This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa File: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (raw, json) Hash identifier: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI= Subject key identifier: 6C:F0:D0:2F:84:C3:C0:12:B2:A3:42:A0:94:9D:63:50:37:12:DA:60 Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Certificate serial: 019B7EA709DA8475397488BC81AE15FF56D9 Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197052 IP address blocks: 91.216.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:09:da:84:75:39:74:88:bc:81:ae:15:ff:56:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cf0d02f84c3c012b2a342a0949d63503712da60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:2a:1d:21:78:08:95:84:6c:26:a5:26:55: 3d:55:ca:9f:6c:c3:90:fb:9e:e4:ea:09:5f:cf:05: a2:1a:72:1f:19:4d:62:6b:ee:7b:db:06:be:31:44: 0f:5e:94:ab:ac:13:b7:91:fb:7d:2c:cc:45:4e:14: 1d:d0:7f:7f:77:8e:55:86:35:80:79:a8:20:d9:14: cd:74:df:8a:32:ce:be:d1:22:41:22:bb:e2:50:96: e2:3d:7b:c9:5a:6b:ce:19:f8:62:30:10:c1:c2:10: 26:0f:f1:a5:99:e0:bc:3c:c2:04:d0:c8:2a:3e:d3: 4c:c9:00:79:38:1a:8e:aa:35:52:43:79:52:ee:f4: c2:e1:69:ec:f4:12:57:53:57:6c:53:07:a2:af:e9: a6:bc:99:b0:09:14:71:29:31:1a:a3:49:54:8d:38: 0c:d6:f7:07:84:2c:02:c9:e3:d2:52:f8:cc:4c:36: 1a:db:9f:eb:03:4e:85:c7:5e:3e:8e:e7:87:fd:3f: ff:ae:c8:bb:fa:8e:a6:13:2c:be:7c:74:1c:ff:80: 72:09:3d:27:0b:42:a9:c4:8b:d8:11:5a:d6:ea:e4: 2e:69:8c:19:88:9e:6a:45:0a:1a:e1:03:77:9f:8e: 7c:22:1a:b3:17:9d:5c:14:7e:70:d0:b5:b8:2b:9d: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:D0:2F:84:C3:C0:12:B2:A3:42:A0:94:9D:63:50:37:12:DA:60 X509v3 Authority Key Identifier: keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.66.0/24 Signature Algorithm: sha256WithRSAEncryption 49:63:21:52:0a:05:bd:f5:e2:5b:9e:36:25:35:ca:fd:28:94: 2b:88:81:24:ac:d1:ab:c4:07:77:6c:66:9d:83:5a:17:e8:a4: 18:7e:7d:ac:5a:d2:cf:b6:8c:80:b7:e2:aa:4b:58:c5:93:0d: 25:90:fc:39:bc:f6:1e:91:c1:f8:9f:92:7b:0a:8f:65:81:aa: b7:a4:d2:97:c1:83:71:31:9b:b1:64:8d:a5:2c:36:a4:ec:d2: 65:c8:bc:47:87:6e:f6:a9:af:41:0c:0a:0f:ad:70:0a:46:be: 3e:ed:96:e9:0b:e9:3d:5e:1e:fc:25:b9:17:37:5a:24:d2:ae: 5e:2a:89:36:1c:f8:54:cb:af:e9:4e:25:6e:44:20:55:a3:00: a6:03:dd:64:07:98:06:24:68:7b:44:08:d5:87:43:33:e7:74: 46:94:58:ec:c0:b4:3c:81:54:a2:b0:96:05:4f:33:50:5b:a9: ac:0b:02:70:ca:3b:db:44:94:1e:ae:e7:56:a5:95:f3:d7:93: 07:a8:8c:4d:5d:8c:cc:2c:fa:45:e3:50:c3:eb:be:5d:02:53: 05:52:51:a3:9a:b4:3b:89:9d:da:77:21:88:48:2a:97:c9:e4: 6b:bf:0d:eb:ba:5d:b8:cb:df:73:dd:8d:1b:85:c8:ef:30:c6: e9:81:d6:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwnahHU5dIi8ga4V/1bZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj NDE0YzcwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2YwZDAyZjg0YzNjMDEyYjJhMzQyYTA5NDlkNjM1MDM3MTJkYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TwqHSF4CJWEbCalJlU9VcqfbMOQ +57k6glfzwWiGnIfGU1ia+572wa+MUQPXpSrrBO3kft9LMxFThQd0H9/d45VhjWA eagg2RTNdN+KMs6+0SJBIrviUJbiPXvJWmvOGfhiMBDBwhAmD/GlmeC8PMIE0Mgq PtNMyQB5OBqOqjVSQ3lS7vTC4Wns9BJXU1dsUweir+mmvJmwCRRxKTEao0lUjTgM 1vcHhCwCyePSUvjMTDYa25/rA06Fx14+jueH/T//rsi7+o6mEyy+fHQc/4ByCT0n C0KpxIvYEVrW6uQuaYwZiJ5qRQoa4QN3n458IhqzF51cFH5w0LW4K53fvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzw0C+Ew8ASsqNCoJSdY1A3EtpgMB8GA1UdIwQY MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt NWU1MjNiYThjOWQ3LzEvYlBEUUw0VER3Qkt5bzBLZ2xKMWpVRGNTMm1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3 LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hCMA0G CSqGSIb3DQEBCwUAA4IBAQBJYyFSCgW99eJbnjYlNcr9KJQriIEkrNGrxAd3bGad g1oX6KQYfn2sWtLPtoyAt+KqS1jFkw0lkPw5vPYekcH4n5J7Co9lgaq3pNKXwYNx MZuxZI2lLDak7NJlyLxHh272qa9BDAoPrXAKRr4+7ZbpC+k9Xh78JbkXN1ok0q5e Kok2HPhUy6/pTiVuRCBVowCmA91kB5gGJGh7RAjVh0Mz53RGlFjswLQ8gVSisJYF TzNQW6msCwJwyjvbRJQerudWpZXz15MHqIxNXYzMLPpF41DD675dAlMFUlGjmrQ7 iZ3adyGISCqXyeRrvw3rul24y99z3Y0bhcjvMMbpgdb6 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:00 2026 by rpki-client