This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/91Petc5RKlCy-MU2C9Yy6lq65ZE.roa File: 91Petc5RKlCy-MU2C9Yy6lq65ZE.roa (raw, json) Hash identifier: 7hccwNO3UaWQ0JhtP5+TQ+OksNzm3EM6wDMxIQgrpWs= Subject key identifier: F7:53:DE:B5:CE:51:2A:50:B2:F8:C5:36:0B:D6:32:EA:5A:BA:E5:91 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019B7AC9463E46ACDA5B87B4FDE7269CCC04 Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/91Petc5RKlCy-MU2C9Yy6lq65ZE.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 194.101.120.0/22 maxlen: 22 194.227.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:46:3e:46:ac:da:5b:87:b4:fd:e7:26:9c:cc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f753deb5ce512a50b2f8c5360bd632ea5abae591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:e0:3a:5d:2b:2a:7d:90:1f:70:09:6a:d3: 97:c5:64:7b:99:63:1f:79:b8:ef:9a:eb:d6:82:f9: 3e:d6:38:e5:59:cf:8f:25:5a:f6:90:98:91:08:8e: 51:26:51:13:65:97:0a:eb:3d:d4:99:8c:f8:6e:46: 9c:6e:3e:ec:48:6b:64:80:75:3b:e6:0e:06:0f:4e: dd:b0:27:ae:6c:9d:9e:f9:b8:45:1c:8b:7c:bf:c8: 2b:88:c0:00:9a:15:14:86:4a:52:b1:d5:9e:9a:9c: ce:9b:70:4b:c2:e5:a7:8c:d0:6c:d2:36:e8:f9:19: 5d:cf:fc:21:c6:48:50:5a:24:90:9f:8b:16:92:09: ac:7a:f2:36:92:07:ad:03:c2:ed:cc:40:fc:dc:be: a6:31:b5:35:dc:ad:8c:63:7d:d6:63:9c:68:75:ea: a3:88:dd:6a:9d:1b:70:a2:d6:91:52:50:70:87:b0: 38:33:87:53:25:c1:0c:54:04:7b:cb:d8:97:54:fa: c6:d1:73:3d:7e:ae:03:64:5c:61:bd:b5:28:d9:c3: 46:d5:f9:7e:31:aa:66:cc:c1:e8:37:8c:58:69:ce: 55:0a:29:91:9b:f4:05:9c:ba:a4:b3:d2:10:84:4a: 56:52:7a:ad:2f:94:3d:38:b6:db:a7:4f:11:bb:7f: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:53:DE:B5:CE:51:2A:50:B2:F8:C5:36:0B:D6:32:EA:5A:BA:E5:91 X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/91Petc5RKlCy-MU2C9Yy6lq65ZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.101.120.0/22 194.227.208.0/23 Signature Algorithm: sha256WithRSAEncryption 37:2f:5d:c9:38:23:93:43:5a:0d:84:91:b7:1c:1c:4f:74:a3: 83:4e:e8:90:b8:6e:c1:a7:57:48:94:19:0f:96:b5:fa:06:18: d4:7d:43:2d:88:e3:d2:0e:62:06:1b:dc:09:45:b0:26:1f:d2: bd:ec:27:e1:90:e9:84:74:1f:cf:13:e2:44:e8:1f:f6:a2:ab: b8:2a:97:e0:8e:5e:d3:57:05:f8:5d:27:23:79:06:44:8c:16: 78:13:4b:c3:e8:0d:1d:31:18:ea:46:3f:9b:29:4a:54:77:9e: be:61:34:88:cd:11:e1:0f:2d:4a:ea:cd:c8:a7:6a:83:cb:10: d8:d8:06:d5:04:a1:ee:e4:c1:0b:af:36:d3:ec:a5:35:d5:ba: a6:92:12:fe:23:cc:5e:68:1d:6c:14:22:b3:0c:90:ed:bf:6c: 1c:d2:69:fb:b9:fc:b2:bf:07:58:41:a5:14:38:5b:84:75:18: b4:9f:0e:0c:ee:89:44:f8:aa:31:00:d4:74:c6:65:b0:7a:f2: 90:a0:1c:37:19:ea:64:bd:85:d2:7a:7e:89:18:b3:a5:16:f5: 05:f2:e2:83:86:7c:70:82:e0:a6:54:35:e4:8c:4e:f8:1a:07: f5:5b:0e:5c:e9:da:60:c4:0c:7a:a2:25:42:df:87:10:eb:af: 7b:a0:d8:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yUY+RqzaW4e0/ecmnMwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzUzZGViNWNlNTEyYTUwYjJmOGM1MzYwYmQ2MzJlYTVhYmFlNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwbgOl0rKn2QH3AJatOXxWR7mWMf ebjvmuvWgvk+1jjlWc+PJVr2kJiRCI5RJlETZZcK6z3UmYz4bkacbj7sSGtkgHU7 5g4GD07dsCeubJ2e+bhFHIt8v8griMAAmhUUhkpSsdWempzOm3BLwuWnjNBs0jbo +Rldz/whxkhQWiSQn4sWkgmsevI2kgetA8LtzED83L6mMbU13K2MY33WY5xodeqj iN1qnRtwotaRUlBwh7A4M4dTJcEMVAR7y9iXVPrG0XM9fq4DZFxhvbUo2cNG1fl+ MapmzMHoN4xYac5VCimRm/QFnLqks9IQhEpWUnqtL5Q9OLbbp08Ru3+yewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPdT3rXOUSpQsvjFNgvWMupauuWRMB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvOTFQZXRjNVJLbEN5LU1VMkM5WXk2bHE2NVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwmV4AwQB wuPQMA0GCSqGSIb3DQEBCwUAA4IBAQA3L13JOCOTQ1oNhJG3HBxPdKODTuiQuG7B p1dIlBkPlrX6BhjUfUMtiOPSDmIGG9wJRbAmH9K97CfhkOmEdB/PE+JE6B/2oqu4 Kpfgjl7TVwX4XScjeQZEjBZ4E0vD6A0dMRjqRj+bKUpUd56+YTSIzRHhDy1K6s3I p2qDyxDY2AbVBKHu5MELrzbT7KU11bqmkhL+I8xeaB1sFCKzDJDtv2wc0mn7ufyy vwdYQaUUOFuEdRi0nw4M7olE+KoxANR0xmWwevKQoBw3GepkvYXSen6JGLOlFvUF 8uKDhnxwguCmVDXkjE74Ggf1Ww5c6dpgxAx6oiVC34cQ6697oNhe -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:32 2026 by rpki-client