This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/Jtnnu0fDCjNezLwZil_S7l9L48g.roa File: Jtnnu0fDCjNezLwZil_S7l9L48g.roa (raw, json) Hash identifier: DILIlWzW8Mnq/43c0llI+/57QYnncukYSWm1Exl94Z8= Subject key identifier: 26:D9:E7:BB:47:C3:0A:33:5E:CC:BC:19:8A:5F:D2:EE:5F:4B:E3:C8 Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904 Certificate serial: 019B7BA38C0FB32E6A5481A51227576AC274 Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/Jtnnu0fDCjNezLwZil_S7l9L48g.roa Signing time: Thu 01 Jan 2026 22:17:54 +0000 ROA not before: Thu 01 Jan 2026 22:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57511 IP address blocks: 91.132.164.0/23 maxlen: 32 91.132.165.0/24 maxlen: 32 91.132.166.0/23 maxlen: 23 91.132.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8c:0f:b3:2e:6a:54:81:a5:12:27:57:6a:c2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904 Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26d9e7bb47c30a335eccbc198a5fd2ee5f4be3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:5c:0a:dc:3f:37:25:33:22:8e:89:4b:75: 9d:02:cc:4d:15:1b:20:3d:ec:aa:45:99:31:fd:b3: 04:f8:15:0d:df:b2:61:45:53:cb:c7:9d:da:4b:f8: 22:d5:9c:eb:96:81:aa:d4:d8:52:4c:6d:72:42:0d: 9a:a9:dc:79:88:15:f8:8d:38:83:25:8a:0c:54:4e: be:ea:ba:28:fe:3d:5c:b4:97:9a:d0:58:c5:d1:7f: 3f:19:c5:f7:f1:de:15:76:ea:a8:29:8f:69:4c:b2: 4a:3e:aa:19:87:28:07:82:b9:85:c1:42:04:83:9e: 7b:c8:cb:9b:72:04:6a:31:fd:fe:4c:c4:42:03:93: c6:f7:bb:b9:95:c8:ec:10:7e:8a:8e:f1:30:8d:2d: 58:27:5e:d4:6b:7c:24:72:ee:44:11:18:c4:02:ea: 0e:63:17:bf:52:54:d8:c6:cf:42:e3:6d:25:39:0c: 9b:69:42:fd:d2:01:4c:76:cb:31:40:00:b7:13:d1: f5:14:ba:6d:c5:13:53:fa:17:a6:c4:88:ce:fc:b3: df:fe:92:1b:0c:1f:26:2c:04:c5:7b:5c:74:50:a1: de:45:34:8c:18:80:e5:4e:68:0a:f4:94:47:12:e0: 4c:ad:6a:3a:a4:9b:c9:b5:97:ec:4c:50:48:8c:e3: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:E7:BB:47:C3:0A:33:5E:CC:BC:19:8A:5F:D2:EE:5F:4B:E3:C8 X509v3 Authority Key Identifier: keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/Jtnnu0fDCjNezLwZil_S7l9L48g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.164.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:ff:51:35:76:43:38:1f:4e:f6:c3:a9:02:bd:8a:af:00:ed: 27:a7:3a:db:0b:88:56:5d:7b:2f:92:ca:c0:f9:57:56:05:80: 3d:e6:ac:47:fe:44:c4:17:4d:22:2e:18:fc:3b:d5:3c:a4:1a: 9b:1a:67:81:da:08:dd:2d:8b:df:20:d2:be:96:f9:e2:98:fc: 6c:85:2d:47:e3:0f:ae:c4:45:d3:dc:ce:21:02:26:ce:cb:46: e7:6f:11:ab:3b:c0:4e:87:a1:5f:7c:a2:03:cb:a4:93:6d:58: a1:15:db:62:0e:45:74:1a:57:18:58:6a:7a:07:d2:b5:96:b3: eb:30:b3:a1:c7:5d:a2:93:40:2a:bc:df:a3:fb:ec:c0:b8:46: ea:a9:d1:4a:39:bb:36:b7:6b:bc:37:ac:e0:a2:7a:59:d8:bf: 68:87:1d:4c:aa:a7:df:28:fc:7d:3a:a6:fe:24:15:7a:0a:05: ba:68:e9:8b:58:7a:52:ad:c1:ea:2e:e4:3b:a4:df:44:21:a4: b3:d2:ed:ac:22:ed:2f:5f:69:f1:67:8c:98:05:77:37:ae:f2: fc:2f:1b:82:a7:aa:16:71:ba:21:d2:8e:77:b7:3d:f1:af:de: 61:0d:9c:f8:6a:43:82:15:e4:25:ab:e0:67:62:0f:87:ca:57: 57:f5:f7:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o4wPsy5qVIGlEidXasJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDUwYzYzNzY2NTVlZWMxZGQyZGE0YmQyMWQ1ZjEwNGE5 NmQ5MDQwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmQ5ZTdiYjQ3YzMwYTMzNWVjY2JjMTk4YTVmZDJlZTVmNGJlM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR9cCtw/NyUzIo6JS3WdAsxNFRsg PeyqRZkx/bME+BUN37JhRVPLx53aS/gi1ZzrloGq1NhSTG1yQg2aqdx5iBX4jTiD JYoMVE6+6roo/j1ctJea0FjF0X8/GcX38d4VduqoKY9pTLJKPqoZhygHgrmFwUIE g557yMubcgRqMf3+TMRCA5PG97u5lcjsEH6KjvEwjS1YJ17Ua3wkcu5EERjEAuoO Yxe/UlTYxs9C420lOQybaUL90gFMdssxQAC3E9H1FLptxRNT+hemxIjO/LPf/pIb DB8mLATFe1x0UKHeRTSMGIDlTmgK9JRHEuBMrWo6pJvJtZfsTFBIjOPOFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCbZ57tHwwozXsy8GYpf0u5fS+PIMB8GA1UdIwQY MBaAFPVFDGN2ZV7sHdLaS9IdXxBKltkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgt NmQxZjYwNTQzZTljLzEvSnRubnUwZkRDak5lekx3WmlsX1M3bDlMNDhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgtNmQxZjYwNTQzZTlj LzEvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4SkMA0G CSqGSIb3DQEBCwUAA4IBAQBu/1E1dkM4H072w6kCvYqvAO0npzrbC4hWXXsvksrA +VdWBYA95qxH/kTEF00iLhj8O9U8pBqbGmeB2gjdLYvfINK+lvnimPxshS1H4w+u xEXT3M4hAibOy0bnbxGrO8BOh6FffKIDy6STbVihFdtiDkV0GlcYWGp6B9K1lrPr MLOhx12ik0AqvN+j++zAuEbqqdFKObs2t2u8N6zgonpZ2L9ohx1MqqffKPx9Oqb+ JBV6CgW6aOmLWHpSrcHqLuQ7pN9EIaSz0u2sIu0vX2nxZ4yYBXc3rvL8LxuCp6oW cboh0o53tz3xr95hDZz4akOCFeQlq+BnYg+HyldX9fcS -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:46 2026 by rpki-client