This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/S0jCwF-2vE4If7aoddZBBXxgCa4.roa File: S0jCwF-2vE4If7aoddZBBXxgCa4.roa (raw, json) Hash identifier: sC7YQJ9Sv4ok1eZ8e1VpmYub7DnojsItviVQVfJV7k8= Subject key identifier: 4B:48:C2:C0:5F:B6:BC:4E:08:7F:B6:A8:75:D6:41:05:7C:60:09:AE Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Certificate serial: 019B77C6E2D55F1E307DCED18C2410C933C9 Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/S0jCwF-2vE4If7aoddZBBXxgCa4.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43732 IP address blocks: 91.198.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e2:d5:5f:1e:30:7d:ce:d1:8c:24:10:c9:33:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b48c2c05fb6bc4e087fb6a875d641057c6009ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:5a:fa:ab:30:87:65:08:88:38:8d:7b:39: 7a:d7:59:94:cd:98:46:33:bb:74:68:2d:ec:ce:6c: 0e:6b:0a:fc:c1:ec:f0:45:45:ed:9a:4b:96:22:5d: 58:71:1f:45:c6:2d:7b:30:c3:d4:f0:79:41:db:34: f5:b4:6e:04:19:b5:a5:25:7a:63:7e:56:f8:2e:38: 35:b3:4e:b4:fe:98:66:d6:30:60:cd:22:a0:d8:f2: 04:44:48:84:e8:5e:e8:97:e1:a0:88:e9:ad:d4:d0: 2f:04:3a:f9:f9:28:b3:99:c2:e8:9b:aa:f7:ef:73: aa:b9:9f:1e:96:5c:27:be:7c:84:ea:e4:f0:79:56: 02:b3:e9:b8:db:1f:ac:9b:95:2b:38:0a:b0:53:14: 11:f4:0c:90:9f:53:ec:5f:13:45:5a:4b:3e:c6:d4: 9f:6c:bd:a9:06:6d:39:1c:87:12:d6:fd:79:64:6a: a0:08:d2:d5:5d:d8:7d:af:0a:25:f0:d9:0d:13:7f: ba:ae:86:92:99:3f:e2:28:36:c0:e3:a7:79:89:1d: b6:a2:49:ff:10:36:24:30:e8:c7:e2:40:d2:e2:a7: cd:28:e4:c6:52:ab:16:ff:e5:a5:ce:fd:f0:12:73: ca:b7:0a:57:69:74:33:73:aa:62:7b:a5:22:94:52: c7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:48:C2:C0:5F:B6:BC:4E:08:7F:B6:A8:75:D6:41:05:7C:60:09:AE X509v3 Authority Key Identifier: keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/S0jCwF-2vE4If7aoddZBBXxgCa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.132.0/24 Signature Algorithm: sha256WithRSAEncryption 46:ad:63:19:b0:5c:77:e5:e3:79:e1:39:84:95:e6:30:f6:e1: 13:1c:88:b0:36:24:5b:56:d4:b4:4f:e9:4e:3e:62:b0:41:b9: 43:e0:46:15:88:fa:75:8c:dc:9b:0c:31:78:29:34:f8:f4:15: 3a:69:24:dc:02:50:3e:30:30:47:2b:bd:0f:9c:78:87:eb:ff: c2:48:84:eb:d8:45:28:f2:f3:a6:63:71:6e:1d:71:c0:19:d5: 6c:3f:32:76:20:00:43:7b:61:3b:19:ff:6d:e6:f5:26:0e:61: 43:a2:dc:b9:ff:ae:dd:42:81:e7:ca:9b:c8:d4:e4:cf:2e:68: 89:d3:b7:a8:48:13:1d:c2:78:70:70:85:ab:48:90:1b:f8:70: 6e:2f:93:dc:db:70:06:22:4f:25:9a:16:1a:41:e3:6d:b3:ed: ff:b4:99:0d:f7:3a:fe:2e:e5:00:8a:47:12:f1:07:a1:8d:d9: 72:0b:fb:df:b9:d9:a5:43:83:d9:29:e5:d8:5f:cd:45:5f:b8: 8e:d1:ad:36:e1:ef:26:1c:92:8a:df:fc:2b:d3:86:2c:28:41: 26:87:47:cb:b0:ac:06:1a:0b:c0:a1:e9:3f:e2:e0:67:d2:44: 44:1e:45:bb:22:d3:94:72:47:c9:5d:df:e9:6d:16:ca:08:48: 11:bd:2a:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuLVXx4wfc7RjCQQyTPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3 NTU5YmYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjQ4YzJjMDVmYjZiYzRlMDg3ZmI2YTg3NWQ2NDEwNTdjNjAwOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYha+qswh2UIiDiNezl611mUzZhG M7t0aC3szmwOawr8wezwRUXtmkuWIl1YcR9Fxi17MMPU8HlB2zT1tG4EGbWlJXpj flb4Ljg1s060/phm1jBgzSKg2PIEREiE6F7ol+GgiOmt1NAvBDr5+SizmcLom6r3 73OquZ8ellwnvnyE6uTweVYCs+m42x+sm5UrOAqwUxQR9AyQn1PsXxNFWks+xtSf bL2pBm05HIcS1v15ZGqgCNLVXdh9rwol8NkNE3+6roaSmT/iKDbA46d5iR22okn/ EDYkMOjH4kDS4qfNKOTGUqsW/+Wlzv3wEnPKtwpXaXQzc6pie6UilFLH5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtIwsBftrxOCH+2qHXWQQV8YAmuMB8GA1UdIwQY MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt MzM4Mjc5NDA0OWMyLzEvUzBqQ3dGLTJ2RTRJZjdhb2RkWkJCWHhnQ2E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aEMA0G CSqGSIb3DQEBCwUAA4IBAQBGrWMZsFx35eN54TmEleYw9uETHIiwNiRbVtS0T+lO PmKwQblD4EYViPp1jNybDDF4KTT49BU6aSTcAlA+MDBHK70PnHiH6//CSITr2EUo 8vOmY3FuHXHAGdVsPzJ2IABDe2E7Gf9t5vUmDmFDoty5/67dQoHnypvI1OTPLmiJ 07eoSBMdwnhwcIWrSJAb+HBuL5Pc23AGIk8lmhYaQeNts+3/tJkN9zr+LuUAikcS 8QehjdlyC/vfudmlQ4PZKeXYX81FX7iO0a024e8mHJKK3/wr04YsKEEmh0fLsKwG GgvAoek/4uBn0kREHkW7ItOUckfJXd/pbRbKCEgRvSog -----END CERTIFICATE-----Generated at Mon Jan 26 02:18:44 2026 by rpki-client