This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/lV6fG7v-JYhWwetIbl-AbpN0MIU.roa File: lV6fG7v-JYhWwetIbl-AbpN0MIU.roa (raw, json) Hash identifier: dOBrOCMXoxUPk0ZtfpGogwfFIA0UzWIsAc21AeDfbNM= Subject key identifier: 95:5E:9F:1B:BB:FE:25:88:56:C1:EB:48:6E:5F:80:6E:93:74:30:85 Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94 Certificate serial: 019B7F82CD41D3C8F7F92215132A5E186A75 Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/lV6fG7v-JYhWwetIbl-AbpN0MIU.roa Signing time: Fri 02 Jan 2026 16:20:37 +0000 ROA not before: Fri 02 Jan 2026 16:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42573 IP address blocks: 91.199.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cd:41:d3:c8:f7:f9:22:15:13:2a:5e:18:6a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94 Validity Not Before: Jan 2 16:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=955e9f1bbbfe258856c1eb486e5f806e93743085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:c0:ed:e4:00:58:3a:e4:97:c1:05:61:61: 44:56:26:db:2b:6e:ff:81:a1:5b:c8:04:16:b5:27: 30:d2:df:d9:62:24:a7:9f:f0:1e:51:b5:99:e9:09: fe:30:60:c3:1f:c0:e2:6f:a4:7d:43:3d:f1:66:6e: ef:b8:eb:97:64:c1:50:38:d9:b1:41:ff:bc:6b:80: 43:a7:5a:58:fc:ba:56:5c:f3:db:99:c9:d2:1c:0d: 67:f1:8a:d9:a1:2e:4a:30:7c:d4:23:9b:8d:2e:0d: 62:1a:87:8e:a2:66:dd:14:48:c6:c8:34:6a:1b:63: 17:6b:1b:94:bd:04:39:8d:3e:16:75:9e:7b:f8:5a: 6b:1a:ab:c4:2a:9e:32:57:d6:00:d2:33:52:12:a0: 77:9f:e3:b3:43:7c:91:55:90:56:e6:d1:d9:3a:6b: 9a:ec:d8:71:9b:59:32:18:36:92:d4:d2:b1:e6:94: 92:be:ce:bd:a9:97:ff:0a:29:ff:72:db:7e:15:5b: 75:ea:41:00:da:5a:e8:20:13:0d:ca:8f:fc:18:61: 3c:48:6a:c8:b3:6b:9e:35:4d:05:7a:53:34:fd:e7: 30:b0:5a:d3:91:ac:35:9d:50:f3:c1:3a:0a:d5:8a: 2f:4a:5f:2f:60:4b:b4:d8:b6:07:d7:17:4e:47:a3: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:9F:1B:BB:FE:25:88:56:C1:EB:48:6E:5F:80:6E:93:74:30:85 X509v3 Authority Key Identifier: keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/lV6fG7v-JYhWwetIbl-AbpN0MIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.89.0/24 Signature Algorithm: sha256WithRSAEncryption 09:4c:12:5f:73:5a:6b:6d:ff:00:e7:e1:d4:70:07:05:47:42: 81:7b:ff:17:d9:2c:9b:fb:3d:e3:62:fc:08:d8:2e:af:f1:53: 1e:99:c5:b2:ed:ae:82:e7:42:20:1c:1e:dd:b6:8d:03:28:64: 79:76:c3:36:4c:3b:b1:60:cb:0f:47:8d:92:06:8f:1a:57:61: 38:71:84:26:12:34:ca:69:f1:dd:75:6f:84:aa:bc:d5:10:8e: 4b:48:f4:32:36:92:aa:e1:b6:07:13:12:bd:b4:c0:e5:a2:28: 2c:6c:bd:e8:21:a9:75:87:00:11:34:5a:71:1d:a4:36:0c:d9: 95:ce:b7:27:8f:6b:d4:94:3b:dc:3f:67:8a:40:6d:f5:a0:3d: dd:d2:86:60:7c:12:bc:ed:29:c0:b3:a3:16:f3:61:64:27:d3: 2b:cf:fb:67:06:68:19:21:38:d1:d8:d3:70:3f:e2:31:3c:b4: ab:01:94:29:65:e9:61:eb:a2:6d:dc:bb:58:f5:83:d9:5a:11: 7f:21:73:32:2a:3f:22:d0:22:35:c5:71:e5:70:ef:c3:54:8a: 46:07:58:74:91:4c:cb:00:b7:d8:61:4b:d2:17:08:37:c1:fe: 09:24:d6:61:c3:5a:92:1f:66:db:11:25:88:26:0e:97:0e:44: ed:63:89:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gs1B08j3+SIVEypeGGp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDFjMzMwOTRhMDk5MjJjMGExMDQ4NmQyMWRmNTU4OTY3 NWJjOTQwHhcNMjYwMTAyMTYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTVlOWYxYmJiZmUyNTg4NTZjMWViNDg2ZTVmODA2ZTkzNzQzMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XXA7eQAWDrkl8EFYWFEVibbK27/ gaFbyAQWtScw0t/ZYiSnn/AeUbWZ6Qn+MGDDH8Dib6R9Qz3xZm7vuOuXZMFQONmx Qf+8a4BDp1pY/LpWXPPbmcnSHA1n8YrZoS5KMHzUI5uNLg1iGoeOombdFEjGyDRq G2MXaxuUvQQ5jT4WdZ57+FprGqvEKp4yV9YA0jNSEqB3n+OzQ3yRVZBW5tHZOmua 7Nhxm1kyGDaS1NKx5pSSvs69qZf/Cin/ctt+FVt16kEA2lroIBMNyo/8GGE8SGrI s2ueNU0FelM0/ecwsFrTkaw1nVDzwToK1YovSl8vYEu02LYH1xdOR6OCMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVenxu7/iWIVsHrSG5fgG6TdDCFMB8GA1UdIwQY MBaAFLgBwzCUoJkiwKEEhtId9ViWdbyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEt M2M4NjI3ZDk3ODhkLzEvbFY2Zkc3di1KWWhXd2V0SWJsLUFicE4wTUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEtM2M4NjI3ZDk3ODhk LzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dZMA0G CSqGSIb3DQEBCwUAA4IBAQAJTBJfc1prbf8A5+HUcAcFR0KBe/8X2Syb+z3jYvwI 2C6v8VMemcWy7a6C50IgHB7dto0DKGR5dsM2TDuxYMsPR42SBo8aV2E4cYQmEjTK afHddW+EqrzVEI5LSPQyNpKq4bYHExK9tMDloigsbL3oIal1hwARNFpxHaQ2DNmV zrcnj2vUlDvcP2eKQG31oD3d0oZgfBK87SnAs6MW82FkJ9Mrz/tnBmgZITjR2NNw P+IxPLSrAZQpZelh66Jt3LtY9YPZWhF/IXMyKj8i0CI1xXHlcO/DVIpGB1h0kUzL ALfYYUvSFwg3wf4JJNZhw1qSH2bbESWIJg6XDkTtY4nN -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:43 2026 by rpki-client