This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/R91CcPNkUtu6XE-ZUwryAs6c8dA.roa File: R91CcPNkUtu6XE-ZUwryAs6c8dA.roa (raw, json) Hash identifier: lK0bjp1+iJCnWnbzkCHfNgNGHNMPkAnpfr0Ad8hVlWw= Subject key identifier: 47:DD:42:70:F3:64:52:DB:BA:5C:4F:99:53:0A:F2:02:CE:9C:F1:D0 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB4E13D78170C456F7D9485D5290A1 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/R91CcPNkUtu6XE-ZUwryAs6c8dA.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43415 IP address blocks: 217.218.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4e:13:d7:81:70:c4:56:f7:d9:48:5d:52:90:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47dd4270f36452dbba5c4f99530af202ce9cf1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:57:a8:ad:d3:a8:cf:ec:d6:48:42:ce:ac: ed:a4:94:59:fd:93:cf:02:11:e3:a7:86:45:da:db: 75:a3:dc:ab:ad:2a:1e:55:7e:e7:95:2d:2b:f8:8c: b2:51:62:25:11:82:c9:2e:d9:30:0e:ad:f8:95:fa: 4f:62:a3:92:91:ef:92:92:8b:b7:fe:88:04:21:da: be:3d:81:64:2d:3d:7c:0b:7c:84:c1:4e:3f:5a:28: 93:dd:de:56:cf:e1:61:98:f6:f5:22:04:dd:9c:10: 85:f6:44:a6:aa:fa:52:a1:87:aa:e2:6b:bf:91:48: 59:31:56:bd:15:99:05:ad:8c:07:04:b9:92:60:99: ec:d5:bb:3d:2e:e2:1d:1a:91:96:4b:21:ce:a5:f4: cd:75:d0:48:b3:44:12:53:37:22:c1:2f:20:29:c1: a1:96:35:95:d7:df:ad:01:7c:cf:d0:7e:31:c6:b2: 34:45:84:27:b4:12:a6:36:80:19:77:8f:19:dd:10: ba:fb:43:05:02:76:af:d2:02:73:1c:f7:d1:45:26: 42:74:b3:62:85:b8:79:b0:3d:4b:a3:0c:f5:ec:5c: 43:38:cb:3d:b3:b7:f5:74:80:5d:49:9e:1a:3c:01: b2:5c:cd:5b:b4:e5:87:ae:4a:4c:f8:a5:94:20:6b: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DD:42:70:F3:64:52:DB:BA:5C:4F:99:53:0A:F2:02:CE:9C:F1:D0 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/R91CcPNkUtu6XE-ZUwryAs6c8dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.218.45.0/24 Signature Algorithm: sha256WithRSAEncryption 13:b2:91:72:c1:dd:11:69:1e:62:ab:6a:86:1a:be:a7:42:1a: 72:cb:63:09:3a:36:c1:92:12:23:96:ad:7a:e8:3f:4a:82:41: d8:95:c2:cd:f7:2d:de:0f:1f:b8:2c:11:8d:65:78:89:6a:23: 68:87:bb:b4:b4:be:71:6a:8e:93:86:37:a4:67:3a:b9:6e:a4: 43:99:31:69:d9:2e:72:93:53:fe:b7:d5:be:75:a4:11:cb:d2: a5:c8:9f:1e:b8:ad:c1:4a:21:3e:7f:ba:ab:d4:cc:38:24:20: 8e:50:18:5b:b4:18:26:99:7c:09:3a:88:2c:57:3a:bb:37:94: 37:92:9a:62:d0:32:14:68:a9:42:cd:07:17:1b:82:49:75:70: bf:e4:7b:66:ec:30:0d:4a:7b:e5:b8:43:62:60:d6:60:d8:24: 7b:2a:51:af:2c:10:e6:1b:08:cd:17:de:31:38:d1:17:17:29: cf:04:25:6b:4b:97:c2:0c:d5:8d:c8:e2:ea:f6:51:60:a0:a3: 4e:0a:5f:32:98:63:d9:d4:e4:44:ef:35:c9:cf:17:d2:af:1a: 6d:96:57:3f:c0:88:89:25:76:1f:f2:b1:4c:e5:4a:61:b5:c9: b5:44:49:4d:c0:4e:df:24:11:f4:c8:29:fa:d7:d5:a7:1a:db: 1b:ed:c3:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2604T14FwxFb32UhdUpChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RkNDI3MGYzNjQ1MmRiYmE1YzRmOTk1MzBhZjIwMmNlOWNmMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1BXqK3TqM/s1khCzqztpJRZ/ZPP AhHjp4ZF2tt1o9yrrSoeVX7nlS0r+IyyUWIlEYLJLtkwDq34lfpPYqOSke+Skou3 /ogEIdq+PYFkLT18C3yEwU4/WiiT3d5Wz+FhmPb1IgTdnBCF9kSmqvpSoYeq4mu/ kUhZMVa9FZkFrYwHBLmSYJns1bs9LuIdGpGWSyHOpfTNddBIs0QSUzciwS8gKcGh ljWV19+tAXzP0H4xxrI0RYQntBKmNoAZd48Z3RC6+0MFAnav0gJzHPfRRSZCdLNi hbh5sD1Lowz17FxDOMs9s7f1dIBdSZ4aPAGyXM1btOWHrkpM+KWUIGux4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEfdQnDzZFLbulxPmVMK8gLOnPHQMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvUjkxQ2NQTmtVdHU2WEUtWlV3cnlBczZjOGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2dotMA0G CSqGSIb3DQEBCwUAA4IBAQATspFywd0RaR5iq2qGGr6nQhpyy2MJOjbBkhIjlq16 6D9KgkHYlcLN9y3eDx+4LBGNZXiJaiNoh7u0tL5xao6ThjekZzq5bqRDmTFp2S5y k1P+t9W+daQRy9KlyJ8euK3BSiE+f7qr1Mw4JCCOUBhbtBgmmXwJOogsVzq7N5Q3 kppi0DIUaKlCzQcXG4JJdXC/5Htm7DANSnvluENiYNZg2CR7KlGvLBDmGwjNF94x ONEXFynPBCVrS5fCDNWNyOLq9lFgoKNOCl8ymGPZ1ORE7zXJzxfSrxptllc/wIiJ JXYf8rFM5Uphtcm1RElNwE7fJBH0yCn619WnGtsb7cNA -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:35 2026 by rpki-client