This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/0lwp4oYsVqGcXPYJsbA37ojFUOY.roa File: 0lwp4oYsVqGcXPYJsbA37ojFUOY.roa (raw, json) Hash identifier: Xr1TyxzvlPR09HeBPc7XwVXyf4HkStFhIXRKsCvU9zI= Subject key identifier: D2:5C:29:E2:86:2C:56:A1:9C:5C:F6:09:B1:B0:37:EE:88:C5:50:E6 Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df Certificate serial: 019B7AC798CB0B36B8635D90FDA2351D6532 Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/0lwp4oYsVqGcXPYJsbA37ojFUOY.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48275 IP address blocks: 91.207.180.0/24 maxlen: 32 91.207.181.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:98:cb:0b:36:b8:63:5d:90:fd:a2:35:1d:65:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d25c29e2862c56a19c5cf609b1b037ee88c550e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:32:da:3c:7f:f3:6e:17:02:02:76:16:23: 59:b4:fd:84:48:14:bc:fa:5e:57:07:2e:ce:54:45: 17:be:35:58:09:21:77:5c:ba:13:39:7e:9d:35:b3: 3f:23:fd:d6:6f:9f:18:78:3f:9c:bf:9b:30:7f:f5: c8:89:71:5d:6b:e3:38:b1:f7:a0:a8:91:61:ac:c6: 78:b9:f1:24:f0:82:4e:26:d3:42:d6:b8:2f:f4:d9: fd:f7:5f:7b:9e:2d:f6:a1:5b:c4:e6:48:db:a8:f6: 79:a7:cf:39:81:a6:2c:ae:18:a3:5a:70:72:93:ea: bd:9a:11:bb:1b:1f:b1:88:3c:e0:9f:b8:b7:dc:f1: 9f:aa:0d:95:f1:fd:45:63:24:59:a0:10:77:61:10: 49:67:a4:39:c9:44:fd:a6:e3:b2:4a:93:2e:cb:e6: 7e:36:7e:61:cd:a1:08:41:62:95:0a:ca:7d:b4:67: 12:88:7e:3e:3b:28:38:3c:3e:90:11:d1:fb:d9:e3: fc:2b:5e:ed:85:51:0c:06:c5:91:c3:10:a9:65:88: 74:72:11:48:dc:ef:c4:f7:0e:89:9c:79:28:84:a7: 18:a3:ac:01:a2:c3:16:33:5d:13:d2:de:c8:b5:27: 18:51:f2:14:14:0c:b9:6c:45:ad:70:7d:b6:07:80: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5C:29:E2:86:2C:56:A1:9C:5C:F6:09:B1:B0:37:EE:88:C5:50:E6 X509v3 Authority Key Identifier: keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/0lwp4oYsVqGcXPYJsbA37ojFUOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.180.0/23 Signature Algorithm: sha256WithRSAEncryption be:e8:09:bb:1f:58:04:79:03:c7:b9:bf:34:64:fa:27:28:87: 98:b6:55:74:ec:77:0b:3c:15:a1:cd:f5:86:21:d1:e0:9c:1f: e6:76:3f:96:40:a7:27:73:a2:54:91:c4:2f:b3:56:74:dd:f8: 4f:05:5a:f1:02:5e:40:fc:a4:4f:f5:93:7a:49:a1:e7:9f:5d: c1:93:68:ae:fc:97:af:d7:e7:1b:14:76:9c:c7:1d:59:9a:1e: ef:05:fc:b3:ec:86:58:3e:5a:be:bc:83:83:5a:47:cb:67:53: d1:d1:50:6d:51:08:4b:0d:f5:48:a3:ab:4c:f8:30:db:bc:f2: bf:e1:dd:39:1c:e4:8d:a2:a0:d9:9e:47:f3:81:72:06:17:e1: f6:e9:80:33:29:96:47:b1:af:c6:90:8f:ff:83:62:46:6d:e7: c7:7b:26:22:56:4c:40:fb:30:6d:f2:25:fb:88:03:71:f6:65: ad:5a:0e:ab:23:08:9e:e4:e3:1e:64:bf:bc:24:d5:f5:e6:cb: 02:75:0a:a4:4e:df:ab:37:2a:d7:01:c7:7b:27:1d:d3:7c:31: 84:4d:12:9b:28:2a:54:d5:e2:d3:e1:12:f6:f3:35:dc:fc:88: 35:43:ea:1a:4c:5b:7c:ff:5a:c7:50:bc:9c:da:0a:a3:34:e0: 41:b5:78:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5jLCza4Y12Q/aI1HWUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NWFhYjdkZmJiMTUyYTY0NmFkZjMyNzNiMzFhYTVkZGU2 NGExZGYwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjVjMjllMjg2MmM1NmExOWM1Y2Y2MDliMWIwMzdlZTg4YzU1MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcMy2jx/824XAgJ2FiNZtP2ESBS8 +l5XBy7OVEUXvjVYCSF3XLoTOX6dNbM/I/3Wb58YeD+cv5swf/XIiXFda+M4sfeg qJFhrMZ4ufEk8IJOJtNC1rgv9Nn99197ni32oVvE5kjbqPZ5p885gaYsrhijWnBy k+q9mhG7Gx+xiDzgn7i33PGfqg2V8f1FYyRZoBB3YRBJZ6Q5yUT9puOySpMuy+Z+ Nn5hzaEIQWKVCsp9tGcSiH4+Oyg4PD6QEdH72eP8K17thVEMBsWRwxCpZYh0chFI 3O/E9w6JnHkohKcYo6wBosMWM10T0t7ItScYUfIUFAy5bEWtcH22B4DIIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJcKeKGLFahnFz2CbGwN+6IxVDmMB8GA1UdIwQY MBaAFCdaq337sVKmRq3zJzsxql3eZKHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUt MGQwZDdjMDE4OWFkLzEvMGx3cDRvWXNWcUdjWFBZSnNiQTM3b2pGVU9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUtMGQwZDdjMDE4OWFk LzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8+0MA0G CSqGSIb3DQEBCwUAA4IBAQC+6Am7H1gEeQPHub80ZPonKIeYtlV07HcLPBWhzfWG IdHgnB/mdj+WQKcnc6JUkcQvs1Z03fhPBVrxAl5A/KRP9ZN6SaHnn13Bk2iu/Jev 1+cbFHacxx1Zmh7vBfyz7IZYPlq+vIODWkfLZ1PR0VBtUQhLDfVIo6tM+DDbvPK/ 4d05HOSNoqDZnkfzgXIGF+H26YAzKZZHsa/GkI//g2JGbefHeyYiVkxA+zBt8iX7 iANx9mWtWg6rIwie5OMeZL+8JNX15ssCdQqkTt+rNyrXAcd7Jx3TfDGETRKbKCpU 1eLT4RL28zXc/Ig1Q+oaTFt8/1rHULyc2gqjNOBBtXgt -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:18 2026 by rpki-client