This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa File: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (raw, json) Hash identifier: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g= Subject key identifier: D0:1E:87:E7:39:2B:14:C2:A8:79:70:AE:C3:1D:96:38:1F:D9:EA:D5 Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9 Certificate serial: 019B78346D17EBE386DA90656B9FE662C1E5 Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa Signing time: Thu 01 Jan 2026 06:17:40 +0000 ROA not before: Thu 01 Jan 2026 06:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29551 IP address blocks: 91.241.44.0/24 maxlen: 24 2001:67c:24c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6d:17:eb:e3:86:da:90:65:6b:9f:e6:62:c1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9 Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d01e87e7392b14c2a87970aec31d96381fd9ead5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8b:e9:91:79:b7:e3:bb:f8:1d:bd:07:6b:0a: 9d:f2:36:40:a0:ce:e8:98:e8:dd:23:a0:7c:ad:45: fb:8d:89:f0:65:69:0e:f2:04:b7:18:f9:80:e4:ff: 29:56:e6:e7:b7:23:88:4c:3c:2d:21:d3:37:97:4b: 34:e0:da:17:86:2b:26:dc:7e:69:2a:63:d0:c8:7e: d8:9a:7d:be:1e:29:d0:d5:d5:21:ee:d0:61:81:49: 2a:50:01:fe:65:20:c3:ad:19:87:f8:40:aa:d5:80: 99:32:b1:3e:ca:4f:33:be:27:6f:b0:cb:b6:0d:67: 64:07:6b:c7:09:fe:05:62:63:31:a9:37:ce:eb:aa: cb:d6:48:37:08:99:65:61:ba:76:83:a2:cd:bb:34: 5f:38:86:72:26:d9:2a:25:80:be:4a:47:f9:f2:a4: 03:2b:ef:fb:be:f0:4b:bc:3a:56:72:06:98:83:d4: 05:38:7f:1f:6c:0a:98:43:76:7b:e7:a1:55:39:9a: 94:38:ec:5c:56:4d:e0:64:c1:04:9e:a0:38:d5:49: 6c:88:23:e9:68:22:45:55:51:19:32:3c:38:78:35: 74:a5:a3:4d:f5:36:65:2c:f6:31:a8:f2:bb:ae:a0: 32:19:05:f2:b2:60:a9:f7:95:6e:85:6e:55:a3:29: 54:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:87:E7:39:2B:14:C2:A8:79:70:AE:C3:1D:96:38:1F:D9:EA:D5 X509v3 Authority Key Identifier: keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.44.0/24 IPv6: 2001:67c:24c4::/48 Signature Algorithm: sha256WithRSAEncryption 42:1b:39:e1:1d:ba:be:1a:34:8c:6a:7a:68:68:29:d4:57:8c: ee:54:0d:39:86:74:ef:43:af:65:14:fe:f4:5e:f5:30:e5:5d: 0a:d3:42:19:35:46:9a:9f:fc:cf:f4:8f:ee:d2:b9:f1:8b:4b: 7e:53:ec:5f:fb:9b:23:1d:1f:c5:5f:19:33:6c:35:67:c8:d2: 42:ba:7c:65:2f:42:15:52:97:45:20:a4:bc:01:fa:bb:55:39: 75:b7:a4:9c:6d:45:85:23:84:24:46:4f:d0:5e:35:f0:10:a6: 17:94:8f:6e:70:7f:01:8b:80:e8:42:fe:0a:73:64:e3:9d:d7: c2:cb:db:5d:0a:45:6f:44:27:19:83:ad:70:20:f0:60:31:de: b4:2e:7f:73:e3:0a:d5:4b:74:a8:58:fc:38:88:81:7c:81:16: 43:93:13:ab:c4:16:46:70:c1:a1:ad:5e:3f:f4:f7:5b:a4:a1: 49:9b:dd:19:29:ad:6c:af:03:8b:52:bf:fb:39:1e:e4:7c:c7: 75:d2:42:8b:e3:d9:c7:fc:bb:f3:2f:3f:24:cf:ff:d6:86:81: b8:82:60:c9:ab:5e:5c:31:6a:ab:90:6b:e6:f7:89:8b:b9:a1: 23:63:17:7e:78:d9:0f:3e:43:5a:61:75:ce:cd:97:6c:84:59: 07:14:a0:17 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NG0X6+OG2pBla5/mYsHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk ZGRkZDkwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDFlODdlNzM5MmIxNGMyYTg3OTcwYWVjMzFkOTYzODFmZDllYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YvpkXm347v4Hb0Hawqd8jZAoM7o mOjdI6B8rUX7jYnwZWkO8gS3GPmA5P8pVubntyOITDwtIdM3l0s04NoXhism3H5p KmPQyH7Ymn2+HinQ1dUh7tBhgUkqUAH+ZSDDrRmH+ECq1YCZMrE+yk8zvidvsMu2 DWdkB2vHCf4FYmMxqTfO66rL1kg3CJllYbp2g6LNuzRfOIZyJtkqJYC+Skf58qQD K+/7vvBLvDpWcgaYg9QFOH8fbAqYQ3Z756FVOZqUOOxcVk3gZMEEnqA41UlsiCPp aCJFVVEZMjw4eDV0paNN9TZlLPYxqPK7rqAyGQXysmCp95VuhW5VoylU1QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNAeh+c5KxTCqHlwrsMdljgf2erVMB8GA1UdIwQY MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt NWI1NDFmMzQ3MzJlLzEvMEI2SDV6a3JGTUtvZVhDdXd4MldPQl9aNnRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/EsMA8E AgACMAkDBwAgAQZ8JMQwDQYJKoZIhvcNAQELBQADggEBAEIbOeEdur4aNIxqemho KdRXjO5UDTmGdO9Dr2UU/vRe9TDlXQrTQhk1Rpqf/M/0j+7SufGLS35T7F/7myMd H8VfGTNsNWfI0kK6fGUvQhVSl0UgpLwB+rtVOXW3pJxtRYUjhCRGT9BeNfAQpheU j25wfwGLgOhC/gpzZOOd18LL210KRW9EJxmDrXAg8GAx3rQuf3PjCtVLdKhY/DiI gXyBFkOTE6vEFkZwwaGtXj/091ukoUmb3RkprWyvA4tSv/s5HuR8x3XSQovj2cf8 u/MvPyTP/9aGgbiCYMmrXlwxaquQa+b3iYu5oSNjF3542Q8+Q1phdc7Nl2yEWQcU oBc= -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:32 2026 by rpki-client