This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/Aw_WDvIUJqmGy-PSYcF259mv71s.roa File: Aw_WDvIUJqmGy-PSYcF259mv71s.roa (raw, json) Hash identifier: xg7XJ3flpNW5wBd+67pKh8I95xVeEANKdomltN8EKWk= Subject key identifier: 03:0F:D6:0E:F2:14:26:A9:86:CB:E3:D2:61:C1:76:E7:D9:AF:EF:5B Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2 Certificate serial: 019B7DC964639163CC405492CC24BC3013F4 Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/Aw_WDvIUJqmGy-PSYcF259mv71s.roa Signing time: Fri 02 Jan 2026 08:18:28 +0000 ROA not before: Fri 02 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200315 IP address blocks: 91.216.13.0/24 maxlen: 24 138.128.224.0/22 maxlen: 24 2a13:90c0::/29 maxlen: 29 2a13:90c0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:64:63:91:63:cc:40:54:92:cc:24:bc:30:13:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2 Validity Not Before: Jan 2 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=030fd60ef21426a986cbe3d261c176e7d9afef5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:5e:fd:01:d8:f1:96:b8:82:c0:fa:81:32: 21:eb:5a:9e:3d:c9:dd:8a:64:c1:f8:d4:eb:8c:a4: a6:e7:1b:fc:fb:09:45:a5:76:16:4b:85:0f:db:55: 08:9c:fe:b2:e5:1f:87:31:a2:c1:3e:0f:9c:d8:22: 77:fd:9d:20:6c:55:c2:01:18:1b:0c:b6:e3:b0:19: 08:60:7f:55:2e:f2:4b:96:5f:cf:99:df:2c:75:d6: 7c:6b:3d:8b:3d:e0:7a:be:7c:34:da:3e:c1:63:40: bf:07:9e:01:a7:09:b0:6a:2e:c6:fb:73:99:e0:d2: 71:88:7b:84:55:b4:52:30:a7:33:ac:6e:6e:c3:5b: a4:5a:fd:81:14:6c:4d:c5:ac:da:6a:a9:cb:0d:fe: 16:20:c4:b3:bb:4b:8c:d9:d1:5a:7a:51:f3:67:1e: 2d:32:df:18:53:18:3e:f2:3b:8f:45:bb:7f:2e:0d: 68:07:0e:d9:cd:47:67:a7:40:e3:40:72:51:ea:15: 3e:45:3c:45:e7:20:ab:29:4e:6a:f9:1e:93:4e:08: fc:66:0e:d5:9f:26:fb:ca:95:76:f9:53:19:96:8f: 98:dd:55:cd:08:11:07:59:03:77:6b:a5:68:ae:de: e8:77:7e:42:9b:f4:b8:df:ae:94:6f:1c:bb:c4:bd: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0F:D6:0E:F2:14:26:A9:86:CB:E3:D2:61:C1:76:E7:D9:AF:EF:5B X509v3 Authority Key Identifier: keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/Aw_WDvIUJqmGy-PSYcF259mv71s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.13.0/24 138.128.224.0/22 IPv6: 2a13:90c0::/29 Signature Algorithm: sha256WithRSAEncryption ab:1b:89:0a:78:39:91:fb:80:65:18:76:3d:8b:79:d7:ba:c3: a9:fa:79:31:bb:f3:c0:60:bd:9a:36:e2:14:9a:2c:88:2b:cf: e6:96:48:29:99:dc:a5:9a:79:9b:df:60:aa:d3:66:63:33:90: 10:ba:22:9e:a4:b8:d2:d9:75:15:5b:7e:99:1f:c6:ed:74:64: 16:47:c8:43:96:f9:45:25:d3:0e:6a:f1:e1:9f:e3:7c:17:2c: 94:aa:96:47:85:f9:89:ec:15:85:e9:62:b6:76:b0:fe:65:53: e4:8a:bb:00:f8:2e:11:96:5c:cb:89:e8:23:e2:c8:53:c7:49: 59:ad:97:95:0a:1c:35:a4:0e:07:ee:29:2e:7f:9d:b5:e7:2e: 51:db:86:84:9f:b9:eb:b9:44:cf:f3:29:dd:b2:c3:6c:5d:4f: b4:3d:f8:51:2a:64:4f:df:b5:15:e1:b8:42:2d:57:00:77:72: 0f:ef:ea:85:02:11:c9:6b:5f:9f:5e:f2:5c:ba:2a:32:cb:93: dc:57:66:e4:82:c6:2b:d9:5a:0c:aa:5a:1d:79:ad:b8:0c:af: 95:ff:cb:86:3e:e0:fe:d1:52:26:7b:0e:9e:fb:c3:78:bf:ee: 83:d3:79:ca:44:66:fd:9c:9a:d8:d9:e0:45:30:6d:e9:b8:45: 8c:d6:f9:49 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yWRjkWPMQFSSzCS8MBP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMWFjYTM0MTYzNTE2NmY4MDJmOThhOTdlMDAyODBjY2Vl NjRjZTIwHhcNMjYwMTAyMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzBmZDYwZWYyMTQyNmE5ODZjYmUzZDI2MWMxNzZlN2Q5YWZlZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Je/QHY8Za4gsD6gTIh61qePcnd imTB+NTrjKSm5xv8+wlFpXYWS4UP21UInP6y5R+HMaLBPg+c2CJ3/Z0gbFXCARgb DLbjsBkIYH9VLvJLll/Pmd8sddZ8az2LPeB6vnw02j7BY0C/B54Bpwmwai7G+3OZ 4NJxiHuEVbRSMKczrG5uw1ukWv2BFGxNxazaaqnLDf4WIMSzu0uM2dFaelHzZx4t Mt8YUxg+8juPRbt/Lg1oBw7ZzUdnp0DjQHJR6hU+RTxF5yCrKU5q+R6TTgj8Zg7V nyb7ypV2+VMZlo+Y3VXNCBEHWQN3a6Vort7od35Cm/S4366Ubxy7xL0VbQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAMP1g7yFCaphsvj0mHBdufZr+9bMB8GA1UdIwQY MBaAFJ4ayjQWNRZvgC+YqX4AKAzO5kziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUt NzU1NjFjYmYxMDRkLzEvQXdfV0R2SVVKcW1HeS1QU1ljRjI1OW12NzFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUtNzU1NjFjYmYxMDRk LzEvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9gNAwQC ioDgMA0EAgACMAcDBQMqE5DAMA0GCSqGSIb3DQEBCwUAA4IBAQCrG4kKeDmR+4Bl GHY9i3nXusOp+nkxu/PAYL2aNuIUmiyIK8/mlkgpmdylmnmb32Cq02ZjM5AQuiKe pLjS2XUVW36ZH8btdGQWR8hDlvlFJdMOavHhn+N8FyyUqpZHhfmJ7BWF6WK2drD+ ZVPkirsA+C4RllzLiegj4shTx0lZrZeVChw1pA4H7ikuf5215y5R24aEn7nruUTP 8yndssNsXU+0PfhRKmRP37UV4bhCLVcAd3IP7+qFAhHJa1+fXvJcuioyy5PcV2bk gsYr2VoMqlodea24DK+V/8uGPuD+0VImew6e+8N4v+6D03nKRGb9nJrY2eBFMG3p uEWM1vlJ -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:52 2026 by rpki-client