This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa File: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (raw, json) Hash identifier: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4= Subject key identifier: 70:D5:96:1E:54:13:2E:80:67:58:35:F4:0A:BF:87:26:10:F0:93:24 Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Certificate serial: 019BD60EA20D4201100FB2087EBAA4ADD8D8 Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa Signing time: Mon 19 Jan 2026 11:40:41 +0000 ROA not before: Mon 19 Jan 2026 11:40:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204089 IP address blocks: 91.208.54.0/24 maxlen: 24 2a0f:7d40::/29 maxlen: 29 2a0f:7d40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:0e:a2:0d:42:01:10:0f:b2:08:7e:ba:a4:ad:d8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Validity Not Before: Jan 19 11:40:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70d5961e54132e80675835f40abf872610f09324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:0a:cf:62:c4:90:17:07:74:fd:40:c9:7a: 4f:f5:f5:cd:ea:55:85:6f:18:ec:0c:2a:5d:d8:64: 0b:67:a7:a7:dc:8a:37:43:eb:db:f6:8b:80:39:bd: be:a9:24:9f:d6:ab:2b:77:17:de:2a:cb:b0:49:82: 55:4d:3a:cd:3e:19:38:6b:38:2f:bf:5b:44:34:35: 63:1e:74:c4:40:99:4d:0d:90:d8:36:39:31:ed:a6: f4:6a:dd:06:95:12:82:4c:d0:a5:d1:fb:ba:44:90: 8a:68:b8:86:77:29:ec:c8:91:0d:20:cf:e0:a3:ff: 8d:90:46:5d:4c:d2:93:67:ff:11:dd:e1:d8:dc:aa: 86:d7:4f:77:60:05:1e:6d:f6:5f:fc:6a:b5:6e:07: ba:24:ef:38:e7:bd:94:02:0f:21:dc:d2:e6:5e:d1: d6:f3:5d:33:3e:c2:5a:ff:fe:f0:bf:1d:d4:25:94: c1:82:e3:4c:f4:86:28:99:5c:3e:7a:b9:af:70:4b: ea:58:a5:29:37:73:02:f4:c5:90:f6:2c:53:35:8e: ae:78:6e:cc:6d:3d:e8:23:de:91:ed:43:a3:2b:c1: 54:50:70:57:05:0f:1a:16:f0:3a:5b:9d:8d:fd:79: a9:19:03:d2:53:e4:f2:e0:60:56:20:5b:c6:4b:7e: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:96:1E:54:13:2E:80:67:58:35:F4:0A:BF:87:26:10:F0:93:24 X509v3 Authority Key Identifier: keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.54.0/24 IPv6: 2a0f:7d40::/29 Signature Algorithm: sha256WithRSAEncryption a4:9f:92:59:f7:54:08:fa:47:d5:a2:94:14:ba:5c:d7:98:7a: e2:0d:7f:1e:1f:bd:c5:5a:f1:39:1e:96:76:48:98:41:8c:cc: c8:cf:60:d1:f1:84:e2:80:79:1b:80:bd:4e:cb:23:95:cd:2f: df:c3:4a:c7:51:85:6a:35:d0:4a:ad:a3:aa:70:27:22:5b:b5: 97:c0:31:63:cf:d9:61:de:7b:04:17:fc:75:92:f7:42:d2:34: bb:8f:21:7a:5b:cb:1d:77:66:c8:ac:89:69:ef:23:16:c1:58: c5:ab:db:0a:f9:49:9b:1e:0e:18:e6:2f:8a:87:cd:58:b8:0e: a6:e0:ea:7f:7a:aa:1f:7a:9c:57:8a:59:78:7e:42:b5:65:e1: 6a:d6:33:70:6a:82:c7:ff:f7:8e:de:4f:e2:ca:f4:d2:c7:0e: 47:37:d0:ef:06:29:bd:f8:03:1c:50:e8:40:0c:f8:21:4f:5b: 62:5e:25:89:fe:20:69:f2:3e:22:1d:93:da:92:e2:4a:62:62: 88:cd:82:5f:93:98:fc:62:26:35:82:7a:ce:c2:bb:1f:a0:9f: 7d:ab:da:ab:60:7b:ab:0d:4c:be:63:26:39:24:7e:30:80:20: 18:cb:db:8e:9c:f0:81:2d:2d:90:3c:af:96:b5:47:67:92:18: a6:1c:a2:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvWDqINQgEQD7IIfrqkrdjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5 OGFiODQwHhcNMjYwMTE5MTE0MDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGQ1OTYxZTU0MTMyZTgwNjc1ODM1ZjQwYWJmODcyNjEwZjA5MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8Kz2LEkBcHdP1AyXpP9fXN6lWF bxjsDCpd2GQLZ6en3Io3Q+vb9ouAOb2+qSSf1qsrdxfeKsuwSYJVTTrNPhk4azgv v1tENDVjHnTEQJlNDZDYNjkx7ab0at0GlRKCTNCl0fu6RJCKaLiGdynsyJENIM/g o/+NkEZdTNKTZ/8R3eHY3KqG1093YAUebfZf/Gq1bge6JO84572UAg8h3NLmXtHW 810zPsJa//7wvx3UJZTBguNM9IYomVw+ermvcEvqWKUpN3MC9MWQ9ixTNY6ueG7M bT3oI96R7UOjK8FUUHBXBQ8aFvA6W52N/XmpGQPSU+Ty4GBWIFvGS3446QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHDVlh5UEy6AZ1g19Aq/hyYQ8JMkMB8GA1UdIwQY MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt ZjFiYzk1Njg1OGFhLzEvY05XV0hsUVRMb0JuV0RYMENyLUhKaER3a3lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9A2MA0E AgACMAcDBQMqD31AMA0GCSqGSIb3DQEBCwUAA4IBAQCkn5JZ91QI+kfVopQUulzX mHriDX8eH73FWvE5HpZ2SJhBjMzIz2DR8YTigHkbgL1OyyOVzS/fw0rHUYVqNdBK raOqcCciW7WXwDFjz9lh3nsEF/x1kvdC0jS7jyF6W8sdd2bIrIlp7yMWwVjFq9sK +UmbHg4Y5i+Kh81YuA6m4Op/eqofepxXill4fkK1ZeFq1jNwaoLH//eO3k/iyvTS xw5HN9DvBim9+AMcUOhADPghT1tiXiWJ/iBp8j4iHZPakuJKYmKIzYJfk5j8YiY1 gnrOwrsfoJ99q9qrYHurDUy+YyY5JH4wgCAYy9uOnPCBLS2QPK+WtUdnkhimHKLm -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:20 2026 by rpki-client