This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/S_RLG-qdyAaQjiZGgL5sIfI-AYY.roa File: S_RLG-qdyAaQjiZGgL5sIfI-AYY.roa (raw, json) Hash identifier: yQu9ZmP/q7jsTu4yw/AuWtFPXstyX5q6aeR1beEfVWY= Subject key identifier: 4B:F4:4B:1B:EA:9D:C8:06:90:8E:26:46:80:BE:6C:21:F2:3E:01:86 Certificate issuer: /CN=daa33b5083799c49cf9edc00862b7c9c218c6613 Certificate serial: 019B7FF2888506A651B0B4533B8D47B63B25 Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/S_RLG-qdyAaQjiZGgL5sIfI-AYY.roa Signing time: Fri 02 Jan 2026 18:22:39 +0000 ROA not before: Fri 02 Jan 2026 18:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44017 IP address blocks: 91.198.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:88:85:06:a6:51:b0:b4:53:3b:8d:47:b6:3b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613 Validity Not Before: Jan 2 18:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bf44b1bea9dc806908e264680be6c21f23e0186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:64:c7:09:f5:97:e3:6e:2c:54:63:65:80: 58:7f:41:36:a5:7a:90:24:9f:a6:bb:57:55:8a:b1: 6a:0a:da:86:bf:c2:f1:04:73:98:45:c3:3d:b5:c8: bf:d6:5d:62:0d:ed:e5:95:b3:66:3f:53:36:e0:b5: 44:74:4e:f1:eb:ef:3f:1e:d3:45:a2:f5:f5:3c:8f: 07:0a:f5:ae:26:64:b1:7f:4c:94:ca:7f:04:95:88: 7d:38:27:a1:c7:ed:b3:ef:32:f1:1c:40:06:f2:a4: 5c:79:46:5a:a1:72:37:f8:a8:ea:ad:e6:55:41:2c: 5f:30:2d:85:ba:cc:f8:33:ac:45:41:b8:cf:ae:7d: e7:96:6e:ac:db:72:94:d0:df:d7:89:ba:7e:e7:ea: 88:b5:26:3f:3e:be:6d:95:64:a5:1f:78:69:92:88: d4:16:57:82:44:ba:82:51:30:07:bb:4f:29:d2:4a: 41:2a:3f:c8:1b:17:8f:0d:96:d5:3e:aa:26:18:9f: 23:55:e6:05:eb:cf:43:bc:00:00:01:04:8c:81:76: 93:4f:e7:36:d3:51:aa:1e:6e:b5:ce:d5:02:3b:6d: 40:a6:c8:af:45:6c:6e:68:92:d2:62:70:e8:56:31: 7d:67:a7:61:14:28:62:5b:51:25:81:1b:89:6f:90: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:4B:1B:EA:9D:C8:06:90:8E:26:46:80:BE:6C:21:F2:3E:01:86 X509v3 Authority Key Identifier: keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/S_RLG-qdyAaQjiZGgL5sIfI-AYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.228.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ba:d8:70:eb:5c:36:0f:08:ae:5a:e8:cf:7f:6b:52:1f:4e: e0:90:91:ed:87:f6:b0:7c:8e:4e:ec:cf:97:1c:86:6c:82:fd: 4a:3f:6d:e7:f6:f5:30:2d:fa:3d:bc:c8:70:fe:d0:86:e3:0d: b8:5b:e4:cb:aa:8f:25:6c:19:ad:74:65:29:ab:c2:ad:a7:d8: 80:81:5c:14:50:28:ab:43:f9:92:12:6b:eb:57:fd:8a:1e:b3: a9:3b:4d:5e:db:c0:98:0f:ba:34:06:f6:cb:2c:ac:32:d5:c2: c7:28:31:56:88:69:57:87:90:61:18:e2:78:66:06:97:b5:e3: 77:1e:89:9f:87:28:da:b6:bf:29:0c:33:df:4c:09:3c:34:ae: 46:6c:da:af:cf:25:58:db:8a:15:07:c0:c0:3d:0b:85:6c:46: 3f:9f:87:71:f5:b4:1c:22:86:d4:a8:f5:e1:74:e2:56:c4:4c: e9:21:41:2f:6a:5f:0c:c3:07:71:df:e1:f4:d1:6f:0b:39:8e: f3:2d:b8:12:87:12:ae:af:c7:30:ff:3d:a6:08:d8:ca:90:67: 26:43:a9:7e:d2:ab:a2:cb:54:02:00:e4:f3:55:14:b4:2e:e5: 65:d5:dd:16:73:c7:d1:c6:99:21:96:33:61:c1:f7:98:95:9d: 35:e6:39:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8oiFBqZRsLRTO41HtjslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYTMzYjUwODM3OTljNDljZjllZGMwMDg2MmI3YzljMjE4 YzY2MTMwHhcNMjYwMTAyMTgyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmY0NGIxYmVhOWRjODA2OTA4ZTI2NDY4MGJlNmMyMWYyM2UwMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPtkxwn1l+NuLFRjZYBYf0E2pXqQ JJ+mu1dVirFqCtqGv8LxBHOYRcM9tci/1l1iDe3llbNmP1M24LVEdE7x6+8/HtNF ovX1PI8HCvWuJmSxf0yUyn8ElYh9OCehx+2z7zLxHEAG8qRceUZaoXI3+KjqreZV QSxfMC2Fusz4M6xFQbjPrn3nlm6s23KU0N/Xibp+5+qItSY/Pr5tlWSlH3hpkojU FleCRLqCUTAHu08p0kpBKj/IGxePDZbVPqomGJ8jVeYF689DvAAAAQSMgXaTT+c2 01GqHm61ztUCO21ApsivRWxuaJLSYnDoVjF9Z6dhFChiW1ElgRuJb5DbPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEv0SxvqncgGkI4mRoC+bCHyPgGGMB8GA1UdIwQY MBaAFNqjO1CDeZxJz57cAIYrfJwhjGYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFNN1VJTjVuRW5QbnR3QWhpdDhuQ0dNWmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZjMxOGUtODk1MS00ZTFlLWJiZTMt MTZmNDNkYmEyYWJjLzEvU19STEctcWR5QWFRamlaR2dMNXNJZkktQVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jZjMxOGUtODk1MS00ZTFlLWJiZTMtMTZmNDNkYmEyYWJj LzEvMnFNN1VJTjVuRW5QbnR3QWhpdDhuQ0dNWmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8bkMA0G CSqGSIb3DQEBCwUAA4IBAQATuthw61w2DwiuWujPf2tSH07gkJHth/awfI5O7M+X HIZsgv1KP23n9vUwLfo9vMhw/tCG4w24W+TLqo8lbBmtdGUpq8Ktp9iAgVwUUCir Q/mSEmvrV/2KHrOpO01e28CYD7o0BvbLLKwy1cLHKDFWiGlXh5BhGOJ4ZgaXteN3 Homfhyjatr8pDDPfTAk8NK5GbNqvzyVY24oVB8DAPQuFbEY/n4dx9bQcIobUqPXh dOJWxEzpIUEval8Mwwdx3+H00W8LOY7zLbgShxKur8cw/z2mCNjKkGcmQ6l+0qui y1QCAOTzVRS0LuVl1d0Wc8fRxpkhljNhwfeYlZ015jmk -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:10 2026 by rpki-client