This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa File: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (raw, json) Hash identifier: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ= Subject key identifier: 06:5D:EC:45:D5:57:35:F2:69:63:A6:F8:4B:C7:14:A5:DE:66:03:52 Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Certificate serial: 019B7C1348F6E430E5361A6CD6F7F9E2CB4E Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213893 IP address blocks: 91.196.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:48:f6:e4:30:e5:36:1a:6c:d6:f7:f9:e2:cb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=065dec45d55735f26963a6f84bc714a5de660352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:a2:c2:f9:67:4b:ce:af:e2:2e:77:c7:8c: 66:3d:6e:29:36:4f:6a:e5:c1:42:5d:09:a2:27:2e: 45:5c:3d:f0:d2:c3:c8:d9:58:82:17:3c:07:53:68: 6e:ca:fd:46:cb:18:22:ef:61:d5:4e:d7:cc:63:a2: c3:03:ea:22:d0:53:af:4c:68:36:87:55:1f:af:ea: 79:54:a2:00:94:38:63:92:7a:c1:b6:f1:f9:7d:1a: de:ff:c5:de:ce:89:a0:8d:08:04:c0:8a:17:bf:7a: bb:f7:b9:c5:68:8c:57:76:62:ba:21:7d:92:72:8a: 93:f8:c3:a3:b4:85:53:86:bd:f1:57:fe:e0:9f:e9: bd:b9:52:86:31:b0:57:b3:59:14:ec:55:0b:c3:e0: f0:ff:4a:8b:e6:c2:a1:53:50:2b:ef:10:70:a3:5c: 7d:75:39:b6:50:2f:e1:69:d5:8e:ac:8b:fd:0f:2d: b0:f0:ae:47:4a:8c:9a:28:94:60:79:5e:32:41:22: 61:e4:26:9c:d8:64:54:f3:ec:a9:88:7e:6c:56:b1: 40:21:8a:b9:a3:56:cb:98:47:df:34:1d:0a:e4:36: 5e:73:23:8a:fc:5c:ba:d6:65:25:6d:49:c7:46:a2: 2d:1f:a8:d3:f9:25:30:73:a1:e1:22:9e:58:29:17: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5D:EC:45:D5:57:35:F2:69:63:A6:F8:4B:C7:14:A5:DE:66:03:52 X509v3 Authority Key Identifier: keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.160.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:e1:fe:f2:62:c3:76:f7:16:10:f8:ec:c8:2b:77:49:4a:8d: f8:2a:af:9f:7c:5f:18:6c:01:28:c6:1b:66:c4:93:21:46:84: 7a:00:2c:eb:3e:2d:e9:b6:99:fd:fc:95:f5:c6:50:3e:86:55: f9:19:34:09:55:7c:83:ea:e8:4a:bc:b6:c3:8f:0a:fd:22:23: 16:25:e8:2a:f6:9d:2b:83:f0:11:b4:08:d3:21:e1:2b:2b:97: 20:cf:c3:7b:ee:44:72:14:fc:9a:05:85:88:0c:95:e6:81:48: 54:b3:dc:e9:41:91:cf:64:53:eb:3d:84:cc:7e:f5:bb:b6:84: 95:73:d1:ca:78:5a:99:69:d9:67:af:cf:f1:34:4f:f1:f2:86: f4:bf:88:1d:d0:a2:4a:29:41:48:4e:b7:be:91:94:a5:a8:9b: b6:dc:47:22:17:61:a6:b0:6b:47:37:b1:da:f7:fe:e0:9a:d2: c8:2f:b1:04:20:47:a0:81:78:c3:78:cd:0c:d5:92:c8:1b:e7: 56:2c:3e:eb:48:24:df:e6:8c:d8:ff:7c:32:a0:c5:e7:5b:74: ad:55:28:1e:8d:84:69:61:a9:06:fe:db:bd:91:79:fc:be:ff: 00:c7:3b:42:27:5e:54:06:77:27:ab:55:36:e9:91:bb:0c:ac: 1f:a9:34:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0j25DDlNhps1vf54stOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2 MmM1YTkwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjVkZWM0NWQ1NTczNWYyNjk2M2E2Zjg0YmM3MTRhNWRlNjYwMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OCiwvlnS86v4i53x4xmPW4pNk9q 5cFCXQmiJy5FXD3w0sPI2ViCFzwHU2huyv1Gyxgi72HVTtfMY6LDA+oi0FOvTGg2 h1Ufr+p5VKIAlDhjknrBtvH5fRre/8XezomgjQgEwIoXv3q797nFaIxXdmK6IX2S coqT+MOjtIVThr3xV/7gn+m9uVKGMbBXs1kU7FULw+Dw/0qL5sKhU1Ar7xBwo1x9 dTm2UC/hadWOrIv9Dy2w8K5HSoyaKJRgeV4yQSJh5Cac2GRU8+ypiH5sVrFAIYq5 o1bLmEffNB0K5DZecyOK/Fy61mUlbUnHRqItH6jT+SUwc6HhIp5YKRdhTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZd7EXVVzXyaWOm+EvHFKXeZgNSMB8GA1UdIwQY MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct ODY1NDI2NjQ1N2M2LzEvQmwzc1JkVlhOZkpwWTZiNFM4Y1VwZDVtQTFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2 LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8SgMA0G CSqGSIb3DQEBCwUAA4IBAQBe4f7yYsN29xYQ+OzIK3dJSo34Kq+ffF8YbAEoxhtm xJMhRoR6ACzrPi3ptpn9/JX1xlA+hlX5GTQJVXyD6uhKvLbDjwr9IiMWJegq9p0r g/ARtAjTIeErK5cgz8N77kRyFPyaBYWIDJXmgUhUs9zpQZHPZFPrPYTMfvW7toSV c9HKeFqZadlnr8/xNE/x8ob0v4gd0KJKKUFITre+kZSlqJu23EciF2GmsGtHN7Ha 9/7gmtLIL7EEIEeggXjDeM0M1ZLIG+dWLD7rSCTf5ozY/3wyoMXnW3StVSgejYRp YakG/tu9kXn8vv8AxztCJ15UBncnq1U26ZG7DKwfqTRA -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:37 2026 by rpki-client