This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/u7PMzJk0LD92U_KXyN6F886wE3w.roa File: u7PMzJk0LD92U_KXyN6F886wE3w.roa (raw, json) Hash identifier: fw8bxf2gcvv9j/em4IufdaESCHy0Vu0Ro0Bhg2xvHAY= Subject key identifier: BB:B3:CC:CC:99:34:2C:3F:76:53:F2:97:C8:DE:85:F3:CE:B0:13:7C Certificate issuer: /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb Certificate serial: 019B7E392C56B02396A346DEECB3F02DD479 Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/u7PMzJk0LD92U_KXyN6F886wE3w.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57752 IP address blocks: 91.236.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2c:56:b0:23:96:a3:46:de:ec:b3:f0:2d:d4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb3cccc99342c3f7653f297c8de85f3ceb0137c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:7a:bc:72:24:ae:84:c6:77:eb:36:b6:61: e7:78:75:0a:c7:06:a1:8b:df:c8:63:b7:9e:38:ac: 63:5d:21:59:6b:67:82:40:95:9a:06:1b:60:51:be: cd:57:d5:e4:db:e7:a7:50:68:54:9d:8f:30:4f:bd: 71:e3:1a:d4:af:bd:e0:fa:0b:42:6e:bd:52:0f:0f: 4b:b2:91:df:6d:3e:20:45:0d:fd:b3:a0:76:d9:e5: 84:b1:83:03:2e:d0:42:97:ba:8d:91:a2:09:a8:02: 5a:52:71:9d:7b:77:3c:12:15:c9:98:1e:4a:0b:7f: c9:50:84:29:a5:3f:65:8c:fa:47:bb:d9:3b:eb:7d: aa:de:ac:a8:b3:ff:a4:1d:9f:48:c8:c0:26:b6:06: 78:2a:4c:70:d1:0b:57:95:54:b0:71:4d:e8:32:c5: 38:1b:b3:41:9c:a1:4c:a0:4e:89:e9:76:07:43:f6: b8:cf:c1:dc:5e:52:b4:85:3e:56:e7:c7:e0:ca:83: ad:d7:b4:f0:fe:30:8c:91:5d:e4:4b:32:52:86:d1: 05:28:24:f0:1f:de:cc:7a:77:7f:b7:c8:a6:fe:1c: 86:be:18:29:d8:81:b1:71:6b:b2:b4:57:8c:83:fa: 1b:1b:80:5b:42:de:db:42:ba:78:ae:7f:85:e3:4a: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B3:CC:CC:99:34:2C:3F:76:53:F2:97:C8:DE:85:F3:CE:B0:13:7C X509v3 Authority Key Identifier: keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/u7PMzJk0LD92U_KXyN6F886wE3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.161.0/24 Signature Algorithm: sha256WithRSAEncryption 69:ac:5b:64:b1:0f:8a:fa:42:3b:41:1b:87:01:4d:51:24:de: a0:3c:47:f1:02:28:3d:c3:36:c7:d1:86:71:82:72:08:29:66: a5:5f:63:9c:c9:f6:cd:1f:53:3e:c4:7a:2e:57:16:8b:a8:d2: 18:4e:cd:88:e3:34:82:05:23:f8:77:1a:6f:9d:52:ce:0a:6c: a7:a9:a3:5e:d5:17:05:79:5c:73:2c:85:ad:24:a6:b7:a6:9f: c4:2e:dd:62:aa:dc:94:7a:29:71:f0:91:34:71:d5:ea:5c:6d: ea:a7:e0:bc:cd:8c:6a:78:12:d5:f4:d6:8e:8b:9f:df:b4:b2: 32:d3:67:98:e0:9a:f0:e7:96:d4:f5:ea:cc:22:70:ad:5c:0c: 78:4d:86:1b:5c:5f:d6:9b:06:75:3b:53:ca:2a:73:20:80:0f: ab:00:6e:c9:51:2f:5b:39:27:01:2c:a6:6b:21:f0:66:bc:2e: ed:5a:9e:6c:15:24:77:27:3b:37:37:1e:08:f8:35:cd:31:14: 2f:de:3d:be:a6:62:5e:9b:66:d7:42:25:f6:58:ad:04:25:ba: 8e:2a:aa:45:a8:3d:f0:d5:fc:4c:66:a6:56:fa:75:e2:0c:df: fd:2e:d5:d2:28:fd:15:0e:fa:1a:a5:06:98:40:03:ea:dc:b8: 21:65:ab:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSxWsCOWo0be7LPwLdR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNWRiZGU4ZmJjZGJmNDI4NWU4N2JlNDkwZWQ2ZmNkYjQ2 YTA1ZmIwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmIzY2NjYzk5MzQyYzNmNzY1M2YyOTdjOGRlODVmM2NlYjAxMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLd6vHIkroTGd+s2tmHneHUKxwah i9/IY7eeOKxjXSFZa2eCQJWaBhtgUb7NV9Xk2+enUGhUnY8wT71x4xrUr73g+gtC br1SDw9LspHfbT4gRQ39s6B22eWEsYMDLtBCl7qNkaIJqAJaUnGde3c8EhXJmB5K C3/JUIQppT9ljPpHu9k7632q3qyos/+kHZ9IyMAmtgZ4Kkxw0QtXlVSwcU3oMsU4 G7NBnKFMoE6J6XYHQ/a4z8HcXlK0hT5W58fgyoOt17Tw/jCMkV3kSzJShtEFKCTw H97Mend/t8im/hyGvhgp2IGxcWuytFeMg/obG4BbQt7bQrp4rn+F40qIBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuzzMyZNCw/dlPyl8jehfPOsBN8MB8GA1UdIwQY MBaAFPNdvej7zb9Cheh75JDtb820agX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNjZiZjctMTMxYi00M2I4LWI1Yzgt ZWQ1ZTBhYzExNWViLzEvdTdQTXpKazBMRDkyVV9LWHlONkY4ODZ3RTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNjZiZjctMTMxYi00M2I4LWI1YzgtZWQ1ZTBhYzExNWVi LzEvODEyOTZQdk52MEtGNkh2a2tPMXZ6YlJxQmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+yhMA0G CSqGSIb3DQEBCwUAA4IBAQBprFtksQ+K+kI7QRuHAU1RJN6gPEfxAig9wzbH0YZx gnIIKWalX2OcyfbNH1M+xHouVxaLqNIYTs2I4zSCBSP4dxpvnVLOCmynqaNe1RcF eVxzLIWtJKa3pp/ELt1iqtyUeilx8JE0cdXqXG3qp+C8zYxqeBLV9NaOi5/ftLIy 02eY4Jrw55bU9erMInCtXAx4TYYbXF/WmwZ1O1PKKnMggA+rAG7JUS9bOScBLKZr IfBmvC7tWp5sFSR3Jzs3Nx4I+DXNMRQv3j2+pmJem2bXQiX2WK0EJbqOKqpFqD3w 1fxMZqZW+nXiDN/9LtXSKP0VDvoapQaYQAPq3LghZavP -----END CERTIFICATE-----Generated at Tue Jan 27 03:57:47 2026 by rpki-client