlUQm03eGxjOTNuSVp1Tk9zM05sVXlaekVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9REAwQB vERSMA0GCSqGSIb3DQEBCwUAA4IBAQBCKaewFpoys59TOzFZEXI0qDWyGfpnfkQS t2YTz/t0lXH9xPLzJ06QaBsyURtUeFk7N62k0IRS2UBvxVsLSNLSmzybTuIrbsDM FF05XXIJyylbpTTDAc8slJc/tgYl9+pYmQnF/jJEcjB7tSpTl7K86NFURJj0QEqc TUn1Ucz3rLJQbGcBDYHvZ0+wmAwsoOl6RHUp0BA1OztmucDpT2yj4yQQeKi/47nP z6j7pcK9oVtA/QjbE5kA/kdrDNOl+8vXj0X38xdXFgIUO8xZ4rWTcDAZtnhGAv4v 9+guHYaf9tCxHbENRjdTA9u8cQh3VjHxroxOQZsa+IGjwe3wBTJJ -----END CERTIFICATE-----Generated at Mon Jan 19 09:01:03 2026 by rpki-client