This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/vSKxJft-YrfZTgTcPvrZEBw-s-o.roa File: vSKxJft-YrfZTgTcPvrZEBw-s-o.roa (raw, json) Hash identifier: fXlVBWLEGWm5OQD/WI5lmOPHwN/6Yh6slPhBeiX8hgo= Subject key identifier: BD:22:B1:25:FB:7E:62:B7:D9:4E:04:DC:3E:FA:D9:10:1C:3E:B3:EA Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Certificate serial: 019BFA7FAE48BB45C1D9FCEA51731EC27F32 Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/vSKxJft-YrfZTgTcPvrZEBw-s-o.roa Signing time: Mon 26 Jan 2026 13:30:30 +0000 ROA not before: Mon 26 Jan 2026 13:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209155 IP address blocks: 91.211.89.0/24 maxlen: 24 91.211.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:7f:ae:48:bb:45:c1:d9:fc:ea:51:73:1e:c2:7f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Validity Not Before: Jan 26 13:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd22b125fb7e62b7d94e04dc3efad9101c3eb3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:de:89:39:6d:a4:ba:b3:83:b3:72:e7:b6: 3c:92:99:68:a9:6a:08:85:32:0d:f7:91:91:ab:e8: f8:0d:9a:ab:a4:19:0b:21:b3:7a:5a:c7:71:15:19: 87:3b:1c:5b:88:81:64:67:ae:74:5a:d3:59:41:c1: 0f:76:26:27:46:b9:81:b8:01:1c:3b:ca:1f:57:dc: f5:3f:2b:64:ab:54:01:3f:c1:ec:fe:b5:46:73:c6: f7:93:4b:87:25:56:9e:9b:b4:72:ad:25:82:f6:e9: 87:5b:a6:57:3d:d6:7f:90:22:c8:00:74:c5:65:91: 0e:99:0c:58:2b:5b:d2:27:29:64:5a:5f:eb:1d:b4: 08:0e:8b:28:fc:2f:a1:45:28:80:a0:6c:91:f9:2b: e2:ad:5a:af:78:c8:65:cc:04:5e:13:c4:3e:f8:d1: 09:ce:0c:0a:77:4c:72:50:d7:77:20:22:96:15:dc: a2:12:49:98:6d:08:a3:62:41:86:82:21:13:7a:65: 7e:35:a2:1d:02:e0:81:31:5e:48:30:f7:f3:31:70: 91:5f:b3:98:cc:a0:f2:b9:2d:7e:0e:c6:a2:b3:6d: 68:7a:78:9a:50:8e:31:77:0f:16:9b:97:6e:29:cc: 08:c6:23:ad:3b:97:66:81:78:5b:2d:fd:35:da:ac: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:B1:25:FB:7E:62:B7:D9:4E:04:DC:3E:FA:D9:10:1C:3E:B3:EA X509v3 Authority Key Identifier: keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/vSKxJft-YrfZTgTcPvrZEBw-s-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.89.0-91.211.90.255 Signature Algorithm: sha256WithRSAEncryption 82:19:c7:19:68:d7:2d:bc:8d:1b:93:22:44:2a:de:32:38:24: 1c:0e:57:ec:fa:c9:42:63:b9:56:85:7f:bf:7f:01:73:83:2a: ca:58:96:09:63:ea:1e:fc:80:52:f8:80:ef:98:25:de:9c:f8: 41:69:34:fa:8e:0b:c7:e4:86:7b:5e:8e:da:e4:12:7c:87:08: 14:70:18:96:7a:dc:11:78:f8:69:d3:c6:7d:ac:d0:fe:05:7f: 1c:92:d6:76:38:1e:61:f7:db:c5:02:ea:78:bc:d0:0d:2f:d8: 35:f9:a6:77:68:f6:fd:bc:76:20:b5:53:23:27:6e:ef:c6:9c: 5b:0f:7e:5a:82:1d:9a:25:d5:44:04:d0:93:56:dc:b8:05:58: 13:17:49:d2:a9:7d:54:f7:2a:b2:15:5c:e0:05:a2:64:7e:26: cd:32:c9:67:3b:e4:b3:2e:c9:64:64:a2:79:7c:65:c7:68:40: 21:71:16:76:cb:5d:39:75:e1:9b:e9:a3:eb:14:d6:28:58:f7: d5:d1:ab:37:e0:d0:f3:ea:3c:14:6f:13:37:1d:f6:d5:47:0c: f1:9f:00:5f:2c:56:4f:ee:ec:12:d3:75:b6:22:80:96:92:8b: a3:24:9c:29:cb:33:84:0b:28:a1:0f:2c:e9:22:07:ef:dd:9c: 4e:41:c0:74 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZv6f65Iu0XB2fzqUXMewn8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2 MWE3MDIwHhcNMjYwMTI2MTMzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDIyYjEyNWZiN2U2MmI3ZDk0ZTA0ZGMzZWZhZDkxMDFjM2ViM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7veiTltpLqzg7Ny57Y8kploqWoI hTIN95GRq+j4DZqrpBkLIbN6WsdxFRmHOxxbiIFkZ650WtNZQcEPdiYnRrmBuAEc O8ofV9z1Pytkq1QBP8Hs/rVGc8b3k0uHJVaem7RyrSWC9umHW6ZXPdZ/kCLIAHTF ZZEOmQxYK1vSJylkWl/rHbQIDoso/C+hRSiAoGyR+SvirVqveMhlzAReE8Q++NEJ zgwKd0xyUNd3ICKWFdyiEkmYbQijYkGGgiETemV+NaIdAuCBMV5IMPfzMXCRX7OY zKDyuS1+Dsais21oeniaUI4xdw8Wm5duKcwIxiOtO5dmgXhbLf012qzMZQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL0isSX7fmK32U4E3D762RAcPrPqMB8GA1UdIwQY MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt MGRiY2JhMjc1NDE3LzEvdlNLeEpmdC1ZcmZaVGdUY1B2clpFQnctcy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3 LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb01kD BABb01owDQYJKoZIhvcNAQELBQADggEBAIIZxxlo1y28jRuTIkQq3jI4JBwOV+z6 yUJjuVaFf79/AXODKspYlglj6h78gFL4gO+YJd6c+EFpNPqOC8fkhntejtrkEnyH CBRwGJZ63BF4+GnTxn2s0P4FfxyS1nY4HmH328UC6ni80A0v2DX5pndo9v28diC1 UyMnbu/GnFsPflqCHZol1UQE0JNW3LgFWBMXSdKpfVT3KrIVXOAFomR+Js0yyWc7 5LMuyWRkonl8ZcdoQCFxFnbLXTl14Zvpo+sU1ihY99XRqzfg0PPqPBRvEzcd9tVH DPGfAF8sVk/u7BLTdbYigJaSi6MknCnLM4QLKKEPLOkiB+/dnE5BwHQ= -----END CERTIFICATE-----Generated at Sun Feb 8 11:40:53 2026 by rpki-client