This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_9HboKByaSoMHnysqhZOYfqvY2c.roa File: _9HboKByaSoMHnysqhZOYfqvY2c.roa (raw, json) Hash identifier: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo= Subject key identifier: FF:D1:DB:A0:A0:72:69:2A:0C:1E:7C:AC:AA:16:4E:61:FA:AF:63:67 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B7E38D54CFDE4B12D041D9B5C7FCA4CBB Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_9HboKByaSoMHnysqhZOYfqvY2c.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47821 IP address blocks: 91.242.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d5:4c:fd:e4:b1:2d:04:1d:9b:5c:7f:ca:4c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffd1dba0a072692a0c1e7cacaa164e61faaf6367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:14:34:e9:9b:62:ca:f3:4e:61:5c:6f:a9: 1d:1a:06:7d:64:de:95:de:61:3c:af:9b:a6:9a:7f: 9e:a1:09:00:85:c3:fb:9c:05:9b:51:34:ee:6c:d0: d9:1b:de:d3:44:15:90:7a:43:d0:ca:9d:ae:db:c0: e5:4e:6f:24:6f:76:74:9c:10:49:f2:80:e2:28:33: a2:8f:ac:c6:c9:2a:d3:92:12:c0:0b:18:9c:9b:fa: 16:46:ae:ce:7e:11:2f:4f:fb:76:0c:69:0a:a7:15: 1d:78:c7:b1:70:00:5d:e8:0d:b9:74:93:43:14:41: 9e:32:3b:48:c4:70:f2:52:b5:d5:11:6d:4c:1c:29: ef:2d:78:34:5f:51:f0:b7:e8:97:ab:ea:44:4c:93: 60:e2:d3:d1:69:1d:b3:1a:c1:98:4d:d3:d1:1f:b9: 1f:69:c8:1c:1a:4f:0b:10:c8:b8:f3:0c:d3:c5:ad: 97:3f:25:f3:af:f2:02:61:fc:58:ee:86:60:b6:28: d1:d3:4d:43:04:58:85:fb:4f:81:c8:68:61:10:84: bb:cb:75:7b:e2:fa:b7:04:2d:da:95:91:0f:56:81: a2:ff:26:78:0c:17:88:e7:97:50:c2:58:ed:a9:6c: 62:89:ff:71:74:39:13:1d:41:4a:1e:77:eb:ed:e1: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D1:DB:A0:A0:72:69:2A:0C:1E:7C:AC:AA:16:4E:61:FA:AF:63:67 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_9HboKByaSoMHnysqhZOYfqvY2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.242.0/24 Signature Algorithm: sha256WithRSAEncryption ac:e3:12:4a:40:55:c1:42:b6:e8:b6:08:38:b1:18:36:42:a1: ce:81:73:4d:c2:1a:0b:23:8d:ed:a3:4a:31:d0:47:cd:85:4c: 8b:03:bd:e7:24:cb:86:2f:0e:a9:8d:80:dd:4f:ee:7d:49:38: 70:79:9e:93:3e:6f:54:4e:21:91:ca:98:52:14:48:99:91:71: 9b:29:b3:d2:53:c5:56:3c:bd:6b:b4:d5:30:3a:08:a7:ca:bf: 4e:08:b3:46:4c:3c:1c:09:4b:28:70:17:54:a2:ed:1e:f5:0d: 53:51:47:41:82:07:41:5b:3c:56:a0:df:e2:e8:eb:c0:02:1c: f2:44:68:f5:fb:fa:fa:54:f6:32:51:ac:72:f4:89:4c:f8:ac: 5a:27:55:50:73:48:66:90:e3:f0:ff:a7:49:dd:20:a2:0b:d6: 52:4b:99:fe:fc:5e:54:3d:0f:2c:2d:26:53:ea:3e:75:e2:bd: 53:81:0a:4c:34:1d:3e:cd:59:87:0b:7c:50:53:cc:45:87:99: be:ac:fe:fb:0f:5e:ef:4b:0f:1e:21:2a:d7:dc:41:61:4f:0c: 82:56:eb:85:58:47:da:1c:27:4c:6f:64:2f:d1:35:af:46:8a: 6a:88:e6:b5:11:d0:4e:a0:ec:0b:3f:11:ed:24:9d:2a:19:e1: 32:05:9d:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONVM/eSxLQQdm1x/yky7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmQxZGJhMGEwNzI2OTJhMGMxZTdjYWNhYTE2NGU2MWZhYWY2MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFoUNOmbYsrzTmFcb6kdGgZ9ZN6V 3mE8r5ummn+eoQkAhcP7nAWbUTTubNDZG97TRBWQekPQyp2u28DlTm8kb3Z0nBBJ 8oDiKDOij6zGySrTkhLACxicm/oWRq7OfhEvT/t2DGkKpxUdeMexcABd6A25dJND FEGeMjtIxHDyUrXVEW1MHCnvLXg0X1Hwt+iXq+pETJNg4tPRaR2zGsGYTdPRH7kf acgcGk8LEMi48wzTxa2XPyXzr/ICYfxY7oZgtijR001DBFiF+0+ByGhhEIS7y3V7 4vq3BC3alZEPVoGi/yZ4DBeI55dQwljtqWxiif9xdDkTHUFKHnfr7eGxjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/R26CgcmkqDB58rKoWTmH6r2NnMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvXzlIYm9LQnlhU29NSG55c3FoWk9ZZnF2WTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/LyMA0G CSqGSIb3DQEBCwUAA4IBAQCs4xJKQFXBQrbotgg4sRg2QqHOgXNNwhoLI43to0ox 0EfNhUyLA73nJMuGLw6pjYDdT+59SThweZ6TPm9UTiGRyphSFEiZkXGbKbPSU8VW PL1rtNUwOginyr9OCLNGTDwcCUsocBdUou0e9Q1TUUdBggdBWzxWoN/i6OvAAhzy RGj1+/r6VPYyUaxy9IlM+KxaJ1VQc0hmkOPw/6dJ3SCiC9ZSS5n+/F5UPQ8sLSZT 6j514r1TgQpMNB0+zVmHC3xQU8xFh5m+rP77D17vSw8eISrX3EFhTwyCVuuFWEfa HCdMb2Qv0TWvRopqiOa1EdBOoOwLPxHtJJ0qGeEyBZ1K -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:48 2026 by rpki-client