This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/PKNrfh3XImYcJKqE7W0yYI6OiUY.roa File: PKNrfh3XImYcJKqE7W0yYI6OiUY.roa (raw, json) Hash identifier: sziy6P9qjmgMh/Wjufdq7yg5DrB3okhv2h8JK1TFDTU= Subject key identifier: 3C:A3:6B:7E:1D:D7:22:66:1C:24:AA:84:ED:6D:32:60:8E:8E:89:46 Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Certificate serial: 019B7C13482BFFC944C094894C31EDB16A00 Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/PKNrfh3XImYcJKqE7W0yYI6OiUY.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 91.196.161.0/24 maxlen: 24 91.196.162.0/24 maxlen: 24 91.196.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:48:2b:ff:c9:44:c0:94:89:4c:31:ed:b1:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ca36b7e1dd722661c24aa84ed6d32608e8e8946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:4d:23:1f:29:25:72:ed:2b:2d:e8:5f:67: fc:0f:74:f8:87:0b:2f:76:43:be:c2:eb:a7:2f:81: 3e:7a:46:3f:5c:16:ba:1f:92:da:8f:e1:12:af:56: 89:0b:20:3a:5e:23:d6:7b:34:50:f9:95:ce:93:c2: 38:55:82:b7:30:4a:5a:d1:fb:8c:6f:2d:f9:50:c7: 82:b3:f0:cb:3f:93:fa:99:96:21:16:b3:36:d8:3b: 84:9c:0d:31:94:95:91:0e:ad:2f:97:72:75:41:b5: 6b:15:07:b2:9e:64:11:fb:c1:c0:d9:ac:7f:df:2c: a1:d5:f9:21:54:9a:90:53:c7:07:46:01:bd:0c:d4: 0c:71:ab:db:b6:c6:06:52:a0:bc:5f:aa:de:7f:dc: c2:cd:d1:d2:0e:33:18:69:02:0e:dd:5e:32:5b:20: bf:29:46:95:07:97:55:7f:5b:bd:76:79:41:ca:32: 91:92:7f:05:08:de:3e:a5:85:89:a2:fa:f6:58:28: 6e:8c:99:94:d0:c2:44:02:49:fa:f2:38:72:79:b7: c7:e8:91:b0:90:44:96:34:95:57:d1:79:e2:7b:88: f7:3b:91:a8:1e:02:51:a1:ce:bc:a3:cf:b0:88:fb: 39:97:67:09:16:dc:a5:b6:db:6c:e1:1c:36:7c:4c: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:6B:7E:1D:D7:22:66:1C:24:AA:84:ED:6D:32:60:8E:8E:89:46 X509v3 Authority Key Identifier: keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/PKNrfh3XImYcJKqE7W0yYI6OiUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.161.0-91.196.163.255 Signature Algorithm: sha256WithRSAEncryption 42:f3:d9:2f:0e:4f:58:1e:e9:cf:d0:64:17:e7:75:f5:b3:db: 01:95:8e:50:d2:ef:42:25:05:62:7f:cf:ce:4d:0f:5f:3e:45: 71:62:f6:1a:60:f8:ff:76:e4:51:08:50:26:ed:52:c5:8e:cb: 18:4e:98:8f:89:47:d1:9e:14:7b:49:db:94:82:b8:a9:31:79: 22:82:d4:d5:3f:59:da:ee:a1:75:2d:fa:39:41:2b:40:e6:98: 68:30:2b:64:54:26:82:28:16:65:f7:d3:21:4e:21:f7:24:67: 90:d7:90:4d:8a:1f:82:dc:97:80:67:3b:5f:c9:bf:84:d4:dc: 09:3b:f8:b0:b2:eb:02:df:0f:ed:b4:55:ba:11:ad:28:cd:53: 5a:1d:e8:ea:d8:34:cd:14:04:e6:5d:29:2f:71:ed:68:e5:29: 0e:26:e0:0b:d0:f2:2d:85:39:af:c9:2a:a7:06:49:22:67:61: 60:6e:d2:70:39:87:ab:15:0d:da:6c:c3:a3:7f:19:62:6d:c1: 45:12:e7:1e:f7:dc:af:83:72:8f:4d:1b:1e:dc:f2:42:ad:e2: 4a:7b:ec:98:9c:8f:fe:cc:80:53:b7:32:14:dc:b8:c4:95:76: 6c:79:c8:60:da:9b:84:ef:d1:5f:9e:d1:57:56:83:ad:41:37: de:de:2e:a6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8E0gr/8lEwJSJTDHtsWoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2 MmM1YTkwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2EzNmI3ZTFkZDcyMjY2MWMyNGFhODRlZDZkMzI2MDhlOGU4OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQVNIx8pJXLtKy3oX2f8D3T4hwsv dkO+wuunL4E+ekY/XBa6H5Laj+ESr1aJCyA6XiPWezRQ+ZXOk8I4VYK3MEpa0fuM by35UMeCs/DLP5P6mZYhFrM22DuEnA0xlJWRDq0vl3J1QbVrFQeynmQR+8HA2ax/ 3yyh1fkhVJqQU8cHRgG9DNQMcavbtsYGUqC8X6ref9zCzdHSDjMYaQIO3V4yWyC/ KUaVB5dVf1u9dnlByjKRkn8FCN4+pYWJovr2WChujJmU0MJEAkn68jhyebfH6JGw kESWNJVX0Xnie4j3O5GoHgJRoc68o8+wiPs5l2cJFtylttts4Rw2fEw6hQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDyja34d1yJmHCSqhO1tMmCOjolGMB8GA1UdIwQY MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct ODY1NDI2NjQ1N2M2LzEvUEtOcmZoM1hJbVljSktxRTdXMHlZSTZPaVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2 LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbxKED BAJbxKAwDQYJKoZIhvcNAQELBQADggEBAELz2S8OT1ge6c/QZBfndfWz2wGVjlDS 70IlBWJ/z85ND18+RXFi9hpg+P925FEIUCbtUsWOyxhOmI+JR9GeFHtJ25SCuKkx eSKC1NU/WdruoXUt+jlBK0DmmGgwK2RUJoIoFmX30yFOIfckZ5DXkE2KH4Lcl4Bn O1/Jv4TU3Ak7+LCy6wLfD+20VboRrSjNU1od6OrYNM0UBOZdKS9x7WjlKQ4m4AvQ 8i2FOa/JKqcGSSJnYWBu0nA5h6sVDdpsw6N/GWJtwUUS5x733K+Dco9NGx7c8kKt 4kp77Jicj/7MgFO3MhTcuMSVdmx5yGDam4Tv0V+e0VdWg61BN97eLqY= -----END CERTIFICATE-----Generated at Tue Jan 27 00:33:21 2026 by rpki-client