This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1bCAUkvNoYD0zomW0iurtF9te8Q.roa File: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (raw, json) Hash identifier: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4= Subject key identifier: D5:B0:80:52:4B:CD:A1:80:F4:CE:89:96:D2:2B:AB:B4:5F:6D:7B:C4 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA3241BE5CFC55D78DF4D2B904E0845 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1bCAUkvNoYD0zomW0iurtF9te8Q.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198981 IP address blocks: 77.91.66.0/24 maxlen: 24 91.209.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:24:1b:e5:cf:c5:5d:78:df:4d:2b:90:4e:08:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5b080524bcda180f4ce8996d22babb45f6d7bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:11:c5:7a:ea:3e:44:27:8c:16:f9:e5:3c: 22:fb:cf:3d:91:7c:f7:c8:72:b6:86:86:62:a4:75: df:7e:f3:56:fc:8c:bd:1e:9e:8f:60:41:56:ad:09: ea:24:f7:5c:9b:a1:d0:8b:27:f1:33:cf:1e:d5:8a: 23:f7:a3:be:7a:d2:25:71:02:87:3b:40:2e:ff:d6: eb:5e:d8:a0:7e:11:ab:4c:ce:a2:d1:bb:60:9e:54: 61:d1:0a:22:99:60:9b:8e:0e:d3:f0:3a:ca:f3:e9: 0e:80:ca:ec:9c:59:88:73:e7:7b:02:d5:e7:b0:9b: 41:e5:a9:5f:21:e3:f1:d4:a6:a7:36:5d:0e:13:96: 04:f3:91:13:54:50:34:33:f4:d1:39:e4:02:18:85: 78:e4:b1:47:20:23:dd:6e:58:1e:ed:79:bc:7b:46: b8:c0:81:48:60:be:7f:aa:af:c5:65:8f:2f:2e:86: c0:c1:2b:00:bd:75:22:85:7b:08:63:56:a9:12:03: fb:e8:71:64:dd:f0:c2:3e:b0:c7:a3:92:96:6b:14: a9:25:4b:5f:19:13:b5:33:45:50:ce:f7:67:b4:49: b7:fe:e7:cb:ef:e1:2d:5b:0a:09:24:da:3b:be:50: 92:fd:8f:b9:61:5b:29:17:59:61:80:58:fd:85:5b: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:80:52:4B:CD:A1:80:F4:CE:89:96:D2:2B:AB:B4:5F:6D:7B:C4 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1bCAUkvNoYD0zomW0iurtF9te8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.66.0/24 91.209.135.0/24 Signature Algorithm: sha256WithRSAEncryption 21:23:7f:6c:68:95:66:dc:e0:8a:f0:df:4d:db:24:b9:9b:11: ac:bd:8c:d3:79:5c:37:39:bd:50:91:74:b0:0d:b5:66:16:75: 15:ec:05:a1:38:37:3b:df:17:36:f9:15:a5:bd:67:b7:17:fd: 57:8c:cc:49:2a:46:56:3f:bc:a4:26:e5:2d:e5:d7:3a:6a:53: 26:e7:a0:26:c5:8b:00:d6:1f:b1:75:6b:0f:d4:49:39:e8:8b: 87:35:c5:d5:43:50:ed:79:a6:ab:1b:ab:56:35:cc:0b:34:a9: 77:af:e1:74:a9:db:5e:26:b9:c6:95:db:ac:d3:3f:37:f7:ad: a7:18:26:df:ee:a2:0c:6b:34:79:8a:85:a4:90:11:f9:b2:60: 4e:92:0a:0b:d6:99:30:f1:c3:1a:94:03:af:e4:e8:82:34:a0: 0b:b1:39:32:93:96:10:07:22:6f:aa:03:a2:8f:75:de:88:00: 82:eb:5d:84:23:75:a3:90:90:fd:80:c7:d5:bf:20:b9:44:50: 64:bd:38:14:4f:53:d4:b7:ef:95:64:59:45:2b:da:cd:d7:c6: 35:c1:49:cc:bc:98:b4:19:82:93:21:76:e0:ec:ed:cc:76:40: a6:09:45:ae:98:bf:7a:98:e9:f3:5d:c0:71:49:e5:3a:29:49: f7:5d:9a:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oyQb5c/FXXjfTSuQTghFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWIwODA1MjRiY2RhMTgwZjRjZTg5OTZkMjJiYWJiNDVmNmQ3YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5cRxXrqPkQnjBb55Twi+889kXz3 yHK2hoZipHXffvNW/Iy9Hp6PYEFWrQnqJPdcm6HQiyfxM88e1Yoj96O+etIlcQKH O0Au/9brXtigfhGrTM6i0btgnlRh0QoimWCbjg7T8DrK8+kOgMrsnFmIc+d7AtXn sJtB5alfIePx1KanNl0OE5YE85ETVFA0M/TROeQCGIV45LFHICPdblge7Xm8e0a4 wIFIYL5/qq/FZY8vLobAwSsAvXUihXsIY1apEgP76HFk3fDCPrDHo5KWaxSpJUtf GRO1M0VQzvdntEm3/ufL7+EtWwoJJNo7vlCS/Y+5YVspF1lhgFj9hVtPiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNWwgFJLzaGA9M6JltIrq7RfbXvEMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvMWJDQVVrdk5vWUQwem9tVzBpdXJ0Rjl0ZThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVtCAwQA W9GHMA0GCSqGSIb3DQEBCwUAA4IBAQAhI39saJVm3OCK8N9N2yS5mxGsvYzTeVw3 Ob1QkXSwDbVmFnUV7AWhODc73xc2+RWlvWe3F/1XjMxJKkZWP7ykJuUt5dc6alMm 56AmxYsA1h+xdWsP1Ek56IuHNcXVQ1DteaarG6tWNcwLNKl3r+F0qdteJrnGldus 0z83962nGCbf7qIMazR5ioWkkBH5smBOkgoL1pkw8cMalAOv5OiCNKALsTkyk5YQ ByJvqgOij3XeiACC612EI3WjkJD9gMfVvyC5RFBkvTgUT1PUt++VZFlFK9rN18Y1 wUnMvJi0GYKTIXbg7O3MdkCmCUWumL96mOnzXcBxSeU6KUn3XZrI -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:57 2026 by rpki-client