This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/bXHKxfZ-clKo3uVvBiES8ymUWb4.roa File: bXHKxfZ-clKo3uVvBiES8ymUWb4.roa (raw, json) Hash identifier: 5y+v12wnsW0x7UyzTae1pV9Cje40Zw2A3YIrbQGELhE= Subject key identifier: 6D:71:CA:C5:F6:7E:72:52:A8:DE:E5:6F:06:21:12:F3:29:94:59:BE Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf Certificate serial: 019B79ECFD2EE11B62051DA67DCD44F27F6C Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/bXHKxfZ-clKo3uVvBiES8ymUWb4.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215278 IP address blocks: 91.192.162.0/24 maxlen: 24 194.147.72.0/24 maxlen: 24 2001:67c:2d8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fd:2e:e1:1b:62:05:1d:a6:7d:cd:44:f2:7f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d71cac5f67e7252a8dee56f062112f3299459be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:22:1c:35:c9:a8:3d:72:b4:0c:ef:61:eb: 46:e2:12:55:15:70:11:80:af:c8:87:bb:94:89:2f: 8f:fc:cf:c7:d6:64:9e:76:0c:5b:6b:67:49:ed:e6: 80:4a:2c:eb:84:0a:20:ed:a9:d8:38:4e:7f:36:fb: bf:3c:27:0c:34:c1:13:0b:23:e7:e3:8b:87:ad:25: 39:d1:69:f5:f3:43:af:af:35:ca:d2:bb:5d:a8:1e: ec:8b:44:27:89:03:fc:77:21:d1:2b:1f:c7:14:59: ac:56:23:d0:96:15:c8:50:66:e4:4e:64:7d:45:31: 08:d4:13:c6:19:c8:4e:d6:b9:bf:60:35:84:f8:62: 55:f3:ba:35:cb:d9:fc:c6:6a:c7:c8:30:06:8f:19: 1e:d8:30:93:53:bf:5b:6d:b9:83:cb:b9:56:ce:7e: ea:19:2f:e6:a7:5b:bc:c2:ad:7f:12:fe:65:bb:63: fb:e5:72:d2:40:ee:09:2f:d1:94:a9:39:85:47:9e: 59:4a:13:96:44:9e:5e:af:c6:c9:ad:26:9c:8c:26: 28:a7:62:b4:c7:8b:0a:ad:13:4f:e1:56:ac:99:27: 9f:01:57:65:d2:e2:e0:bc:a4:62:66:bc:59:19:3e: a1:17:93:29:f2:36:75:f1:48:b2:e0:82:ca:45:b0: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:71:CA:C5:F6:7E:72:52:A8:DE:E5:6F:06:21:12:F3:29:94:59:BE X509v3 Authority Key Identifier: keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/bXHKxfZ-clKo3uVvBiES8ymUWb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.162.0/24 194.147.72.0/24 IPv6: 2001:67c:2d8c::/48 Signature Algorithm: sha256WithRSAEncryption 47:b1:8f:ce:0e:b3:32:76:3f:22:cd:09:19:e6:d0:67:d9:56: 11:e4:e0:44:aa:e0:69:6f:8a:b9:03:3c:d8:26:c3:1a:80:cc: 16:bc:96:4f:da:37:b9:72:60:6d:03:c8:ca:38:4d:a8:6a:33: 62:b4:bd:75:07:b5:a4:e3:11:d9:94:fe:12:16:d0:34:44:fb: 25:b1:d4:21:e0:db:f3:f8:a0:f8:a3:fa:f7:fe:5d:c9:cf:dc: 6c:c2:08:b5:9a:16:95:48:1e:04:24:66:4f:73:2a:b1:e0:ed: 08:d3:f1:6d:69:ba:11:fa:ea:8d:5e:7b:bd:49:f2:df:97:6a: eb:9a:b0:2f:84:7e:3c:76:ad:53:fc:05:de:39:a1:b7:5c:44: cf:74:11:73:9a:d0:53:f8:6d:4a:54:6b:64:00:51:8b:08:f3: a0:bb:62:4e:8f:8d:0f:6d:f1:12:bc:0a:bb:08:99:3b:22:f9: 79:6f:19:a4:b1:53:5d:2b:39:19:0c:85:66:f6:b7:8d:6d:b4: 8a:3b:86:0a:36:85:d0:c5:57:92:3e:9e:ce:50:87:3a:77:2c: a3:6b:8e:d3:08:34:65:35:cc:29:30:48:f6:2a:fd:65:a2:60: bf:ff:2c:6d:db:a2:ac:05:6d:59:37:9b:91:ff:04:e9:f1:61: 46:c8:9f:13 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt57P0u4RtiBR2mfc1E8n9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDA5OGYyMDY4NTA0ODhiNzJjZGRlODM4N2MzMTgxYzYz ZjhjZGYwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDcxY2FjNWY2N2U3MjUyYThkZWU1NmYwNjIxMTJmMzI5OTQ1OWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMEiHDXJqD1ytAzvYetG4hJVFXAR gK/Ih7uUiS+P/M/H1mSedgxba2dJ7eaASizrhAog7anYOE5/Nvu/PCcMNMETCyPn 44uHrSU50Wn180OvrzXK0rtdqB7si0QniQP8dyHRKx/HFFmsViPQlhXIUGbkTmR9 RTEI1BPGGchO1rm/YDWE+GJV87o1y9n8xmrHyDAGjxke2DCTU79bbbmDy7lWzn7q GS/mp1u8wq1/Ev5lu2P75XLSQO4JL9GUqTmFR55ZShOWRJ5er8bJrSacjCYop2K0 x4sKrRNP4VasmSefAVdl0uLgvKRiZrxZGT6hF5Mp8jZ18Uiy4ILKRbB/gwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFG1xysX2fnJSqN7lbwYhEvMplFm+MB8GA1UdIwQY MBaAFF5AmPIGhQSItyzd6Dh8MYHGP4zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYt OWNmODdmZjFjZTViLzEvYlhIS3hmWi1jbEtvM3VWdkJpRVM4eW1VV2I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYtOWNmODdmZjFjZTVi LzEvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW8CiAwQA wpNIMA8EAgACMAkDBwAgAQZ8LYwwDQYJKoZIhvcNAQELBQADggEBAEexj84OszJ2 PyLNCRnm0GfZVhHk4ESq4GlvirkDPNgmwxqAzBa8lk/aN7lyYG0DyMo4TahqM2K0 vXUHtaTjEdmU/hIW0DRE+yWx1CHg2/P4oPij+vf+XcnP3GzCCLWaFpVIHgQkZk9z KrHg7QjT8W1puhH66o1ee71J8t+XauuasC+Efjx2rVP8Bd45obdcRM90EXOa0FP4 bUpUa2QAUYsI86C7Yk6PjQ9t8RK8CrsImTsi+XlvGaSxU10rORkMhWb2t41ttIo7 hgo2hdDFV5I+ns5Qhzp3LKNrjtMINGU1zCkwSPYq/WWiYL//LG3boqwFbVk3m5H/ BOnxYUbInxM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:28 2026 by rpki-client