This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/S6miaNucSa6NeEC_GGS4tq2izFo.roa File: S6miaNucSa6NeEC_GGS4tq2izFo.roa (raw, json) Hash identifier: 8+03nZylwUV80dXnpI8qfIF5rMZUoFiALmnLIt2o7b8= Subject key identifier: 4B:A9:A2:68:DB:9C:49:AE:8D:78:40:BF:18:64:B8:B6:AD:A2:CC:5A Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C7292E3B77C39B64F20661C1B94C0F Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/S6miaNucSa6NeEC_GGS4tq2izFo.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200508 IP address blocks: 91.149.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:29:2e:3b:77:c3:9b:64:f2:06:61:c1:b9:4c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ba9a268db9c49ae8d7840bf1864b8b6ada2cc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:82:0c:a4:fc:36:b5:d1:66:bf:36:d7:7e: 21:e1:91:d4:56:f2:be:c4:38:35:67:da:e8:50:25: 4e:f6:36:a7:45:25:46:4d:0e:b3:90:a5:71:b8:74: a3:79:b4:d8:15:08:76:94:ef:76:67:fd:07:72:21: ef:89:f3:e7:f5:af:91:30:23:9e:81:32:1d:e3:16: 98:a0:92:43:72:6d:98:82:81:53:a0:67:ed:ad:df: ec:64:66:fd:a3:1c:91:91:28:ca:33:0a:e7:e9:e6: 0c:f4:fe:21:b7:e5:2b:02:39:a2:9a:cb:ae:af:de: fc:87:68:1e:91:54:02:af:ed:6c:b4:29:58:8e:fa: 3e:1e:43:4e:aa:e8:0c:84:bd:d2:cd:30:62:f6:3c: 89:4a:65:77:3c:a0:da:36:8b:b2:44:63:44:2f:bb: fc:e7:1c:06:0c:4f:80:b2:cc:de:24:80:31:cc:c1: 1f:c4:40:38:d9:02:df:5a:c0:d2:68:f9:0a:9b:dc: 88:92:a3:a6:c2:f3:c6:a0:5e:84:c3:cc:3a:7f:0a: 9a:27:4e:d8:4a:20:b7:aa:2c:d2:eb:cb:6b:d4:3c: 02:73:22:85:53:0e:91:d4:e7:b6:81:70:5f:81:e2: 0a:a7:dd:bb:28:01:11:58:91:3d:7a:0b:69:fa:f3: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A9:A2:68:DB:9C:49:AE:8D:78:40:BF:18:64:B8:B6:AD:A2:CC:5A X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/S6miaNucSa6NeEC_GGS4tq2izFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:b8:70:01:2c:6b:48:f6:e6:8b:4a:db:29:4e:56:30:3a:0e: 14:3a:77:1f:e8:57:55:92:6d:ec:6b:f8:73:7b:ab:f4:44:fe: de:01:3a:6d:cf:27:3d:ba:1a:01:7f:0d:ea:f8:d5:52:74:29: f6:6a:2b:2e:c2:4d:0f:42:e1:ee:a3:c0:bb:79:79:00:ab:4a: a5:fe:03:88:11:53:b7:f2:9a:9b:08:59:46:fc:b0:bb:2f:f9: b1:f8:36:46:24:df:f9:94:3b:7f:54:d5:30:1c:6a:cf:df:54: 74:77:2b:0b:58:a9:ab:83:2d:0c:c5:51:8a:0e:03:1b:3f:fd: 5d:d8:fb:be:f3:90:50:68:9a:9c:4d:72:54:75:fe:8d:38:e0: 6e:af:88:1d:23:02:50:87:05:34:05:f5:e9:80:f3:ea:7f:26: 22:d5:da:d1:f6:9d:d5:a2:a0:07:c1:9a:98:18:ba:0b:e3:5b: 62:3a:ed:55:7e:76:e9:fb:05:23:ee:74:41:34:32:04:27:d1: 11:fe:b7:94:b5:b3:cc:db:3c:85:c5:ca:7a:b5:7a:ae:9b:43: f5:5e:f0:de:ba:0b:63:7b:f6:86:37:be:08:7a:c1:f0:e9:0b: 33:87:1d:a9:80:71:1c:79:7b:07:28:2d:92:be:5e:7d:e3:db: b7:9b:ed:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xykuO3fDm2TyBmHBuUwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmE5YTI2OGRiOWM0OWFlOGQ3ODQwYmYxODY0YjhiNmFkYTJjYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxuCDKT8NrXRZr82134h4ZHUVvK+ xDg1Z9roUCVO9janRSVGTQ6zkKVxuHSjebTYFQh2lO92Z/0HciHvifPn9a+RMCOe gTId4xaYoJJDcm2YgoFToGftrd/sZGb9oxyRkSjKMwrn6eYM9P4ht+UrAjmimsuu r978h2gekVQCr+1stClYjvo+HkNOqugMhL3SzTBi9jyJSmV3PKDaNouyRGNEL7v8 5xwGDE+AsszeJIAxzMEfxEA42QLfWsDSaPkKm9yIkqOmwvPGoF6Ew8w6fwqaJ07Y SiC3qizS68tr1DwCcyKFUw6R1Oe2gXBfgeIKp927KAERWJE9egtp+vMPaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEupomjbnEmujXhAvxhkuLatosxaMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvUzZtaWFOdWNTYTZOZUVDX0dHUzR0cTJpekZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XjMA0G CSqGSIb3DQEBCwUAA4IBAQBruHABLGtI9uaLStspTlYwOg4UOncf6FdVkm3sa/hz e6v0RP7eATptzyc9uhoBfw3q+NVSdCn2aisuwk0PQuHuo8C7eXkAq0ql/gOIEVO3 8pqbCFlG/LC7L/mx+DZGJN/5lDt/VNUwHGrP31R0dysLWKmrgy0MxVGKDgMbP/1d 2Pu+85BQaJqcTXJUdf6NOOBur4gdIwJQhwU0BfXpgPPqfyYi1drR9p3VoqAHwZqY GLoL41tiOu1Vfnbp+wUj7nRBNDIEJ9ER/reUtbPM2zyFxcp6tXqum0P1XvDeugtj e/aGN74IesHw6Qszhx2pgHEceXsHKC2Svl5949u3m+1o -----END CERTIFICATE-----Generated at Tue Jan 20 07:10:41 2026 by rpki-client