This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa File: Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa (raw, json) Hash identifier: Osr/NiaK8ha6IKNjhgOfYzSiPqzBhMGmuLXsdthjQ3k= Subject key identifier: 3A:FF:59:68:C0:85:84:96:A3:32:33:AC:5C:DA:0A:93:38:55:8F:BC Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E386C625CB3AED5E9A9E0BAA5A8BA4F Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213772 IP address blocks: 91.188.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6c:62:5c:b3:ae:d5:e9:a9:e0:ba:a5:a8:ba:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aff5968c0858496a33233ac5cda0a9338558fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:b9:33:d8:6d:78:a3:bf:91:dc:59:4a:7b: f8:75:ad:15:11:0e:cf:ba:fa:ce:17:58:38:5e:82: b9:79:c9:04:18:69:87:e1:37:b0:51:72:ea:4a:94: 0f:b8:91:29:e5:a0:fa:1f:ae:04:3a:98:26:53:06: 57:1b:4d:92:1c:4f:f5:48:5a:93:de:ab:49:c2:35: 4b:8d:f8:8b:05:6d:8e:43:37:e0:da:91:2f:c8:f4: e8:24:39:1a:62:65:81:7d:09:c9:75:14:6d:65:5c: e4:36:cd:69:68:58:ea:25:23:8d:c8:02:8e:e8:2b: ac:66:c8:36:92:d9:2d:5c:aa:63:ff:fb:4c:21:46: ed:71:48:1e:20:16:c0:27:51:1a:00:b1:ce:60:ae: 5f:3f:0a:28:06:c5:48:e0:38:55:51:4a:ac:a6:66: 14:ff:7f:e4:dc:ce:ec:45:e6:d9:52:a1:2d:2c:7a: 4c:7d:e8:bb:54:88:98:82:ad:55:88:a4:1c:c9:72: c3:a4:76:f4:15:6d:63:5f:a2:44:82:75:58:b6:39: e4:b6:66:08:d0:31:0a:e0:29:32:bc:f8:3e:32:00: 9c:84:e9:71:11:5b:5f:86:e3:0b:73:01:32:49:da: b4:95:ae:db:7e:66:f1:b0:93:e1:10:e6:ae:7f:9d: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FF:59:68:C0:85:84:96:A3:32:33:AC:5C:DA:0A:93:38:55:8F:BC X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Ov9ZaMCFhJajMjOsXNoKkzhVj7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.254.0/24 Signature Algorithm: sha256WithRSAEncryption be:03:dc:a1:6a:b2:0d:9a:f7:de:5e:1c:6f:e5:a4:28:e5:1e: 32:42:e6:51:47:06:6b:2e:76:49:3e:87:a4:f2:c3:9e:9a:8f: 3b:07:00:73:6a:0e:07:fe:65:e0:34:96:31:c3:d8:a3:4c:9e: cc:c4:cf:19:7d:34:ac:b8:23:19:c6:48:0e:4c:b8:1a:1f:e2: db:ad:95:9f:34:d4:3b:d2:eb:38:c9:cf:51:14:a1:89:61:33: 45:cb:34:b7:c9:45:07:f5:32:1f:2f:f9:7e:ba:ba:cf:db:c0: 92:23:23:27:d7:39:ef:b5:92:3d:cc:ff:e3:6a:f7:6b:a5:45: bb:32:e4:44:64:76:98:0e:9c:7f:5b:e0:46:a7:62:52:cb:db: a2:95:e8:4d:a2:ca:17:4c:0f:7a:b6:dd:0f:f1:57:09:c5:21: 5b:b9:e0:2d:66:59:97:e2:12:d6:e0:ee:f5:94:c2:a4:b2:d1: ae:8d:35:82:f1:7d:82:29:0b:7b:d1:13:99:f8:4e:dc:ca:8e: bc:50:80:d0:7d:a7:fc:65:a1:06:5f:60:4c:08:4a:9c:87:fc: 7b:7a:a7:d3:7f:f4:a6:db:74:34:fd:c6:57:64:f6:45:e0:5c: ee:fc:3c:24:3b:b3:44:88:b8:63:cd:32:72:85:56:20:40:24: 15:9b:39:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGxiXLOu1emp4LqlqLpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWZmNTk2OGMwODU4NDk2YTMzMjMzYWM1Y2RhMGE5MzM4NTU4ZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5u5M9hteKO/kdxZSnv4da0VEQ7P uvrOF1g4XoK5eckEGGmH4TewUXLqSpQPuJEp5aD6H64EOpgmUwZXG02SHE/1SFqT 3qtJwjVLjfiLBW2OQzfg2pEvyPToJDkaYmWBfQnJdRRtZVzkNs1paFjqJSONyAKO 6CusZsg2ktktXKpj//tMIUbtcUgeIBbAJ1EaALHOYK5fPwooBsVI4DhVUUqspmYU /3/k3M7sRebZUqEtLHpMfei7VIiYgq1ViKQcyXLDpHb0FW1jX6JEgnVYtjnktmYI 0DEK4CkyvPg+MgCchOlxEVtfhuMLcwEySdq0la7bfmbxsJPhEOauf53gIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDr/WWjAhYSWozIzrFzaCpM4VY+8MB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvT3Y5WmFNQ0ZoSmFqTWpPc1hOb0tremhWajd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z+MA0G CSqGSIb3DQEBCwUAA4IBAQC+A9yharINmvfeXhxv5aQo5R4yQuZRRwZrLnZJPoek 8sOemo87BwBzag4H/mXgNJYxw9ijTJ7MxM8ZfTSsuCMZxkgOTLgaH+LbrZWfNNQ7 0us4yc9RFKGJYTNFyzS3yUUH9TIfL/l+urrP28CSIyMn1znvtZI9zP/javdrpUW7 MuREZHaYDpx/W+BGp2JSy9uilehNosoXTA96tt0P8VcJxSFbueAtZlmX4hLW4O71 lMKkstGujTWC8X2CKQt70ROZ+E7cyo68UIDQfaf8ZaEGX2BMCEqch/x7eqfTf/Sm 23Q0/cZXZPZF4Fzu/DwkO7NEiLhjzTJyhVYgQCQVmzlL -----END CERTIFICATE-----Generated at Wed Jan 21 07:35:04 2026 by rpki-client