This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/rrV62ijQPMJX14hvzKMZztvUerc.roa File: rrV62ijQPMJX14hvzKMZztvUerc.roa (raw, json) Hash identifier: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU= Subject key identifier: AE:B5:7A:DA:28:D0:3C:C2:57:D7:88:6F:CC:A3:19:CE:DB:D4:7A:B7 Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Certificate serial: 019B7AC9143C108BA799C5CE5CCD0AC53703 Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/rrV62ijQPMJX14hvzKMZztvUerc.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 91.206.11.0/24 maxlen: 24 2a10:a1c0::/32 maxlen: 32 2a10:a1c0::/48 maxlen: 48 2a10:a1c0:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:14:3c:10:8b:a7:99:c5:ce:5c:cd:0a:c5:37:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeb57ada28d03cc257d7886fcca319cedbd47ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:e8:46:fe:e9:c8:1a:f5:45:a5:24:a1:3c: 7a:be:81:fa:17:86:c2:d1:1b:92:51:a8:92:ff:a5: ba:04:53:13:12:41:5b:f7:42:db:51:df:0c:b5:1b: 77:a9:75:34:bf:de:f5:00:82:70:1a:f0:6e:02:c6: f1:d9:f0:a6:9c:4d:ab:b2:53:e6:c6:0b:0c:5d:03: 94:9e:97:ec:62:4c:5d:fc:e6:fa:bb:ab:71:10:b2: fc:de:88:10:00:d9:72:9f:1f:77:4e:0a:9e:e8:73: d4:9c:d7:00:a4:33:ae:49:aa:6b:ec:51:75:97:de: ed:68:e9:1a:e5:e7:d3:4f:6a:84:b1:a9:f1:fe:ac: 8d:41:80:0b:97:58:b2:57:7d:47:70:7d:35:b4:b4: fc:59:39:30:76:9e:6b:8d:3b:bf:06:b3:6f:dd:73: bd:6f:bc:02:3d:2d:92:41:8d:d6:9e:7e:f9:66:57: a6:fc:39:82:e1:71:b7:19:39:c1:3a:5c:4c:8f:b1: 88:e8:c0:c1:76:77:ba:7e:fe:36:f3:8f:c9:0b:30: 72:17:b1:ed:18:f0:73:1d:9b:59:af:d5:90:bc:06: a9:b6:0b:3d:21:b5:ae:ea:9a:17:fd:d7:46:a1:3d: 06:78:91:a7:09:1c:59:b9:d6:6e:cc:a3:73:4f:14: b5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B5:7A:DA:28:D0:3C:C2:57:D7:88:6F:CC:A3:19:CE:DB:D4:7A:B7 X509v3 Authority Key Identifier: keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/rrV62ijQPMJX14hvzKMZztvUerc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.11.0/24 IPv6: 2a10:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 05:07:a8:e7:f1:0b:4d:d7:9b:30:14:6f:47:c6:f9:c8:a9:8a: c0:42:30:2b:fd:ae:56:8a:24:a5:cf:5b:22:c7:1f:ba:bc:e4: a6:4f:16:71:a7:1e:01:1d:1a:dc:a4:bb:b8:ea:bd:97:1f:d4: 43:3d:1e:43:0f:4c:56:f1:03:2c:91:52:ba:ab:19:a8:53:61: 78:bf:91:e1:e1:3b:8a:0d:8a:5e:79:45:eb:59:0b:39:81:5a: 35:55:0d:02:63:f3:ab:b2:0b:27:91:79:8a:05:d8:dc:e6:a0: 3f:9c:b3:78:c4:ce:e0:b1:71:19:d9:1b:b8:fd:d6:f8:90:9f: 51:90:17:78:b6:bf:c0:43:ca:b3:aa:f0:71:d6:67:58:ab:3d: de:65:c0:99:a7:b1:9c:50:80:07:9b:64:b2:c3:f0:18:3c:9a: d4:8e:66:a8:d1:c2:9c:9d:cb:b7:6c:3c:2b:7e:e6:7d:b8:17: 40:2d:8b:b2:eb:6b:7e:8f:be:68:ba:0c:3c:18:d2:4d:01:7c: 46:85:39:c0:e7:9a:d7:cd:9b:53:86:ad:6c:a4:3c:5b:57:e5: 68:56:35:bb:12:c1:07:4e:48:d8:ce:6e:08:1e:12:35:22:bf: 71:df:04:9d:5e:08:ed:98:25:0c:c4:a9:cf:29:62:0a:7d:26: 57:7d:77:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yRQ8EIunmcXOXM0KxTcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm MDk1MTYwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWI1N2FkYTI4ZDAzY2MyNTdkNzg4NmZjY2EzMTljZWRiZDQ3YWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfvoRv7pyBr1RaUkoTx6voH6F4bC 0RuSUaiS/6W6BFMTEkFb90LbUd8MtRt3qXU0v971AIJwGvBuAsbx2fCmnE2rslPm xgsMXQOUnpfsYkxd/Ob6u6txELL83ogQANlynx93Tgqe6HPUnNcApDOuSapr7FF1 l97taOka5efTT2qEsanx/qyNQYALl1iyV31HcH01tLT8WTkwdp5rjTu/BrNv3XO9 b7wCPS2SQY3Wnn75Zlem/DmC4XG3GTnBOlxMj7GI6MDBdne6fv4284/JCzByF7Ht GPBzHZtZr9WQvAaptgs9IbWu6poX/ddGoT0GeJGnCRxZudZuzKNzTxS1sQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK61etoo0DzCV9eIb8yjGc7b1Hq3MB8GA1UdIwQY MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt NWFlNTNhMDZlYWE3LzEvcnJWNjJpalFQTUpYMTRodnpLTVp6dHZVZXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3 LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW84LMA0E AgACMAcDBQAqEKHAMA0GCSqGSIb3DQEBCwUAA4IBAQAFB6jn8QtN15swFG9HxvnI qYrAQjAr/a5WiiSlz1sixx+6vOSmTxZxpx4BHRrcpLu46r2XH9RDPR5DD0xW8QMs kVK6qxmoU2F4v5Hh4TuKDYpeeUXrWQs5gVo1VQ0CY/OrsgsnkXmKBdjc5qA/nLN4 xM7gsXEZ2Ru4/db4kJ9RkBd4tr/AQ8qzqvBx1mdYqz3eZcCZp7GcUIAHm2Syw/AY PJrUjmao0cKcncu3bDwrfuZ9uBdALYuy62t+j75ougw8GNJNAXxGhTnA55rXzZtT hq1spDxbV+VoVjW7EsEHTkjYzm4IHhI1Ir9x3wSdXgjtmCUMxKnPKWIKfSZXfXcb -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:28 2026 by rpki-client