This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/_BcnufwZCW7iXb3pQbGLXXwf_xo.roa File: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (raw, json) Hash identifier: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI= Subject key identifier: FC:17:27:B9:FC:19:09:6E:E2:5D:BD:E9:41:B1:8B:5D:7C:1F:FF:1A Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17 Certificate serial: 019B7B369D77BB51448476CE2279011C6053 Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/_BcnufwZCW7iXb3pQbGLXXwf_xo.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51091 IP address blocks: 91.216.142.0/24 maxlen: 24 2001:67c:2864::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9d:77:bb:51:44:84:76:ce:22:79:01:1c:60:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc1727b9fc19096ee25dbde941b18b5d7c1fff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:61:13:7f:89:6d:38:ca:8b:04:fd:81:fb: 4d:e2:5b:23:94:c7:26:95:29:6e:48:88:71:d5:bd: cc:33:13:b2:61:81:a4:f4:df:73:da:b4:09:d9:55: 15:3e:2b:61:a0:91:02:4b:e9:36:ab:38:9f:c0:1a: 74:1a:d6:72:e5:72:b0:d4:a3:97:ce:8c:b8:69:52: ea:22:78:15:b1:34:48:5c:ce:d8:22:ed:4a:ce:71: 29:cc:7c:c2:72:bf:a5:81:43:c3:33:c8:91:03:85: d5:4c:22:28:1e:75:16:b8:53:c0:ca:fe:d2:17:52: c9:9a:69:aa:d0:df:6f:3e:1a:8f:99:c2:69:0b:32: 75:69:81:39:de:36:0e:86:f8:56:b0:4a:54:e6:9e: 7d:48:24:3a:db:3d:55:5f:55:b0:08:a6:37:2d:fb: 9e:94:8d:b6:c6:f5:0f:62:b6:d9:0b:10:84:2e:c5: f1:a2:6a:5c:f6:cc:05:e9:45:90:e8:6c:ee:2e:5c: 41:3c:33:f1:af:b0:d8:a1:37:b5:f6:0c:ee:c8:35: 59:14:09:53:db:ba:87:23:f6:22:c9:48:b9:94:c5: 85:62:b4:ec:38:37:51:ee:12:a8:af:a1:53:c1:b6: a0:82:58:47:c3:0f:25:5f:04:2b:c0:85:90:2f:23: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:17:27:B9:FC:19:09:6E:E2:5D:BD:E9:41:B1:8B:5D:7C:1F:FF:1A X509v3 Authority Key Identifier: keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/_BcnufwZCW7iXb3pQbGLXXwf_xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.142.0/24 IPv6: 2001:67c:2864::/48 Signature Algorithm: sha256WithRSAEncryption 63:f9:e7:5f:4c:d1:04:6c:cc:b0:00:94:15:fb:b5:0d:24:95: 9a:b6:45:11:61:ef:1e:ac:fa:86:49:26:b2:fb:32:7c:ed:ce: 57:bb:b6:48:e3:95:15:94:7c:6a:59:88:42:e9:1e:c5:1e:e4: 03:05:c5:6b:ca:db:4e:46:16:c4:82:4b:1a:94:4f:2d:86:fa: 17:4e:ba:91:74:f1:77:55:bf:f5:cb:01:c2:1d:cb:dc:d3:41: 5c:9d:40:9e:78:d7:1c:75:2c:81:c4:b7:ab:f9:15:60:34:a0: ad:5a:a2:23:75:da:7d:c2:5b:e8:db:d2:9b:f7:52:48:14:82: ff:e6:5a:d2:1b:70:43:ef:e2:6e:d5:65:3a:d8:cd:86:6d:bb: 66:91:f3:9f:b6:62:5b:2d:c7:58:b7:15:dd:ff:df:49:f5:0e: cd:02:a5:e1:b8:34:02:3c:8b:3f:f5:21:dc:1a:20:0c:77:3e: d7:f9:1d:a5:30:09:4b:7c:0d:f2:6d:1f:32:31:df:41:45:95: e4:25:a8:86:34:1c:24:9f:52:41:97:03:83:0a:48:21:5d:1b: 5d:63:20:33:a4:31:85:ff:8b:57:9c:b6:81:59:f5:66:dc:66: 32:ea:ad:8b:41:29:fc:99:06:41:a5:d2:d6:11:63:e2:24:c1: 90:c0:64:a0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Np13u1FEhHbOInkBHGBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4 NDlkMTcwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzE3MjdiOWZjMTkwOTZlZTI1ZGJkZTk0MWIxOGI1ZDdjMWZmZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmdhE3+JbTjKiwT9gftN4lsjlMcm lSluSIhx1b3MMxOyYYGk9N9z2rQJ2VUVPithoJECS+k2qzifwBp0GtZy5XKw1KOX zoy4aVLqIngVsTRIXM7YIu1KznEpzHzCcr+lgUPDM8iRA4XVTCIoHnUWuFPAyv7S F1LJmmmq0N9vPhqPmcJpCzJ1aYE53jYOhvhWsEpU5p59SCQ62z1VX1WwCKY3Lfue lI22xvUPYrbZCxCELsXxompc9swF6UWQ6GzuLlxBPDPxr7DYoTe19gzuyDVZFAlT 27qHI/YiyUi5lMWFYrTsODdR7hKor6FTwbagglhHww8lXwQrwIWQLyPyLwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPwXJ7n8GQlu4l296UGxi118H/8aMB8GA1UdIwQY MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt OWRkOTk3ZWVmNGVmLzEvX0JjbnVmd1pDVzdpWGIzcFFiR0xYWHdmX3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9iOMA8E AgACMAkDBwAgAQZ8KGQwDQYJKoZIhvcNAQELBQADggEBAGP5519M0QRszLAAlBX7 tQ0klZq2RRFh7x6s+oZJJrL7Mnztzle7tkjjlRWUfGpZiELpHsUe5AMFxWvK205G FsSCSxqUTy2G+hdOupF08XdVv/XLAcIdy9zTQVydQJ541xx1LIHEt6v5FWA0oK1a oiN12n3CW+jb0pv3UkgUgv/mWtIbcEPv4m7VZTrYzYZtu2aR85+2Ylstx1i3Fd3/ 30n1Ds0CpeG4NAI8iz/1IdwaIAx3Ptf5HaUwCUt8DfJtHzIx30FFleQlqIY0HCSf UkGXA4MKSCFdG11jIDOkMYX/i1ectoFZ9WbcZjLqrYtBKfyZBkGl0tYRY+IkwZDA ZKA= -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:04 2026 by rpki-client