This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/_9OTnWhfptNmahMwIUd6M8KUigY.roa File: _9OTnWhfptNmahMwIUd6M8KUigY.roa (raw, json) Hash identifier: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4= Subject key identifier: FF:D3:93:9D:68:5F:A6:D3:66:6A:13:30:21:47:7A:33:C2:94:8A:06 Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Certificate serial: 019B77C70FA7C245FCF58757D5A10E7BD8D9 Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/_9OTnWhfptNmahMwIUd6M8KUigY.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263759 IP address blocks: 91.229.134.0/23 maxlen: 24 91.229.134.0/24 maxlen: 24 91.229.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:a7:c2:45:fc:f5:87:57:d5:a1:0e:7b:d8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffd3939d685fa6d3666a133021477a33c2948a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:54:2d:66:75:92:3d:49:32:67:e1:6c:5f: fd:1a:fc:32:64:79:ae:0b:d3:49:f0:50:0c:3f:5b: 82:42:04:f9:bf:55:01:91:f5:f3:ba:8d:c3:40:e8: d4:04:51:56:2e:ef:70:14:f3:fc:0a:3e:fe:37:72: 30:93:27:4d:d0:e3:d1:ee:af:b9:f4:e5:5d:2c:1e: 8d:b7:15:ac:ec:8f:0c:9c:3a:c0:e5:3c:cc:18:fb: 69:14:dc:47:ce:0f:6b:21:6a:6f:d2:47:c7:65:77: 57:f9:21:d4:e3:5c:35:a2:2a:b3:9c:04:81:2b:84: aa:fc:87:d8:6b:2c:70:52:8b:5d:85:ec:79:60:3b: e8:8b:a2:6c:03:b4:c3:f2:ea:99:5c:5d:28:6b:43: 94:57:50:02:3d:42:01:6a:33:86:03:e2:d0:0a:84: 2d:31:dd:71:2e:67:67:19:e9:88:50:fc:62:6c:87: b1:46:f1:c6:72:37:8a:32:14:d0:58:99:76:e1:52: 22:68:da:ca:6c:31:d3:37:15:aa:9f:c2:c3:b8:db: 53:4b:3a:f8:a4:85:dc:fa:4a:f7:a7:79:73:5e:30: ef:00:d9:42:31:6e:57:c4:4f:9a:ba:47:40:c6:66: e4:e6:1c:3d:5f:02:4d:41:6e:6b:01:42:74:18:54: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:93:9D:68:5F:A6:D3:66:6A:13:30:21:47:7A:33:C2:94:8A:06 X509v3 Authority Key Identifier: keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/_9OTnWhfptNmahMwIUd6M8KUigY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.134.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:e5:f5:29:59:87:cc:7c:f0:b7:fc:c1:9a:eb:83:92:33:58: bd:fd:5e:90:95:8b:70:db:27:b1:92:b9:a7:5b:6b:01:88:74: de:28:dd:c8:2a:4b:92:4f:07:ed:c4:29:af:1b:2d:0b:45:0c: 34:c3:0e:84:33:49:82:de:7d:f3:91:47:67:03:55:bf:1d:9d: 16:a7:95:db:b3:3f:2a:b6:39:3c:a2:4b:e1:c7:27:0c:cf:4f: c1:b9:67:35:3d:77:77:81:34:38:0a:20:0c:37:8c:4f:0c:5c: 4a:7d:e4:c4:d8:74:38:ad:ed:e8:f6:54:4c:f8:31:ab:58:cb: 82:a4:7b:b8:00:11:19:58:72:9f:e1:a7:48:08:39:a3:f5:fa: 88:ca:25:1d:76:f8:99:80:f1:55:66:a5:03:87:01:8c:d0:94: 2d:86:56:c4:e6:87:de:5b:16:c8:0f:ac:a1:84:30:89:54:61: a5:5f:fa:4b:f3:b9:6f:28:c2:99:0b:0e:a0:f9:2a:12:79:99: 13:05:c6:6b:55:02:67:e8:6f:e4:b9:bb:e5:08:a3:59:34:82: 85:e9:10:66:26:ca:91:ee:a1:5f:27:2a:21:f3:2b:44:a4:19: 36:5f:f9:e6:f8:90:8b:45:f9:e6:34:04:5b:ff:9e:a4:c3:ed: 03:80:87:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xw+nwkX89YdX1aEOe9jZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz YjI0YjYwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmQzOTM5ZDY4NWZhNmQzNjY2YTEzMzAyMTQ3N2EzM2MyOTQ4YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49JULWZ1kj1JMmfhbF/9GvwyZHmu C9NJ8FAMP1uCQgT5v1UBkfXzuo3DQOjUBFFWLu9wFPP8Cj7+N3IwkydN0OPR7q+5 9OVdLB6NtxWs7I8MnDrA5TzMGPtpFNxHzg9rIWpv0kfHZXdX+SHU41w1oiqznASB K4Sq/IfYayxwUotdhex5YDvoi6JsA7TD8uqZXF0oa0OUV1ACPUIBajOGA+LQCoQt Md1xLmdnGemIUPxibIexRvHGcjeKMhTQWJl24VIiaNrKbDHTNxWqn8LDuNtTSzr4 pIXc+kr3p3lzXjDvANlCMW5XxE+aukdAxmbk5hw9XwJNQW5rAUJ0GFQxWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/Tk51oX6bTZmoTMCFHejPClIoGMB8GA1UdIwQY MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt ZGZkZGIxMzY0MzYzLzEvXzlPVG5XaGZwdE5tYWhNd0lVZDZNOEtVaWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+WGMA0G CSqGSIb3DQEBCwUAA4IBAQA/5fUpWYfMfPC3/MGa64OSM1i9/V6QlYtw2yexkrmn W2sBiHTeKN3IKkuSTwftxCmvGy0LRQw0ww6EM0mC3n3zkUdnA1W/HZ0Wp5Xbsz8q tjk8okvhxycMz0/BuWc1PXd3gTQ4CiAMN4xPDFxKfeTE2HQ4re3o9lRM+DGrWMuC pHu4ABEZWHKf4adICDmj9fqIyiUddviZgPFVZqUDhwGM0JQthlbE5ofeWxbID6yh hDCJVGGlX/pL87lvKMKZCw6g+SoSeZkTBcZrVQJn6G/kubvlCKNZNIKF6RBmJsqR 7qFfJyoh8ytEpBk2X/nm+JCLRfnmNARb/56kw+0DgIeb -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:46 2026 by rpki-client