This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/aQ9gfy4fYC0VC08rI5UWZXPKETo.roa File: aQ9gfy4fYC0VC08rI5UWZXPKETo.roa (raw, json) Hash identifier: 3nT5m1pplYfTGimm9tivPlp5Ti9zXf+dDwmifgJXGYE= Subject key identifier: 69:0F:60:7F:2E:1F:60:2D:15:0B:4F:2B:23:95:16:65:73:CA:11:3A Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Certificate serial: 019B7C80C6FD1C532E2DA5B0034090AB867C Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/aQ9gfy4fYC0VC08rI5UWZXPKETo.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212974 IP address blocks: 91.216.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c6:fd:1c:53:2e:2d:a5:b0:03:40:90:ab:86:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=690f607f2e1f602d150b4f2b2395166573ca113a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:79:68:23:c3:66:07:d8:0f:a5:2f:07:c2: 87:1a:a7:90:3a:fd:81:ea:66:d5:f0:14:d9:1d:b1: 7b:f1:f8:f9:89:34:6f:24:26:d0:43:a9:fa:e0:29: c6:2d:6c:18:29:59:20:6c:cf:56:b5:e5:5d:70:18: db:de:6c:41:89:dd:b5:35:11:12:5b:20:cb:70:1e: cd:54:07:43:ec:7f:0e:26:a2:f2:8e:21:e1:a3:aa: f4:37:f2:be:52:1c:1b:d9:08:5d:ca:b6:ed:89:b5: 51:a2:df:f8:67:fe:e9:eb:39:e3:54:3c:7e:19:0e: 32:bb:f5:97:4f:0c:2c:2a:d9:cf:bd:85:bc:77:67: b9:f2:bd:a7:69:1e:bf:d6:ab:e6:68:d7:0f:8b:c4: 01:11:4a:6f:63:f2:cf:47:b7:77:36:49:3a:ac:01: f9:94:45:db:80:d6:b8:f4:f6:51:f1:b4:f3:28:a2: 95:e6:3b:9f:92:fb:1e:08:86:e2:93:f0:dc:92:56: 82:ae:8f:26:14:b9:17:e3:ad:86:66:a3:cb:ee:a5: 54:11:b7:0a:b5:ad:e4:c5:22:8b:50:36:87:2a:2c: 59:9d:b7:bc:06:ce:ca:54:25:f8:6d:d6:28:75:90: 25:bd:b3:ef:47:8f:a8:14:35:3b:7e:e5:b9:47:82: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0F:60:7F:2E:1F:60:2D:15:0B:4F:2B:23:95:16:65:73:CA:11:3A X509v3 Authority Key Identifier: keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/aQ9gfy4fYC0VC08rI5UWZXPKETo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.146.0/24 Signature Algorithm: sha256WithRSAEncryption a0:92:01:22:ca:ed:07:80:f2:15:fd:b4:bd:11:30:35:f8:0b: 3c:f7:6b:76:f6:ad:ce:c0:80:4f:e5:9d:4f:7f:34:df:40:43: 0b:95:d6:1a:2a:7e:66:89:f8:44:38:2d:b2:f8:7f:d2:8a:1a: 58:58:9b:0f:14:08:c6:bd:a0:12:8f:3a:b7:df:b9:0e:b9:7c: 59:29:69:57:a2:b2:7c:bc:e9:a2:da:4e:64:c5:95:98:17:8c: d4:1d:6a:e2:1c:5f:c2:7f:4c:c8:fe:70:98:b5:39:17:2b:8d: 35:58:6a:d2:8f:cd:57:98:2d:bc:58:f3:ef:24:fe:91:a7:e2: 4f:ae:1a:a3:51:ad:0e:2c:3f:dd:1a:9c:11:a8:d7:79:00:ba: 4a:f6:af:75:39:7b:6f:5f:e5:a2:5a:c7:60:d0:60:e0:83:a5: 88:be:72:e5:67:91:dd:24:7c:27:19:3e:20:a0:7c:15:82:d9: bd:ee:79:19:29:13:1e:98:7f:7a:39:89:ea:15:e9:c9:17:4b: 3c:16:ce:af:25:e7:42:54:ac:7b:9a:10:3e:94:0b:eb:94:77: 62:47:68:cb:d6:e9:fb:d2:6a:94:8e:f9:e3:f7:d4:a2:3a:a6: 4d:b1:83:d2:8a:1b:a1:a5:2c:76:83:aa:42:fa:dd:c0:18:57: a7:f7:24:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMb9HFMuLaWwA0CQq4Z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2 N2VlZmEwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTBmNjA3ZjJlMWY2MDJkMTUwYjRmMmIyMzk1MTY2NTczY2ExMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26N5aCPDZgfYD6UvB8KHGqeQOv2B 6mbV8BTZHbF78fj5iTRvJCbQQ6n64CnGLWwYKVkgbM9WteVdcBjb3mxBid21NRES WyDLcB7NVAdD7H8OJqLyjiHho6r0N/K+Uhwb2QhdyrbtibVRot/4Z/7p6znjVDx+ GQ4yu/WXTwwsKtnPvYW8d2e58r2naR6/1qvmaNcPi8QBEUpvY/LPR7d3Nkk6rAH5 lEXbgNa49PZR8bTzKKKV5jufkvseCIbik/DcklaCro8mFLkX462GZqPL7qVUEbcK ta3kxSKLUDaHKixZnbe8Bs7KVCX4bdYodZAlvbPvR4+oFDU7fuW5R4I+HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGkPYH8uH2AtFQtPKyOVFmVzyhE6MB8GA1UdIwQY MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt YWVjY2I2MzJkMjg4LzEvYVE5Z2Z5NGZZQzBWQzA4ckk1VVdaWFBLRVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4 LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iSMA0G CSqGSIb3DQEBCwUAA4IBAQCgkgEiyu0HgPIV/bS9ETA1+As892t29q3OwIBP5Z1P fzTfQEMLldYaKn5mifhEOC2y+H/SihpYWJsPFAjGvaASjzq337kOuXxZKWlXorJ8 vOmi2k5kxZWYF4zUHWriHF/Cf0zI/nCYtTkXK401WGrSj81XmC28WPPvJP6Rp+JP rhqjUa0OLD/dGpwRqNd5ALpK9q91OXtvX+WiWsdg0GDgg6WIvnLlZ5HdJHwnGT4g oHwVgtm97nkZKRMemH96OYnqFenJF0s8Fs6vJedCVKx7mhA+lAvrlHdiR2jL1un7 0mqUjvnj99SiOqZNsYPSihuhpSx2g6pC+t3AGFen9yQF -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:42 2026 by rpki-client