This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/61huzXEr5q5M8J__iIN7IjunhKg.roa File: 61huzXEr5q5M8J__iIN7IjunhKg.roa (raw, json) Hash identifier: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8= Subject key identifier: EB:58:6E:CD:71:2B:E6:AE:4C:F0:9F:FF:88:83:7B:22:3B:A7:84:A8 Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb Certificate serial: 019B7C129D96B386CBEC1E93E50366822925 Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/61huzXEr5q5M8J__iIN7IjunhKg.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197600 IP address blocks: 91.223.160.0/24 maxlen: 24 2001:678:7b8::/48 maxlen: 48 2001:678:7bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9d:96:b3:86:cb:ec:1e:93:e5:03:66:82:29:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb586ecd712be6ae4cf09fff88837b223ba784a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:ef:42:80:f2:44:13:10:a2:ee:ca:26:a9: 86:4a:fe:b7:7f:f7:d8:44:03:96:9e:41:3c:9b:2b: 52:51:f3:f8:9c:8c:5a:fa:63:fe:53:1b:84:24:90: 1d:e4:99:da:fd:27:be:b2:88:bb:fc:5e:64:cf:74: d0:dd:c8:46:f6:92:cf:e3:82:43:cc:42:c6:a5:40: 4b:e2:6b:e5:3c:d1:5b:36:c4:09:30:f6:6b:3c:b2: 85:39:89:cf:26:a0:cb:d1:59:f3:82:76:0a:04:11: 58:10:55:58:8b:74:54:ce:75:20:42:60:3d:f6:08: 7b:aa:60:db:fd:a1:29:75:46:3e:86:9c:6a:59:d5: 02:a9:25:9f:08:d4:c7:f0:48:e4:22:d3:c7:0c:84: f6:50:0b:4b:68:8f:5c:da:ae:5c:2c:c3:a2:9f:c2: 84:b5:3c:ef:d4:0d:63:51:e1:fe:d5:53:55:96:05: 17:fb:af:99:96:ae:83:54:af:65:4b:ce:79:0e:98: 29:21:60:b9:f5:1b:d4:75:ca:05:7f:04:a3:c6:be: 4a:9b:0b:db:ea:ca:74:ae:d5:0e:0b:66:2f:c8:54: 3c:8c:59:3d:66:46:3e:f7:f8:61:5c:66:22:7d:bb: 3b:0a:bd:e7:c1:04:fa:5b:ba:40:3a:e2:89:93:22: c8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:58:6E:CD:71:2B:E6:AE:4C:F0:9F:FF:88:83:7B:22:3B:A7:84:A8 X509v3 Authority Key Identifier: keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/61huzXEr5q5M8J__iIN7IjunhKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.160.0/24 IPv6: 2001:678:7b8::/48 2001:678:7bc::/48 Signature Algorithm: sha256WithRSAEncryption 33:73:a1:72:c2:7e:c9:5c:1b:22:8f:35:32:d3:a9:58:1a:b5: 9b:12:04:32:9b:6c:6f:d8:84:05:68:df:32:96:c5:c1:1d:04: cd:48:ad:d0:9e:9a:5c:c0:ba:c0:3b:88:0c:5a:bc:b3:63:a0: db:b1:8a:df:8d:5f:4a:ce:4e:66:86:c3:b3:6a:09:fc:e3:4a: 6b:9f:8b:57:cb:97:df:a6:87:12:76:0e:6d:a1:3d:67:f4:be: b8:49:41:43:30:4a:9c:60:80:7c:5c:40:91:75:5e:56:df:d5: 49:73:70:3d:87:c8:d2:ce:58:be:bc:f3:de:a7:38:33:10:09: d2:4a:da:e2:46:23:43:be:c6:9a:b3:85:80:19:71:d1:77:0c: 7e:09:87:55:ac:09:b2:1b:c7:c3:c1:3d:40:10:85:1e:7b:1b: 72:1f:43:07:91:d7:61:05:7f:d2:0f:ee:57:5b:17:be:ef:b8: 76:35:08:d0:aa:fb:c4:cd:57:9d:5a:b2:53:89:ce:24:85:de: 76:bf:05:53:fe:a7:3f:0c:51:ed:2e:00:b1:46:85:53:cf:36: c0:c0:78:77:c2:46:a4:f5:4d:6c:65:17:03:5a:d3:8c:67:de: ad:72:ef:bd:2a:2c:aa:b4:97:a4:dc:fb:ac:af:4c:cf:50:06: 1d:66:5f:a7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8Ep2Ws4bL7B6T5QNmgiklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNTliY2U2MWJhOWQyYTBlMzU1YmUwMWYxMzQxYjhkZjc2 YWViZGIwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjU4NmVjZDcxMmJlNmFlNGNmMDlmZmY4ODgzN2IyMjNiYTc4NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB/vQoDyRBMQou7KJqmGSv63f/fY RAOWnkE8mytSUfP4nIxa+mP+UxuEJJAd5Jna/Se+soi7/F5kz3TQ3chG9pLP44JD zELGpUBL4mvlPNFbNsQJMPZrPLKFOYnPJqDL0VnzgnYKBBFYEFVYi3RUznUgQmA9 9gh7qmDb/aEpdUY+hpxqWdUCqSWfCNTH8EjkItPHDIT2UAtLaI9c2q5cLMOin8KE tTzv1A1jUeH+1VNVlgUX+6+Zlq6DVK9lS855DpgpIWC59RvUdcoFfwSjxr5Kmwvb 6sp0rtUOC2YvyFQ8jFk9ZkY+9/hhXGYifbs7Cr3nwQT6W7pAOuKJkyLImwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOtYbs1xK+auTPCf/4iDeyI7p4SoMB8GA1UdIwQY MBaAFNtZvOYbqdKg41W+AfE0G433auvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWIt M2EwNDJmNzdiNzM4LzEvNjFodXpYRXI1cTVNOEpfX2lJTjdJanVuaEtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWItM2EwNDJmNzdiNzM4 LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAW9+gMBgE AgACMBIDBwAgAQZ4B7gDBwAgAQZ4B7wwDQYJKoZIhvcNAQELBQADggEBADNzoXLC fslcGyKPNTLTqVgatZsSBDKbbG/YhAVo3zKWxcEdBM1IrdCemlzAusA7iAxavLNj oNuxit+NX0rOTmaGw7NqCfzjSmufi1fLl9+mhxJ2Dm2hPWf0vrhJQUMwSpxggHxc QJF1Xlbf1UlzcD2HyNLOWL68896nODMQCdJK2uJGI0O+xpqzhYAZcdF3DH4Jh1Ws CbIbx8PBPUAQhR57G3IfQweR12EFf9IP7ldbF77vuHY1CNCq+8TNV51aslOJziSF 3na/BVP+pz8MUe0uALFGhVPPNsDAeHfCRqT1TWxlFwNa04xn3q1y770qLKq0l6Tc +6yvTM9QBh1mX6c= -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:56 2026 by rpki-client