This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa File: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (raw, json) Hash identifier: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M= Subject key identifier: 04:FB:96:93:A0:9F:22:8B:EE:47:48:4D:E1:A6:FD:FD:58:3C:7E:93 Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a Certificate serial: 019B7F80E62A2760D30E6AA788E96E4B312F Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa Signing time: Fri 02 Jan 2026 16:18:32 +0000 ROA not before: Fri 02 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202422 IP address blocks: 91.188.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e6:2a:27:60:d3:0e:6a:a7:88:e9:6e:4b:31:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a Validity Not Before: Jan 2 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04fb9693a09f228bee47484de1a6fdfd583c7e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:3b:1b:2f:cc:41:09:58:33:ce:e5:5f:2d: 3b:b1:f0:c4:5e:5a:e5:af:cd:5c:08:1e:7d:28:10: 49:06:e5:68:ec:54:03:2c:03:6b:bf:b8:9d:a8:a3: de:30:be:98:e0:8f:26:1f:99:26:b4:44:26:9f:11: bd:94:73:99:5a:30:7a:bc:dd:61:ce:68:e0:22:d7: 72:8a:89:52:2c:74:15:f5:3c:2b:0c:a4:a4:76:f8: d4:8f:cc:08:ea:17:32:7a:12:9e:75:b3:a5:9d:86: e0:88:26:0b:af:53:02:e6:b5:bf:ef:fc:fc:c1:5a: ef:9c:45:ef:6a:9e:7d:9a:7b:67:da:ef:f6:b7:9f: 56:e4:3f:fb:4b:32:35:07:c1:73:a2:7e:a0:ec:6a: bc:15:c6:2b:65:3a:cf:9e:7d:b5:fd:0f:92:70:01: cf:96:7b:94:aa:a9:89:b8:c0:a1:5e:da:b3:db:ca: fa:13:2d:e8:1e:74:c8:cb:12:62:4d:53:b6:c7:fd: db:be:c6:ab:a3:c1:fd:1e:d2:27:a7:3b:2e:95:78: 74:71:12:c4:5c:e7:e4:ad:25:58:64:fe:0f:1e:b8: c8:d4:db:21:f0:b9:b7:99:74:1c:7f:07:0b:ba:5b: 34:56:42:d7:22:65:d6:5f:33:b4:ab:05:c6:e1:8b: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FB:96:93:A0:9F:22:8B:EE:47:48:4D:E1:A6:FD:FD:58:3C:7E:93 X509v3 Authority Key Identifier: keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.251.0/24 Signature Algorithm: sha256WithRSAEncryption a1:e2:97:0e:74:33:38:d0:7e:a8:f6:c6:6d:32:15:cc:a0:8b: b1:23:82:51:ff:d7:96:3c:4e:2a:92:e7:1a:6c:eb:41:d9:ae: c2:f1:e8:75:99:fc:7f:fc:66:ed:ce:90:f2:8a:b2:ac:48:03: af:56:e9:22:65:c8:dd:a6:5f:b1:55:a2:37:5d:92:15:65:23: 89:54:88:6f:18:6c:b9:52:23:a1:2c:ee:07:5a:b5:8f:39:ae: c5:e8:69:f7:20:e2:ba:d9:78:6a:f9:18:c1:49:5c:92:9c:1a: 46:d3:7d:8c:55:5f:2c:f1:9a:3c:7e:c7:e1:7c:dd:ae:0c:f8: 22:21:06:85:3a:3e:46:1a:3b:83:0a:be:94:26:da:e6:53:94: 78:ad:34:73:31:92:46:5f:3e:96:5e:b5:68:1f:4a:3c:02:f3: fc:0a:70:ae:74:cb:92:5c:47:96:52:a7:30:dc:fd:1a:d4:59: e0:a6:56:15:ec:fa:eb:d0:1c:cc:98:31:d9:41:56:e6:b3:05: e1:7f:0a:36:a8:8e:97:8b:5f:af:d5:38:8e:95:fd:33:52:8f: 44:79:a8:a1:ea:b2:64:7a:50:30:eb:aa:62:4c:1f:c1:18:d7: b3:0f:c3:7d:5c:52:02:ca:4d:56:a5:aa:ab:c5:f5:26:2b:14: 16:44:57:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gOYqJ2DTDmqniOluSzEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4 ZTY3MGEwHhcNMjYwMTAyMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGZiOTY5M2EwOWYyMjhiZWU0NzQ4NGRlMWE2ZmRmZDU4M2M3ZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2I7Gy/MQQlYM87lXy07sfDEXlrl r81cCB59KBBJBuVo7FQDLANrv7idqKPeML6Y4I8mH5kmtEQmnxG9lHOZWjB6vN1h zmjgItdyiolSLHQV9TwrDKSkdvjUj8wI6hcyehKedbOlnYbgiCYLr1MC5rW/7/z8 wVrvnEXvap59mntn2u/2t59W5D/7SzI1B8Fzon6g7Gq8FcYrZTrPnn21/Q+ScAHP lnuUqqmJuMChXtqz28r6Ey3oHnTIyxJiTVO2x/3bvsaro8H9HtInpzsulXh0cRLE XOfkrSVYZP4PHrjI1Nsh8Lm3mXQcfwcLuls0VkLXImXWXzO0qwXG4YsRQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAT7lpOgnyKL7kdITeGm/f1YPH6TMB8GA1UdIwQY MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt YzI0MGJmYzljYmMxLzEvQlB1V2s2Q2ZJb3Z1UjBoTjRhYjlfVmc4ZnBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z7MA0G CSqGSIb3DQEBCwUAA4IBAQCh4pcOdDM40H6o9sZtMhXMoIuxI4JR/9eWPE4qkuca bOtB2a7C8eh1mfx//GbtzpDyirKsSAOvVukiZcjdpl+xVaI3XZIVZSOJVIhvGGy5 UiOhLO4HWrWPOa7F6Gn3IOK62Xhq+RjBSVySnBpG032MVV8s8Zo8fsfhfN2uDPgi IQaFOj5GGjuDCr6UJtrmU5R4rTRzMZJGXz6WXrVoH0o8AvP8CnCudMuSXEeWUqcw 3P0a1FngplYV7Prr0BzMmDHZQVbmswXhfwo2qI6Xi1+v1TiOlf0zUo9Eeaih6rJk elAw66piTB/BGNezD8N9XFICyk1WpaqrxfUmKxQWRFdT -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:57 2026 by rpki-client