This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/vC2Im6wO7AYNQfHqhdffdSsKQVk.roa File: vC2Im6wO7AYNQfHqhdffdSsKQVk.roa (raw, json) Hash identifier: 7HPvAiJ29pt2x/rNPwngG1GyeF1UIK/JkGxi50lh27k= Subject key identifier: BC:2D:88:9B:AC:0E:EC:06:0D:41:F1:EA:85:D7:DF:75:2B:0A:41:59 Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be Certificate serial: 019B797DEC36A8CB66D83FF5CB820EC0747B Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/vC2Im6wO7AYNQfHqhdffdSsKQVk.roa Signing time: Thu 01 Jan 2026 12:17:34 +0000 ROA not before: Thu 01 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12978 IP address blocks: 91.233.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ec:36:a8:cb:66:d8:3f:f5:cb:82:0e:c0:74:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc2d889bac0eec060d41f1ea85d7df752b0a4159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:a5:c1:1a:92:0c:04:d0:bb:52:11:7d:32: 3c:6e:ec:fc:87:65:52:b8:c8:43:d2:02:7d:7e:f2: 14:26:e4:21:84:39:74:d4:75:59:04:27:1b:b8:39: 25:52:79:43:bf:73:e0:b0:68:d9:9f:b6:8b:f8:53: f9:78:05:64:69:0d:4b:c6:3c:89:96:47:19:ca:93: 3d:45:52:5d:b1:6a:39:c0:ca:2c:3e:6a:9f:44:0a: f8:3a:9c:53:ea:7c:10:83:ec:1a:50:3e:52:9d:78: 00:7d:11:9c:0a:7d:a7:bd:ba:de:51:66:fd:5f:25: 31:4f:06:6d:51:9e:0b:c7:78:ed:94:bb:9f:32:1d: 04:b4:ae:53:6b:c8:f6:4b:b6:ab:0e:98:c1:98:1e: e8:f9:ea:7a:31:1d:5e:af:d7:2f:48:71:11:0d:70: 09:c2:8b:92:35:c8:cb:bd:f1:15:0a:6e:fb:b2:91: 29:6f:b6:54:56:a2:bb:b4:ae:74:28:1f:4b:00:fb: c2:40:eb:f4:54:40:a2:c0:36:d3:27:ee:ab:a5:81: d1:12:8a:9b:fd:53:57:94:76:6b:7b:a7:44:68:9a: d4:70:e1:49:9b:2e:9f:e5:34:b3:ce:48:d4:a4:c9: 1a:8a:98:1b:e5:da:ac:c1:41:58:81:58:49:79:0f: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2D:88:9B:AC:0E:EC:06:0D:41:F1:EA:85:D7:DF:75:2B:0A:41:59 X509v3 Authority Key Identifier: keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/vC2Im6wO7AYNQfHqhdffdSsKQVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.80.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:65:27:aa:d3:6a:72:36:bf:fa:5e:17:8d:95:59:7f:46:00: c1:a1:f5:b8:92:63:8f:b9:d4:2c:e2:94:e6:79:42:e4:98:ad: 48:43:5e:37:27:b5:12:71:08:57:db:b3:bf:33:9a:54:ee:60: 9b:ae:8b:1c:4e:7b:eb:01:98:61:46:61:69:b2:9f:b7:ef:a1: 20:de:c7:86:2a:8a:87:36:ce:70:94:c6:88:af:0d:26:19:b0: 1d:03:0d:12:2f:23:88:5f:4e:f9:6c:41:b9:79:d5:3b:85:11: e1:52:b9:82:79:20:ae:68:24:b5:d0:16:5c:0b:7e:1b:72:b0: e8:a5:01:1c:85:2e:f8:84:9f:39:9d:39:de:cf:14:3a:a8:e3: 55:16:56:f1:7f:37:ed:5f:04:97:ee:b2:7c:fc:8c:71:47:d7: cd:0a:2d:74:f7:c7:e8:ae:c9:b9:ba:39:90:f4:5c:2c:54:1f: 1d:f5:db:df:57:34:b4:08:d9:00:bb:3c:a3:e7:ec:ac:d4:18: 68:74:73:68:a0:3f:d2:52:04:98:7e:1a:e2:0c:46:a6:e1:ad: 37:fe:27:ad:d5:43:eb:7f:71:c1:c3:c7:60:7e:3a:ad:b6:27: 82:44:45:2f:55:b8:bf:70:92:27:cb:06:45:ce:ac:6c:5d:07: a5:a2:8f:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5few2qMtm2D/1y4IOwHR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjg5MzQwMjgzNzk0NDg5ZTQxYWM4NmFhZmE0NDE0Zjhh NGQ2YmUwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzJkODg5YmFjMGVlYzA2MGQ0MWYxZWE4NWQ3ZGY3NTJiMGE0MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBqlwRqSDATQu1IRfTI8buz8h2VS uMhD0gJ9fvIUJuQhhDl01HVZBCcbuDklUnlDv3PgsGjZn7aL+FP5eAVkaQ1LxjyJ lkcZypM9RVJdsWo5wMosPmqfRAr4OpxT6nwQg+waUD5SnXgAfRGcCn2nvbreUWb9 XyUxTwZtUZ4Lx3jtlLufMh0EtK5Ta8j2S7arDpjBmB7o+ep6MR1er9cvSHERDXAJ wouSNcjLvfEVCm77spEpb7ZUVqK7tK50KB9LAPvCQOv0VECiwDbTJ+6rpYHREoqb /VNXlHZre6dEaJrUcOFJmy6f5TSzzkjUpMkaipgb5dqswUFYgVhJeQ8tTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwtiJusDuwGDUHx6oXX33UrCkFZMB8GA1UdIwQY MBaAFOBok0AoN5RInkGshqr6RBT4pNa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYt N2JmYWViMTk1NDQ1LzEvdkMySW02d083QVlOUWZIcWhkZmZkU3NLUVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYtN2JmYWViMTk1NDQ1 LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+lQMA0G CSqGSIb3DQEBCwUAA4IBAQAPZSeq02pyNr/6XheNlVl/RgDBofW4kmOPudQs4pTm eULkmK1IQ143J7UScQhX27O/M5pU7mCbroscTnvrAZhhRmFpsp+376Eg3seGKoqH Ns5wlMaIrw0mGbAdAw0SLyOIX075bEG5edU7hRHhUrmCeSCuaCS10BZcC34bcrDo pQEchS74hJ85nTnezxQ6qONVFlbxfzftXwSX7rJ8/IxxR9fNCi1098forsm5ujmQ 9FwsVB8d9dvfVzS0CNkAuzyj5+ys1BhodHNooD/SUgSYfhriDEam4a03/iet1UPr f3HBw8dgfjqttieCREUvVbi/cJInywZFzqxsXQeloo/Q -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:58 2026 by rpki-client