This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/91jzPpyhLA-PAXeNm7LV01McVYk.roa File: 91jzPpyhLA-PAXeNm7LV01McVYk.roa (raw, json) Hash identifier: zVfFgQK9yW19axQR7Z9c3CenPU09qBELr2O2n+U7UAs= Subject key identifier: F7:58:F3:3E:9C:A1:2C:0F:8F:01:77:8D:9B:B2:D5:D3:53:1C:55:89 Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1 Certificate serial: 019B7834A90A6FBF8B952C1A636A1DEC6781 Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/91jzPpyhLA-PAXeNm7LV01McVYk.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8455 IP address blocks: 185.31.144.0/22 maxlen: 22 2a00:bd20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a9:0a:6f:bf:8b:95:2c:1a:63:6a:1d:ec:67:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f758f33e9ca12c0f8f01778d9bb2d5d3531c5589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:18:f7:5a:f8:ac:29:4c:5c:42:71:38:38: d4:fa:99:70:ad:49:e8:a4:21:b3:b9:e5:ba:6a:a1: a3:cb:70:c3:4b:a2:bc:9b:36:6b:f1:fa:fb:ab:0b: 99:51:14:ef:f2:8e:7a:1a:82:76:8f:ce:f3:a3:fb: 1c:ca:78:67:31:b5:32:90:58:63:72:e8:8d:f0:38: c9:08:ab:f2:06:5f:fc:9c:a2:9a:bc:4b:dd:61:42: 0b:d2:ec:32:43:77:98:a2:25:d0:b2:6b:59:c6:2a: 22:c6:8b:f9:c1:de:49:87:6d:ba:1a:c5:bd:bc:10: 38:f8:f2:41:ae:89:31:85:15:b5:f9:62:c3:89:7e: 52:57:f2:41:cb:af:a3:10:97:1d:94:4c:17:d4:6f: 9d:f9:c6:c1:05:5e:a4:90:b2:c9:93:1d:bd:b3:76: 34:23:cb:68:12:d1:6a:7a:35:fd:64:ab:12:c3:9c: e8:5e:d8:0d:5d:4c:4e:f3:96:53:e2:ba:50:80:ad: 4d:af:ba:c0:11:c5:15:ea:6c:4b:62:b6:fa:38:26: ae:49:92:ef:e9:2e:52:d0:2d:0f:97:17:f2:ec:24: 06:6b:53:7b:50:f8:62:f9:1e:d1:52:c3:1b:bb:75: 53:7a:cb:a5:3a:17:c9:8b:9d:48:40:49:cf:49:26: d2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:58:F3:3E:9C:A1:2C:0F:8F:01:77:8D:9B:B2:D5:D3:53:1C:55:89 X509v3 Authority Key Identifier: keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/91jzPpyhLA-PAXeNm7LV01McVYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.144.0/22 IPv6: 2a00:bd20::/32 Signature Algorithm: sha256WithRSAEncryption 14:8a:c6:d1:b6:a3:74:26:83:4e:37:ec:9a:d2:7f:25:29:a7: d7:1b:e9:32:7f:87:f9:47:e9:1c:4d:34:89:bf:3e:43:2a:69: 58:97:df:e4:64:70:f2:ad:af:1e:89:5e:72:05:e3:48:46:f1: bd:20:7d:67:f2:21:82:c4:bf:f8:d1:e6:37:31:a3:47:40:06: c4:a2:70:58:df:29:65:04:19:23:86:ad:bf:6c:74:d1:20:be: 03:ff:9b:31:b7:c3:0e:95:69:f5:e8:0c:44:79:f2:c2:22:83: e6:46:c6:6f:3f:4d:50:e8:96:ea:af:55:1d:fe:1f:a6:72:16: fb:2a:6b:71:62:a8:99:20:c4:81:2a:ed:8e:74:ba:92:f8:15: 4c:14:f7:bd:a9:da:ae:0e:be:d8:a0:99:15:32:73:59:14:db: 65:f4:fe:ab:d1:f4:09:61:16:8b:d1:7b:b9:33:9d:6a:5c:4e: 7a:bf:73:21:07:c9:f4:fb:66:cb:97:e5:11:fa:02:17:e7:0a: 6a:2e:37:b6:b4:99:95:f4:e0:b8:b1:68:ec:40:48:d2:8c:1a: fc:1a:18:12:4f:4a:df:71:0a:18:5e:7e:1b:b0:16:65:67:b1: 64:d7:a0:ba:ce:20:85:30:88:c2:0c:13:2b:b3:63:ae:be:d0: 95:32:a1:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NKkKb7+LlSwaY2od7GeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NzJkYTBmOWM2YzU2ODZhM2RiOWVlMTI0YTk5MDQyYjBh ODgyZDEwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzU4ZjMzZTljYTEyYzBmOGYwMTc3OGQ5YmIyZDVkMzUzMWM1NTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYY91r4rClMXEJxODjU+plwrUno pCGzueW6aqGjy3DDS6K8mzZr8fr7qwuZURTv8o56GoJ2j87zo/scynhnMbUykFhj cuiN8DjJCKvyBl/8nKKavEvdYUIL0uwyQ3eYoiXQsmtZxioixov5wd5Jh226GsW9 vBA4+PJBrokxhRW1+WLDiX5SV/JBy6+jEJcdlEwX1G+d+cbBBV6kkLLJkx29s3Y0 I8toEtFqejX9ZKsSw5zoXtgNXUxO85ZT4rpQgK1Nr7rAEcUV6mxLYrb6OCauSZLv 6S5S0C0Plxfy7CQGa1N7UPhi+R7RUsMbu3VTesulOhfJi51IQEnPSSbS+QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPdY8z6coSwPjwF3jZuy1dNTHFWJMB8GA1UdIwQY MBaAFLhy2g+cbFaGo9ue4SSpkEKwqILRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMt ZTIzMTAzYTg4MDUyLzEvOTFqelBweWhMQS1QQVhlTm03TFYwMU1jVllrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMtZTIzMTAzYTg4MDUy LzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR+QMA0E AgACMAcDBQAqAL0gMA0GCSqGSIb3DQEBCwUAA4IBAQAUisbRtqN0JoNON+ya0n8l KafXG+kyf4f5R+kcTTSJvz5DKmlYl9/kZHDyra8eiV5yBeNIRvG9IH1n8iGCxL/4 0eY3MaNHQAbEonBY3yllBBkjhq2/bHTRIL4D/5sxt8MOlWn16AxEefLCIoPmRsZv P01Q6Jbqr1Ud/h+mchb7KmtxYqiZIMSBKu2OdLqS+BVMFPe9qdquDr7YoJkVMnNZ FNtl9P6r0fQJYRaL0Xu5M51qXE56v3MhB8n0+2bLl+UR+gIX5wpqLje2tJmV9OC4 sWjsQEjSjBr8GhgST0rfcQoYXn4bsBZlZ7Fk16C6ziCFMIjCDBMrs2OuvtCVMqEz -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:28 2026 by rpki-client