This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/_TbqxBppKm12gy3lALRD55qlP1U.roa File: _TbqxBppKm12gy3lALRD55qlP1U.roa (raw, json) Hash identifier: aJvpW0eR4IubuFYLuhnLpJl7IWTizqcPOJubGM/2djI= Subject key identifier: FD:36:EA:C4:1A:69:2A:6D:76:83:2D:E5:00:B4:43:E7:9A:A5:3F:55 Certificate issuer: /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba Certificate serial: 019B7C1102D5B5E278B37B348A625F08011E Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/_TbqxBppKm12gy3lALRD55qlP1U.roa Signing time: Fri 02 Jan 2026 00:17:28 +0000 ROA not before: Fri 02 Jan 2026 00:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56845 IP address blocks: 91.228.40.0/24 maxlen: 24 91.228.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:02:d5:b5:e2:78:b3:7b:34:8a:62:5f:08:01:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba Validity Not Before: Jan 2 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd36eac41a692a6d76832de500b443e79aa53f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:b7:35:a9:62:79:89:fd:34:d5:4f:17:0c: d1:cc:33:99:4b:e1:f8:b0:a2:4e:33:a0:81:1b:80: 6f:3a:db:a1:1a:89:2c:86:f2:4b:6a:2c:09:a5:8c: d8:b4:80:93:57:34:c5:1b:b2:04:dc:ae:40:46:b7: 64:37:bf:51:95:8c:9f:30:a4:ee:c5:5d:13:89:c5: df:31:cf:96:ea:4c:fd:fa:5b:ad:54:b2:7f:67:ec: bf:6c:d7:d3:c9:a5:f7:ef:3c:4d:12:e0:ab:47:14: 9d:68:7e:8c:75:6c:f4:24:aa:48:c8:53:2e:29:e1: 45:a9:e7:10:58:93:77:cf:aa:c8:c3:c5:55:8f:fc: e2:fd:d8:9d:49:15:be:8f:3b:90:24:95:db:25:5a: dd:7a:ea:76:0e:63:27:6e:d0:15:40:5b:3a:9a:16: 09:c4:32:df:90:58:50:78:cb:14:cd:c3:66:d7:f6: cb:e5:e6:49:49:54:c2:ae:91:b3:df:99:a5:a7:0c: 70:71:67:a0:9f:b2:ab:2f:43:b3:88:ed:12:19:8d: e3:48:ec:68:19:0b:41:58:db:d9:a3:cc:cc:90:ad: 15:e1:fa:3d:e0:9e:79:c7:1f:9d:de:9e:2d:24:5b: 58:21:8d:53:17:5f:34:a8:11:17:b1:a3:84:94:81: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:36:EA:C4:1A:69:2A:6D:76:83:2D:E5:00:B4:43:E7:9A:A5:3F:55 X509v3 Authority Key Identifier: keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/_TbqxBppKm12gy3lALRD55qlP1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.40.0/23 Signature Algorithm: sha256WithRSAEncryption 56:da:3a:e0:6a:bc:73:1a:c7:66:52:d6:a1:1b:94:4e:48:61: 4f:86:40:23:e1:76:95:fb:03:d7:1f:15:84:3b:80:0a:11:84: 7d:d5:7c:b8:63:e1:c6:e0:5b:ec:0e:7c:21:da:b9:38:04:af: 91:12:8e:ff:2a:89:26:89:8a:77:4b:31:71:d4:9f:b9:1c:30: 26:2e:8e:10:62:4d:64:14:bf:61:a0:b3:40:f4:16:39:d7:f8: 88:ed:a3:43:fa:45:ff:d9:be:d6:fa:15:e7:89:e1:1c:e3:7a: 18:44:14:29:4b:1f:0f:1e:a8:10:2b:80:69:15:f6:d4:04:b5: 55:bf:0b:25:1d:93:b4:3e:fb:8b:95:03:88:49:dc:de:9c:54: 12:dd:a2:28:d7:87:8c:8a:24:07:5d:93:7e:e2:ae:f7:81:d0: 50:18:ec:2a:56:35:44:4a:66:5c:c9:f4:41:71:9a:14:00:e2: 10:6b:bd:1a:ff:93:8b:6a:33:f6:d3:86:f1:48:f3:e2:c8:fe: da:d5:cd:73:0c:2a:c5:98:d7:1a:94:5f:8a:2f:34:c7:3b:6e: 5a:1f:a5:43:44:26:75:66:e1:bc:21:25:65:14:0f:3b:80:21: 94:76:d3:fe:62:de:17:17:f3:c4:f2:11:ac:73:45:55:0e:3d: ed:e5:c0:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EQLVteJ4s3s0imJfCAEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZmI4MzFmNWJkNmMwYzIwYjhlMDliZTUxMWMyMWJlN2Rj NWRlYmEwHhcNMjYwMTAyMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDM2ZWFjNDFhNjkyYTZkNzY4MzJkZTUwMGI0NDNlNzlhYTUzZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Me3NalieYn9NNVPFwzRzDOZS+H4 sKJOM6CBG4BvOtuhGokshvJLaiwJpYzYtICTVzTFG7IE3K5ARrdkN79RlYyfMKTu xV0TicXfMc+W6kz9+lutVLJ/Z+y/bNfTyaX37zxNEuCrRxSdaH6MdWz0JKpIyFMu KeFFqecQWJN3z6rIw8VVj/zi/didSRW+jzuQJJXbJVrdeup2DmMnbtAVQFs6mhYJ xDLfkFhQeMsUzcNm1/bL5eZJSVTCrpGz35mlpwxwcWegn7KrL0OziO0SGY3jSOxo GQtBWNvZo8zMkK0V4fo94J55xx+d3p4tJFtYIY1TF180qBEXsaOElIFcvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP026sQaaSptdoMt5QC0Q+eapT9VMB8GA1UdIwQY MBaAFKj7gx9b1sDCC44JvlEcIb59xd66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMWNiNzAtNTE4Yi00NDFiLWIzZGEt NjQ2ZDdlZWUwYTBmLzEvX1RicXhCcHBLbTEyZ3kzbEFMUkQ1NXFsUDFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wMWNiNzAtNTE4Yi00NDFiLWIzZGEtNjQ2ZDdlZWUwYTBm LzEvcVB1REgxdld3TUlMamdtLVVSd2h2bjNGM3JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+QoMA0G CSqGSIb3DQEBCwUAA4IBAQBW2jrgarxzGsdmUtahG5ROSGFPhkAj4XaV+wPXHxWE O4AKEYR91Xy4Y+HG4FvsDnwh2rk4BK+REo7/KokmiYp3SzFx1J+5HDAmLo4QYk1k FL9hoLNA9BY51/iI7aND+kX/2b7W+hXnieEc43oYRBQpSx8PHqgQK4BpFfbUBLVV vwslHZO0PvuLlQOISdzenFQS3aIo14eMiiQHXZN+4q73gdBQGOwqVjVESmZcyfRB cZoUAOIQa70a/5OLajP204bxSPPiyP7a1c1zDCrFmNcalF+KLzTHO25aH6VDRCZ1 ZuG8ISVlFA87gCGUdtP+Yt4XF/PE8hGsc0VVDj3t5cBE -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:45 2026 by rpki-client