This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/kjPvueG1I8u0cxtLbYoXcuY5wns.roa File: kjPvueG1I8u0cxtLbYoXcuY5wns.roa (raw, json) Hash identifier: 14uqc1uKi9tarbRk9sK7mt20lOl/L4Rp9og5nS359rE= Subject key identifier: 92:33:EF:B9:E1:B5:23:CB:B4:73:1B:4B:6D:8A:17:72:E6:39:C2:7B Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC8827E3CE80BA971EB06926CD9FE74 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/kjPvueG1I8u0cxtLbYoXcuY5wns.roa Signing time: Fri 02 Jan 2026 08:17:31 +0000 ROA not before: Fri 02 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47133 IP address blocks: 91.108.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:82:7e:3c:e8:0b:a9:71:eb:06:92:6c:d9:fe:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9233efb9e1b523cbb4731b4b6d8a1772e639c27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:ac:dd:51:c5:cc:fa:28:04:d6:93:4c:aa: ea:15:a8:67:1d:24:b9:b3:0e:55:73:1a:ac:7e:62: 9a:38:ab:53:27:49:a4:46:a6:90:03:22:da:e1:be: 9b:4c:bd:c4:23:6c:38:6e:11:ba:15:69:fe:96:f6: 5a:51:20:7c:6a:19:21:c3:e9:f3:b6:3b:c4:47:d4: 93:c2:04:c8:3f:88:55:c4:c0:eb:64:0c:c7:0d:ac: c1:88:52:7a:8b:2e:b5:d1:d8:77:42:47:2f:63:a3: 9c:de:79:15:49:17:d0:ff:d6:3c:00:39:6e:ed:34: 54:3c:c7:9c:77:c3:09:31:bb:26:24:93:56:8b:29: a3:2a:47:b2:20:0e:a2:4d:db:01:d7:e3:78:41:ca: 9c:c2:1a:58:88:26:e0:31:da:b9:be:6d:c0:5b:59: 14:85:7b:ae:74:18:90:5e:ea:c7:ee:c8:8f:52:79: 3e:8f:8b:e6:1f:4f:66:2e:9f:ce:e0:46:8e:9e:87: d2:21:33:10:c2:a7:ea:c1:76:d7:e6:2b:03:88:6b: cc:01:7e:0f:63:45:b5:71:40:b8:07:6d:87:ea:b1: 98:2c:27:ac:62:4f:9b:a9:71:6c:a0:04:98:0a:7b: 96:5c:10:20:a1:ab:18:60:8e:33:7b:c8:a5:bb:76: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:33:EF:B9:E1:B5:23:CB:B4:73:1B:4B:6D:8A:17:72:E6:39:C2:7B X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/kjPvueG1I8u0cxtLbYoXcuY5wns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.35.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ad:75:ec:25:b1:94:aa:23:9f:15:1b:ab:37:cb:d1:e1:97: 76:12:03:a1:c9:cf:66:e6:6e:a8:1c:e3:07:41:5b:8b:af:a9: b6:5b:4a:69:72:90:d9:75:ca:82:9f:b3:07:94:f0:d8:08:e9: bc:2c:bd:2f:aa:c5:3f:38:ee:5b:14:c4:e0:98:39:c2:a1:02: 82:67:b1:13:67:c0:85:3b:a4:67:5a:d9:c6:63:5e:8c:3d:65: 6c:a9:c3:c5:ef:bb:63:48:28:a7:b1:58:37:fa:c9:f2:50:e1: aa:6e:3d:52:59:a3:09:2b:f6:03:f1:d2:27:f4:39:b6:bd:be: 30:71:25:2e:a4:b7:5b:ec:1b:b7:f7:88:9e:c1:86:43:fc:59: 36:e4:27:73:4f:18:3a:a5:c2:b2:ba:dc:a5:9a:50:ca:7a:f6: 78:41:d1:41:1b:20:d4:6e:d5:b9:db:78:1e:f4:92:11:ea:de: e9:52:a4:04:3c:84:8b:80:a3:bf:ea:89:44:4a:8d:a8:dc:a8: aa:56:dc:48:2a:b9:11:b1:f1:a6:f6:f3:ef:27:f6:18:66:94: ef:08:f9:e8:b6:e4:ca:c1:df:d2:8d:f9:91:31:0c:e1:89:8c: 66:5f:62:1f:5b:5f:c1:1d:23:da:23:4f:87:ef:27:b2:b0:5a: 2f:40:fc:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yIJ+POgLqXHrBpJs2f50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjMzZWZiOWUxYjUyM2NiYjQ3MzFiNGI2ZDhhMTc3MmU2MzljMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEGs3VHFzPooBNaTTKrqFahnHSS5 sw5VcxqsfmKaOKtTJ0mkRqaQAyLa4b6bTL3EI2w4bhG6FWn+lvZaUSB8ahkhw+nz tjvER9STwgTIP4hVxMDrZAzHDazBiFJ6iy610dh3QkcvY6Oc3nkVSRfQ/9Y8ADlu 7TRUPMecd8MJMbsmJJNWiymjKkeyIA6iTdsB1+N4QcqcwhpYiCbgMdq5vm3AW1kU hXuudBiQXurH7siPUnk+j4vmH09mLp/O4EaOnofSITMQwqfqwXbX5isDiGvMAX4P Y0W1cUC4B22H6rGYLCesYk+bqXFsoASYCnuWXBAgoasYYI4ze8ilu3b5ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJIz77nhtSPLtHMbS22KF3LmOcJ7MB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEva2pQdnVlRzFJOHUwY3h0TGJZb1hjdVk1d25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2wjMA0G CSqGSIb3DQEBCwUAA4IBAQAqrXXsJbGUqiOfFRurN8vR4Zd2EgOhyc9m5m6oHOMH QVuLr6m2W0ppcpDZdcqCn7MHlPDYCOm8LL0vqsU/OO5bFMTgmDnCoQKCZ7ETZ8CF O6RnWtnGY16MPWVsqcPF77tjSCinsVg3+snyUOGqbj1SWaMJK/YD8dIn9Dm2vb4w cSUupLdb7Bu394iewYZD/Fk25CdzTxg6pcKyutylmlDKevZ4QdFBGyDUbtW523ge 9JIR6t7pUqQEPISLgKO/6olESo2o3KiqVtxIKrkRsfGm9vPvJ/YYZpTvCPnotuTK wd/SjfmRMQzhiYxmX2IfW1/BHSPaI0+H7yeysFovQPzy -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:38 2026 by rpki-client