This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa File: SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa (raw, json) Hash identifier: E30667k73fK636EBujlVpZsbOfNsOqJ2dSiR3iwOdXA= Subject key identifier: 4A:94:7F:47:59:29:50:D5:DB:C7:01:E3:43:F4:51:B2:53:FA:6B:21 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC885DC082717A6F41E279726845C5B Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa Signing time: Fri 02 Jan 2026 08:17:32 +0000 ROA not before: Fri 02 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57512 IP address blocks: 91.108.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:85:dc:08:27:17:a6:f4:1e:27:97:26:84:5c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a947f47592950d5dbc701e343f451b253fa6b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:2e:68:f9:59:5a:5d:ec:17:e1:8e:0e:e2: 8c:e5:1d:5a:bb:0f:7f:25:41:a1:2a:33:d9:d8:b7: cb:86:55:b9:a5:35:74:4f:fe:31:c8:46:5d:11:ca: ed:ad:af:9f:52:84:e2:3d:00:8d:76:54:97:05:67: d4:ac:9a:4f:1d:ab:96:80:2a:04:4f:08:54:a8:07: 0a:77:62:95:62:e4:36:6f:43:b5:87:f2:c3:38:be: 64:c8:2a:37:cf:ac:8a:cb:2e:ac:8f:27:da:5c:42: b1:d7:e9:26:91:ea:b2:cd:4f:19:dd:3f:80:b7:e0: aa:78:a5:7a:f1:74:d5:17:fb:0a:ef:c6:1e:d7:7a: 4a:1f:82:2b:0a:ef:da:e3:6a:30:17:87:4e:e9:c2: bc:92:7a:5b:d1:e1:d7:d4:69:25:ca:d7:d3:e4:b9: 95:a2:8b:07:86:27:6b:d1:7a:c3:50:0a:cd:c4:6e: 41:4e:d3:9c:97:b8:63:3a:20:4a:11:a5:57:88:a9: 79:58:85:8d:3d:dd:44:5f:82:c3:ea:f4:f1:37:74: 73:e7:3b:6b:4a:c2:f9:53:90:9c:30:db:ee:5c:54: 90:28:cd:4f:c2:66:3c:8d:6b:fe:54:64:49:40:63: b7:6b:76:03:24:ee:d5:52:62:02:2b:05:cd:ef:5d: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:94:7F:47:59:29:50:D5:DB:C7:01:E3:43:F4:51:B2:53:FA:6B:21 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/SpR_R1kpUNXbxwHjQ_RRslP6ayE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.54.0/24 Signature Algorithm: sha256WithRSAEncryption 16:89:a6:68:57:60:81:bb:cb:82:28:58:75:aa:7f:35:c4:fd: 46:ff:49:13:70:bb:ff:30:32:aa:6d:e4:51:36:cb:c9:14:b5: 3e:90:f5:d4:86:7e:f5:f3:66:b4:5a:5e:2d:91:53:95:bc:81: eb:82:9b:c0:95:18:77:93:01:79:b1:1f:d4:eb:0a:5c:e4:1f: 3f:f0:9b:53:8e:53:c7:fb:58:3d:73:d5:dc:36:63:b1:75:90: 00:0b:2a:4b:fa:a0:6b:10:60:d0:98:2c:e0:35:31:99:8d:c7: 01:79:d0:cb:24:9d:40:2c:cd:f9:c3:cb:49:db:e9:dc:97:8b: d4:00:c2:0a:0d:d9:ce:61:b7:be:d5:3f:75:07:a1:54:63:39: e5:59:d7:52:df:61:47:be:1d:7c:05:cc:34:97:54:86:8e:83: b0:7c:4c:6c:fc:b1:96:98:26:cd:57:c0:91:57:f6:42:e1:05: 69:83:f1:14:f3:bc:74:21:16:07:52:b8:eb:d7:0a:77:f7:7e: d0:ef:9f:5d:63:ed:54:45:a4:73:6f:ad:48:3b:2e:9a:7d:5e: dd:e0:fb:7f:e4:8e:bd:38:42:b5:e4:08:2b:fa:59:eb:fe:51: 6f:4a:ab:2c:e9:af:1c:cf:1e:32:5f:92:42:ca:68:24:95:09: 0c:10:3a:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yIXcCCcXpvQeJ5cmhFxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTk0N2Y0NzU5Mjk1MGQ1ZGJjNzAxZTM0M2Y0NTFiMjUzZmE2YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA414uaPlZWl3sF+GODuKM5R1auw9/ JUGhKjPZ2LfLhlW5pTV0T/4xyEZdEcrtra+fUoTiPQCNdlSXBWfUrJpPHauWgCoE TwhUqAcKd2KVYuQ2b0O1h/LDOL5kyCo3z6yKyy6sjyfaXEKx1+kmkeqyzU8Z3T+A t+CqeKV68XTVF/sK78Ye13pKH4IrCu/a42owF4dO6cK8knpb0eHX1GklytfT5LmV oosHhidr0XrDUArNxG5BTtOcl7hjOiBKEaVXiKl5WIWNPd1EX4LD6vTxN3Rz5ztr SsL5U5CcMNvuXFSQKM1PwmY8jWv+VGRJQGO3a3YDJO7VUmICKwXN710DDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqUf0dZKVDV28cB40P0UbJT+mshMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvU3BSX1Ixa3BVTlhieHdIalFfUlJzbFA2YXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2w2MA0G CSqGSIb3DQEBCwUAA4IBAQAWiaZoV2CBu8uCKFh1qn81xP1G/0kTcLv/MDKqbeRR NsvJFLU+kPXUhn7182a0Wl4tkVOVvIHrgpvAlRh3kwF5sR/U6wpc5B8/8JtTjlPH +1g9c9XcNmOxdZAACypL+qBrEGDQmCzgNTGZjccBedDLJJ1ALM35w8tJ2+ncl4vU AMIKDdnOYbe+1T91B6FUYznlWddS32FHvh18Bcw0l1SGjoOwfExs/LGWmCbNV8CR V/ZC4QVpg/EU87x0IRYHUrjr1wp3937Q759dY+1URaRzb61IOy6afV7d4Pt/5I69 OEK15Agr+lnr/lFvSqss6a8czx4yX5JCymgklQkMEDr4 -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:37 2026 by rpki-client