This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Br98s9QhRuoQDApiowG5mfMYnLk.roa File: Br98s9QhRuoQDApiowG5mfMYnLk.roa (raw, json) Hash identifier: 1ggPGATGp7/SUZxuPNOuKEEw9HCSv0c3nDbnGDK2jT0= Subject key identifier: 06:BF:7C:B3:D4:21:46:EA:10:0C:0A:62:A3:01:B9:99:F3:18:9C:B9 Certificate issuer: /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Certificate serial: 019AC0A95B7668E8AE602D94C5632A7E3CCC Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Br98s9QhRuoQDApiowG5mfMYnLk.roa Signing time: Wed 26 Nov 2025 14:55:15 +0000 ROA not before: Wed 26 Nov 2025 14:55:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204949 IP address blocks: 91.241.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:a9:5b:76:68:e8:ae:60:2d:94:c5:63:2a:7e:3c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Validity Not Before: Nov 26 14:55:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=06bf7cb3d42146ea100c0a62a301b999f3189cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:c6:d9:70:d6:0d:2c:09:de:ca:90:b1:14: ce:ce:d8:a9:db:c5:59:7e:28:4d:fa:6a:d0:87:0d: f6:bb:fe:6d:6f:f1:72:fb:25:14:3b:53:d2:0c:51: d0:fe:61:91:24:ea:ef:05:ba:74:dc:12:b7:6d:8d: d3:8a:a9:42:22:d1:e6:ab:31:b8:9e:65:ce:94:b8: 5f:28:63:61:91:34:66:64:00:91:d9:6a:6b:02:2e: 91:8f:a0:88:c4:42:40:7c:34:35:5e:e1:28:75:36: 61:ba:be:2e:2a:39:f5:69:50:88:f7:f2:16:cd:3e: 1e:a8:dd:09:a7:75:f7:af:e7:e6:de:f3:1d:3c:16: 4d:c7:a9:b9:59:e3:75:0d:5c:dc:c7:3e:ea:b5:5e: 64:2d:a3:a8:f8:c9:1b:af:2a:06:a6:8b:0e:dd:9b: fb:db:b9:24:7d:d7:43:49:8b:d3:40:f6:a0:8c:4f: 81:21:e7:37:5a:6d:79:15:8a:ee:a2:64:5d:ca:39: 2a:59:ae:86:4d:5e:e0:0e:05:b6:4f:1d:5a:b3:ff: e4:69:ad:37:54:9f:b7:f6:e9:5b:89:ec:a0:5c:63: 9e:2f:5e:08:13:cd:f5:cf:1f:e0:6f:27:d7:4c:d5: 94:56:75:5e:20:17:36:64:55:a0:31:9c:51:ca:c8: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BF:7C:B3:D4:21:46:EA:10:0C:0A:62:A3:01:B9:99:F3:18:9C:B9 X509v3 Authority Key Identifier: keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Br98s9QhRuoQDApiowG5mfMYnLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.77.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:dd:d3:a6:27:45:db:dd:34:94:46:e3:03:f6:1d:58:fc:3a: 06:72:54:fc:44:ef:6c:a0:a5:a4:0f:a1:0c:2c:63:1c:4e:fc: de:92:2c:e4:f7:2e:c9:81:50:dc:34:9e:1d:e6:e0:9e:2b:7a: 2d:ea:b7:d0:5d:53:be:25:95:a2:6d:f9:44:56:9f:e1:2e:f9: da:1a:36:c5:d0:07:57:90:7b:a7:94:6b:6c:df:58:eb:0a:1a: 48:4e:52:7b:85:ce:3d:63:c3:c7:6f:85:e1:fe:78:5f:41:3d: ed:61:30:aa:d2:5d:ae:53:6a:d1:40:05:a8:ea:52:ef:50:7d: db:10:aa:a2:10:7c:00:19:26:92:a3:0d:f8:79:5f:df:71:53: ea:0c:a6:c1:57:83:cc:8a:db:fc:66:12:f6:b8:0f:13:4a:8b: 07:db:2d:e8:72:ed:c0:e6:20:ec:a3:e4:ee:07:19:77:da:37: 51:22:2c:b6:e4:50:aa:d9:d9:7e:06:60:71:07:0b:e5:68:29: 46:50:1a:ff:22:79:83:55:8f:d4:53:e6:bf:ce:e9:55:aa:91: 97:4a:62:bf:78:bd:e2:dd:bf:39:c9:0a:ae:28:d2:84:4f:e1: 41:07:72:8f:05:e3:79:ad:09:f2:a3:b0:7d:d4:d0:4f:02:00: a6:83:53:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrAqVt2aOiuYC2UxWMqfjzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YmVlNGVmODdlZmE2MWU5MDU5YTBhNmUzODJkZTM3MWIy N2FhNGMwHhcNMjUxMTI2MTQ1NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmJmN2NiM2Q0MjE0NmVhMTAwYzBhNjJhMzAxYjk5OWYzMTg5Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/LG2XDWDSwJ3sqQsRTOztip28VZ fihN+mrQhw32u/5tb/Fy+yUUO1PSDFHQ/mGRJOrvBbp03BK3bY3TiqlCItHmqzG4 nmXOlLhfKGNhkTRmZACR2WprAi6Rj6CIxEJAfDQ1XuEodTZhur4uKjn1aVCI9/IW zT4eqN0Jp3X3r+fm3vMdPBZNx6m5WeN1DVzcxz7qtV5kLaOo+MkbryoGposO3Zv7 27kkfddDSYvTQPagjE+BIec3Wm15FYruomRdyjkqWa6GTV7gDgW2Tx1as//kaa03 VJ+39ulbieygXGOeL14IE831zx/gbyfXTNWUVnVeIBc2ZFWgMZxRysjghwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAa/fLPUIUbqEAwKYqMBuZnzGJy5MB8GA1UdIwQY MBaAFBi+5O+H76YekFmgpuOC3jcbJ6pMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMt MTMyODg1YzkwMmIxLzEvQnI5OHM5UWhSdW9RREFwaW93RzVtZk1ZbkxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMtMTMyODg1YzkwMmIx LzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/FNMA0G CSqGSIb3DQEBCwUAA4IBAQCb3dOmJ0Xb3TSURuMD9h1Y/DoGclT8RO9soKWkD6EM LGMcTvzekizk9y7JgVDcNJ4d5uCeK3ot6rfQXVO+JZWibflEVp/hLvnaGjbF0AdX kHunlGts31jrChpITlJ7hc49Y8PHb4Xh/nhfQT3tYTCq0l2uU2rRQAWo6lLvUH3b EKqiEHwAGSaSow34eV/fcVPqDKbBV4PMitv8ZhL2uA8TSosH2y3ocu3A5iDso+Tu Bxl32jdRIiy25FCq2dl+BmBxBwvlaClGUBr/InmDVY/UU+a/zulVqpGXSmK/eL3i 3b85yQquKNKET+FBB3KPBeN5rQnyo7B91NBPAgCmg1Pm -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:10 2025 by rpki-client