This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/vG177J2dohuE08wHX2-c78lEhcw.roa File: vG177J2dohuE08wHX2-c78lEhcw.roa (raw, json) Hash identifier: 3JSqj0nOnGoEw7PHeM+wBIAwqea4bnBMwwfIgvqc52Y= Subject key identifier: BC:6D:7B:EC:9D:9D:A2:1B:84:D3:CC:07:5F:6F:9C:EF:C9:44:85:CC Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2 Certificate serial: 019B7DCA586AC59C2131BF8BFCD8653F26A9 Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/vG177J2dohuE08wHX2-c78lEhcw.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 91.218.58.0/24 maxlen: 24 92.60.44.0/22 maxlen: 24 2a07:f1c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:58:6a:c5:9c:21:31:bf:8b:fc:d8:65:3f:26:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc6d7bec9d9da21b84d3cc075f6f9cefc94485cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:93:b8:a5:86:20:41:73:d9:45:f2:cc:08: 89:9c:0f:44:de:f8:c7:25:0f:d7:46:1f:eb:ee:22: 9f:23:6f:97:c0:45:2a:9f:10:d0:0b:39:11:9f:21: 50:dd:be:93:59:8c:be:20:64:dd:06:dd:81:82:72: 93:e1:20:37:7b:75:0b:c3:b4:99:2f:b8:e6:60:4f: 23:6d:af:28:a7:05:92:2f:a4:f7:f7:f2:b7:e4:54: f1:7d:ab:2e:e6:58:18:85:9e:a7:af:1a:a1:23:52: ae:da:a8:bb:85:89:84:c3:00:e3:81:29:23:f4:c6: b1:f6:6f:76:7e:eb:1f:77:47:37:03:95:91:fd:cd: 37:38:0b:ad:05:b3:cb:a9:b6:40:91:bc:7a:64:b7: d7:5d:dc:eb:ed:73:c0:8d:22:e4:21:e9:37:f8:1a: 37:b0:93:df:d0:11:12:88:5d:b7:68:2b:0e:98:50: 95:51:e9:09:cd:ad:fa:e2:19:ef:e2:ad:20:82:c2: 3c:71:af:10:77:25:8e:3a:df:bd:35:5a:f4:93:ed: a3:34:1a:89:5e:ef:13:d5:0f:16:9d:21:c4:a1:55: 66:be:e2:6c:23:1b:7c:93:91:75:b9:8e:ec:af:77: 2d:ef:91:bb:bc:8d:c4:b5:91:27:71:4c:e1:3f:0d: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6D:7B:EC:9D:9D:A2:1B:84:D3:CC:07:5F:6F:9C:EF:C9:44:85:CC X509v3 Authority Key Identifier: keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/vG177J2dohuE08wHX2-c78lEhcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.58.0/24 92.60.44.0/22 IPv6: 2a07:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption 96:b2:ef:30:02:1a:04:30:9c:53:d9:89:84:1f:16:07:58:a1: c1:e0:1f:58:9e:1c:27:98:20:dd:a7:45:04:63:b2:ec:79:1a: 91:fb:c6:2d:aa:66:5b:14:16:b6:4c:5c:23:ab:8d:d9:4e:7f: c2:b3:5c:be:c0:e4:a3:b5:34:15:e6:c5:25:dc:e6:e7:c4:ed: 2f:26:eb:8a:9b:80:67:b7:36:17:af:27:b4:b9:2c:e7:30:80: 91:05:23:e8:3e:ab:30:ea:dd:19:9c:37:3c:d4:5e:f7:23:c7: 69:35:4a:48:6b:89:9e:30:30:b1:3a:2f:21:38:67:5c:61:1f: ab:34:56:2b:75:23:cf:3b:4a:c8:1f:29:94:48:11:bf:8d:97: e5:f2:c0:6a:61:5f:2f:f5:2c:ea:ba:dc:ed:46:f2:4a:2c:5f: db:12:27:25:d4:11:5b:95:53:40:bc:1b:b3:df:72:79:ae:90: a2:d5:39:b1:ba:e2:d6:8f:cd:6b:d5:60:d5:ee:74:56:64:05: 86:35:fa:e7:6c:70:2c:4c:ea:4d:5f:5d:b5:63:78:29:4a:6f: 39:37:90:e9:2c:cc:22:de:2e:22:67:e6:99:db:b1:cf:31:bd: a6:86:c8:80:5b:04:d5:ad:26:ab:27:a2:64:8e:5f:8a:b8:4e: 3b:6e:63:9b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ylhqxZwhMb+L/NhlPyapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl MmJmZTIwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzZkN2JlYzlkOWRhMjFiODRkM2NjMDc1ZjZmOWNlZmM5NDQ4NWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqWTuKWGIEFz2UXyzAiJnA9E3vjH JQ/XRh/r7iKfI2+XwEUqnxDQCzkRnyFQ3b6TWYy+IGTdBt2BgnKT4SA3e3ULw7SZ L7jmYE8jba8opwWSL6T39/K35FTxfasu5lgYhZ6nrxqhI1Ku2qi7hYmEwwDjgSkj 9Max9m92fusfd0c3A5WR/c03OAutBbPLqbZAkbx6ZLfXXdzr7XPAjSLkIek3+Bo3 sJPf0BESiF23aCsOmFCVUekJza364hnv4q0ggsI8ca8QdyWOOt+9NVr0k+2jNBqJ Xu8T1Q8WnSHEoVVmvuJsIxt8k5F1uY7sr3ct75G7vI3EtZEncUzhPw3SHQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLxte+ydnaIbhNPMB19vnO/JRIXMMB8GA1UdIwQY MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt ODVhNTM0ZjE4MGZkLzEvdkcxNzdKMmRvaHVFMDh3SFgyLWM3OGxFaGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9o6AwQC XDwsMA0EAgACMAcDBQMqB/HAMA0GCSqGSIb3DQEBCwUAA4IBAQCWsu8wAhoEMJxT 2YmEHxYHWKHB4B9YnhwnmCDdp0UEY7LseRqR+8YtqmZbFBa2TFwjq43ZTn/Cs1y+ wOSjtTQV5sUl3ObnxO0vJuuKm4BntzYXrye0uSznMICRBSPoPqsw6t0ZnDc81F73 I8dpNUpIa4meMDCxOi8hOGdcYR+rNFYrdSPPO0rIHymUSBG/jZfl8sBqYV8v9Szq utztRvJKLF/bEicl1BFblVNAvBuz33J5rpCi1TmxuuLWj81r1WDV7nRWZAWGNfrn bHAsTOpNX121Y3gpSm85N5DpLMwi3i4iZ+aZ27HPMb2mhsiAWwTVrSarJ6Jkjl+K uE47bmOb -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:55 2026 by rpki-client