This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/THdWL7NkPv4mTySRB7BlP8UazKk.roa File: THdWL7NkPv4mTySRB7BlP8UazKk.roa (raw, json) Hash identifier: 1vgf1jLYUS95We+9isSyrDAIekez9YYY5fniWvh9gyE= Subject key identifier: 4C:77:56:2F:B3:64:3E:FE:26:4F:24:91:07:B0:65:3F:C5:1A:CC:A9 Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074 Certificate serial: 019B78A347F201C1C8761D3CC7A24E8E7C06 Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/THdWL7NkPv4mTySRB7BlP8UazKk.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215026 IP address blocks: 91.227.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:47:f2:01:c1:c8:76:1d:3c:c7:a2:4e:8e:7c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c77562fb3643efe264f249107b0653fc51acca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8f:33:cf:03:8f:b0:7f:d2:b3:9f:90:85:dc: 7a:92:58:5b:aa:e6:a9:89:de:f9:03:35:f5:c4:0a: 96:41:06:02:1d:da:c4:26:24:ca:34:81:37:31:bd: 80:8f:5d:32:1a:69:74:6e:8e:7e:b1:db:e1:63:a1: 63:26:21:cd:ff:23:80:5d:a3:2e:4a:3a:74:37:f2: c1:fd:73:f7:6b:8e:fb:45:20:c2:e0:bc:2f:40:3a: 1d:38:dd:f4:1d:f9:de:7a:12:66:ff:72:e7:55:73: d3:c5:5f:2a:e6:51:95:ac:d1:71:8c:92:25:b0:3f: 9c:83:b3:8b:09:2f:e0:9e:fb:1a:90:44:07:ca:87: 1c:9f:b0:14:e9:8a:0f:47:34:a4:0e:53:6b:53:eb: 4e:2d:5c:b5:9c:ac:88:7f:cc:d3:78:0b:90:69:e6: 80:31:53:c0:ea:2b:ca:48:a9:34:00:c2:3d:09:f1: 46:62:f1:6a:b2:4d:c6:e0:08:be:e5:40:30:99:9f: 22:1d:48:9c:ef:60:27:12:12:f7:00:3d:d6:27:90: 45:bc:70:53:80:a6:00:a8:18:f3:6e:ea:db:9e:3b: 0e:b6:bf:be:56:02:20:20:f1:f1:d1:71:9e:27:08: 8a:32:21:71:d4:ef:91:79:af:77:82:2e:85:b7:ed: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:77:56:2F:B3:64:3E:FE:26:4F:24:91:07:B0:65:3F:C5:1A:CC:A9 X509v3 Authority Key Identifier: keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/THdWL7NkPv4mTySRB7BlP8UazKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.114.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:96:4e:11:83:fa:36:43:88:cd:05:7a:69:59:41:7d:a1:72: 34:88:71:ad:6c:42:de:29:9b:f8:72:b1:41:e1:cd:7f:bb:d8: d5:02:a8:4c:b7:1c:86:f1:c8:d1:8d:8d:47:9c:e5:0e:74:3f: b4:7a:b5:c8:2a:dc:c5:a4:46:88:f1:70:f0:07:4d:26:c2:85: 2f:be:00:fd:7a:43:3c:59:c8:75:cd:77:1e:bf:19:80:99:60: 37:d1:2b:5d:14:0b:e3:35:87:5d:ea:cf:3f:62:3a:a7:0e:3d: 3f:37:ac:56:b1:c6:2d:73:da:42:34:d6:78:65:3d:12:eb:2c: 8f:1d:6e:ee:45:66:c2:3a:30:e0:22:4a:f1:d8:04:ad:83:b6: 1d:9b:1b:89:cb:fa:70:4b:b7:e9:05:8f:48:2d:f8:7a:12:2c: d0:36:4c:c0:c8:db:ae:57:9b:24:f4:87:4f:4b:da:e9:06:51: 28:a7:87:5e:80:77:56:d5:2f:84:0b:dc:e1:56:79:1e:cb:63: 64:73:d2:57:98:23:64:9f:ea:63:30:ea:59:92:7b:e5:64:28: 57:7d:98:b4:ba:44:3e:bd:97:df:9f:15:fb:a9:ad:8b:c4:fd: 48:b9:1d:21:4c:c3:a8:b1:2f:ec:8b:29:97:36:f7:1c:5a:cc: 09:b3:44:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0fyAcHIdh08x6JOjnwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM4ZjdjM2VjYWQyOWVjNTA2NDRiNzAwNjhiOTJhMWJl NDcwNzQwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzc3NTYyZmIzNjQzZWZlMjY0ZjI0OTEwN2IwNjUzZmM1MWFjY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y8zzwOPsH/Ss5+Qhdx6klhbquap id75AzX1xAqWQQYCHdrEJiTKNIE3Mb2Aj10yGml0bo5+sdvhY6FjJiHN/yOAXaMu Sjp0N/LB/XP3a477RSDC4LwvQDodON30HfneehJm/3LnVXPTxV8q5lGVrNFxjJIl sD+cg7OLCS/gnvsakEQHyoccn7AU6YoPRzSkDlNrU+tOLVy1nKyIf8zTeAuQaeaA MVPA6ivKSKk0AMI9CfFGYvFqsk3G4Ai+5UAwmZ8iHUic72AnEhL3AD3WJ5BFvHBT gKYAqBjzburbnjsOtr++VgIgIPHx0XGeJwiKMiFx1O+Rea93gi6Ft+1FKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEx3Vi+zZD7+Jk8kkQewZT/FGsypMB8GA1UdIwQY MBaAFF2jj3w+ytKexQZEtwBouSob5HB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4Yjkt OTQwOGYxYmMwZDEyLzEvVEhkV0w3TmtQdjRtVHlTUkI3QmxQOFVhektrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4YjktOTQwOGYxYmMwZDEy LzEvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NyMA0G CSqGSIb3DQEBCwUAA4IBAQA/lk4Rg/o2Q4jNBXppWUF9oXI0iHGtbELeKZv4crFB 4c1/u9jVAqhMtxyG8cjRjY1HnOUOdD+0erXIKtzFpEaI8XDwB00mwoUvvgD9ekM8 Wch1zXcevxmAmWA30StdFAvjNYdd6s8/YjqnDj0/N6xWscYtc9pCNNZ4ZT0S6yyP HW7uRWbCOjDgIkrx2AStg7YdmxuJy/pwS7fpBY9ILfh6EizQNkzAyNuuV5sk9IdP S9rpBlEop4degHdW1S+EC9zhVnkey2Nkc9JXmCNkn+pjMOpZknvlZChXfZi0ukQ+ vZffnxX7qa2LxP1IuR0hTMOosS/siymXNvccWswJs0TP -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:52 2026 by rpki-client