This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/b2rvvrsVQFtwnkwXifPYj1NvFj0.roa File: b2rvvrsVQFtwnkwXifPYj1NvFj0.roa (raw, json) Hash identifier: ZcsqF+OXs9Ku1KVG6zGJzGE4b81ui58jPj59XeWe5LA= Subject key identifier: 6F:6A:EF:BE:BB:15:40:5B:70:9E:4C:17:89:F3:D8:8F:53:6F:16:3D Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493 Certificate serial: 019B797EE522A2FBF525B2C6B76B87AC2435 Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/b2rvvrsVQFtwnkwXifPYj1NvFj0.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25447 IP address blocks: 91.210.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e5:22:a2:fb:f5:25:b2:c6:b7:6b:87:ac:24:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f6aefbebb15405b709e4c1789f3d88f536f163d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:d3:81:73:40:a8:b2:c6:3a:68:76:4e:99: e0:f8:91:01:2c:c7:a1:32:95:af:f6:5c:a8:4b:78: 8c:7b:5a:d6:f0:7d:1d:8c:0f:13:36:ed:1c:ce:c2: 24:c9:25:c5:74:30:83:ee:50:af:c7:cd:05:4a:e5: dd:0b:9e:ce:ff:9e:99:c9:a1:22:11:09:8d:04:47: d2:f3:0f:83:ed:4a:4d:0c:1f:5c:89:79:e1:07:9e: 8a:0a:c4:c8:cd:66:23:a7:9e:7f:34:9b:9b:70:11: 09:09:d8:80:6b:b9:9f:2c:28:c2:2a:f3:3d:a2:a6: 33:8d:a7:db:05:46:8b:39:e6:e7:9b:09:93:12:ab: 3d:92:46:8e:99:3f:db:6a:03:e4:96:52:fa:bf:8d: 91:4a:b0:e5:c9:60:a5:b1:3b:ec:f4:fb:7b:14:38: 74:e7:c3:ec:bf:1c:64:83:1f:dd:59:98:3c:02:2b: c0:b0:14:7a:df:18:cb:be:6f:1f:01:c3:c4:ff:b9: a7:56:f7:71:4b:29:b6:d3:b7:f1:96:aa:49:0a:48: 26:1c:9c:b6:dc:a1:04:0e:b4:56:c0:3c:09:b5:ae: 7c:20:41:b1:1e:33:79:2f:d8:8e:b9:46:fc:bb:28: 59:09:66:1b:72:7f:84:30:19:7c:1b:1a:df:94:61: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6A:EF:BE:BB:15:40:5B:70:9E:4C:17:89:F3:D8:8F:53:6F:16:3D X509v3 Authority Key Identifier: keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/b2rvvrsVQFtwnkwXifPYj1NvFj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.220.0/22 Signature Algorithm: sha256WithRSAEncryption a2:6a:e6:57:ee:fa:72:ac:f4:67:18:d3:dc:d2:b8:50:36:a0: 41:85:b0:29:ee:93:bb:65:af:91:4c:92:c0:9f:20:60:33:79: e6:84:66:76:cb:24:d9:e6:06:2c:e1:1d:ad:2b:0b:eb:f0:58: 5f:54:59:82:bf:a2:77:01:19:d3:aa:e5:1f:0e:fc:b1:b2:58: de:4d:4a:f7:d3:ed:fe:10:8c:e4:80:f9:33:03:70:51:d7:e6: df:ed:13:9f:53:08:85:35:a6:26:8e:25:a8:73:58:d5:0f:ad: bb:d5:ee:64:e1:b3:0a:08:eb:d3:36:95:a3:8c:6e:bb:c5:fc: df:d4:68:c3:3a:bb:04:f5:b2:9f:02:d6:58:0c:dd:4b:ab:6d: d0:50:8e:94:a2:ac:40:4e:6a:5f:aa:88:0e:c8:14:c4:73:91: 7b:2b:df:a6:49:2e:1b:ef:90:fe:29:87:cb:13:98:37:b6:73: aa:e4:e8:a1:cf:80:3a:b2:85:ae:59:5c:0d:5a:a1:b9:a7:95: e5:b1:4a:12:37:a7:a6:fe:25:f1:81:d1:d0:3f:b6:50:7d:27: 88:d4:c6:cf:73:f3:df:f2:ae:4d:99:08:87:e7:e1:59:60:19: f7:24:08:3c:60:36:77:6b:6c:62:99:b0:7b:34:0d:a5:fd:9e: 1c:8c:96:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuUiovv1JbLGt2uHrCQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMmQ1NTNiMjhjNWQwZWE1YjFlZjYwYzliY2UzM2RmNTBi Y2I0OTMwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjZhZWZiZWJiMTU0MDViNzA5ZTRjMTc4OWYzZDg4ZjUzNmYxNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYfTgXNAqLLGOmh2Tpng+JEBLMeh MpWv9lyoS3iMe1rW8H0djA8TNu0czsIkySXFdDCD7lCvx80FSuXdC57O/56ZyaEi EQmNBEfS8w+D7UpNDB9ciXnhB56KCsTIzWYjp55/NJubcBEJCdiAa7mfLCjCKvM9 oqYzjafbBUaLOebnmwmTEqs9kkaOmT/bagPkllL6v42RSrDlyWClsTvs9Pt7FDh0 58Psvxxkgx/dWZg8AivAsBR63xjLvm8fAcPE/7mnVvdxSym207fxlqpJCkgmHJy2 3KEEDrRWwDwJta58IEGxHjN5L9iOuUb8uyhZCWYbcn+EMBl8GxrflGEVJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9q7767FUBbcJ5MF4nz2I9TbxY9MB8GA1UdIwQY MBaAFMItVTsoxdDqWx72DJvOM99QvLSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUt OTY3NTA2ODg1N2YxLzEvYjJydnZyc1ZRRnR3bmt3WGlmUFlqMU52RmowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUtOTY3NTA2ODg1N2Yx LzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9LcMA0G CSqGSIb3DQEBCwUAA4IBAQCiauZX7vpyrPRnGNPc0rhQNqBBhbAp7pO7Za+RTJLA nyBgM3nmhGZ2yyTZ5gYs4R2tKwvr8FhfVFmCv6J3ARnTquUfDvyxsljeTUr30+3+ EIzkgPkzA3BR1+bf7ROfUwiFNaYmjiWoc1jVD6271e5k4bMKCOvTNpWjjG67xfzf 1GjDOrsE9bKfAtZYDN1Lq23QUI6UoqxATmpfqogOyBTEc5F7K9+mSS4b75D+KYfL E5g3tnOq5Oihz4A6soWuWVwNWqG5p5XlsUoSN6em/iXxgdHQP7ZQfSeI1MbPc/Pf 8q5NmQiH5+FZYBn3JAg8YDZ3a2ximbB7NA2l/Z4cjJa1 -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:14 2026 by rpki-client