This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/kUYY1Q4-v9Q6exQgCpt_jTplt24.roa File: kUYY1Q4-v9Q6exQgCpt_jTplt24.roa (raw, json) Hash identifier: L8NHXT8Vz2l7Z8N60RDMTVs4PiVsANYIsY9CEDH7bQc= Subject key identifier: 91:46:18:D5:0E:3E:BF:D4:3A:7B:14:20:0A:9B:7F:8D:3A:65:B7:6E Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Certificate serial: 019B7D5CCD6A98F4B20F69B3936B8FBA608F Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/kUYY1Q4-v9Q6exQgCpt_jTplt24.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48837 IP address blocks: 91.212.66.0/24 maxlen: 24 91.236.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cd:6a:98:f4:b2:0f:69:b3:93:6b:8f:ba:60:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=914618d50e3ebfd43a7b14200a9b7f8d3a65b76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:87:ce:ba:ca:53:f7:2b:34:4e:88:43:f2: 2a:f4:57:85:15:b4:8f:b9:01:5d:69:cf:22:20:c9: 5b:d2:8f:5d:ec:69:77:40:b1:e1:6b:5d:28:af:a0: d3:8f:bb:d1:d9:94:4f:2a:df:bf:82:e7:fb:13:47: 77:99:61:6e:83:37:10:1f:6e:a9:dc:50:25:68:c1: 41:fb:7c:25:fc:dd:4e:dd:b4:a8:1f:d3:f7:e4:d0: 30:b4:79:9d:a9:62:40:c7:29:2b:31:f6:4f:c9:02: b6:8f:c4:b0:4f:65:c8:84:9d:56:78:8b:df:1a:6e: 7d:dc:cf:8d:37:0f:22:c4:5e:b4:3b:d5:c6:83:8c: 90:5a:50:f1:6b:c7:a0:42:2c:12:7c:e8:3a:40:8c: 40:b0:44:34:72:50:5e:72:3d:f1:89:de:18:22:65: e0:58:ca:b8:1d:8c:39:b2:85:a1:ad:1d:2f:c1:c3: eb:62:c8:c8:a4:63:8e:87:c9:a5:d4:6e:3e:59:bb: ad:f5:c0:a3:ea:2a:f3:fb:fb:ad:42:07:0b:81:65: 89:ac:bb:09:38:dc:bb:10:e8:33:5b:84:a5:c5:e0: 11:e2:b1:9a:5a:02:a1:de:31:9b:ef:df:c5:c8:a8: ee:22:b0:f3:f6:d1:6e:55:c5:ff:8f:5b:7a:96:1f: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:46:18:D5:0E:3E:BF:D4:3A:7B:14:20:0A:9B:7F:8D:3A:65:B7:6E X509v3 Authority Key Identifier: keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/kUYY1Q4-v9Q6exQgCpt_jTplt24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.66.0/24 91.236.58.0/24 Signature Algorithm: sha256WithRSAEncryption 13:6c:9f:d2:04:27:e5:15:06:de:5c:b5:3d:dd:c0:6a:1a:5e: 39:52:95:7b:3f:b0:3f:95:fb:99:c0:2f:55:b6:62:d4:26:42: 0c:76:cc:42:8a:a8:b2:03:00:72:6d:51:36:15:d8:3d:92:3e: 80:89:31:4e:ac:62:e2:44:69:c0:a2:95:04:05:b3:e9:98:8c: f1:d5:1a:a0:0c:2a:b3:dc:b8:f5:ef:72:7b:01:a9:fc:61:21: 65:bf:ab:48:97:69:3b:1b:9a:8e:0a:8a:66:47:57:1b:1c:f7: f7:cc:ea:6f:28:92:9f:c7:cf:fe:25:da:bd:89:43:20:89:cb: f6:6d:26:9a:e2:39:17:3d:92:eb:00:9f:7a:dc:4f:89:0e:c0: 68:37:d6:4d:2b:30:05:62:07:4b:2a:0a:4a:c9:6a:b3:cf:f6: 10:c2:89:34:2f:bd:7e:11:3b:e7:24:c3:86:12:da:4b:26:51: 43:40:12:42:c6:ae:4f:2a:ea:a7:ef:93:48:cc:30:c7:ba:fe: fc:4d:b9:38:e4:aa:0c:83:87:80:e7:6f:ae:18:29:68:54:63: 73:7c:3b:8d:0f:a8:88:e5:50:e0:24:62:74:e6:80:c5:9b:af: c1:12:ea:6b:bf:53:d4:3a:af:e9:bd:fc:6c:98:a7:f3:16:9a: 09:10:6c:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XM1qmPSyD2mzk2uPumCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwN2JkNjJmZDhkMzUzMDhkYmM4YjFmZDVmMTcyN2FmNTdh YmQyMjAwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQ2MThkNTBlM2ViZmQ0M2E3YjE0MjAwYTliN2Y4ZDNhNjViNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsiHzrrKU/crNE6IQ/Iq9FeFFbSP uQFdac8iIMlb0o9d7Gl3QLHha10or6DTj7vR2ZRPKt+/guf7E0d3mWFugzcQH26p 3FAlaMFB+3wl/N1O3bSoH9P35NAwtHmdqWJAxykrMfZPyQK2j8SwT2XIhJ1WeIvf Gm593M+NNw8ixF60O9XGg4yQWlDxa8egQiwSfOg6QIxAsEQ0clBecj3xid4YImXg WMq4HYw5soWhrR0vwcPrYsjIpGOOh8ml1G4+Wbut9cCj6irz+/utQgcLgWWJrLsJ ONy7EOgzW4SlxeAR4rGaWgKh3jGb79/FyKjuIrDz9tFuVcX/j1t6lh99iQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJFGGNUOPr/UOnsUIAqbf406ZbduMB8GA1UdIwQY MBaAFIB71i/Y01MI28ix/V8XJ69Xq9IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDkt MDhmYWRlYjJkYmU3LzEva1VZWTFRNC12OVE2ZXhRZ0NwdF9qVHBsdDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDktMDhmYWRlYjJkYmU3 LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9RCAwQA W+w6MA0GCSqGSIb3DQEBCwUAA4IBAQATbJ/SBCflFQbeXLU93cBqGl45UpV7P7A/ lfuZwC9VtmLUJkIMdsxCiqiyAwBybVE2Fdg9kj6AiTFOrGLiRGnAopUEBbPpmIzx 1RqgDCqz3Lj173J7Aan8YSFlv6tIl2k7G5qOCopmR1cbHPf3zOpvKJKfx8/+Jdq9 iUMgicv2bSaa4jkXPZLrAJ963E+JDsBoN9ZNKzAFYgdLKgpKyWqzz/YQwok0L71+ ETvnJMOGEtpLJlFDQBJCxq5PKuqn75NIzDDHuv78Tbk45KoMg4eA52+uGCloVGNz fDuND6iI5VDgJGJ05oDFm6/BEuprv1PUOq/pvfxsmKfzFpoJEGwd -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:17 2026 by rpki-client