This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/A06Zl3resPwzCE3ljng8unzLIBg.roa File: A06Zl3resPwzCE3ljng8unzLIBg.roa (raw, json) Hash identifier: 3hu0RLBphdyrbDMaUFm0iq2YQxj4KBfXy2ehiORwwFE= Subject key identifier: 03:4E:99:97:7A:DE:B0:FC:33:08:4D:E5:8E:78:3C:BA:7C:CB:20:18 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA813681AFC3193FB4B23973064B18 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/A06Zl3resPwzCE3ljng8unzLIBg.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 91.234.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:81:36:81:af:c3:19:3f:b4:b2:39:73:06:4b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=034e99977adeb0fc33084de58e783cba7ccb2018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:7f:3b:15:dc:4d:8f:29:2f:1f:26:8c:71: b5:e8:5f:e7:46:b1:9a:3b:d0:98:bb:6b:10:00:4a: 6f:5a:4c:75:ce:6e:4d:05:25:17:04:e8:19:a0:a2: b2:86:39:90:15:4a:44:16:1a:42:2a:31:ca:88:89: 38:91:66:ae:0e:dd:42:c9:aa:1a:9b:7b:1c:06:6d: ab:d0:c7:72:db:93:89:22:6e:8c:89:8f:3a:bf:49: 2a:8f:05:f1:8c:14:d9:84:ea:b1:8d:2c:d9:33:0f: 9b:6b:18:0d:7a:ea:7b:32:04:9c:23:35:90:67:1e: 7a:86:a0:7e:68:3e:95:2f:67:f5:7c:1e:19:18:2d: db:b4:86:53:70:25:87:35:47:cd:08:59:71:af:6c: 04:ae:9a:d3:ef:62:06:2a:2a:17:a7:1b:b8:53:74: e0:7d:3f:27:77:9d:27:ca:f1:e9:00:89:7e:41:8b: 1c:9b:83:65:ca:47:7d:37:d6:88:ed:02:59:35:09: 4b:c9:93:b7:a2:53:6c:14:b4:11:ca:cc:34:cb:d5: d8:61:53:48:ca:93:70:66:4a:82:e4:38:cd:2f:c0: 9d:83:a0:17:43:ca:e7:3e:0a:48:99:c2:ea:90:3c: 7f:c6:27:ff:c7:57:ca:0c:07:32:02:5b:70:ba:38: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4E:99:97:7A:DE:B0:FC:33:08:4D:E5:8E:78:3C:BA:7C:CB:20:18 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/A06Zl3resPwzCE3ljng8unzLIBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.22.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ad:62:47:f6:94:dc:28:66:10:c8:95:fb:08:b6:2b:ff:81: 3b:c2:51:22:21:07:45:24:b8:8d:3a:15:ae:8a:16:a4:a3:50: 6c:6f:5d:69:79:b1:00:36:0d:df:60:ab:84:e3:72:35:f2:f2: d8:65:a5:f0:3e:f1:9f:53:e8:55:07:8d:a4:fb:56:ce:6a:b8: 50:b6:4b:b7:bb:31:98:5a:e1:6e:2c:84:1c:15:de:57:59:6f: 97:66:84:f7:2b:e4:be:95:43:78:2e:86:9d:95:9f:b7:5a:e4: 6a:e3:08:77:b2:14:72:68:c6:97:2b:8d:e6:02:2d:3d:c4:1f: 62:e9:a2:67:5f:59:46:aa:c6:2b:19:14:da:ee:28:c2:2c:bb: 73:57:64:60:bc:0e:ea:e0:d8:6d:67:43:4f:03:70:29:69:43: df:ac:51:5f:64:7b:12:77:71:47:fe:f9:e7:e5:71:da:78:d7: b2:53:1f:fa:38:ec:d4:dc:a4:05:3f:4b:2b:77:f0:29:86:ac: 0e:fa:ad:15:7e:12:a4:fd:24:f5:2f:77:cc:aa:ab:43:d8:c1: 42:a1:46:38:eb:36:a4:99:ef:30:cd:d8:24:a3:83:31:14:d7: 98:6d:3e:c9:32:a5:ba:b3:46:46:02:32:38:05:89:a6:a4:ab: 0b:c1:c8:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoE2ga/DGT+0sjlzBksYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzRlOTk5NzdhZGViMGZjMzMwODRkZTU4ZTc4M2NiYTdjY2IyMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nd/OxXcTY8pLx8mjHG16F/nRrGa O9CYu2sQAEpvWkx1zm5NBSUXBOgZoKKyhjmQFUpEFhpCKjHKiIk4kWauDt1Cyaoa m3scBm2r0Mdy25OJIm6MiY86v0kqjwXxjBTZhOqxjSzZMw+baxgNeup7MgScIzWQ Zx56hqB+aD6VL2f1fB4ZGC3btIZTcCWHNUfNCFlxr2wErprT72IGKioXpxu4U3Tg fT8nd50nyvHpAIl+QYscm4Nlykd9N9aI7QJZNQlLyZO3olNsFLQRysw0y9XYYVNI ypNwZkqC5DjNL8Cdg6AXQ8rnPgpImcLqkDx/xif/x1fKDAcyAltwujgsKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANOmZd63rD8MwhN5Y54PLp8yyAYMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvQTA2WmwzcmVzUHd6Q0UzbGpuZzh1bnpMSUJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+oWMA0G CSqGSIb3DQEBCwUAA4IBAQAJrWJH9pTcKGYQyJX7CLYr/4E7wlEiIQdFJLiNOhWu ihako1Bsb11pebEANg3fYKuE43I18vLYZaXwPvGfU+hVB42k+1bOarhQtku3uzGY WuFuLIQcFd5XWW+XZoT3K+S+lUN4LoadlZ+3WuRq4wh3shRyaMaXK43mAi09xB9i 6aJnX1lGqsYrGRTa7ijCLLtzV2RgvA7q4NhtZ0NPA3ApaUPfrFFfZHsSd3FH/vnn 5XHaeNeyUx/6OOzU3KQFP0srd/AphqwO+q0VfhKk/ST1L3fMqqtD2MFCoUY46zak me8wzdgko4MxFNeYbT7JMqW6s0ZGAjI4BYmmpKsLwcgQ -----END CERTIFICATE-----Generated at Wed Jan 21 18:22:12 2026 by rpki-client