This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/B9oWqJbMTSiHZSAwoaNYZ3_1E38.roa File: B9oWqJbMTSiHZSAwoaNYZ3_1E38.roa (raw, json) Hash identifier: qAZhSlk4miAsegiqyOAsIwASyLp6gGYzbykYSpoA8vU= Subject key identifier: 07:DA:16:A8:96:CC:4D:28:87:65:20:30:A1:A3:58:67:7F:F5:13:7F Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Certificate serial: 019B7BA5031EE06025D703426D1C4D54B63B Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/B9oWqJbMTSiHZSAwoaNYZ3_1E38.roa Signing time: Thu 01 Jan 2026 22:19:30 +0000 ROA not before: Thu 01 Jan 2026 22:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216314 IP address blocks: 91.200.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:03:1e:e0:60:25:d7:03:42:6d:1c:4d:54:b6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07da16a896cc4d2887652030a1a358677ff5137f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:80:23:a3:c3:54:c0:9e:ae:50:d0:09:76: a3:1f:13:4b:08:c7:54:d8:cf:a5:f0:e2:76:88:da: 60:b5:34:b8:cf:e9:ba:b4:18:d4:3a:d6:d3:0d:25: 75:da:7b:dd:be:77:0b:9b:ec:b1:60:4e:97:28:8b: 9f:bb:08:d1:21:af:ab:be:66:bb:ac:44:0f:ca:22: df:a6:be:ab:ff:fa:51:2b:79:d9:45:bc:79:95:57: 8e:40:52:55:33:99:8e:fd:01:b8:8d:7d:92:1d:bc: 7f:a4:b1:40:cf:3d:12:8d:05:e7:36:75:22:62:47: fc:5f:e6:e2:3c:1d:8a:36:4e:4d:2c:30:3b:07:6d: e2:ec:e5:26:8d:01:c5:a0:7e:32:18:f0:ea:15:7d: 00:17:ea:c0:e3:54:08:db:b9:e2:7f:08:4b:f9:bd: 51:78:27:1c:1c:ec:b3:50:e5:8c:f8:83:a2:aa:38: d7:9c:ab:b7:7c:8a:37:37:b9:d2:5e:6f:14:44:ee: 5f:65:fa:b0:fb:de:80:bf:d5:90:10:5a:23:4c:10: b6:31:9c:80:6b:f8:0d:f4:93:39:a1:a1:d3:a4:5f: 7f:3f:ba:a8:20:00:da:11:d5:02:cf:6b:47:38:19: e2:e5:f1:01:0b:9e:ce:8f:8c:97:37:ef:18:e0:5a: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DA:16:A8:96:CC:4D:28:87:65:20:30:A1:A3:58:67:7F:F5:13:7F X509v3 Authority Key Identifier: keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/B9oWqJbMTSiHZSAwoaNYZ3_1E38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.57.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:d3:32:00:84:25:93:6d:c2:21:40:90:fc:60:09:73:b9:9c: 0e:ef:2c:ec:81:03:7a:f3:79:95:49:e8:ad:6a:cd:79:50:a3: f4:a5:de:4e:81:a2:01:d5:45:98:41:0c:ad:26:7d:c4:94:50: 06:92:d5:86:42:8b:81:1b:a0:d0:c7:19:21:c9:a4:89:a2:30: 09:1c:bc:ac:10:30:c5:31:92:f8:5f:9c:20:b3:7c:24:d8:c4: ad:55:13:9c:40:37:19:76:67:7e:99:35:96:23:55:8c:8f:31: 8c:f0:78:74:31:01:e2:62:3e:89:7f:68:5d:e8:d3:36:3b:4b: 74:d8:e4:69:76:11:98:70:90:d1:e3:e7:d5:bf:86:b6:f0:88: 5b:18:5c:55:45:8e:f6:2e:1d:90:93:24:ab:b2:66:f5:3e:f3: 1a:ef:7f:a2:fc:93:3e:b8:a8:63:f0:7c:aa:32:bc:26:a4:08: b3:46:1a:cb:db:f8:6b:86:a1:1f:d4:0e:70:c1:d0:7b:f0:b3: 18:b2:e6:9a:87:20:4a:69:c6:b9:76:70:c6:81:eb:c1:57:a1: 6b:4c:68:bc:f1:2e:ce:70:08:15:a9:c6:9b:fd:48:2f:ea:cf: 85:d6:74:16:76:fa:09:94:f7:e9:02:68:50:d5:ec:cc:77:17: 27:8d:51:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQMe4GAl1wNCbRxNVLY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy MjI2MjUwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2RhMTZhODk2Y2M0ZDI4ODc2NTIwMzBhMWEzNTg2NzdmZjUxMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WiAI6PDVMCerlDQCXajHxNLCMdU 2M+l8OJ2iNpgtTS4z+m6tBjUOtbTDSV12nvdvncLm+yxYE6XKIufuwjRIa+rvma7 rEQPyiLfpr6r//pRK3nZRbx5lVeOQFJVM5mO/QG4jX2SHbx/pLFAzz0SjQXnNnUi Ykf8X+biPB2KNk5NLDA7B23i7OUmjQHFoH4yGPDqFX0AF+rA41QI27nifwhL+b1R eCccHOyzUOWM+IOiqjjXnKu3fIo3N7nSXm8URO5fZfqw+96Av9WQEFojTBC2MZyA a/gN9JM5oaHTpF9/P7qoIADaEdUCz2tHOBni5fEBC57Oj4yXN+8Y4Fr+iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfaFqiWzE0oh2UgMKGjWGd/9RN/MB8GA1UdIwQY MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt MDhlOGYwY2JiODQwLzEvQjlvV3FKYk1UU2lIWlNBd29hTllaM18xRTM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8g5MA0G CSqGSIb3DQEBCwUAA4IBAQA70zIAhCWTbcIhQJD8YAlzuZwO7yzsgQN683mVSeit as15UKP0pd5OgaIB1UWYQQytJn3ElFAGktWGQouBG6DQxxkhyaSJojAJHLysEDDF MZL4X5wgs3wk2MStVROcQDcZdmd+mTWWI1WMjzGM8Hh0MQHiYj6Jf2hd6NM2O0t0 2ORpdhGYcJDR4+fVv4a28IhbGFxVRY72Lh2QkySrsmb1PvMa73+i/JM+uKhj8Hyq MrwmpAizRhrL2/hrhqEf1A5wwdB78LMYsuaahyBKaca5dnDGgevBV6FrTGi88S7O cAgVqcab/Ugv6s+F1nQWdvoJlPfpAmhQ1ezMdxcnjVE5 -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:05 2026 by rpki-client