This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/_jP7HoE6xSVGQtiue_1k6La3slE.roa File: _jP7HoE6xSVGQtiue_1k6La3slE.roa (raw, json) Hash identifier: lNbPgbdDGD01z1JbLvmrn22+TQAyCpvm6Vuj52vD43Q= Subject key identifier: FE:33:FB:1E:81:3A:C5:25:46:42:D8:AE:7B:FD:64:E8:B6:B7:B2:51 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019B7FF26250E0427FF568DFB5ED5B7119BC Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/_jP7HoE6xSVGQtiue_1k6La3slE.roa Signing time: Fri 02 Jan 2026 18:22:29 +0000 ROA not before: Fri 02 Jan 2026 18:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199724 IP address blocks: 91.102.160.0/24 maxlen: 24 91.102.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:62:50:e0:42:7f:f5:68:df:b5:ed:5b:71:19:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Jan 2 18:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe33fb1e813ac5254642d8ae7bfd64e8b6b7b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:05:5e:a3:0e:a8:00:a1:3b:19:d9:ca:b4: 27:72:9e:23:38:d4:f8:dd:0a:3c:ac:98:91:b9:11: 59:2d:53:a6:e5:ac:99:c4:7d:3b:4a:25:1b:1d:ed: 73:bb:f3:29:17:5c:11:c4:f2:4f:4a:17:93:07:97: c4:8a:9d:3e:12:eb:ae:89:95:23:3c:92:49:0b:78: f4:ff:d1:32:b8:4b:fd:b6:05:3f:23:a8:66:5c:70: d8:9f:72:87:ba:3d:95:42:3a:78:93:cc:a4:b3:55: e5:2a:12:4e:51:83:30:f6:bd:15:cd:cb:4f:1f:5a: bc:7e:86:7c:99:60:f9:97:14:58:0f:5b:0d:a4:93: 18:6a:ee:e1:15:cf:35:72:56:4c:3d:6b:96:a7:0f: ed:de:f7:cf:e4:a0:54:e6:4b:ae:db:8f:82:b9:c2: 5c:38:81:49:eb:c1:0c:dd:bd:1e:74:2e:46:e1:c9: 0f:36:d6:7c:b6:ac:38:44:8e:ea:54:2f:26:26:2c: c4:95:21:a6:75:14:3a:e4:c3:1f:ba:75:f3:9c:cb: 11:db:3c:a4:57:0b:8e:9f:16:0c:35:01:a8:25:6c: a2:ac:fe:6c:1d:06:85:a4:cf:b4:1d:c5:bc:cb:ae: 8a:eb:6e:a2:af:96:ee:d8:86:9e:bd:9d:a6:87:c4: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:33:FB:1E:81:3A:C5:25:46:42:D8:AE:7B:FD:64:E8:B6:B7:B2:51 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/_jP7HoE6xSVGQtiue_1k6La3slE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.160.0/24 91.102.164.0/24 Signature Algorithm: sha256WithRSAEncryption 21:44:61:3d:f9:15:18:a0:45:4b:33:3f:62:92:e1:49:3a:f8: ad:18:9d:36:f3:64:e9:2e:dc:87:83:d0:d7:7b:95:6d:84:06: fc:1b:95:c7:a7:2e:08:b4:c6:13:76:fd:d5:01:c5:be:d2:21: 3b:76:15:6d:33:03:0e:23:8a:7c:6a:0a:53:e0:34:ee:8e:ad: 74:04:34:73:43:46:2c:69:79:27:95:79:d0:ae:61:a6:00:e1: f9:b6:a6:30:80:6d:b7:d7:3d:34:62:4a:ee:70:5b:63:6a:5d: 7a:88:e2:5c:a5:8c:1c:99:32:7b:46:51:26:09:86:53:d6:15: 49:b0:07:d4:5a:32:dc:df:d2:2b:18:25:41:8c:c3:0b:5f:c3: 39:bf:7c:40:7f:3e:a6:52:7c:ad:04:42:0f:4e:a0:bb:ce:a2: e7:e7:fb:01:f2:27:99:63:19:da:a9:bd:26:62:f5:f2:59:0e: b7:a5:95:53:5f:cc:47:05:b4:7e:bb:ae:b5:ad:20:42:7a:d7: 1e:8c:ef:ee:f2:a1:7a:a8:25:54:47:bc:42:cc:53:4f:8c:af: e1:1d:75:e1:72:e7:47:47:d2:95:af:eb:28:9c:84:68:3e:24: 89:aa:7a:dd:f7:6e:58:45:32:a8:89:5e:64:f9:2d:74:0e:72: e1:b1:56:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8mJQ4EJ/9Wjfte1bcRm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMTAyMTgyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTMzZmIxZTgxM2FjNTI1NDY0MmQ4YWU3YmZkNjRlOGI2YjdiMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreAFXqMOqAChOxnZyrQncp4jONT4 3Qo8rJiRuRFZLVOm5ayZxH07SiUbHe1zu/MpF1wRxPJPSheTB5fEip0+EuuuiZUj PJJJC3j0/9EyuEv9tgU/I6hmXHDYn3KHuj2VQjp4k8yks1XlKhJOUYMw9r0VzctP H1q8foZ8mWD5lxRYD1sNpJMYau7hFc81clZMPWuWpw/t3vfP5KBU5kuu24+CucJc OIFJ68EM3b0edC5G4ckPNtZ8tqw4RI7qVC8mJizElSGmdRQ65MMfunXznMsR2zyk VwuOnxYMNQGoJWyirP5sHQaFpM+0HcW8y66K626ir5bu2IaevZ2mh8Ql6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP4z+x6BOsUlRkLYrnv9ZOi2t7JRMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvX2pQN0hvRTZ4U1ZHUXRpdWVfMWs2TGEzc2xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2agAwQA W2akMA0GCSqGSIb3DQEBCwUAA4IBAQAhRGE9+RUYoEVLMz9ikuFJOvitGJ0282Tp LtyHg9DXe5VthAb8G5XHpy4ItMYTdv3VAcW+0iE7dhVtMwMOI4p8agpT4DTujq10 BDRzQ0YsaXknlXnQrmGmAOH5tqYwgG231z00YkrucFtjal16iOJcpYwcmTJ7RlEm CYZT1hVJsAfUWjLc39IrGCVBjMMLX8M5v3xAfz6mUnytBEIPTqC7zqLn5/sB8ieZ Yxnaqb0mYvXyWQ63pZVTX8xHBbR+u661rSBCetcejO/u8qF6qCVUR7xCzFNPjK/h HXXhcudHR9KVr+sonIRoPiSJqnrd925YRTKoiV5k+S10DnLhsVb1 -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:44 2026 by rpki-client