This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/KUOqjCxyAKEhTbAupzFiFaYvtyw.roa File: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (raw, json) Hash identifier: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c= Subject key identifier: 29:43:AA:8C:2C:72:00:A1:21:4D:B0:2E:A7:31:62:15:A6:2F:B7:2C Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Certificate serial: 019B79EC2030B08A911FDFD98E09DFD58E6F Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/KUOqjCxyAKEhTbAupzFiFaYvtyw.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213222 IP address blocks: 91.220.113.0/24 maxlen: 24 176.126.120.0/24 maxlen: 24 2a06:ef00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:20:30:b0:8a:91:1f:df:d9:8e:09:df:d5:8e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2943aa8c2c7200a1214db02ea7316215a62fb72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:77:88:59:f3:bb:c8:c3:5d:81:1e:ab:89: 01:87:6f:5e:4d:92:6f:6e:02:06:9f:af:b3:b4:9a: f6:9d:dc:33:19:36:16:f4:35:21:6d:b4:4e:06:ec: a1:15:01:c4:4b:eb:1b:b2:69:9a:81:65:60:2e:23: df:3a:83:41:16:6a:e0:bc:7d:70:69:9e:2a:03:b9: 4c:80:09:b6:40:95:fe:d6:0f:9f:dc:1d:c6:32:bb: 8c:99:ca:be:a6:36:d2:4a:ae:5c:d6:8e:c5:19:6f: 6c:ce:80:39:39:21:d8:ae:a8:2e:dd:af:88:a9:93: cf:82:69:f1:1d:d1:96:99:96:3e:82:8a:99:17:f2: 6e:3d:78:ff:fb:7b:28:30:e8:c6:8d:2e:a9:59:aa: 3b:65:9a:76:98:b3:4e:c9:5c:9a:66:11:b2:99:95: 82:12:37:13:e4:2c:7e:85:a1:fe:30:0e:88:fc:cf: 0b:c2:d6:4b:9d:44:fe:09:b3:09:ea:54:77:16:70: 8b:0f:90:98:b8:07:cc:44:56:d5:0a:67:6d:b0:eb: 92:5d:76:1c:d3:77:65:50:4c:75:69:8f:a1:8f:c9: 05:80:1e:0f:68:2d:47:c2:3c:76:20:e0:1a:61:08: f8:f8:9c:14:41:79:18:db:91:6a:ee:e1:4d:70:a2: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:AA:8C:2C:72:00:A1:21:4D:B0:2E:A7:31:62:15:A6:2F:B7:2C X509v3 Authority Key Identifier: keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/KUOqjCxyAKEhTbAupzFiFaYvtyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.113.0/24 176.126.120.0/24 IPv6: 2a06:ef00::/29 Signature Algorithm: sha256WithRSAEncryption 69:94:d7:ba:61:a8:7d:02:a1:78:27:47:0c:fc:53:d6:f0:ff: 3a:af:3f:05:31:f7:48:80:fe:af:e4:c9:17:94:69:20:0c:25: fc:08:e0:35:93:ed:e6:86:45:2c:13:56:0e:35:47:13:70:e4: cf:a7:57:b1:0a:5a:ba:63:d7:dd:a3:20:cc:eb:76:49:e2:b9: 40:ff:8e:45:db:c9:c1:8e:62:6f:09:f3:de:6f:bd:03:ff:ca: 98:55:a4:d1:cd:74:a0:af:4d:5e:04:7e:ff:2b:97:7c:20:d8: 15:42:91:ac:7f:69:85:45:11:d5:4f:a8:81:2a:99:61:0b:47: f6:05:7a:b5:12:6e:db:35:f1:84:a4:35:06:05:0d:29:ed:a3: 10:2a:c3:dd:27:f8:54:73:27:43:40:4f:b7:5e:4f:d6:e7:d9: 9a:5f:57:18:5b:a7:28:2a:f9:61:db:99:6b:cf:75:62:f7:3b: f4:1a:3b:2a:a1:d5:76:c7:fc:2e:d1:b5:fe:b9:c3:a8:e7:fe: c6:17:da:fb:b6:4a:49:12:0f:19:84:db:23:17:2d:14:45:f0: 56:56:8a:45:37:93:da:7d:4d:66:43:54:2e:94:76:0e:1d:3b: 02:de:cd:c6:57:82:c3:98:75:20:be:b5:78:7a:dd:68:69:30: 88:0e:69:55 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57CAwsIqRH9/Zjgnf1Y5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk MGU5YjYwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTQzYWE4YzJjNzIwMGExMjE0ZGIwMmVhNzMxNjIxNWE2MmZiNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL13iFnzu8jDXYEeq4kBh29eTZJv bgIGn6+ztJr2ndwzGTYW9DUhbbROBuyhFQHES+sbsmmagWVgLiPfOoNBFmrgvH1w aZ4qA7lMgAm2QJX+1g+f3B3GMruMmcq+pjbSSq5c1o7FGW9szoA5OSHYrqgu3a+I qZPPgmnxHdGWmZY+goqZF/JuPXj/+3soMOjGjS6pWao7ZZp2mLNOyVyaZhGymZWC EjcT5Cx+haH+MA6I/M8LwtZLnUT+CbMJ6lR3FnCLD5CYuAfMRFbVCmdtsOuSXXYc 03dlUEx1aY+hj8kFgB4PaC1Hwjx2IOAaYQj4+JwUQXkY25Fq7uFNcKJMkwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFClDqowscgChIU2wLqcxYhWmL7csMB8GA1UdIwQY MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt MWNhM2ZiYmZiYTNmLzEvS1VPcWpDeHlBS0VoVGJBdXB6RmlGYVl2dHl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9xxAwQA sH54MA0EAgACMAcDBQMqBu8AMA0GCSqGSIb3DQEBCwUAA4IBAQBplNe6Yah9AqF4 J0cM/FPW8P86rz8FMfdIgP6v5MkXlGkgDCX8COA1k+3mhkUsE1YONUcTcOTPp1ex Clq6Y9fdoyDM63ZJ4rlA/45F28nBjmJvCfPeb70D/8qYVaTRzXSgr01eBH7/K5d8 INgVQpGsf2mFRRHVT6iBKplhC0f2BXq1Em7bNfGEpDUGBQ0p7aMQKsPdJ/hUcydD QE+3Xk/W59maX1cYW6coKvlh25lrz3Vi9zv0GjsqodV2x/wu0bX+ucOo5/7GF9r7 tkpJEg8ZhNsjFy0URfBWVopFN5PafU1mQ1QulHYOHTsC3s3GV4LDmHUgvrV4et1o aTCIDmlV -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:39 2026 by rpki-client