This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa File: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (raw, json) Hash identifier: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc= Subject key identifier: D9:AE:82:0F:1C:54:AD:01:81:98:3B:7D:6D:19:75:24:5F:E7:CA:F7 Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Certificate serial: 019B7758BF3071B126F199589565727A2634 Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41887 IP address blocks: 91.227.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bf:30:71:b1:26:f1:99:58:95:65:72:7a:26:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9ae820f1c54ad0181983b7d6d1975245fe7caf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:f9:95:f1:d3:3a:84:d6:5e:fd:dd:46:72: c1:97:0b:b2:8b:7c:e3:62:2c:6b:bb:6b:b8:50:32: da:70:34:76:e5:00:5c:d2:1e:f9:24:ed:3f:a3:ee: 41:b1:28:fc:28:9b:ae:35:e7:a7:ef:2d:82:06:75: 32:11:16:71:32:4e:ca:2d:fa:a5:61:ee:d1:72:25: d7:58:95:69:0a:b4:60:51:70:53:e7:96:35:de:b8: 42:c4:f5:14:7e:fb:c6:f9:30:bb:07:c9:7c:89:bf: 48:61:47:31:2e:15:b1:73:f7:87:12:e0:90:3e:17: 29:45:fc:97:1b:93:48:d3:0f:6c:f0:e0:3e:be:ab: 2c:23:d3:1e:52:ed:de:88:cd:c6:bb:c5:19:a0:e2: 99:20:df:fd:e1:1e:be:2c:7e:49:65:03:a6:46:af: d0:cf:b7:52:26:e2:08:fd:3f:77:ae:d0:95:96:c2: f6:06:06:5e:43:70:30:7f:f0:45:a9:a1:df:89:51: 64:77:3a:1a:8f:7b:41:01:ac:a3:ee:4c:76:cf:f2: bd:dc:92:59:cc:ea:e8:bd:1a:9b:4e:bb:16:f6:a6: 49:f0:8b:08:9e:d2:0f:fb:9c:cb:7e:8e:1d:fd:19: e4:60:cf:8f:46:f9:70:df:46:9d:c1:83:7c:9a:cf: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AE:82:0F:1C:54:AD:01:81:98:3B:7D:6D:19:75:24:5F:E7:CA:F7 X509v3 Authority Key Identifier: keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.75.0/24 Signature Algorithm: sha256WithRSAEncryption 22:1c:e4:31:af:44:7f:c7:d3:83:56:e0:5b:d3:81:cc:57:76: 72:52:e7:d1:72:fe:12:ca:81:e5:ac:7d:8d:2a:cf:22:3f:d1: 05:a2:9a:d8:26:7f:2e:7d:b3:38:48:63:a9:be:6c:98:9a:32: 51:6a:f3:cc:98:db:21:5c:5c:e8:df:a5:1c:a3:3e:d6:0a:1d: f4:59:db:89:38:f0:2b:58:8b:29:69:6b:c7:0e:2f:99:c2:6a: 29:8e:20:5c:95:cd:a3:a8:0d:96:9c:c3:5a:2e:3a:4f:7a:34: 05:07:ae:46:47:90:1a:48:f3:11:d8:df:eb:73:b3:57:38:78: ad:1f:0f:8d:c9:9e:bb:53:12:02:cc:5c:b4:05:2a:37:ea:46: 4f:47:cf:f5:69:f0:15:20:63:03:92:9e:70:4d:54:c8:10:72: 4e:be:7f:8d:2b:99:9a:41:07:70:34:8a:d5:2d:bc:79:ff:04: 3e:d2:27:9e:9d:58:60:a4:4a:9a:d8:76:5a:ad:f6:d6:8d:a2: 87:85:e4:a7:8e:ee:0f:29:1e:88:bd:35:93:a1:70:12:4b:4b: 55:fd:82:b0:fb:7d:75:af:36:00:24:ca:18:57:28:0b:7d:bf: 29:cd:f3:30:de:8d:e5:e5:6b:2f:a7:de:27:d3:29:b6:67:1d: 13:36:99:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WL8wcbEm8ZlYlWVyeiY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw MDA4MGUwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWFlODIwZjFjNTRhZDAxODE5ODNiN2Q2ZDE5NzUyNDVmZTdjYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheH5lfHTOoTWXv3dRnLBlwuyi3zj Yixru2u4UDLacDR25QBc0h75JO0/o+5BsSj8KJuuNeen7y2CBnUyERZxMk7KLfql Ye7RciXXWJVpCrRgUXBT55Y13rhCxPUUfvvG+TC7B8l8ib9IYUcxLhWxc/eHEuCQ PhcpRfyXG5NI0w9s8OA+vqssI9MeUu3eiM3Gu8UZoOKZIN/94R6+LH5JZQOmRq/Q z7dSJuII/T93rtCVlsL2BgZeQ3Awf/BFqaHfiVFkdzoaj3tBAayj7kx2z/K93JJZ zOrovRqbTrsW9qZJ8IsIntIP+5zLfo4d/RnkYM+PRvlw30adwYN8ms8cLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmugg8cVK0BgZg7fW0ZdSRf58r3MB8GA1UdIwQY MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt ZjRiOWRhNDgwZWUyLzEvMmE2Q0R4eFVyUUdCbUR0OWJSbDFKRl9ueXZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NLMA0G CSqGSIb3DQEBCwUAA4IBAQAiHOQxr0R/x9ODVuBb04HMV3ZyUufRcv4SyoHlrH2N Ks8iP9EFoprYJn8ufbM4SGOpvmyYmjJRavPMmNshXFzo36Ucoz7WCh30WduJOPAr WIspaWvHDi+ZwmopjiBclc2jqA2WnMNaLjpPejQFB65GR5AaSPMR2N/rc7NXOHit Hw+NyZ67UxICzFy0BSo36kZPR8/1afAVIGMDkp5wTVTIEHJOvn+NK5maQQdwNIrV Lbx5/wQ+0ieenVhgpEqa2HZarfbWjaKHheSnju4PKR6IvTWToXASS0tV/YKw+311 rzYAJMoYVygLfb8pzfMw3o3l5Wsvp94n0ym2Zx0TNpkD -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:28 2026 by rpki-client