This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/bbThswnkhw-bsj-vAKq8IB9dXpM.roa File: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (raw, json) Hash identifier: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU= Subject key identifier: 6D:B4:E1:B3:09:E4:87:0F:9B:B2:3F:AF:00:AA:BC:20:1F:5D:5E:93 Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019B79ECF46D40412EA2FC35C341243758A4 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/bbThswnkhw-bsj-vAKq8IB9dXpM.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204984 IP address blocks: 91.132.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f4:6d:40:41:2e:a2:fc:35:c3:41:24:37:58:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db4e1b309e4870f9bb23faf00aabc201f5d5e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:1b:54:fc:75:a2:15:b7:ac:49:69:a0:a6: 17:81:91:1d:6a:9a:15:41:0b:24:e2:56:81:f2:0b: 24:45:4c:8c:b3:cb:4a:c5:bc:b8:e0:49:0a:13:e7: 12:dd:a8:ae:59:bb:b5:3d:9e:1a:48:ab:bc:c8:26: 48:e8:c0:42:0e:17:ff:08:ab:59:e2:49:ed:9c:51: 28:52:7a:be:46:84:0e:45:ac:48:1f:53:ce:e4:35: 68:c2:82:a6:46:36:a0:9e:e7:65:fa:d2:f7:83:b3: bd:2a:3f:00:e7:b9:1c:76:1e:4b:bb:72:f9:72:6a: 58:1e:6d:72:31:94:fc:05:29:12:86:23:61:12:e1: 53:eb:90:56:62:a4:ec:97:5e:af:c2:95:79:1e:bb: 0a:b8:ca:19:43:60:34:c5:eb:c4:59:71:2f:9e:28: d0:00:98:14:be:5b:6d:66:cb:eb:36:0f:14:52:1d: 08:b5:52:c4:97:ba:6d:93:85:2b:af:c8:c2:07:88: d0:dc:0b:17:d4:5b:51:fb:e4:c8:ba:c7:26:ab:2e: 50:24:2a:e8:94:c7:55:2b:84:ce:a8:f4:26:a9:7f: c5:20:60:3b:d0:da:b9:1f:c5:d5:e2:a9:8a:c1:80: f9:bf:ed:0b:79:8d:e0:fc:6e:6a:99:82:a6:79:65: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B4:E1:B3:09:E4:87:0F:9B:B2:3F:AF:00:AA:BC:20:1F:5D:5E:93 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/bbThswnkhw-bsj-vAKq8IB9dXpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.72.0/24 Signature Algorithm: sha256WithRSAEncryption 20:a9:d8:47:c9:70:17:d7:5d:e1:18:ea:28:32:63:7c:d9:ef: c7:e4:2c:de:ff:d8:77:38:83:b0:b4:fb:a4:2b:71:8e:bd:66: e3:52:3a:49:52:0b:30:d3:7d:3f:8e:60:8b:d6:d0:8e:e7:65: 02:46:8c:01:a1:70:98:cf:11:d1:37:2b:7e:3d:4f:19:7f:91: 9f:aa:a6:e8:fb:4b:23:4c:fd:6e:1d:14:67:05:a0:1f:8d:0c: 25:a6:62:de:b8:17:c7:47:2e:50:90:cb:50:e8:06:63:2d:46: 75:a2:ee:25:82:45:75:50:d5:85:0d:a6:c8:11:4e:78:c5:e9: ab:95:61:89:fd:a8:b6:24:fb:08:c7:b7:59:4f:f1:bc:b7:54: 1e:bf:11:3d:8f:21:bb:8e:f2:f6:97:38:42:10:6b:06:f8:2b: 91:2c:4e:91:c5:c2:69:33:65:75:20:83:db:3c:ec:91:19:29: fe:7a:29:43:34:9d:fe:11:e5:40:fe:8b:4e:1e:1b:f0:b5:4d: a8:53:5e:62:a5:cd:74:57:26:b2:e6:12:81:f1:7d:87:b4:1d: 0a:15:21:2a:3e:8d:e1:21:f5:54:d9:2d:17:9c:a4:03:bf:53: 60:5f:4a:0b:f6:c0:98:ef:3d:ea:29:c8:28:0a:78:5f:f0:9e: 17:3a:11:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PRtQEEuovw1w0EkN1ikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGI0ZTFiMzA5ZTQ4NzBmOWJiMjNmYWYwMGFhYmMyMDFmNWQ1ZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsUbVPx1ohW3rElpoKYXgZEdapoV QQsk4laB8gskRUyMs8tKxby44EkKE+cS3aiuWbu1PZ4aSKu8yCZI6MBCDhf/CKtZ 4kntnFEoUnq+RoQORaxIH1PO5DVowoKmRjagnudl+tL3g7O9Kj8A57kcdh5Lu3L5 cmpYHm1yMZT8BSkShiNhEuFT65BWYqTsl16vwpV5HrsKuMoZQ2A0xevEWXEvnijQ AJgUvlttZsvrNg8UUh0ItVLEl7ptk4Urr8jCB4jQ3AsX1FtR++TIuscmqy5QJCro lMdVK4TOqPQmqX/FIGA70Nq5H8XV4qmKwYD5v+0LeY3g/G5qmYKmeWXd8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG204bMJ5IcPm7I/rwCqvCAfXV6TMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvYmJUaHN3bmtody1ic2otdkFLcThJQjlkWHBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4RIMA0G CSqGSIb3DQEBCwUAA4IBAQAgqdhHyXAX113hGOooMmN82e/H5Cze/9h3OIOwtPuk K3GOvWbjUjpJUgsw030/jmCL1tCO52UCRowBoXCYzxHRNyt+PU8Zf5Gfqqbo+0sj TP1uHRRnBaAfjQwlpmLeuBfHRy5QkMtQ6AZjLUZ1ou4lgkV1UNWFDabIEU54xemr lWGJ/ai2JPsIx7dZT/G8t1QevxE9jyG7jvL2lzhCEGsG+CuRLE6RxcJpM2V1IIPb POyRGSn+eilDNJ3+EeVA/otOHhvwtU2oU15ipc10Vyay5hKB8X2HtB0KFSEqPo3h IfVU2S0XnKQDv1NgX0oL9sCY7z3qKcgoCnhf8J4XOhFj -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:02 2026 by rpki-client