This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/jGgiZ8UgkX-ZfqBNajQ9uue-Rrc.roa File: jGgiZ8UgkX-ZfqBNajQ9uue-Rrc.roa (raw, json) Hash identifier: XIdiJuC/vzsQTCNcPtjQEtIJRyHtsvJsPgJI2QdsCTU= Subject key identifier: 8C:68:22:67:C5:20:91:7F:99:7E:A0:4D:6A:34:3D:BA:E7:BE:46:B7 Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0 Certificate serial: 019B7F850816D5E6CCAFA79F49B7262C0906 Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/jGgiZ8UgkX-ZfqBNajQ9uue-Rrc.roa Signing time: Fri 02 Jan 2026 16:23:03 +0000 ROA not before: Fri 02 Jan 2026 16:23:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41898 IP address blocks: 91.135.16.0/20 maxlen: 20 95.130.32.0/21 maxlen: 21 158.255.56.0/21 maxlen: 21 158.255.59.0/24 maxlen: 24 2a01:bae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:08:16:d5:e6:cc:af:a7:9f:49:b7:26:2c:09:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c682267c520917f997ea04d6a343dbae7be46b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:28:a3:72:a4:08:f6:eb:b5:fe:f7:77:85: 19:8a:e0:73:a5:46:0a:68:7c:6f:44:2a:26:5b:ec: e4:a1:33:b9:0b:48:21:24:18:e1:92:87:cb:1f:2b: cf:03:e9:cf:f5:90:2f:c6:9d:b9:90:db:26:65:7f: 21:ae:21:a7:35:e5:0f:2b:21:0f:d1:fb:03:18:bb: be:68:0a:7e:0c:d8:7d:9f:bf:40:ef:b6:54:a1:65: 2a:80:cb:e0:63:61:4d:a5:6a:44:eb:54:1a:e4:68: 16:a8:04:bf:19:40:d1:78:f5:cf:0f:32:2b:bc:04: 04:db:3b:17:a3:b0:3b:1e:54:97:6f:60:5a:a3:bc: f6:19:52:12:10:40:46:97:3b:9a:32:b1:3e:3c:2f: dd:f7:28:4d:e2:6b:17:01:38:3f:22:a6:b9:a8:2b: 90:a6:41:ee:3d:c5:67:f8:6f:34:55:4a:e6:8e:de: 3b:90:1d:be:0d:e1:76:46:72:ab:27:d7:22:31:f7: ac:94:ba:db:29:72:37:a3:d2:b8:2f:01:a4:80:10: 0b:04:4c:c6:55:bc:17:37:08:d4:3c:8b:47:07:a0: a0:e4:34:71:f9:76:4a:71:16:14:11:70:4a:25:ad: c8:1a:90:e9:91:e3:58:36:8e:6c:ae:87:5c:25:af: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:22:67:C5:20:91:7F:99:7E:A0:4D:6A:34:3D:BA:E7:BE:46:B7 X509v3 Authority Key Identifier: keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/jGgiZ8UgkX-ZfqBNajQ9uue-Rrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.135.16.0/20 95.130.32.0/21 158.255.56.0/21 IPv6: 2a01:bae0::/32 Signature Algorithm: sha256WithRSAEncryption 24:20:6b:e1:9c:87:a8:b5:18:7e:0f:d5:52:a9:1e:fc:cb:04: 5c:45:33:b4:d2:7d:e3:ea:9e:bd:aa:69:f7:23:78:32:b5:81: 18:cc:10:ec:5b:87:1f:5f:24:58:dd:4a:7f:0b:46:2b:45:d6: f8:4c:eb:91:42:b0:8b:15:03:cc:68:10:bb:3d:09:7e:3c:f7: 5b:a1:9e:1e:dd:7e:24:13:01:68:fc:74:a5:ad:3f:9f:32:6c: 4a:c7:b6:f0:e6:dc:ca:8b:66:1d:d7:36:f8:40:98:42:39:66: 6f:a0:b7:43:1b:a6:2c:ee:57:92:d3:1e:39:cb:72:b1:ca:43: 2d:7f:c9:ec:d5:ad:e3:8a:e4:42:19:3e:4b:bc:65:75:c7:ba: 67:9f:d7:27:8e:95:09:9d:e4:72:c8:7f:df:38:78:f2:39:73: 8f:c7:b2:a9:58:8d:e8:46:c9:c8:8f:79:0c:61:62:33:96:45: d7:cf:8e:26:0f:49:b0:ba:7c:29:41:55:dd:7f:bb:70:08:2c: 72:2a:91:db:7f:30:6d:75:ba:26:c2:a0:f0:e6:57:a6:f8:9c: cb:f2:03:6e:69:2c:d1:fc:b3:9f:55:a6:76:e3:b0:47:9f:21: 61:a5:df:7f:a6:75:19:8a:93:7a:b8:ce:79:0b:ca:18:f4:99: 05:15:1e:a2 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/hQgW1ebMr6efSbcmLAkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODI4Yzk5ZDM1Y2I5MmUyZDUzZGFmMTI4ZTQ5N2U4NDFi NjNhYjAwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzY4MjI2N2M1MjA5MTdmOTk3ZWEwNGQ2YTM0M2RiYWU3YmU0NmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mooo3KkCPbrtf73d4UZiuBzpUYK aHxvRComW+zkoTO5C0ghJBjhkofLHyvPA+nP9ZAvxp25kNsmZX8hriGnNeUPKyEP 0fsDGLu+aAp+DNh9n79A77ZUoWUqgMvgY2FNpWpE61Qa5GgWqAS/GUDRePXPDzIr vAQE2zsXo7A7HlSXb2Bao7z2GVISEEBGlzuaMrE+PC/d9yhN4msXATg/Iqa5qCuQ pkHuPcVn+G80VUrmjt47kB2+DeF2RnKrJ9ciMfeslLrbKXI3o9K4LwGkgBALBEzG VbwXNwjUPItHB6Cg5DRx+XZKcRYUEXBKJa3IGpDpkeNYNo5srodcJa8fowIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIxoImfFIJF/mX6gTWo0Pbrnvka3MB8GA1UdIwQY MBaAFDGCjJnTXLkuLVPa8Sjkl+hBtjqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYt ZWIzN2E4NWE4MmM1LzEvakdnaVo4VWdrWC1aZnFCTmFqUTl1dWUtUnJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYtZWIzN2E4NWE4MmM1 LzEvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEW4cQAwQD X4IgAwQDnv84MA0EAgACMAcDBQAqAbrgMA0GCSqGSIb3DQEBCwUAA4IBAQAkIGvh nIeotRh+D9VSqR78ywRcRTO00n3j6p69qmn3I3gytYEYzBDsW4cfXyRY3Up/C0Yr Rdb4TOuRQrCLFQPMaBC7PQl+PPdboZ4e3X4kEwFo/HSlrT+fMmxKx7bw5tzKi2Yd 1zb4QJhCOWZvoLdDG6Ys7leS0x45y3KxykMtf8ns1a3jiuRCGT5LvGV1x7pnn9cn jpUJneRyyH/fOHjyOXOPx7KpWI3oRsnIj3kMYWIzlkXXz44mD0mwunwpQVXdf7tw CCxyKpHbfzBtdbomwqDw5lem+JzL8gNuaSzR/LOfVaZ247BHnyFhpd9/pnUZipN6 uM55C8oY9JkFFR6i -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:14 2026 by rpki-client