This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/SV2RkPOuByS_r28T-8Z9LI6s33I.roa File: SV2RkPOuByS_r28T-8Z9LI6s33I.roa (raw, json) Hash identifier: mWVfN5OIaVZHfY5wD08vtg6Nd4vEgRrrt33wmevn5GE= Subject key identifier: 49:5D:91:90:F3:AE:07:24:BF:AF:6F:13:FB:C6:7D:2C:8E:AC:DF:72 Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Certificate serial: 019B7834A9E71102B1F5C3760252A99DA656 Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/SV2RkPOuByS_r28T-8Z9LI6s33I.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48944 IP address blocks: 91.239.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a9:e7:11:02:b1:f5:c3:76:02:52:a9:9d:a6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=495d9190f3ae0724bfaf6f13fbc67d2c8eacdf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:6b:4d:95:03:57:07:b0:ee:5d:d6:69:5e: 02:11:21:f8:4d:ca:1f:5e:ba:ac:38:42:d9:8d:c3: a5:96:85:21:76:46:34:d4:e1:18:38:9c:5b:f5:1b: 84:26:30:30:b1:27:de:ec:3d:8b:69:ca:cc:8f:e9: 3a:79:38:66:ed:da:23:c1:a5:f7:3f:2d:47:f7:0f: b4:8c:5b:08:3b:8c:7b:23:53:b2:45:e8:9e:55:e5: c3:fa:d9:5c:1e:ae:1d:48:58:96:fa:92:e1:ee:c8: d7:c9:90:db:e9:60:92:ac:d8:f2:d9:e1:7f:4f:a4: 4d:90:0a:ce:96:31:6e:e0:db:5f:31:bf:42:28:ff: 65:8e:b0:ca:cf:e8:35:0b:11:b6:75:a7:c4:a1:2d: 14:77:b8:24:64:de:e3:c7:33:01:d6:90:2e:60:bd: 92:ab:ae:4a:70:d2:82:0f:65:cf:2a:79:e3:99:92: 7a:6a:36:d6:8a:09:cc:87:5f:64:17:a5:e2:6d:8a: bb:91:e6:07:97:3c:90:91:ca:5f:55:7c:f1:c1:a8: 44:74:e4:8d:dd:29:fe:46:f1:16:a8:36:51:e7:aa: 47:8a:b2:45:d4:29:a5:73:ba:e7:d4:6a:ec:45:83: 97:39:e0:77:d9:93:ab:17:c8:26:47:c8:79:8e:6c: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:91:90:F3:AE:07:24:BF:AF:6F:13:FB:C6:7D:2C:8E:AC:DF:72 X509v3 Authority Key Identifier: keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/SV2RkPOuByS_r28T-8Z9LI6s33I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.210.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:74:da:d8:67:bf:dc:67:48:00:3d:14:e2:6d:7d:7c:53:93: 02:cf:c5:c1:ac:cd:16:84:40:09:df:ed:a4:b6:38:6c:9b:8a: c2:12:9b:9e:5f:ce:ce:4d:ac:51:28:6c:4b:d7:58:b8:94:a7: 24:45:86:a1:0e:a7:8f:f7:f1:31:17:a3:2b:8e:38:01:f4:a5: 94:52:c3:c4:c4:97:12:d2:19:da:da:d7:85:93:99:d5:f9:de: 92:b9:5e:2e:34:be:57:f0:30:0b:77:f7:15:92:26:a6:59:11: 9f:ff:91:65:bd:19:01:f9:50:2e:d3:90:3b:01:75:63:48:4e: d5:29:56:c6:fb:61:f1:58:bb:f9:fd:db:8c:71:b0:d7:c5:df: 5b:6c:16:d8:f8:7a:25:c1:1f:77:99:69:8d:1d:28:a5:ba:88: cc:8c:a9:dd:89:1f:1a:f0:8b:30:fd:39:fc:4d:ad:b4:5a:99: c8:06:7a:68:bd:44:24:fe:c7:24:b9:c7:92:e4:be:b1:a9:e1: 71:81:23:ba:2b:e4:f4:14:93:8c:6e:a3:c0:8d:c7:f3:3f:e9: 3a:6a:5e:75:db:18:14:8c:53:18:13:1e:a9:3c:63:06:98:23: 15:87:fc:fb:b2:01:be:e9:89:69:1c:4e:48:9e:5c:42:ec:52: cd:44:f5:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKnnEQKx9cN2AlKpnaZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz OTNhNDIwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTVkOTE5MGYzYWUwNzI0YmZhZjZmMTNmYmM2N2QyYzhlYWNkZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA209rTZUDVwew7l3WaV4CESH4Tcof XrqsOELZjcOlloUhdkY01OEYOJxb9RuEJjAwsSfe7D2LacrMj+k6eThm7dojwaX3 Py1H9w+0jFsIO4x7I1OyReieVeXD+tlcHq4dSFiW+pLh7sjXyZDb6WCSrNjy2eF/ T6RNkArOljFu4NtfMb9CKP9ljrDKz+g1CxG2dafEoS0Ud7gkZN7jxzMB1pAuYL2S q65KcNKCD2XPKnnjmZJ6ajbWignMh19kF6XibYq7keYHlzyQkcpfVXzxwahEdOSN 3Sn+RvEWqDZR56pHirJF1Cmlc7rn1GrsRYOXOeB32ZOrF8gmR8h5jmyqIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEldkZDzrgckv69vE/vGfSyOrN9yMB8GA1UdIwQY MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt YmZhMDNhNjY4NTc3LzEvU1YyUmtQT3VCeVNfcjI4VC04WjlMSTZzMzNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3 LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/SMA0G CSqGSIb3DQEBCwUAA4IBAQCLdNrYZ7/cZ0gAPRTibX18U5MCz8XBrM0WhEAJ3+2k tjhsm4rCEpueX87OTaxRKGxL11i4lKckRYahDqeP9/ExF6MrjjgB9KWUUsPExJcS 0hna2teFk5nV+d6SuV4uNL5X8DALd/cVkiamWRGf/5FlvRkB+VAu05A7AXVjSE7V KVbG+2HxWLv5/duMcbDXxd9bbBbY+HolwR93mWmNHSiluojMjKndiR8a8Isw/Tn8 Ta20WpnIBnpovUQk/sckuceS5L6xqeFxgSO6K+T0FJOMbqPAjcfzP+k6al512xgU jFMYEx6pPGMGmCMVh/z7sgG+6YlpHE5InlxC7FLNRPWE -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:27 2026 by rpki-client