This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa File: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (raw, json) Hash identifier: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0= Subject key identifier: 91:AD:7D:60:4F:A5:C0:9A:63:26:3A:D3:69:AF:28:47:EC:E6:F1:C4 Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef Certificate serial: 019B7B3677038B8F950A3EBF99C26B5F8E6F Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35407 IP address blocks: 91.213.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:77:03:8b:8f:95:0a:3e:bf:99:c2:6b:5f:8e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91ad7d604fa5c09a63263ad369af2847ece6f1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:49:74:02:15:b4:ef:4d:c1:dd:5b:9b:e5: 62:33:22:5c:b0:5a:75:42:96:7e:d3:37:4a:7f:f4: dd:e6:c2:91:8a:fb:25:c6:f8:cd:a9:94:ca:82:d6: c3:fb:59:f7:7c:ac:96:86:a1:d9:36:d9:fd:b6:a7: 23:4c:ec:99:a2:a4:59:3a:65:70:d0:8b:ea:56:eb: 64:66:81:65:81:57:2b:e9:3c:4c:f2:13:b6:96:b4: fc:a9:12:b5:24:51:7e:a8:aa:87:6c:5f:db:2b:ca: 1a:32:99:05:3a:0e:1b:99:21:e1:e6:4e:9c:5c:49: 15:5d:5d:c8:17:04:7c:09:3d:35:15:90:0a:4c:38: ef:cb:7e:c9:c0:e2:ae:7b:ee:27:8a:e3:43:c1:6c: 90:13:b4:c2:c3:08:ce:54:67:31:99:fe:82:51:44: 08:40:6b:e7:08:80:fe:d0:0e:e2:a4:40:4f:e4:fc: ea:92:b0:7c:a1:09:26:f2:2e:d2:0b:25:75:9a:e2: 5b:4b:51:c2:f9:2b:d7:8c:77:38:4c:90:6b:8e:ab: de:ef:1e:7b:40:d4:7c:c9:ba:01:b1:78:b5:38:e4: 1c:ca:9d:e9:91:f4:9f:f9:77:a7:18:24:91:99:02: 75:01:49:11:0e:27:fb:3b:40:17:49:a0:63:a1:63: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:7D:60:4F:A5:C0:9A:63:26:3A:D3:69:AF:28:47:EC:E6:F1:C4 X509v3 Authority Key Identifier: keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.105.0/24 Signature Algorithm: sha256WithRSAEncryption 05:14:59:79:cc:2f:7f:15:73:7b:78:2f:6d:58:80:ef:7c:71: c8:10:d6:98:90:2e:64:fe:03:a8:20:8a:2d:22:9a:04:55:98: f9:17:01:59:56:f2:1f:57:ee:3b:d2:b5:ee:f0:a1:ba:94:22: d1:e2:12:e0:10:c1:9d:e7:1b:52:9e:ba:43:12:9c:66:a9:19: 22:23:db:12:27:73:b4:b2:3b:85:34:b3:7d:c3:05:39:ea:16: bb:dc:7b:0d:d2:11:f4:e9:09:c4:cd:a1:06:e6:1c:0d:9f:c7: ca:c6:9e:0f:b8:12:c7:fa:b6:4a:90:a0:77:c6:78:b7:97:f2: cf:3b:03:11:64:3e:ba:ca:9a:2e:79:62:26:c5:f3:63:28:55: fe:ee:8e:b6:df:74:0c:d4:ad:43:4c:56:41:49:3b:72:72:48: 4d:65:6c:e7:24:35:cb:ff:cd:f2:04:e0:d1:95:7c:e3:3d:66: ff:81:43:be:d7:3e:05:ad:b6:57:65:e0:99:dc:de:be:1d:4e: f6:48:11:b0:1d:0b:62:ac:54:2c:ea:d5:78:bc:41:2d:1a:92: 54:ca:70:97:45:8c:ea:51:3d:4e:5c:26:65:55:76:82:e3:8e: 7d:92:3c:e4:dd:32:a2:32:47:cc:dc:f7:4a:94:f8:93:8a:ef: 9c:1f:3c:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NncDi4+VCj6/mcJrX45vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3 MmViZWYwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWFkN2Q2MDRmYTVjMDlhNjMyNjNhZDM2OWFmMjg0N2VjZTZmMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OBJdAIVtO9Nwd1bm+ViMyJcsFp1 QpZ+0zdKf/Td5sKRivslxvjNqZTKgtbD+1n3fKyWhqHZNtn9tqcjTOyZoqRZOmVw 0IvqVutkZoFlgVcr6TxM8hO2lrT8qRK1JFF+qKqHbF/bK8oaMpkFOg4bmSHh5k6c XEkVXV3IFwR8CT01FZAKTDjvy37JwOKue+4niuNDwWyQE7TCwwjOVGcxmf6CUUQI QGvnCID+0A7ipEBP5PzqkrB8oQkm8i7SCyV1muJbS1HC+SvXjHc4TJBrjqve7x57 QNR8yboBsXi1OOQcyp3pkfSf+XenGCSRmQJ1AUkRDif7O0AXSaBjoWP/pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGtfWBPpcCaYyY602mvKEfs5vHEMB8GA1UdIwQY MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt OWM3MDhkYWMxZDkyLzEva2ExOVlFLWx3SnBqSmpyVGFhOG9SLXptOGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9VpMA0G CSqGSIb3DQEBCwUAA4IBAQAFFFl5zC9/FXN7eC9tWIDvfHHIENaYkC5k/gOoIIot IpoEVZj5FwFZVvIfV+470rXu8KG6lCLR4hLgEMGd5xtSnrpDEpxmqRkiI9sSJ3O0 sjuFNLN9wwU56ha73HsN0hH06QnEzaEG5hwNn8fKxp4PuBLH+rZKkKB3xni3l/LP OwMRZD66ypoueWImxfNjKFX+7o6233QM1K1DTFZBSTtyckhNZWznJDXL/83yBODR lXzjPWb/gUO+1z4FrbZXZeCZ3N6+HU72SBGwHQtirFQs6tV4vEEtGpJUynCXRYzq UT1OXCZlVXaC4459kjzk3TKiMkfM3PdKlPiTiu+cHzwB -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:32 2026 by rpki-client