This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/RbJbPNiBU0kAmqUheDo0szIBjek.roa File: RbJbPNiBU0kAmqUheDo0szIBjek.roa (raw, json) Hash identifier: CTVJkxKyBFMb7b5JJrpF23blu0aI0z8ZUdPB6VOt7qQ= Subject key identifier: 45:B2:5B:3C:D8:81:53:49:00:9A:A5:21:78:3A:34:B3:32:01:8D:E9 Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa Certificate serial: 019B7EA47CBC76862E9C7CCED81117EBE349 Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/RbJbPNiBU0kAmqUheDo0szIBjek.roa Signing time: Fri 02 Jan 2026 12:17:47 +0000 ROA not before: Fri 02 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51790 IP address blocks: 91.229.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:7c:bc:76:86:2e:9c:7c:ce:d8:11:17:eb:e3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa Validity Not Before: Jan 2 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b25b3cd8815349009aa521783a34b332018de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:9b:b3:b6:2c:b3:60:2f:1c:65:c3:e5:a8: b4:e3:9f:b7:3e:7d:28:b8:ec:05:43:85:58:50:bc: ac:80:85:92:37:06:35:51:7e:a3:1a:3c:48:12:6c: 2e:b2:e4:4e:47:23:0a:ec:8c:07:7b:66:11:56:60: 08:50:7a:ba:59:f1:ee:da:cf:f7:b2:0d:6a:e5:9e: ac:f3:a3:8b:df:ff:9f:ce:e8:69:8c:59:8a:d8:f7: 0a:2b:d7:2f:be:1b:33:35:d6:23:90:06:c4:5b:f8: f8:6f:2a:59:5d:50:d4:59:a9:28:46:f6:22:d2:94: 09:55:d4:d2:42:74:a3:50:7d:68:3d:ca:fd:b0:66: 10:14:49:d3:61:30:4b:29:2d:c0:ff:e8:83:36:13: 26:75:1d:ec:54:7b:7f:a9:dd:49:13:a7:60:62:be: af:c6:af:99:8e:93:d0:a7:7c:e0:af:ac:e9:3c:e9: 1d:b4:0c:a9:32:5b:7f:f5:09:ca:0d:b1:b0:0e:59: 59:40:6b:57:44:2f:e5:e4:89:c7:8c:f6:8e:b1:ae: 08:10:a7:b3:5e:6e:9a:0d:bc:5b:e8:d5:c4:a7:35: ed:31:44:dd:f0:67:2f:64:1c:39:de:a6:69:da:42: ab:ac:11:f0:18:29:ea:32:bd:65:c5:06:7c:b0:71: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B2:5B:3C:D8:81:53:49:00:9A:A5:21:78:3A:34:B3:32:01:8D:E9 X509v3 Authority Key Identifier: keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/RbJbPNiBU0kAmqUheDo0szIBjek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.72.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:45:20:9e:1c:01:92:21:32:cb:89:48:54:7a:69:47:81:4d: 24:53:e3:15:61:11:a0:7d:67:bb:ff:d1:ae:83:97:ec:a5:d7: 9d:c7:42:72:c7:3c:a8:31:76:26:34:89:a0:a7:88:b6:47:7f: 44:c3:2a:04:a5:1d:86:b5:6c:1c:72:c7:9a:7e:b8:83:ef:de: 00:1e:dc:1f:5d:04:8e:97:40:3a:9a:ec:2d:21:b6:9b:11:a4: f2:5e:14:11:83:e2:7e:c3:44:5d:62:b6:48:06:d6:7b:dc:4a: 96:81:de:96:96:b9:08:b4:a0:0c:65:c0:e4:df:8d:50:16:df: bf:d3:ac:bb:47:05:4a:a7:e9:0c:f1:35:2f:0d:a4:62:b0:74: 94:cb:d8:67:ea:8b:2b:6c:b8:18:19:f4:90:49:a9:f2:38:87: 8d:b4:19:04:62:b5:9e:04:b7:15:dd:91:d9:41:e1:62:12:e7: 9a:ad:c8:c2:00:07:23:16:73:e3:5a:58:15:b7:bb:8c:8a:1f: 36:18:43:82:b0:c5:64:de:3d:d0:14:c2:af:95:8f:07:ef:ba: b3:fa:d0:ae:ac:8c:e1:07:9e:4b:f9:da:69:e8:68:a4:37:19: 4e:3a:f0:4b:8b:6b:33:d8:72:b6:e4:96:50:d2:98:58:70:e7: 4e:ec:87:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pHy8doYunHzO2BEX6+NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTBhMDc2Y2U0YThjZTZmYjY5ZjFmZGE0YTE5NDYxNGE5 NDFhZmEwHhcNMjYwMTAyMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWIyNWIzY2Q4ODE1MzQ5MDA5YWE1MjE3ODNhMzRiMzMyMDE4ZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrqbs7Yss2AvHGXD5ai045+3Pn0o uOwFQ4VYULysgIWSNwY1UX6jGjxIEmwusuRORyMK7IwHe2YRVmAIUHq6WfHu2s/3 sg1q5Z6s86OL3/+fzuhpjFmK2PcKK9cvvhszNdYjkAbEW/j4bypZXVDUWakoRvYi 0pQJVdTSQnSjUH1oPcr9sGYQFEnTYTBLKS3A/+iDNhMmdR3sVHt/qd1JE6dgYr6v xq+ZjpPQp3zgr6zpPOkdtAypMlt/9QnKDbGwDllZQGtXRC/l5InHjPaOsa4IEKez Xm6aDbxb6NXEpzXtMUTd8GcvZBw53qZp2kKrrBHwGCnqMr1lxQZ8sHHX8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEWyWzzYgVNJAJqlIXg6NLMyAY3pMB8GA1UdIwQY MBaAFNNQoHbOSozm+2nx/aShlGFKlBr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUt ZDUyMzI1ZGU2YjA4LzEvUmJKYlBOaUJVMGtBbXFVaGVEbzBzeklCamVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zY2FjNmItMmMyYS00YjY2LWFkZWUtZDUyMzI1ZGU2YjA4 LzEvMDFDZ2RzNUtqT2I3YWZIOXBLR1VZVXFVR3ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+VIMA0G CSqGSIb3DQEBCwUAA4IBAQBPRSCeHAGSITLLiUhUemlHgU0kU+MVYRGgfWe7/9Gu g5fspdedx0JyxzyoMXYmNImgp4i2R39EwyoEpR2GtWwccseafriD794AHtwfXQSO l0A6muwtIbabEaTyXhQRg+J+w0RdYrZIBtZ73EqWgd6WlrkItKAMZcDk341QFt+/ 06y7RwVKp+kM8TUvDaRisHSUy9hn6osrbLgYGfSQSanyOIeNtBkEYrWeBLcV3ZHZ QeFiEuearcjCAAcjFnPjWlgVt7uMih82GEOCsMVk3j3QFMKvlY8H77qz+tCurIzh B55L+dpp6GikNxlOOvBLi2sz2HK25JZQ0phYcOdO7Ieo -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:11 2026 by rpki-client