This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/tsSIuAhpfPkyoEWlotiPKzX6w8I.roa File: tsSIuAhpfPkyoEWlotiPKzX6w8I.roa (raw, json) Hash identifier: DsopP3SuV9qAYq1FNnHh/jlHBAIogzYm66PAey2rdvM= Subject key identifier: B6:C4:88:B8:08:69:7C:F9:32:A0:45:A5:A2:D8:8F:2B:35:FA:C3:C2 Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Certificate serial: 019B797EE9748278480D0C27C6110ADAFB95 Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/tsSIuAhpfPkyoEWlotiPKzX6w8I.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.193.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e9:74:82:78:48:0d:0c:27:c6:11:0a:da:fb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6c488b808697cf932a045a5a2d88f2b35fac3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:89:86:0e:39:21:5f:87:09:44:76:d8:ae: ad:a7:d0:f0:31:59:40:88:92:dd:b9:7c:d7:48:b6: 3b:24:0c:f3:58:45:68:f1:70:1b:a3:47:08:1f:95: fa:60:e9:97:d8:7e:6b:09:be:22:f6:d8:50:30:d5: ac:ba:29:a2:80:f4:2e:db:96:20:28:9a:44:d3:65: 26:fc:35:d9:7d:d1:32:b7:d4:97:d9:2d:fe:5b:c3: 88:22:e8:06:c1:98:30:7d:84:f2:c1:07:32:0e:6c: e4:da:87:2e:f7:cb:0d:cd:29:ac:95:37:f7:4e:dd: 3c:e6:15:6f:69:5c:45:30:eb:c7:9a:5e:d7:df:62: 85:35:f8:80:d5:d5:ec:48:f8:c9:a8:c8:2d:b9:54: 47:91:f7:1c:90:74:fc:f7:9f:d9:96:97:cb:f1:46: 56:37:36:2a:36:36:97:6b:be:d8:48:16:54:96:2f: 99:df:72:2f:da:bb:ca:80:fa:20:6e:e1:66:27:2f: 35:78:84:6b:ef:3d:3d:25:5f:a9:33:28:91:51:17: 05:d2:da:57:27:44:13:df:9c:a4:82:5a:6b:69:8b: 5f:c1:39:88:c3:62:9a:9b:5f:11:e6:8c:27:49:1b: 2a:f3:b8:81:41:54:06:91:45:a2:f5:16:6d:03:50: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C4:88:B8:08:69:7C:F9:32:A0:45:A5:A2:D8:8F:2B:35:FA:C3:C2 X509v3 Authority Key Identifier: keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/tsSIuAhpfPkyoEWlotiPKzX6w8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.42.0/24 Signature Algorithm: sha256WithRSAEncryption 77:c4:b4:db:34:13:c5:9a:7f:7b:5b:65:1e:16:9f:27:13:5c: 4f:26:5a:09:a7:11:63:65:67:e8:14:81:0d:79:27:0f:08:06: 25:25:b5:51:aa:73:05:8c:10:6a:a1:42:f3:ef:bd:2b:0a:3c: eb:1e:42:30:c9:f6:2a:af:49:e2:ef:98:b1:6f:69:5d:87:fb: 17:1a:64:47:bd:40:e6:79:0a:6a:4b:c6:aa:eb:6e:5d:20:25: 45:0c:54:f4:0f:fd:0c:a2:fe:58:6a:7a:9d:3a:07:d0:96:0b: 47:bb:64:5e:19:fd:46:b7:50:fb:5a:ad:4a:5f:bf:39:be:18: 5a:a7:07:0d:2b:a5:e3:65:93:cc:96:04:f0:55:8e:76:7d:33: fa:88:0a:8b:a0:d6:db:8d:df:40:05:3d:15:38:0b:04:60:3d: 01:63:2e:c2:58:bd:40:50:60:26:e2:51:b7:90:9d:58:87:9c: 8a:17:40:a0:e6:9b:05:ea:a8:ec:75:1f:3b:af:c9:41:d1:17: 88:3a:55:af:e1:50:99:83:7b:ac:c6:f4:92:90:91:42:d3:f8: 26:5a:ec:67:8b:08:37:82:26:4a:64:6a:13:e8:10:ee:a1:3e: 5c:55:bf:c6:c5:5e:3e:55:8f:81:f7:c0:33:0e:4e:4d:d4:86: 35:d8:77:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ful0gnhIDQwnxhEK2vuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk ZjRmNjAwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmM0ODhiODA4Njk3Y2Y5MzJhMDQ1YTVhMmQ4OGYyYjM1ZmFjM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg+Jhg45IV+HCUR22K6tp9DwMVlA iJLduXzXSLY7JAzzWEVo8XAbo0cIH5X6YOmX2H5rCb4i9thQMNWsuimigPQu25Yg KJpE02Um/DXZfdEyt9SX2S3+W8OIIugGwZgwfYTywQcyDmzk2ocu98sNzSmslTf3 Tt085hVvaVxFMOvHml7X32KFNfiA1dXsSPjJqMgtuVRHkfcckHT895/ZlpfL8UZW NzYqNjaXa77YSBZUli+Z33Iv2rvKgPogbuFmJy81eIRr7z09JV+pMyiRURcF0tpX J0QT35ykglpraYtfwTmIw2Kam18R5ownSRsq87iBQVQGkUWi9RZtA1AiMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLbEiLgIaXz5MqBFpaLYjys1+sPCMB8GA1UdIwQY MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt Mzk5YjdhM2IyMGNmLzEvdHNTSXVBaHBmUGt5b0VXbG90aVBLelg2dzhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8EqMA0G CSqGSIb3DQEBCwUAA4IBAQB3xLTbNBPFmn97W2UeFp8nE1xPJloJpxFjZWfoFIEN eScPCAYlJbVRqnMFjBBqoULz770rCjzrHkIwyfYqr0ni75ixb2ldh/sXGmRHvUDm eQpqS8aq625dICVFDFT0D/0Mov5YanqdOgfQlgtHu2ReGf1Gt1D7Wq1KX785vhha pwcNK6XjZZPMlgTwVY52fTP6iAqLoNbbjd9ABT0VOAsEYD0BYy7CWL1AUGAm4lG3 kJ1Yh5yKF0Cg5psF6qjsdR87r8lB0ReIOlWv4VCZg3usxvSSkJFC0/gmWuxniwg3 giZKZGoT6BDuoT5cVb/GxV4+VY+B98AzDk5N1IY12Hcx -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:03 2026 by rpki-client