This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/gBeSyX3OIacsVNGP8Mb0jV9GelU.roa File: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (raw, json) Hash identifier: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8= Subject key identifier: 80:17:92:C9:7D:CE:21:A7:2C:54:D1:8F:F0:C6:F4:8D:5F:46:7A:55 Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca Certificate serial: 019B7F15EC7E113954230D6FB434F1A87A18 Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/gBeSyX3OIacsVNGP8Mb0jV9GelU.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44567 IP address blocks: 91.240.214.0/23 maxlen: 23 93.92.152.0/21 maxlen: 21 2a01:9c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:7e:11:39:54:23:0d:6f:b4:34:f1:a8:7a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=801792c97dce21a72c54d18ff0c6f48d5f467a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:29:71:a3:89:b1:b1:f2:93:51:e4:c3:7f: c2:e1:46:39:15:fd:33:60:6d:57:26:7a:9f:9a:a9: 3c:f4:47:65:14:51:95:ec:69:cc:9a:5e:c0:39:ef: e9:c2:ec:0b:07:f9:9d:ce:4d:7a:cb:71:92:ac:35: 11:62:b8:dd:a7:02:47:d2:c8:80:5f:b1:7a:aa:6a: 37:b2:4b:ce:ce:19:bf:8b:41:e4:5f:d1:75:20:2c: d0:fc:11:39:74:79:42:1f:45:d5:c5:a1:eb:6b:13: c4:97:f8:db:5d:cf:9e:dd:6f:3f:bd:60:33:1b:99: 28:f1:ed:c8:a1:42:9a:31:80:ca:0d:e2:3d:d5:c1: 04:90:ab:6f:85:aa:eb:c7:ed:c9:a4:1a:49:df:7c: 2d:5f:38:e6:1f:b4:ae:e1:b8:80:ef:6d:20:1d:3d: e0:cb:ff:7d:2a:b1:2c:23:54:ec:35:6a:8f:5e:77: 01:37:f6:eb:39:b0:05:42:22:19:25:f8:40:56:18: 31:2b:93:a0:e0:1e:c7:bf:0d:9a:3e:63:f1:9d:ff: 1b:47:51:98:0c:3d:56:3b:9c:6d:07:cf:52:7d:5a: d5:33:25:a0:7d:0b:56:2f:eb:f3:43:ea:64:d4:17: b6:1a:f4:82:83:e2:39:f9:a5:e6:31:ed:4f:35:57: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:17:92:C9:7D:CE:21:A7:2C:54:D1:8F:F0:C6:F4:8D:5F:46:7A:55 X509v3 Authority Key Identifier: keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/gBeSyX3OIacsVNGP8Mb0jV9GelU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.214.0/23 93.92.152.0/21 IPv6: 2a01:9c00::/32 Signature Algorithm: sha256WithRSAEncryption 29:7f:35:99:05:0e:47:69:c6:0f:70:c3:ea:44:a4:25:71:bf: 8a:a6:33:30:ea:63:89:ac:3d:81:76:6b:5d:e0:6c:b4:b7:bd: df:46:15:db:11:c0:73:33:72:da:2a:a3:9c:06:1a:76:dd:4f: 6b:be:d0:8c:4f:ca:bf:8f:cf:74:e4:db:16:99:14:62:2d:3b: ec:0b:cc:58:98:83:0f:0e:7c:f0:bd:af:c1:25:e4:7b:c0:11: 80:e7:32:ad:fa:59:e5:5f:74:07:49:d9:5b:3b:51:ab:2a:fd: 2c:4c:8d:d0:5a:f1:ed:2c:f9:35:0a:50:3d:56:21:bf:f8:3e: d0:85:96:83:03:cd:70:f8:b9:9e:8f:80:c7:07:82:6d:89:29: ce:f1:89:5c:3c:4e:ce:f5:1a:23:34:b6:d9:68:03:15:60:6f: 21:1f:92:79:49:80:d2:13:3a:60:ae:e0:a5:0f:78:53:e1:d1: 7b:66:15:1e:63:67:d7:cc:7d:e7:62:4b:6a:8f:6c:43:6b:5f: 62:0d:dc:18:84:5d:ea:0a:b0:1b:0e:30:c0:7d:e3:8a:d5:c7: 88:24:71:02:0c:b7:59:b0:5a:e3:fe:a8:2c:a7:b0:e8:89:51: ef:e1:97:62:cd:bd:07:e4:3a:2e:45:4c:fc:a0:91:c0:62:33: 75:89:a0:0e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/Fex+ETlUIw1vtDTxqHoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm NDUwY2EwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDE3OTJjOTdkY2UyMWE3MmM1NGQxOGZmMGM2ZjQ4ZDVmNDY3YTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZUpcaOJsbHyk1Hkw3/C4UY5Ff0z YG1XJnqfmqk89EdlFFGV7GnMml7AOe/pwuwLB/mdzk16y3GSrDURYrjdpwJH0siA X7F6qmo3skvOzhm/i0HkX9F1ICzQ/BE5dHlCH0XVxaHraxPEl/jbXc+e3W8/vWAz G5ko8e3IoUKaMYDKDeI91cEEkKtvharrx+3JpBpJ33wtXzjmH7Su4biA720gHT3g y/99KrEsI1TsNWqPXncBN/brObAFQiIZJfhAVhgxK5Og4B7Hvw2aPmPxnf8bR1GY DD1WO5xtB89SfVrVMyWgfQtWL+vzQ+pk1Be2GvSCg+I5+aXmMe1PNVcrcQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIAXksl9ziGnLFTRj/DG9I1fRnpVMB8GA1UdIwQY MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt ZWIxZjg3MTVlZWMwLzEvZ0JlU3lYM09JYWNzVk5HUDhNYjBqVjlHZWxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW/DWAwQD XVyYMA0EAgACMAcDBQAqAZwAMA0GCSqGSIb3DQEBCwUAA4IBAQApfzWZBQ5HacYP cMPqRKQlcb+KpjMw6mOJrD2Bdmtd4Gy0t73fRhXbEcBzM3LaKqOcBhp23U9rvtCM T8q/j8905NsWmRRiLTvsC8xYmIMPDnzwva/BJeR7wBGA5zKt+lnlX3QHSdlbO1Gr Kv0sTI3QWvHtLPk1ClA9ViG/+D7QhZaDA81w+Lmej4DHB4JtiSnO8YlcPE7O9Roj NLbZaAMVYG8hH5J5SYDSEzpgruClD3hT4dF7ZhUeY2fXzH3nYktqj2xDa19iDdwY hF3qCrAbDjDAfeOK1ceIJHECDLdZsFrj/qgsp7DoiVHv4Zdizb0H5DouRUz8oJHA YjN1iaAO -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:04 2026 by rpki-client