This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/9tVl0OudtWaiiEvwscrGSSX56jU.roa File: 9tVl0OudtWaiiEvwscrGSSX56jU.roa (raw, json) Hash identifier: th1F5H92mnPFNJ3P0FMgp4iOub0klsX+xg8MmiRJg5A= Subject key identifier: F6:D5:65:D0:EB:9D:B5:66:A2:88:4B:F0:B1:CA:C6:49:25:F9:EA:35 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EA9B41B73F18D9481C6A4A9EF75D Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/9tVl0OudtWaiiEvwscrGSSX56jU.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 91.234.202.0/24 maxlen: 24 176.105.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ea:9b:41:b7:3f:18:d9:48:1c:6a:4a:9e:f7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d565d0eb9db566a2884bf0b1cac64925f9ea35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:94:45:ec:c4:f1:63:15:a2:13:d2:f1:ca: e0:73:8d:99:d1:80:7b:03:e9:f7:dc:ae:59:81:8f: e2:63:8e:1b:8e:9c:7b:ac:e7:34:25:a4:37:a4:ce: 67:b7:fd:eb:b5:d6:a2:03:16:ae:a8:02:c9:e7:4d: 88:72:e9:b3:17:cf:ef:ef:d8:a2:70:15:57:e8:0f: 8b:93:54:eb:42:f6:e2:c9:06:f3:cb:ac:e2:a2:5e: 65:c8:a4:33:71:61:c2:66:c2:4c:15:dd:74:95:8b: 8b:63:d5:78:15:84:46:6a:6a:ef:d9:f0:54:24:f9: de:ed:fe:4c:9c:d3:24:8b:b0:5d:e0:21:1e:a0:c6: ee:7c:4a:29:be:2d:9d:06:d7:d4:53:97:b7:c2:1a: d7:cc:90:09:0e:fa:42:e7:f3:2f:0d:5a:15:b7:b0: 9b:5b:55:db:ac:1c:82:81:3b:f0:35:1e:bf:ff:01: ce:ee:77:21:95:6e:b6:ba:de:06:02:59:12:5c:0a: d3:3d:81:6e:d9:52:9a:dc:7d:a2:dd:50:01:3d:4f: 7c:4c:48:2a:d9:71:3d:d9:4e:8c:47:c2:f7:c7:62: 50:c0:72:4b:31:dc:9f:6b:4c:07:53:e6:c6:8f:52: 37:62:6f:c9:c6:08:fb:0b:80:3f:8b:5e:d1:44:d2: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:65:D0:EB:9D:B5:66:A2:88:4B:F0:B1:CA:C6:49:25:F9:EA:35 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/9tVl0OudtWaiiEvwscrGSSX56jU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.202.0/24 176.105.244.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c6:b4:45:e5:44:0a:88:b2:4c:7e:1b:7a:b6:63:04:4b:85: 2c:fd:83:89:4f:bc:68:cb:47:8f:16:5c:e7:21:a2:ac:bb:af: 04:6c:5f:79:09:3a:7d:9e:22:1d:1b:46:be:f7:bd:d3:8a:e2: 55:62:d3:96:ef:da:0b:74:f7:0b:eb:51:dd:f1:c6:1d:f4:6f: 25:53:25:87:57:71:54:07:37:38:85:0f:ae:8a:2d:fe:10:e4: 69:c6:64:fd:9a:11:70:e7:e8:3e:93:80:54:8e:c0:1f:1c:89: b6:72:59:c0:22:37:ae:6c:51:c0:20:c0:57:5d:e5:b7:0f:f3: c3:98:82:04:38:47:da:87:e6:e9:78:08:1c:42:12:33:a1:c1: e9:8a:5a:e6:7b:55:9c:6f:e5:ef:e7:89:55:90:a5:b9:e3:8d: 70:e0:d3:24:f6:7e:62:12:a6:f0:8c:ae:69:fb:9e:c1:24:e9: 1d:89:47:a7:3c:83:21:f0:2c:35:2f:73:7f:f9:76:cb:69:7e: be:ac:f4:62:ce:71:98:ec:03:06:ac:fb:95:4d:0e:7b:c9:17: 18:d1:b1:b6:45:35:69:f0:d9:b7:78:3d:af:24:5b:c8:90:cc: d4:bc:aa:28:ef:62:b1:b8:97:6c:72:36:cf:98:76:9d:a4:b2: e6:20:7e:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EOqbQbc/GNlIHGpKnvddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ1NjVkMGViOWRiNTY2YTI4ODRiZjBiMWNhYzY0OTI1ZjllYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WKURezE8WMVohPS8crgc42Z0YB7 A+n33K5ZgY/iY44bjpx7rOc0JaQ3pM5nt/3rtdaiAxauqALJ502IcumzF8/v79ii cBVX6A+Lk1TrQvbiyQbzy6ziol5lyKQzcWHCZsJMFd10lYuLY9V4FYRGamrv2fBU JPne7f5MnNMki7Bd4CEeoMbufEopvi2dBtfUU5e3whrXzJAJDvpC5/MvDVoVt7Cb W1XbrByCgTvwNR6//wHO7nchlW62ut4GAlkSXArTPYFu2VKa3H2i3VABPU98TEgq 2XE92U6MR8L3x2JQwHJLMdyfa0wHU+bGj1I3Ym/Jxgj7C4A/i17RRNJNzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPbVZdDrnbVmoohL8LHKxkkl+eo1MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvOXRWbDBPdWR0V2FpaUV2d3NjckdTU1g1NmpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+rKAwQA sGn0MA0GCSqGSIb3DQEBCwUAA4IBAQB+xrRF5UQKiLJMfht6tmMES4Us/YOJT7xo y0ePFlznIaKsu68EbF95CTp9niIdG0a+973TiuJVYtOW79oLdPcL61Hd8cYd9G8l UyWHV3FUBzc4hQ+uii3+EORpxmT9mhFw5+g+k4BUjsAfHIm2clnAIjeubFHAIMBX XeW3D/PDmIIEOEfah+bpeAgcQhIzocHpilrme1Wcb+Xv54lVkKW5441w4NMk9n5i EqbwjK5p+57BJOkdiUenPIMh8Cw1L3N/+XbLaX6+rPRiznGY7AMGrPuVTQ57yRcY 0bG2RTVp8Nm3eD2vJFvIkMzUvKoo72KxuJdscjbPmHadpLLmIH4L -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:26 2026 by rpki-client