This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/0_k63XkArGVTTR26XEZl_VbW9ew.roa File: 0_k63XkArGVTTR26XEZl_VbW9ew.roa (raw, json) Hash identifier: lSKjEUH2oVD7IHui4NKE5gjrw2JzY7MBHav7gpqD/EY= Subject key identifier: D3:F9:3A:DD:79:00:AC:65:53:4D:1D:BA:5C:46:65:FD:56:D6:F5:EC Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8467CEACCB67998A62F91741E6F04D Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/0_k63XkArGVTTR26XEZl_VbW9ew.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60027 IP address blocks: 91.93.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:67:ce:ac:cb:67:99:8a:62:f9:17:41:e6:f0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3f93add7900ac65534d1dba5c4665fd56d6f5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:c8:dc:e3:bd:57:71:db:5e:cd:2b:84:c3: 99:37:61:8c:f3:fb:b1:4a:ea:af:6c:aa:f3:fe:b1: b1:08:39:99:d1:f0:98:a7:75:ea:37:38:84:7f:f1: 5a:3a:60:e1:64:c2:43:7f:61:ea:9c:3d:dc:db:59: c5:ae:38:61:a7:c5:09:82:09:45:74:82:77:72:63: 28:70:0a:0a:c8:99:a9:41:cd:0e:8b:31:12:b3:0e: da:bb:01:1d:09:99:cf:b0:49:dd:80:97:53:fe:c7: 49:e6:40:39:a4:76:5a:88:07:d7:d5:1f:bf:1c:2d: 1b:b7:3d:44:a9:d9:a2:2c:b6:8d:bd:29:73:82:be: 1c:f4:90:d1:1e:e2:04:99:9d:bf:46:c7:a7:24:a2: b6:d1:35:87:6d:bb:1a:70:e6:fe:2f:f1:f7:f6:52: f4:14:93:0f:f9:04:af:61:23:b3:ec:2f:46:9a:79: 8b:fc:e5:d2:47:ce:2e:30:a7:3a:75:7b:8f:00:b8: 0e:de:a8:e8:89:d4:0f:2d:4f:5b:42:46:80:2a:00: 9f:4f:97:41:7b:f4:fe:51:9b:1a:e5:25:ad:d6:32: f3:86:86:5f:20:5f:10:f8:a9:03:35:f0:21:c1:3b: 89:78:30:ce:27:dc:9f:38:91:c5:55:cb:c7:6a:dd: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F9:3A:DD:79:00:AC:65:53:4D:1D:BA:5C:46:65:FD:56:D6:F5:EC X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/0_k63XkArGVTTR26XEZl_VbW9ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.93.50.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:0d:a7:15:39:03:7b:d7:07:cb:c9:f7:9b:c1:a9:ea:41:c2: 95:a8:9c:6a:1d:a7:db:5a:d7:61:fb:a8:53:42:f4:13:ca:1a: 93:be:3f:b6:52:11:10:42:ed:c5:44:82:60:b0:cf:a6:aa:94: 14:12:f5:77:da:bf:8f:aa:fc:cb:ee:71:6f:b5:32:f9:fb:73: 5e:2e:6e:b2:b4:92:a3:a8:83:4e:14:14:0c:d8:d0:d8:ff:9b: 38:76:68:79:20:36:d7:ed:03:96:8a:0f:2b:53:c1:0d:68:6a: 0e:bd:af:c8:cf:e4:3c:a7:da:18:fc:84:17:35:67:0b:41:f3: 63:5d:2e:5c:64:a1:be:c1:9b:54:bc:27:a3:b3:90:a4:09:b2: 41:dd:22:c2:ab:92:08:9c:05:6e:e9:a3:10:dd:fb:ff:0b:2e: 2b:e6:fc:02:bf:54:bf:45:0e:c0:e0:31:61:c8:7b:02:2c:d8: 4d:41:15:53:94:6a:63:d7:f1:0b:a5:34:3a:f9:af:ab:a2:8d: 2a:e4:ac:70:29:33:a3:9d:bd:93:91:ff:b6:f0:b5:c9:bc:c6: 03:cd:cc:e4:e3:87:4b:78:fc:ad:69:0e:22:cf:ad:79:5f:da: 3b:d1:ca:90:3f:0a:e4:bf:3c:f1:b3:ab:76:0e:93:0a:87:a7: f3:d6:1e:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGfOrMtnmYpi+RdB5vBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2Y5M2FkZDc5MDBhYzY1NTM0ZDFkYmE1YzQ2NjVmZDU2ZDZmNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8rI3OO9V3HbXs0rhMOZN2GM8/ux SuqvbKrz/rGxCDmZ0fCYp3XqNziEf/FaOmDhZMJDf2HqnD3c21nFrjhhp8UJgglF dIJ3cmMocAoKyJmpQc0OizESsw7auwEdCZnPsEndgJdT/sdJ5kA5pHZaiAfX1R+/ HC0btz1EqdmiLLaNvSlzgr4c9JDRHuIEmZ2/RsenJKK20TWHbbsacOb+L/H39lL0 FJMP+QSvYSOz7C9GmnmL/OXSR84uMKc6dXuPALgO3qjoidQPLU9bQkaAKgCfT5dB e/T+UZsa5SWt1jLzhoZfIF8Q+KkDNfAhwTuJeDDOJ9yfOJHFVcvHat1OuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNP5Ot15AKxlU00dulxGZf1W1vXsMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvMF9rNjNYa0FyR1ZUVFIyNlhFWmxfVmJXOWV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW10yMA0G CSqGSIb3DQEBCwUAA4IBAQArDacVOQN71wfLyfebwanqQcKVqJxqHafbWtdh+6hT QvQTyhqTvj+2UhEQQu3FRIJgsM+mqpQUEvV32r+PqvzL7nFvtTL5+3NeLm6ytJKj qINOFBQM2NDY/5s4dmh5IDbX7QOWig8rU8ENaGoOva/Iz+Q8p9oY/IQXNWcLQfNj XS5cZKG+wZtUvCejs5CkCbJB3SLCq5IInAVu6aMQ3fv/Cy4r5vwCv1S/RQ7A4DFh yHsCLNhNQRVTlGpj1/ELpTQ6+a+roo0q5KxwKTOjnb2Tkf+28LXJvMYDzczk44dL ePytaQ4iz615X9o70cqQPwrkvzzxs6t2DpMKh6fz1h5Y -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:11 2026 by rpki-client