This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/r9W2szh1XGv9rr7FiO5bfPbgp1E.roa File: r9W2szh1XGv9rr7FiO5bfPbgp1E.roa (raw, json) Hash identifier: HPQ7CX2EzoXDomcEETsUxub9gUOmfXmX+gJfzuOxTCc= Subject key identifier: AF:D5:B6:B3:38:75:5C:6B:FD:AE:BE:C5:88:EE:5B:7C:F6:E0:A7:51 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC87E600FB2F5153D2D0997B662517E Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/r9W2szh1XGv9rr7FiO5bfPbgp1E.roa Signing time: Fri 02 Jan 2026 08:17:29 +0000 ROA not before: Fri 02 Jan 2026 08:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24739 IP address blocks: 91.108.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:7e:60:0f:b2:f5:15:3d:2d:09:97:b6:62:51:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afd5b6b338755c6bfdaebec588ee5b7cf6e0a751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:43:b7:9f:7f:e6:04:16:65:f6:fb:b5:7c: 18:b8:b2:28:4d:f2:ec:1c:86:31:07:76:d6:a0:e1: 27:72:4c:70:24:98:f8:b3:e9:d0:1c:e5:b2:3e:cf: 1e:25:fc:6e:bc:f7:81:e6:e4:4b:5d:36:37:b2:66: 3f:cd:47:69:f0:b3:0d:39:f3:ef:fe:b2:27:41:ef: 45:e3:cd:e9:4b:4e:a3:55:28:c3:02:a4:ee:50:2e: eb:2c:29:ec:74:d3:34:f9:c0:55:5f:ab:39:73:07: 60:fb:68:06:86:0f:36:ed:69:c2:9d:92:08:64:c0: d9:23:d9:4a:13:2e:4b:e2:b4:12:65:9c:84:ea:a0: 52:12:20:d9:ae:a5:12:43:f2:0f:79:68:dc:9f:e4: c4:4d:a9:48:82:df:1e:1f:95:3e:75:c3:7e:1b:ee: 46:91:57:3c:b3:42:2e:5f:37:4a:c6:f5:07:24:64: 9d:6e:52:86:9b:fd:72:46:d5:ef:50:ff:01:f1:d1: 27:1b:b7:59:76:35:54:88:a4:ee:7f:ea:83:5c:2a: 38:74:44:34:f2:ce:87:a0:13:ea:9a:09:65:a1:f2: 52:0d:2b:53:25:d6:9b:3b:76:5a:99:a2:6d:37:81: 98:21:bb:b9:f5:5a:45:d3:65:a4:a1:e2:8b:9f:93: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:B6:B3:38:75:5C:6B:FD:AE:BE:C5:88:EE:5B:7C:F6:E0:A7:51 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/r9W2szh1XGv9rr7FiO5bfPbgp1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.43.0/24 Signature Algorithm: sha256WithRSAEncryption ba:e2:61:06:2e:98:d8:54:c7:78:71:27:1e:b1:c5:b1:dd:13: fb:b7:6b:f6:0a:12:ba:71:38:04:80:2e:93:90:70:f6:18:a9: 58:c0:58:2a:9e:39:6e:26:32:7c:89:cd:81:a2:da:7c:4e:15: b7:b0:b8:10:05:66:b1:e0:34:36:9a:07:e5:fa:cc:b0:d3:bd: 90:8f:f0:d6:56:ab:65:9a:cd:19:a6:9f:dd:56:ea:7f:05:2a: 81:43:8d:ce:bc:88:be:1f:a7:e3:61:b0:8e:dd:7a:e0:78:1f: 76:36:a4:02:00:11:3d:f0:9b:22:6f:11:ba:ac:90:92:00:29: 9c:c6:02:2a:da:de:7c:ec:30:77:65:cc:5c:fa:f0:7f:82:ee: 2b:09:5b:ae:16:87:c6:dd:1c:9f:cc:4c:8a:06:1f:4c:cd:20: 0e:97:81:cc:73:56:d4:2f:11:1f:5f:7e:04:78:1e:10:7e:a9: dc:41:2f:32:4d:cf:da:fe:3e:0a:a8:7b:c6:c6:51:68:d9:92: e8:ad:e1:4e:42:1f:25:2b:68:9e:e9:7d:25:53:4e:47:51:79: 43:49:8a:db:0c:38:24:82:b6:c7:48:1e:09:25:41:54:eb:2a: 13:7a:70:1f:a5:f1:41:5c:d1:2e:9a:5b:c6:d3:a0:8e:89:77: e5:e4:5e:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yH5gD7L1FT0tCZe2YlF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmQ1YjZiMzM4NzU1YzZiZmRhZWJlYzU4OGVlNWI3Y2Y2ZTBhNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozlDt59/5gQWZfb7tXwYuLIoTfLs HIYxB3bWoOEnckxwJJj4s+nQHOWyPs8eJfxuvPeB5uRLXTY3smY/zUdp8LMNOfPv /rInQe9F483pS06jVSjDAqTuUC7rLCnsdNM0+cBVX6s5cwdg+2gGhg827WnCnZII ZMDZI9lKEy5L4rQSZZyE6qBSEiDZrqUSQ/IPeWjcn+TETalIgt8eH5U+dcN+G+5G kVc8s0IuXzdKxvUHJGSdblKGm/1yRtXvUP8B8dEnG7dZdjVUiKTuf+qDXCo4dEQ0 8s6HoBPqmgllofJSDStTJdabO3ZamaJtN4GYIbu59VpF02WkoeKLn5NN5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/VtrM4dVxr/a6+xYjuW3z24KdRMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvcjlXMnN6aDFYR3Y5cnI3RmlPNWJmUGJncDFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2wrMA0G CSqGSIb3DQEBCwUAA4IBAQC64mEGLpjYVMd4cScescWx3RP7t2v2ChK6cTgEgC6T kHD2GKlYwFgqnjluJjJ8ic2Botp8ThW3sLgQBWax4DQ2mgfl+syw072Qj/DWVqtl ms0Zpp/dVup/BSqBQ43OvIi+H6fjYbCO3XrgeB92NqQCABE98JsibxG6rJCSACmc xgIq2t587DB3Zcxc+vB/gu4rCVuuFofG3RyfzEyKBh9MzSAOl4HMc1bULxEfX34E eB4QfqncQS8yTc/a/j4KqHvGxlFo2ZLoreFOQh8lK2ie6X0lU05HUXlDSYrbDDgk grbHSB4JJUFU6yoTenAfpfFBXNEumlvG06COiXfl5F47 -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:03 2026 by rpki-client