This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/DBuCDMr-eMpkAR_hikUInL2urKQ.roa File: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (raw, json) Hash identifier: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U= Subject key identifier: 0C:1B:82:0C:CA:FE:78:CA:64:01:1F:E1:8A:45:08:9C:BD:AE:AC:A4 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C72A99B0623191BEC44339F5910174 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/DBuCDMr-eMpkAR_hikUInL2urKQ.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213784 IP address blocks: 91.149.229.0/24 maxlen: 24 91.149.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2a:99:b0:62:31:91:be:c4:43:39:f5:91:01:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c1b820ccafe78ca64011fe18a45089cbdaeaca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d3:bf:cd:d3:1b:59:9c:37:68:92:df:62:c5: 9b:31:71:ef:9b:60:6c:7b:50:e6:bc:df:58:62:3b: 1d:30:54:58:de:a9:66:63:fc:8f:d9:03:f1:94:60: 9b:73:5d:05:b7:af:92:2e:bc:97:0f:0a:96:4d:9b: be:b3:c1:39:21:a3:f3:8e:fe:34:e3:b2:42:e9:8b: dc:dc:6c:4b:27:ed:35:15:e6:08:f8:5e:a7:1e:26: 73:7e:f8:f1:6c:71:c7:35:f0:7d:05:d8:9e:95:32: 98:8a:c5:39:88:28:28:7a:9c:29:0d:62:0f:57:24: 96:b2:f7:d4:da:9d:b7:34:d5:b0:99:cb:ba:f3:e7: 24:ee:af:e5:c7:68:d8:b9:65:35:91:3e:4f:e8:02: ea:e6:25:f7:8f:9b:96:4c:f0:cd:ae:41:8c:32:f5: 85:66:ae:77:e0:e1:43:38:94:40:34:10:a0:c2:aa: 22:02:a1:06:03:0f:16:9b:64:5b:0e:09:18:c4:8d: 0e:85:e8:6c:91:06:dd:36:d5:6a:3e:da:46:52:33: 37:39:cb:71:17:fa:27:ca:0b:0b:74:9f:8a:dc:cd: 00:c1:e7:24:b7:9d:5e:32:d7:d1:fe:f0:90:6d:57: cf:34:b0:c5:16:d6:2d:a7:3b:b1:05:45:a7:ca:1d: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1B:82:0C:CA:FE:78:CA:64:01:1F:E1:8A:45:08:9C:BD:AE:AC:A4 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/DBuCDMr-eMpkAR_hikUInL2urKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.229.0-91.149.230.255 Signature Algorithm: sha256WithRSAEncryption 67:3a:0c:1d:80:9c:bb:fe:be:ea:30:c9:5b:6d:8a:7b:8b:de: f6:9e:eb:22:59:88:a3:2c:67:4c:72:a1:4e:00:18:8c:83:3b: f0:17:47:be:68:82:18:31:4a:31:c2:9a:d5:9e:be:ba:1d:f9: a4:39:ac:b2:8d:25:22:9c:47:74:f9:3c:17:36:56:75:ff:31: da:51:b3:dd:72:14:93:75:e4:f7:40:a9:ce:a0:17:47:53:ad: 25:b4:f4:31:87:6c:30:89:80:9c:55:52:e9:37:4d:94:57:eb: c0:b6:42:28:65:a7:4a:7d:e3:85:2a:ca:28:77:fe:56:f3:e0: 8b:60:1c:5b:d3:2e:b1:70:a2:b3:fb:c4:79:f8:5a:d3:19:a7: 3e:ad:95:36:b6:45:f1:c1:68:79:05:db:d2:3a:00:4f:21:f8: 62:e4:b1:3c:0d:6f:df:ba:bc:23:58:02:14:f0:c4:b1:7e:1c: e5:66:ef:6f:dd:f7:4c:23:40:eb:5d:d5:d9:6c:50:27:81:89: 0b:e4:d5:80:2c:5d:0e:16:21:fe:7a:8d:c9:89:01:8a:95:f1: b8:e4:10:ad:3d:b0:d6:a1:26:d5:35:06:90:2a:3e:13:b8:7a: ee:10:38:e8:6a:66:15:ac:42:1e:0d:69:9c:8d:83:6d:9a:5d: b1:ce:37:8c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xyqZsGIxkb7EQzn1kQF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFiODIwY2NhZmU3OGNhNjQwMTFmZTE4YTQ1MDg5Y2JkYWVhY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tO/zdMbWZw3aJLfYsWbMXHvm2Bs e1DmvN9YYjsdMFRY3qlmY/yP2QPxlGCbc10Ft6+SLryXDwqWTZu+s8E5IaPzjv40 47JC6Yvc3GxLJ+01FeYI+F6nHiZzfvjxbHHHNfB9BdielTKYisU5iCgoepwpDWIP VySWsvfU2p23NNWwmcu68+ck7q/lx2jYuWU1kT5P6ALq5iX3j5uWTPDNrkGMMvWF Zq534OFDOJRANBCgwqoiAqEGAw8Wm2RbDgkYxI0OhehskQbdNtVqPtpGUjM3Octx F/onygsLdJ+K3M0Aweckt51eMtfR/vCQbVfPNLDFFtYtpzuxBUWnyh1OlwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAwbggzK/njKZAEf4YpFCJy9rqykMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvREJ1Q0RNci1lTXBrQVJfaGlrVUluTDJ1cktRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbleUD BABbleYwDQYJKoZIhvcNAQELBQADggEBAGc6DB2AnLv+vuowyVttinuL3vae6yJZ iKMsZ0xyoU4AGIyDO/AXR75oghgxSjHCmtWevrod+aQ5rLKNJSKcR3T5PBc2VnX/ MdpRs91yFJN15PdAqc6gF0dTrSW09DGHbDCJgJxVUuk3TZRX68C2Qihlp0p944Uq yih3/lbz4ItgHFvTLrFworP7xHn4WtMZpz6tlTa2RfHBaHkF29I6AE8h+GLksTwN b9+6vCNYAhTwxLF+HOVm72/d90wjQOtd1dlsUCeBiQvk1YAsXQ4WIf56jcmJAYqV 8bjkEK09sNahJtU1BpAqPhO4eu4QOOhqZhWsQh4NaZyNg22aXbHON4w= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:38 2026 by rpki-client