This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/kh97mCRCb1gM-n6T2L16tRWt1No.roa File: kh97mCRCb1gM-n6T2L16tRWt1No.roa (raw, json) Hash identifier: Uv7w0anQc7bmfRwWtut6B/CD6qt0gTfBsNdk/bWiZ00= Subject key identifier: 92:1F:7B:98:24:42:6F:58:0C:FA:7E:93:D8:BD:7A:B5:15:AD:D4:DA Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549 Certificate serial: 019B7834EA37512BFA4EB7298F121F2C1337 Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/kh97mCRCb1gM-n6T2L16tRWt1No.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43046 IP address blocks: 91.229.0.0/23 maxlen: 23 195.191.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ea:37:51:2b:fa:4e:b7:29:8f:12:1f:2c:13:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=921f7b9824426f580cfa7e93d8bd7ab515add4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:c1:8b:2c:78:d7:88:b8:c6:0c:0c:ec:d4: e3:69:9f:25:d5:b4:0d:53:02:3f:58:96:66:51:f3: 5f:4c:fa:b9:a1:78:fc:93:32:80:7f:9a:1c:5f:b9: 99:f0:d4:03:17:1e:ab:15:cb:72:77:8e:72:11:47: b9:27:7d:4f:6e:51:f1:27:be:f7:65:a8:8b:1e:ff: db:37:97:e2:cd:ea:ab:f0:f4:a0:c4:6c:00:3c:f5: dd:99:3c:16:b8:ce:1f:4f:17:96:88:3e:ba:e5:59: b8:d7:90:68:d1:c6:05:2b:95:9f:f7:73:ff:7b:ee: 78:d4:a0:30:2d:7b:ea:11:9f:70:92:bc:77:71:4a: a4:e5:25:fd:2b:0c:46:e8:cf:d6:14:70:2b:5f:ab: 8a:fb:7f:a8:01:ef:4b:51:69:1b:30:f7:8d:3f:5c: f4:e3:63:dd:f5:e4:b9:1d:f9:f7:e6:6e:7e:29:18: 57:42:b3:82:36:e3:0b:43:64:04:71:ff:db:20:f5: 74:66:d7:f4:37:cf:78:2e:c9:73:32:37:8a:c6:3b: 5c:48:44:a2:b4:f5:25:e9:d6:95:06:cb:2c:78:c4: 5f:3f:ce:ff:1c:0e:31:d2:6a:70:77:9e:df:13:25: dd:1c:39:72:ca:bf:c2:62:61:58:23:b0:8b:99:c9: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1F:7B:98:24:42:6F:58:0C:FA:7E:93:D8:BD:7A:B5:15:AD:D4:DA X509v3 Authority Key Identifier: keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/kh97mCRCb1gM-n6T2L16tRWt1No.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.0.0/23 195.191.160.0/23 Signature Algorithm: sha256WithRSAEncryption 04:2b:a6:e7:0e:3a:37:0f:4e:df:ff:68:86:16:96:77:01:d9: 4a:e9:2f:29:b8:41:2f:6a:bd:78:d9:f3:6b:2a:83:b2:7e:18: 88:4c:6d:3a:ed:4d:f6:16:12:b8:33:ff:d3:81:88:5a:7d:78: 25:9e:7d:d0:d4:09:75:55:01:35:ad:95:5c:c3:16:ba:e0:7e: 9b:4c:f1:8d:fb:4c:f3:fc:c8:48:a8:a9:52:60:32:ec:ae:39: e4:15:6e:5a:02:1d:35:f6:a0:6a:7a:83:56:e8:94:b3:7e:79: 9a:ee:42:9d:4a:4d:7a:97:97:0e:d9:a7:61:27:d8:42:52:02: 99:e3:e0:e8:c5:70:13:8b:a6:06:8b:a0:67:ac:86:69:5d:c3: 93:38:87:0c:3b:0e:54:3c:8a:13:eb:e3:cd:6f:c9:3e:e6:43: 80:c9:f9:24:de:1a:67:f4:6e:8c:10:a0:c9:79:a2:30:35:cc: a2:fd:f0:c8:7e:bd:e3:44:b3:15:6f:1c:ac:3f:79:08:dd:af: 05:09:c1:12:d6:94:6e:a1:91:2f:b4:00:80:7b:fa:45:9d:03: f3:c3:5f:3d:03:26:7b:57:fd:b7:42:2d:c2:1e:af:07:10:7d: d1:17:e7:f5:fc:09:25:0b:1d:8f:1b:e7:6c:bf:e8:48:70:26: 41:5d:8b:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NOo3USv6TrcpjxIfLBM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTA3OGI1MTgxYmU1ZmJlOTE0YjQxMmE0MTIwOTZiYzhk NzE1NDkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjFmN2I5ODI0NDI2ZjU4MGNmYTdlOTNkOGJkN2FiNTE1YWRkNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrvBiyx414i4xgwM7NTjaZ8l1bQN UwI/WJZmUfNfTPq5oXj8kzKAf5ocX7mZ8NQDFx6rFctyd45yEUe5J31PblHxJ773 ZaiLHv/bN5fizeqr8PSgxGwAPPXdmTwWuM4fTxeWiD665Vm415Bo0cYFK5Wf93P/ e+541KAwLXvqEZ9wkrx3cUqk5SX9KwxG6M/WFHArX6uK+3+oAe9LUWkbMPeNP1z0 42Pd9eS5Hfn35m5+KRhXQrOCNuMLQ2QEcf/bIPV0Ztf0N894LslzMjeKxjtcSESi tPUl6daVBssseMRfP87/HA4x0mpwd57fEyXdHDlyyr/CYmFYI7CLmcnDwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJIfe5gkQm9YDPp+k9i9erUVrdTaMB8GA1UdIwQY MBaAFGjgeLUYG+X76RS0EqQSCWvI1xVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQt ZTY3MWQ5NGIwYTIwLzEva2g5N21DUkNiMWdNLW42VDJMMTZ0Uld0MU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQtZTY3MWQ5NGIwYTIw LzEvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+UAAwQB w7+gMA0GCSqGSIb3DQEBCwUAA4IBAQAEK6bnDjo3D07f/2iGFpZ3AdlK6S8puEEv ar142fNrKoOyfhiITG067U32FhK4M//TgYhafXglnn3Q1Al1VQE1rZVcwxa64H6b TPGN+0zz/MhIqKlSYDLsrjnkFW5aAh019qBqeoNW6JSzfnma7kKdSk16l5cO2adh J9hCUgKZ4+DoxXATi6YGi6BnrIZpXcOTOIcMOw5UPIoT6+PNb8k+5kOAyfkk3hpn 9G6MEKDJeaIwNcyi/fDIfr3jRLMVbxysP3kI3a8FCcES1pRuoZEvtACAe/pFnQPz w189AyZ7V/23Qi3CHq8HEH3RF+f1/AklCx2PG+dsv+hIcCZBXYuD -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:23 2026 by rpki-client