This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/b15waVmeZUiAPXdSgALdQ8K_I1k.roa File: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (raw, json) Hash identifier: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg= Subject key identifier: 6F:5E:70:69:59:9E:65:48:80:3D:77:52:80:02:DD:43:C2:BF:23:59 Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Certificate serial: 019B7C112206E5D61DFBA23303F2E1B22B78 Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/b15waVmeZUiAPXdSgALdQ8K_I1k.roa Signing time: Fri 02 Jan 2026 00:17:36 +0000 ROA not before: Fri 02 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25070 IP address blocks: 91.236.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:22:06:e5:d6:1d:fb:a2:33:03:f2:e1:b2:2b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Validity Not Before: Jan 2 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5e7069599e6548803d77528002dd43c2bf2359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:5f:be:80:ac:1b:8e:ac:a8:8b:b8:40:2c: 2c:69:bc:ef:48:ce:21:c3:7c:6d:46:c9:90:98:fb: b6:86:79:7b:3d:32:f6:8c:b9:02:0b:af:53:c5:ac: ed:53:f7:80:ce:6a:68:7f:48:b9:65:87:67:14:77: 10:b4:7f:45:3b:fb:5c:e5:a2:e2:ae:53:e5:41:5c: 4d:0e:21:86:ed:af:7b:97:a6:83:42:8d:9b:0d:1c: db:a6:4f:05:c9:40:0d:f0:18:a2:8f:8a:60:8e:a2: 7c:50:53:2c:b5:f9:13:3c:27:ee:55:2e:84:bd:a3: 4f:5a:5b:9d:c6:0a:94:d6:19:9c:27:a5:4d:f1:21: 8e:a4:74:c0:2c:5e:9f:71:a5:93:d7:5e:47:44:13: 3c:e6:cc:fb:b0:13:b8:e4:0b:ad:49:9b:5e:d1:1a: 0d:ee:78:d1:20:3e:ff:bb:11:5f:56:4b:0f:ff:07: c5:38:5e:06:6b:d4:15:66:b7:c9:c0:15:3e:89:51: e1:f3:9e:12:52:f0:64:36:31:42:e0:72:84:e8:77: 3d:d5:d8:df:de:05:bc:26:07:15:53:10:a8:eb:cf: 46:c6:e1:9d:ca:16:61:6c:35:0c:89:3a:60:25:50: 81:2c:bf:fb:ec:0e:66:a5:59:69:29:ac:00:40:56: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5E:70:69:59:9E:65:48:80:3D:77:52:80:02:DD:43:C2:BF:23:59 X509v3 Authority Key Identifier: keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/b15waVmeZUiAPXdSgALdQ8K_I1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.193.0/24 Signature Algorithm: sha256WithRSAEncryption 50:5d:11:eb:02:90:76:65:fe:6a:8b:ff:f1:44:9f:53:5d:6e: 15:93:18:db:da:64:cd:e5:c6:ef:53:93:42:37:7e:eb:6e:01: b5:03:47:98:1f:5b:d3:f7:3c:33:46:c3:1e:1a:dc:e0:87:a7: a3:59:51:d9:a4:f8:78:9c:91:c7:97:49:79:38:f5:63:8c:5b: 1f:73:8e:00:00:48:79:b0:30:f4:de:bc:26:79:61:6d:7a:1c: 3a:7b:6a:d1:5f:12:e7:ce:86:41:9c:61:33:9d:23:32:5b:01: fe:ef:5e:51:d3:4f:d4:b8:7b:0e:bb:9d:cd:4d:8d:a3:ec:ec: 18:a9:76:3e:34:f7:c1:d7:64:99:e5:16:5d:ec:df:3f:17:b8: 47:99:c8:61:7e:9a:48:a6:d0:95:a5:f1:93:4d:3e:f2:73:9c: 6e:af:d7:2d:87:44:8d:af:76:97:fe:66:2c:a6:c8:f7:8c:78: 47:56:86:2b:36:16:a9:68:a6:e7:1e:6b:d4:ac:53:1c:26:2c: c1:c3:a4:99:fb:13:e9:1b:95:2e:cf:0b:e4:0e:5f:17:21:bb: 09:e7:ea:df:65:2b:25:81:0b:e1:35:60:f7:d5:46:ed:4b:45: 8d:e5:b9:63:0d:7f:17:c3:5b:43:ba:dc:c9:5b:10:10:02:37: 68:2b:ef:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ESIG5dYd+6IzA/Lhsit4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5 MDg2YWEwHhcNMjYwMTAyMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjVlNzA2OTU5OWU2NTQ4ODAzZDc3NTI4MDAyZGQ0M2MyYmYyMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysxfvoCsG46sqIu4QCwsabzvSM4h w3xtRsmQmPu2hnl7PTL2jLkCC69TxaztU/eAzmpof0i5ZYdnFHcQtH9FO/tc5aLi rlPlQVxNDiGG7a97l6aDQo2bDRzbpk8FyUAN8Biij4pgjqJ8UFMstfkTPCfuVS6E vaNPWludxgqU1hmcJ6VN8SGOpHTALF6fcaWT115HRBM85sz7sBO45AutSZte0RoN 7njRID7/uxFfVksP/wfFOF4Ga9QVZrfJwBU+iVHh854SUvBkNjFC4HKE6Hc91djf 3gW8JgcVUxCo689GxuGdyhZhbDUMiTpgJVCBLL/77A5mpVlpKawAQFZayQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9ecGlZnmVIgD13UoAC3UPCvyNZMB8GA1UdIwQY MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt YjljNzk0ZTAzY2JhLzEvYjE1d2FWbWVaVWlBUFhkU2dBTGRROEtfSTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+zBMA0G CSqGSIb3DQEBCwUAA4IBAQBQXRHrApB2Zf5qi//xRJ9TXW4Vkxjb2mTN5cbvU5NC N37rbgG1A0eYH1vT9zwzRsMeGtzgh6ejWVHZpPh4nJHHl0l5OPVjjFsfc44AAEh5 sDD03rwmeWFtehw6e2rRXxLnzoZBnGEznSMyWwH+715R00/UuHsOu53NTY2j7OwY qXY+NPfB12SZ5RZd7N8/F7hHmchhfppIptCVpfGTTT7yc5xur9cth0SNr3aX/mYs psj3jHhHVoYrNhapaKbnHmvUrFMcJizBw6SZ+xPpG5UuzwvkDl8XIbsJ5+rfZSsl gQvhNWD31UbtS0WN5bljDX8Xw1tDutzJWxAQAjdoK+9h -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:13 2026 by rpki-client