This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/V74Jz1wXKEOVFxFJuc3IlOQAtRc.roa File: V74Jz1wXKEOVFxFJuc3IlOQAtRc.roa (raw, json) Hash identifier: f0NajtksvBvEsqeKrzgLbgQXCMvGxhAemXF0EzhQ/c4= Subject key identifier: 57:BE:09:CF:5C:17:28:43:95:17:11:49:B9:CD:C8:94:E4:00:B5:17 Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Certificate serial: 019B783540185719E1AAF633DCFDC2058D5E Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/V74Jz1wXKEOVFxFJuc3IlOQAtRc.roa Signing time: Thu 01 Jan 2026 06:18:34 +0000 ROA not before: Thu 01 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201589 IP address blocks: 91.108.187.0/24 maxlen: 24 2a13:1ec0::/44 maxlen: 44 2a13:1ec0:100::/44 maxlen: 44 2a13:1ec0:110::/44 maxlen: 44 2a13:1ec0:200::/44 maxlen: 44 2a13:1ec0:1000::/44 maxlen: 44 2a13:1ec0:1010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:40:18:57:19:e1:aa:f6:33:dc:fd:c2:05:8d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57be09cf5c17284395171149b9cdc894e400b517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:3d:dd:96:fe:90:2d:80:99:50:fd:79:a8: a9:ed:45:18:9b:1f:bc:9b:4b:6b:2d:1c:bf:46:67: 09:79:21:2c:0c:20:03:91:58:10:56:61:56:3f:00: 00:8d:34:3f:1f:6e:d3:df:59:e6:89:d6:d1:37:99: 85:e7:44:6b:23:fe:0e:25:c9:37:1e:2f:28:e2:65: 6f:cb:59:68:09:fd:50:16:c5:8e:53:f7:23:c9:89: cd:46:17:69:7f:45:cf:b9:8b:e5:02:d4:73:b4:6b: 3c:3c:90:bb:01:4e:53:db:d7:bf:93:2b:96:1a:79: 8a:31:7a:c1:49:df:e7:4b:9e:74:dc:8f:07:5c:2c: 12:f6:25:d0:be:04:3d:de:c3:39:70:ca:46:34:50: 34:69:e7:d9:91:3b:80:62:e2:86:3a:e1:7c:3c:a8: 5c:d5:d3:62:0d:b4:4b:f3:91:9b:66:9c:22:ec:85: 57:dd:c9:41:5e:33:2b:43:86:1b:5f:ac:5e:5b:6c: b3:b6:18:51:07:4e:0c:3e:89:3f:8b:87:bc:0e:c5: 61:3a:8d:3a:da:03:00:f0:6f:ed:c2:64:cc:7f:c7: 75:cf:9d:99:b5:07:ec:69:b2:7f:c1:11:3f:cf:f8: 69:40:be:f8:f0:03:50:9c:69:38:dd:ba:71:25:75: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BE:09:CF:5C:17:28:43:95:17:11:49:B9:CD:C8:94:E4:00:B5:17 X509v3 Authority Key Identifier: keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/V74Jz1wXKEOVFxFJuc3IlOQAtRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.187.0/24 IPv6: 2a13:1ec0::/44 2a13:1ec0:100::/43 2a13:1ec0:200::/44 2a13:1ec0:1000::/43 Signature Algorithm: sha256WithRSAEncryption 95:1a:48:18:2c:27:fc:15:a3:a0:d3:f9:e4:84:4a:21:43:72: 1d:fc:2e:a9:37:37:59:3c:92:e2:da:23:2c:96:3c:2b:15:5d: c1:8d:97:d6:78:fa:bf:ac:34:bd:b2:42:0f:26:e7:78:68:a6: c9:11:c4:c6:02:69:96:b5:5b:a8:98:a3:e5:10:cf:83:51:04: 74:d1:68:56:3c:9b:a1:3d:5b:bd:86:24:7d:2b:31:d2:99:33: 74:c2:ac:b0:79:3b:43:e4:f4:68:23:ac:59:b9:f0:ee:90:40: c7:44:4c:03:05:66:06:7f:78:f8:63:52:94:e2:e0:2b:40:af: ab:7e:ed:e9:d7:66:e3:7c:ba:6e:59:64:18:77:ec:75:59:bf: 30:f3:e6:ce:62:0d:20:83:0f:ae:80:6b:c8:fa:84:77:93:7c: c1:d0:f4:40:e9:71:63:e7:83:82:c8:7b:a0:1f:18:bf:0d:13: 1e:99:48:67:70:0c:c1:85:f7:67:c3:df:54:9b:d2:78:94:a4: d5:08:49:53:fa:24:29:91:09:1f:8a:9d:93:00:7f:fd:e3:de: e9:0d:dd:f7:d7:37:22:8a:dd:ab:2b:53:aa:f3:3e:77:20:1b: 51:70:30:3f:80:4a:c1:68:61:12:31:4c:ad:72:97:f8:e0:7f: dc:7f:6b:ae -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4NUAYVxnhqvYz3P3CBY1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGY5ZjA0NGUyYjkyOTg3OGQ3NDdjNWZmYmI4MGFkMTBl M2Q2YmQwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2JlMDljZjVjMTcyODQzOTUxNzExNDliOWNkYzg5NGU0MDBiNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvg93Zb+kC2AmVD9eaip7UUYmx+8 m0trLRy/RmcJeSEsDCADkVgQVmFWPwAAjTQ/H27T31nmidbRN5mF50RrI/4OJck3 Hi8o4mVvy1loCf1QFsWOU/cjyYnNRhdpf0XPuYvlAtRztGs8PJC7AU5T29e/kyuW GnmKMXrBSd/nS5503I8HXCwS9iXQvgQ93sM5cMpGNFA0aefZkTuAYuKGOuF8PKhc 1dNiDbRL85GbZpwi7IVX3clBXjMrQ4YbX6xeW2yzthhRB04MPok/i4e8DsVhOo06 2gMA8G/twmTMf8d1z52ZtQfsabJ/wRE/z/hpQL748ANQnGk43bpxJXWIMwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFFe+Cc9cFyhDlRcRSbnNyJTkALUXMB8GA1UdIwQY MBaAFA8PnwROK5KYeNdHxf+7gK0Q49a9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2Et Y2RiZDNiNmNlNzc3LzEvVjc0Snoxd1hLRU9WRnhGSnVjM0lsT1FBdFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2EtY2RiZDNiNmNlNzc3 LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAW2y7MCoE AgACMCQDBwQqEx7AAAADBwUqEx7AAQADBwQqEx7AAgADBwUqEx7AEAAwDQYJKoZI hvcNAQELBQADggEBAJUaSBgsJ/wVo6DT+eSESiFDch38Lqk3N1k8kuLaIyyWPCsV XcGNl9Z4+r+sNL2yQg8m53hopskRxMYCaZa1W6iYo+UQz4NRBHTRaFY8m6E9W72G JH0rMdKZM3TCrLB5O0Pk9GgjrFm58O6QQMdETAMFZgZ/ePhjUpTi4CtAr6t+7enX ZuN8um5ZZBh37HVZvzDz5s5iDSCDD66Aa8j6hHeTfMHQ9EDpcWPng4LIe6AfGL8N Ex6ZSGdwDMGF92fD31Sb0niUpNUISVP6JCmRCR+KnZMAf/3j3ukN3ffXNyKK3asr U6rzPncgG1FwMD+ASsFoYRIxTK1yl/jgf9x/a64= -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:30 2026 by rpki-client