This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/91m9d-4rp7TRVtPcYvV9NGes_jg.roa File: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (raw, json) Hash identifier: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI= Subject key identifier: F7:59:BD:77:EE:2B:A7:B4:D1:56:D3:DC:62:F5:7D:34:67:AC:FE:38 Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b Certificate serial: 019B7DCAD828F1079CA48B1360FDB39C51CB Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/91m9d-4rp7TRVtPcYvV9NGes_jg.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209824 IP address blocks: 91.204.168.0/22 maxlen: 22 188.65.144.0/21 maxlen: 21 2a00:1aa0::/29 maxlen: 29 2a00:1aa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d8:28:f1:07:9c:a4:8b:13:60:fd:b3:9c:51:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f759bd77ee2ba7b4d156d3dc62f57d3467acfe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:c0:f2:60:61:68:a2:47:d6:7b:86:c1:e7: d6:b7:d2:75:9c:09:00:f9:4c:13:25:ff:58:55:1e: 04:47:99:3c:b1:21:19:db:7c:7b:7b:cc:1d:fa:fc: 2f:15:6e:24:97:bc:8b:24:37:42:d1:1c:9d:e9:1a: f4:4a:50:c4:e9:57:2c:63:cd:4e:61:94:b6:09:19: 22:88:40:6f:e4:15:8d:aa:93:0a:0d:7b:df:d2:f8: bc:ac:53:de:84:d8:af:01:c1:6e:8b:1a:1a:5d:ab: d0:b5:03:e4:83:27:e4:d7:0d:49:01:4b:95:74:16: 8c:e6:14:25:c3:f7:7f:b4:c7:fa:b0:3b:da:4c:59: 76:ec:18:b4:49:82:7a:8c:6b:57:85:d2:9a:d0:3d: 09:b5:c3:79:78:91:be:8a:b1:7d:c0:a4:f8:c5:89: 6d:0e:c0:60:e6:54:9a:8e:23:d6:c2:9c:ae:2c:34: e0:04:de:41:17:07:07:be:5b:6b:e3:06:b7:95:1e: b8:5d:61:8c:f8:ef:a6:06:e3:7b:af:36:64:df:7b: ac:06:b0:56:c5:0b:76:05:9d:8e:65:ae:ed:e7:bb: d3:80:9a:bd:20:f1:5b:f1:20:fa:25:e0:4b:eb:62: 1b:25:22:d9:c2:12:42:a5:e5:10:e1:ba:02:0b:2a: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:59:BD:77:EE:2B:A7:B4:D1:56:D3:DC:62:F5:7D:34:67:AC:FE:38 X509v3 Authority Key Identifier: keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/91m9d-4rp7TRVtPcYvV9NGes_jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.168.0/22 188.65.144.0/21 IPv6: 2a00:1aa0::/29 Signature Algorithm: sha256WithRSAEncryption 78:f0:a6:2a:02:c5:3d:e2:1f:2c:97:fa:92:1c:3c:63:20:43: e6:ef:25:4e:9d:3d:6b:14:40:29:21:9a:1c:8b:f3:30:94:f6: d0:7b:5b:75:0a:f1:a9:d7:33:b3:c6:6c:bb:74:2e:c2:58:8c: 3c:c8:c3:61:fe:44:ab:65:f0:30:0e:1a:6f:cc:63:27:93:0f: d8:91:8b:8c:ce:31:69:05:bd:ee:61:5f:91:2a:21:75:4d:b5: 15:a0:f1:ef:90:a9:d3:47:1c:ad:09:fd:47:23:31:bb:63:ed: bf:b3:4e:2c:eb:1b:a8:5e:78:6d:1e:d5:1d:80:d1:b8:80:9d: 37:10:20:54:28:e9:08:d1:c7:44:65:5e:9f:2e:f2:4a:1f:6a: 24:5a:a6:1a:0c:e6:52:1b:74:9d:89:2d:1b:cb:dd:ff:11:dc: bc:aa:64:e4:63:b0:b1:25:07:2d:b0:1b:9e:ba:ff:39:c3:72: 1b:0b:0b:05:fc:8c:8d:67:02:be:52:ac:6c:65:a8:ee:b7:01: e4:9f:9e:55:4e:8b:73:af:b8:02:bb:1f:42:7b:91:9a:ce:cd: a0:f2:a6:60:ef:8a:03:44:08:69:ab:a2:4a:31:fb:35:d6:f3: a2:fb:47:f4:51:7b:24:6a:8e:d0:9d:cb:a5:63:23:b0:e5:07: ff:14:88:d1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ytgo8QecpIsTYP2znFHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2 YjNkMGIwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzU5YmQ3N2VlMmJhN2I0ZDE1NmQzZGM2MmY1N2QzNDY3YWNmZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt83A8mBhaKJH1nuGwefWt9J1nAkA +UwTJf9YVR4ER5k8sSEZ23x7e8wd+vwvFW4kl7yLJDdC0Ryd6Rr0SlDE6VcsY81O YZS2CRkiiEBv5BWNqpMKDXvf0vi8rFPehNivAcFuixoaXavQtQPkgyfk1w1JAUuV dBaM5hQlw/d/tMf6sDvaTFl27Bi0SYJ6jGtXhdKa0D0JtcN5eJG+irF9wKT4xYlt DsBg5lSajiPWwpyuLDTgBN5BFwcHvltr4wa3lR64XWGM+O+mBuN7rzZk33usBrBW xQt2BZ2OZa7t57vTgJq9IPFb8SD6JeBL62IbJSLZwhJCpeUQ4boCCypNgQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPdZvXfuK6e00VbT3GL1fTRnrP44MB8GA1UdIwQY MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt ZGRjZDRkOTM1MDMwLzEvOTFtOWQtNHJwN1RSVnRQY1l2VjlOR2VzX2pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8yoAwQD vEGQMA0EAgACMAcDBQMqABqgMA0GCSqGSIb3DQEBCwUAA4IBAQB48KYqAsU94h8s l/qSHDxjIEPm7yVOnT1rFEApIZoci/MwlPbQe1t1CvGp1zOzxmy7dC7CWIw8yMNh /kSrZfAwDhpvzGMnkw/YkYuMzjFpBb3uYV+RKiF1TbUVoPHvkKnTRxytCf1HIzG7 Y+2/s04s6xuoXnhtHtUdgNG4gJ03ECBUKOkI0cdEZV6fLvJKH2okWqYaDOZSG3Sd iS0by93/Edy8qmTkY7CxJQctsBueuv85w3IbCwsF/IyNZwK+UqxsZajutwHkn55V Totzr7gCux9Ce5Gazs2g8qZg74oDRAhpq6JKMfs11vOi+0f0UXskao7QnculYyOw 5Qf/FIjR -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:55 2026 by rpki-client