This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/vSLbgxeH91r7M2JRpNUpQwdC5-I.roa File: vSLbgxeH91r7M2JRpNUpQwdC5-I.roa (raw, json) Hash identifier: AdNOFRCrmnc/Q9ZTTzxNg6TKfbh1MeWTSjQqXPic1XU= Subject key identifier: BD:22:DB:83:17:87:F7:5A:FB:33:62:51:A4:D5:29:43:07:42:E7:E2 Certificate issuer: /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c Certificate serial: 019B7C7FF128EBB800A1D31B6D789B29A19C Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/vSLbgxeH91r7M2JRpNUpQwdC5-I.roa Signing time: Fri 02 Jan 2026 02:18:38 +0000 ROA not before: Fri 02 Jan 2026 02:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15461 IP address blocks: 91.219.220.0/22 maxlen: 24 193.93.12.0/22 maxlen: 22 2001:67c:f84::/48 maxlen: 48 2a0b:afc0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f1:28:eb:b8:00:a1:d3:1b:6d:78:9b:29:a1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd22db831787f75afb336251a4d529430742e7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:3b:55:dc:ea:ed:e2:30:04:72:51:07:bb: 68:02:c6:c7:bd:26:38:42:e1:f6:7f:4a:af:93:8e: de:73:4c:67:7e:f5:33:8e:0e:0d:5f:dd:ab:5b:41: 68:43:d0:c9:6e:e9:c8:60:0f:09:11:62:3e:58:ce: be:91:bc:71:40:4d:10:ae:ec:d3:de:f0:e8:99:da: 7f:53:f7:45:c9:d0:e3:39:8d:38:11:45:de:ac:7d: 40:07:20:93:8d:b8:05:39:c3:56:60:84:8f:12:fc: 78:82:72:9b:f2:a2:0b:d4:5f:7c:1e:20:01:57:0c: fc:71:29:b3:42:b9:27:bc:c4:20:fa:82:96:95:a1: ed:4f:2e:8c:fd:7b:a3:66:c6:ec:fa:f2:79:86:4c: 9f:66:c4:44:a9:d6:7f:c0:b0:9b:d7:dc:16:94:f7: 58:21:6a:34:4f:40:3c:36:c3:07:2a:b2:60:8b:0f: 35:53:7a:d9:4a:f9:7b:de:d3:70:18:cf:c5:2b:82: 5d:ac:d3:28:a1:63:25:26:63:c7:c3:ef:28:fb:b0: 18:54:7b:a7:3c:6d:74:24:70:0e:05:04:98:3b:27: 0a:db:2e:93:f8:6d:89:25:a9:c1:f6:47:3a:7a:ac: fe:43:18:32:f4:0a:da:97:94:2c:b0:07:79:a3:81: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:DB:83:17:87:F7:5A:FB:33:62:51:A4:D5:29:43:07:42:E7:E2 X509v3 Authority Key Identifier: keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/vSLbgxeH91r7M2JRpNUpQwdC5-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.220.0/22 193.93.12.0/22 IPv6: 2001:67c:f84::/48 2a0b:afc0::/36 Signature Algorithm: sha256WithRSAEncryption 8a:34:91:ae:f0:23:cf:9a:e9:f3:01:73:30:a4:05:dc:40:8a: 89:98:fe:0b:c5:f7:d2:f3:fe:6c:02:80:24:11:8d:1a:db:1d: 79:0b:b8:e8:0d:32:67:87:e8:74:08:f0:f0:fa:40:5c:78:c6: 76:0b:3a:07:0f:59:12:35:24:5d:e7:2b:32:11:1b:fa:75:c0: 97:b1:e3:49:54:ea:98:ee:77:ae:3a:fb:6c:2c:84:88:5d:c5: de:cf:f9:88:fe:7a:8b:7e:c0:e1:ad:31:f6:6f:25:31:9e:9c: 11:88:c0:96:d5:f6:43:08:3a:f4:57:80:56:c8:90:0f:aa:a1: c1:ba:ac:99:5f:d4:3b:8b:be:19:05:f8:d8:ba:5f:fc:79:d8: d4:8e:d5:ff:61:06:3e:6a:05:88:43:52:c8:38:c4:5d:78:15: d1:13:c8:16:cb:86:c2:a1:07:b6:56:4f:1f:8b:37:ad:0e:16: 47:93:28:a6:14:07:17:d5:ad:39:6f:fd:b5:41:30:31:60:df: eb:f2:fd:a5:9d:ca:2b:96:5a:aa:38:ab:1e:5b:cb:fb:d8:9c: 19:e8:ae:d1:bc:6c:26:8b:26:59:8c:0d:91:14:33:67:a3:1e: 8c:23:66:ea:9f:86:6b:89:82:ab:a4:86:9f:55:0f:bf:20:1a: 73:e9:df:a3 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt8f/Eo67gAodMbbXibKaGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmOWY3OGMyY2JiYzVmYTA4YjliODlmMGExMWQyYjBi YTQ3M2MwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDIyZGI4MzE3ODdmNzVhZmIzMzYyNTFhNGQ1Mjk0MzA3NDJlN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGI7Vdzq7eIwBHJRB7toAsbHvSY4 QuH2f0qvk47ec0xnfvUzjg4NX92rW0FoQ9DJbunIYA8JEWI+WM6+kbxxQE0QruzT 3vDomdp/U/dFydDjOY04EUXerH1AByCTjbgFOcNWYISPEvx4gnKb8qIL1F98HiAB Vwz8cSmzQrknvMQg+oKWlaHtTy6M/XujZsbs+vJ5hkyfZsREqdZ/wLCb19wWlPdY IWo0T0A8NsMHKrJgiw81U3rZSvl73tNwGM/FK4JdrNMooWMlJmPHw+8o+7AYVHun PG10JHAOBQSYOycK2y6T+G2JJanB9kc6eqz+Qxgy9Aral5QssAd5o4Hz2QIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFL0i24MXh/da+zNiUaTVKUMHQufiMB8GA1UdIwQY MBaAFAXp+feMLLvF+gi5uJ8KEdKwukc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYt YTZhYjk3YTBmNDQ1LzEvdlNMYmd4ZUg5MXI3TTJKUnBOVXBRd2RDNS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83NjUzOGMtZGY1YS00YTZhLTliODYtYTZhYjk3YTBmNDQ1 LzEvQmVuNTk0d3N1OFg2Q0xtNG53b1IwckM2Unp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQCW9vcAwQC wV0MMBcEAgACMBEDBwAgAQZ8D4QDBgQqC6/AADANBgkqhkiG9w0BAQsFAAOCAQEA ijSRrvAjz5rp8wFzMKQF3ECKiZj+C8X30vP+bAKAJBGNGtsdeQu46A0yZ4fodAjw 8PpAXHjGdgs6Bw9ZEjUkXecrMhEb+nXAl7HjSVTqmO53rjr7bCyEiF3F3s/5iP56 i37A4a0x9m8lMZ6cEYjAltX2Qwg69FeAVsiQD6qhwbqsmV/UO4u+GQX42Lpf/HnY 1I7V/2EGPmoFiENSyDjEXXgV0RPIFsuGwqEHtlZPH4s3rQ4WR5MophQHF9WtOW/9 tUEwMWDf6/L9pZ3KK5ZaqjirHlvL+9icGeiu0bxsJosmWYwNkRQzZ6MejCNm6p+G a4mCq6SGn1UPvyAac+nfow== -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:34 2026 by rpki-client