This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/291-znFSQvct2BZwzfK1cwLcwAw.roa File: 291-znFSQvct2BZwzfK1cwLcwAw.roa (raw, json) Hash identifier: /XCFd3ag+0mbQwm0eGd/JPuEd+El4o/QFrmk6+RphE0= Subject key identifier: DB:DD:7E:CE:71:52:42:F7:2D:D8:16:70:CD:F2:B5:73:02:DC:C0:0C Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5 Certificate serial: 019B7DCA4C229D0F76F51CDBF34A9AD550D6 Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/291-znFSQvct2BZwzfK1cwLcwAw.roa Signing time: Fri 02 Jan 2026 08:19:28 +0000 ROA not before: Fri 02 Jan 2026 08:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56803 IP address blocks: 91.201.56.247/32 maxlen: 32 91.201.56.252/32 maxlen: 32 185.195.71.0/24 maxlen: 24 2a05:ad00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4c:22:9d:0f:76:f5:1c:db:f3:4a:9a:d5:50:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5 Validity Not Before: Jan 2 08:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbdd7ece715242f72dd81670cdf2b57302dcc00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:b7:d9:9e:fa:e9:d9:0e:66:2b:9e:73:5c: 73:fd:c6:71:9c:c5:98:35:a4:a4:a2:75:f3:fe:1c: 1c:62:a5:38:8f:cd:6a:fc:96:0b:dd:4a:02:ee:89: bc:91:8e:a9:c8:c6:50:17:f7:b3:b3:55:b4:0d:03: fe:16:50:56:e7:4c:4c:1b:96:06:ef:80:a5:a7:f9: 8a:45:ce:4e:5c:bb:40:f0:15:d7:f7:4a:29:02:6b: ef:4f:96:e7:25:dd:59:a5:d4:de:01:de:de:f7:44: 88:54:95:ae:28:ec:81:d5:97:84:c4:7b:11:46:89: d4:1c:36:65:6c:07:47:85:22:e4:e2:2a:dd:08:f5: 2e:50:33:c3:07:9c:38:fe:cf:7c:f5:84:f4:a7:62: 4d:ca:89:bf:5b:3e:b5:27:88:85:0f:40:9d:ab:43: a3:5e:63:8d:33:ae:4d:ef:81:0b:f8:b9:77:25:d6: 2b:a5:6c:dc:cb:0d:1e:84:73:b9:25:62:78:84:ee: 80:2a:bf:c2:ce:6e:c1:98:33:f1:e5:f7:6f:5d:b8: b4:53:74:af:b9:12:f4:45:23:68:d5:08:52:7b:55: 20:a7:5a:80:9c:cc:b0:46:9e:f1:4f:f2:54:df:1f: d5:c2:bb:4d:7b:68:7a:64:0f:f9:71:5c:14:2c:ec: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DD:7E:CE:71:52:42:F7:2D:D8:16:70:CD:F2:B5:73:02:DC:C0:0C X509v3 Authority Key Identifier: keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/291-znFSQvct2BZwzfK1cwLcwAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.56.247/32 91.201.56.252/32 185.195.71.0/24 IPv6: 2a05:ad00::/29 Signature Algorithm: sha256WithRSAEncryption 21:dd:c1:d3:44:29:77:c6:28:6d:3b:d1:99:ea:0d:45:73:ed: 82:21:2d:69:eb:7e:ce:b9:9f:5b:55:d8:a9:9f:a5:d4:89:1d: 02:8d:2c:ce:da:66:d2:aa:2a:da:63:31:fa:5f:cd:60:70:af: f8:e8:bc:03:17:65:d8:9e:92:ae:21:a1:4d:58:83:12:81:12: 2c:1d:3e:0e:d3:9e:60:b7:08:98:2b:18:32:99:ad:61:37:98: f2:03:d8:73:e6:a3:ac:2e:20:9e:43:3b:aa:d0:57:27:1e:e5: 48:b1:02:d8:7a:1e:c5:2b:7b:53:93:54:cc:ff:00:e2:20:a0: 7b:d7:3a:e7:ff:7b:d6:46:86:37:ed:e4:e8:0e:ac:99:d3:a8: 17:e3:35:28:e5:43:66:44:50:6e:dd:61:49:34:5f:96:cf:84: 73:4d:cd:90:f5:34:4d:d7:82:2b:7a:75:36:95:5f:21:be:ea: 94:1c:2b:97:51:90:1f:a6:21:4a:79:90:25:74:eb:69:24:84: 64:82:6e:ab:c2:5a:bd:2d:47:d1:76:e0:54:fd:39:dc:59:8b: a5:8b:35:e3:0c:4e:2b:f4:64:8b:12:d9:ca:d9:86:6a:17:5d: e1:0b:93:c3:77:dc:24:69:4b:87:c4:83:81:1c:7a:79:34:7e: 51:20:5b:86 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9ykwinQ929Rzb80qa1VDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGExYzZiMWE2NWY3YTNkOTdmOWJkNzVlN2NhYzMxMzUy NDZmYTUwHhcNMjYwMTAyMDgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmRkN2VjZTcxNTI0MmY3MmRkODE2NzBjZGYyYjU3MzAyZGNjMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Be32Z766dkOZiuec1xz/cZxnMWY NaSkonXz/hwcYqU4j81q/JYL3UoC7om8kY6pyMZQF/ezs1W0DQP+FlBW50xMG5YG 74Clp/mKRc5OXLtA8BXX90opAmvvT5bnJd1ZpdTeAd7e90SIVJWuKOyB1ZeExHsR RonUHDZlbAdHhSLk4irdCPUuUDPDB5w4/s989YT0p2JNyom/Wz61J4iFD0Cdq0Oj XmONM65N74EL+Ll3JdYrpWzcyw0ehHO5JWJ4hO6AKr/Czm7BmDPx5fdvXbi0U3Sv uRL0RSNo1QhSe1Ugp1qAnMywRp7xT/JU3x/VwrtNe2h6ZA/5cVwULOw11QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFNvdfs5xUkL3LdgWcM3ytXMC3MAMMB8GA1UdIwQY MBaAFAbaHGsaZfej2X+b1158rDE1JG+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjIt NDVlYjczOGNiOWM4LzEvMjkxLXpuRlNRdmN0MkJad3pmSzFjd0xjd0F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjItNDVlYjczOGNiOWM4 LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwUAW8k49wMF AFvJOPwDBAC5w0cwDQQCAAIwBwMFAyoFrQAwDQYJKoZIhvcNAQELBQADggEBACHd wdNEKXfGKG070ZnqDUVz7YIhLWnrfs65n1tV2KmfpdSJHQKNLM7aZtKqKtpjMfpf zWBwr/jovAMXZdiekq4hoU1YgxKBEiwdPg7TnmC3CJgrGDKZrWE3mPID2HPmo6wu IJ5DO6rQVyce5UixAth6HsUre1OTVMz/AOIgoHvXOuf/e9ZGhjft5OgOrJnTqBfj NSjlQ2ZEUG7dYUk0X5bPhHNNzZD1NE3Xgit6dTaVXyG+6pQcK5dRkB+mIUp5kCV0 62kkhGSCbqvCWr0tR9F24FT9OdxZi6WLNeMMTiv0ZIsS2crZhmoXXeELk8N33CRp S4fEg4Ecenk0flEgW4Y= -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:24 2026 by rpki-client