This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/bMwuPcwxqY9GWDGFGxnpBignWiw.roa File: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (raw, json) Hash identifier: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E= Subject key identifier: 6C:CC:2E:3D:CC:31:A9:8F:46:58:31:85:1B:19:E9:06:28:27:5A:2C Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66 Certificate serial: 019B7EA56EC175843CB49CAD854E2C012DD2 Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/bMwuPcwxqY9GWDGFGxnpBignWiw.roa Signing time: Fri 02 Jan 2026 12:18:49 +0000 ROA not before: Fri 02 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20910 IP address blocks: 91.194.76.0/23 maxlen: 23 91.228.4.0/22 maxlen: 22 195.28.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6e:c1:75:84:3c:b4:9c:ad:85:4e:2c:01:2d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66 Validity Not Before: Jan 2 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ccc2e3dcc31a98f465831851b19e90628275a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:c8:4f:be:0c:85:bb:60:91:eb:b2:0c:76: 09:66:40:94:7f:62:c6:87:35:b3:13:e9:32:30:ac: 35:5b:95:41:a8:b5:50:9f:c3:36:91:a1:35:a0:12: 3c:e8:0c:59:4f:ce:d2:ee:df:13:1a:cd:70:f8:a4: c2:06:f5:99:e7:86:96:9e:05:3a:0b:46:21:bb:7f: 63:b1:70:1a:5c:81:7b:d0:36:77:e6:9e:ed:10:c1: 98:03:99:32:c2:03:cc:da:8c:b8:84:30:2b:13:94: 68:f6:b8:b6:64:8d:b5:bf:75:e5:dd:e4:53:bf:b5: c3:d2:71:65:55:d4:39:cb:5c:bb:31:cb:ce:ce:aa: 86:7d:ff:a1:7b:b1:f5:f2:9e:21:19:44:aa:c5:e2: 8c:b9:24:03:4f:9c:4f:24:8d:aa:5c:28:21:63:c8: f8:85:72:00:5f:a6:0d:64:11:e5:41:01:98:4a:a5: 16:51:fd:b5:c2:09:ff:fc:e5:1f:4d:e9:00:b8:c5: 2d:b9:a3:c3:be:1f:3b:8e:4e:0c:10:de:0a:22:09: cf:21:7e:37:d9:cb:9f:b0:14:8e:90:6b:85:7c:a3: 6c:76:77:9f:98:a9:f5:f8:90:a9:52:8d:79:f6:56: b9:d9:39:96:e9:03:70:ba:cc:35:27:62:24:e7:c8: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CC:2E:3D:CC:31:A9:8F:46:58:31:85:1B:19:E9:06:28:27:5A:2C X509v3 Authority Key Identifier: keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/bMwuPcwxqY9GWDGFGxnpBignWiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.76.0/23 91.228.4.0/22 195.28.26.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:cc:dc:a7:e4:4b:52:c3:79:89:74:36:78:bd:51:78:a6:2a: b3:25:cb:c9:30:c6:8f:bc:8a:58:75:8f:83:0b:de:05:e4:ce: 80:99:c1:f4:ff:4b:72:f6:19:40:19:73:6e:cd:26:86:af:87: 9e:f0:2a:57:7f:5e:f3:7a:4a:a0:e3:06:be:34:6c:3f:40:eb: 0a:27:35:5a:c0:e3:fa:b2:dd:3b:49:02:bf:01:60:4b:2a:98: e7:97:0b:1f:4d:b7:d9:23:16:38:ca:67:c6:b6:7a:d2:e1:44: e2:e8:eb:5e:c6:ff:1d:0c:50:9f:91:b0:cb:4f:35:6b:55:9d: 23:e3:0f:a3:8d:4b:3f:0e:0d:e1:f0:94:77:72:83:d3:4a:b6: 9e:57:2c:4f:bc:10:75:e6:1b:cd:30:af:f2:b4:d1:db:ae:97: 26:ce:4b:b6:b5:30:65:0b:31:4e:f6:f7:7d:b0:3e:7d:ec:36: 04:e6:a3:d3:33:44:38:de:47:37:e6:f2:49:68:a7:6d:bd:5a: a1:f9:69:7e:0e:5c:80:26:cd:10:73:18:ae:98:79:73:73:b1: 64:f3:d0:2f:36:d5:5c:9a:88:7c:f1:1c:a6:e5:bb:df:22:79: a5:b4:7c:c6:3d:ab:a4:85:8f:2b:8c:93:e1:ce:4b:1f:ed:94: 21:5d:8b:bf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pW7BdYQ8tJythU4sAS3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5 NjdjNjYwHhcNMjYwMTAyMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2NjMmUzZGNjMzFhOThmNDY1ODMxODUxYjE5ZTkwNjI4Mjc1YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydfIT74MhbtgkeuyDHYJZkCUf2LG hzWzE+kyMKw1W5VBqLVQn8M2kaE1oBI86AxZT87S7t8TGs1w+KTCBvWZ54aWngU6 C0Yhu39jsXAaXIF70DZ35p7tEMGYA5kywgPM2oy4hDArE5Ro9ri2ZI21v3Xl3eRT v7XD0nFlVdQ5y1y7McvOzqqGff+he7H18p4hGUSqxeKMuSQDT5xPJI2qXCghY8j4 hXIAX6YNZBHlQQGYSqUWUf21wgn//OUfTekAuMUtuaPDvh87jk4MEN4KIgnPIX43 2cufsBSOkGuFfKNsdnefmKn1+JCpUo159la52TmW6QNwusw1J2Ik58hd5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGzMLj3MMamPRlgxhRsZ6QYoJ1osMB8GA1UdIwQY MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt Zjg3Nzg3YjFkMDNjLzEvYk13dVBjd3hxWTlHV0RHRkd4bnBCaWduV2l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8JMAwQC W+QEAwQBwxwaMA0GCSqGSIb3DQEBCwUAA4IBAQBbzNyn5EtSw3mJdDZ4vVF4piqz JcvJMMaPvIpYdY+DC94F5M6AmcH0/0ty9hlAGXNuzSaGr4ee8CpXf17zekqg4wa+ NGw/QOsKJzVawOP6st07SQK/AWBLKpjnlwsfTbfZIxY4ymfGtnrS4UTi6Otexv8d DFCfkbDLTzVrVZ0j4w+jjUs/Dg3h8JR3coPTSraeVyxPvBB15hvNMK/ytNHbrpcm zku2tTBlCzFO9vd9sD597DYE5qPTM0Q43kc35vJJaKdtvVqh+Wl+DlyAJs0Qcxiu mHlzc7Fk89AvNtVcmoh88Rym5bvfInmltHzGPaukhY8rjJPhzksf7ZQhXYu/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:41 2026 by rpki-client