This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/Ll9Fv1iWjrQbay6dldfz3298BT0.roa File: Ll9Fv1iWjrQbay6dldfz3298BT0.roa (raw, json) Hash identifier: sXUak+rlRyYVaN4/qSmJAIPbXZ1DujHL5AjXw6i4lS8= Subject key identifier: 2E:5F:45:BF:58:96:8E:B4:1B:6B:2E:9D:95:D7:F3:DF:6F:7C:05:3D Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a Certificate serial: 019B7F80E845D73D33FF6328B44579A822A4 Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/Ll9Fv1iWjrQbay6dldfz3298BT0.roa Signing time: Fri 02 Jan 2026 16:18:32 +0000 ROA not before: Fri 02 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211796 IP address blocks: 91.188.248.0/24 maxlen: 24 91.188.249.0/24 maxlen: 24 91.202.244.0/24 maxlen: 24 2a0c:6ec0:1::/48 maxlen: 48 2a0c:6ec0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e8:45:d7:3d:33:ff:63:28:b4:45:79:a8:22:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a Validity Not Before: Jan 2 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e5f45bf58968eb41b6b2e9d95d7f3df6f7c053d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:f2:10:6a:b1:41:9d:dc:f4:62:d5:63:72: bc:c2:62:a0:4b:e6:4e:26:48:e5:c8:de:07:f0:50: 6b:c1:3f:4d:19:b0:87:3a:1b:3e:81:a2:56:a0:5f: c2:fd:11:91:f5:ca:06:27:54:76:b4:a4:a7:a1:1f: ae:9a:05:e1:a1:28:d1:2c:5b:b6:a8:22:f8:ef:be: c2:a7:91:42:1a:80:8a:03:3a:a5:89:04:76:7e:cc: da:bb:e8:29:38:fc:fb:7f:a7:de:4f:3e:94:d9:2e: d1:29:ee:55:6f:84:6b:80:3a:cb:db:bd:c9:ee:f3: ab:ef:bb:f0:99:f8:4d:cc:49:39:40:4a:1a:1c:92: 11:55:34:27:73:86:11:d8:7e:3f:13:7d:9b:9f:e6: 73:92:e9:f0:d7:da:07:12:f7:34:8d:70:02:ca:ee: f6:44:e3:eb:b0:28:0d:e1:47:01:e1:71:56:6e:51: fd:ec:4a:f4:df:42:b8:a7:7c:b4:50:7c:24:7b:42: 67:92:75:f4:66:ef:0f:1d:4a:08:e3:5d:48:aa:b0: fd:3c:8f:be:8d:78:e2:58:64:40:a9:ea:72:f7:f4: 9f:12:2a:a2:53:83:91:ae:5a:15:90:79:8a:ef:e4: d5:08:11:39:8d:63:81:30:b9:32:98:5f:0b:c3:87: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5F:45:BF:58:96:8E:B4:1B:6B:2E:9D:95:D7:F3:DF:6F:7C:05:3D X509v3 Authority Key Identifier: keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/Ll9Fv1iWjrQbay6dldfz3298BT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.248.0/23 91.202.244.0/24 IPv6: 2a0c:6ec0:1::-2a0c:6ec0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption cd:a3:64:d8:27:f9:b7:a5:c1:a3:fe:75:5e:5e:51:11:36:dc: 7a:3b:e0:be:86:a7:7c:38:4d:b8:5c:d9:85:8d:3d:54:51:97: 88:11:fe:de:4d:74:03:41:85:c5:11:6a:ac:cd:43:14:42:78: c7:23:9c:8b:fc:14:18:bb:eb:96:b8:95:12:2c:b0:0d:86:e4: b4:21:9a:91:54:75:b1:8b:1e:3e:3a:a4:8a:5b:51:c3:e9:c4: 8a:28:64:4d:e8:f6:4c:17:c2:6b:f9:49:74:b6:94:0d:79:e4: 7e:38:ac:f3:4f:f8:3c:96:f6:bd:0b:64:b9:2c:00:b7:94:3d: 8f:10:8e:7c:4b:27:d3:4b:74:bb:3a:e0:69:f8:fb:ea:77:e3: d4:f9:52:8d:63:f8:af:a8:90:e8:4b:78:70:dc:8a:39:7a:b8: d6:78:6e:64:56:4b:bf:9d:59:91:b6:28:46:18:c6:50:60:38: 9a:d7:89:26:c0:b5:b4:89:f8:0f:5f:e9:bf:60:06:67:ad:f6: 21:18:5d:cc:15:c2:76:83:08:c8:fc:b9:23:d4:1b:2c:2f:2d: d1:2d:de:e4:93:d2:45:68:18:77:98:07:d8:e0:c6:fc:bd:fa: a9:28:d0:63:19:ec:32:4c:af:90:36:15:08:6f:99:68:5b:e5: 0c:75:92:e2 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/gOhF1z0z/2MotEV5qCKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4 ZTY3MGEwHhcNMjYwMTAyMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTVmNDViZjU4OTY4ZWI0MWI2YjJlOWQ5NWQ3ZjNkZjZmN2MwNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC3yEGqxQZ3c9GLVY3K8wmKgS+ZO JkjlyN4H8FBrwT9NGbCHOhs+gaJWoF/C/RGR9coGJ1R2tKSnoR+umgXhoSjRLFu2 qCL4777Cp5FCGoCKAzqliQR2fszau+gpOPz7f6feTz6U2S7RKe5Vb4RrgDrL273J 7vOr77vwmfhNzEk5QEoaHJIRVTQnc4YR2H4/E32bn+Zzkunw19oHEvc0jXACyu72 ROPrsCgN4UcB4XFWblH97Er030K4p3y0UHwke0JnknX0Zu8PHUoI411IqrD9PI++ jXjiWGRAqepy9/SfEiqiU4ORrloVkHmK7+TVCBE5jWOBMLkymF8Lw4cOfQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFC5fRb9Ylo60G2sunZXX899vfAU9MB8GA1UdIwQY MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt YzI0MGJmYzljYmMxLzEvTGw5RnYxaVdqclFiYXk2ZGxkZnozMjk4QlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQBW7z4AwQA W8r0MBoEAgACMBQwEgMHACoMbsAAAQMHACoMbsAAAjANBgkqhkiG9w0BAQsFAAOC AQEAzaNk2Cf5t6XBo/51Xl5RETbcejvgvoanfDhNuFzZhY09VFGXiBH+3k10A0GF xRFqrM1DFEJ4xyOci/wUGLvrlriVEiywDYbktCGakVR1sYsePjqkiltRw+nEiihk Tej2TBfCa/lJdLaUDXnkfjis80/4PJb2vQtkuSwAt5Q9jxCOfEsn00t0uzrgafj7 6nfj1PlSjWP4r6iQ6Et4cNyKOXq41nhuZFZLv51ZkbYoRhjGUGA4mteJJsC1tIn4 D1/pv2AGZ632IRhdzBXCdoMIyPy5I9QbLC8t0S3e5JPSRWgYd5gH2ODG/L36qSjQ YxnsMkyvkDYVCG+ZaFvlDHWS4g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:24 2026 by rpki-client