This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/cSi7_OAuX-rLMOiqKcF2agOjyuY.roa File: cSi7_OAuX-rLMOiqKcF2agOjyuY.roa (raw, json) Hash identifier: SyyfBcCCktRPddt1j77ZoKfvba/2lQeJcmhdFBczGME= Subject key identifier: 71:28:BB:FC:E0:2E:5F:EA:CB:30:E8:AA:29:C1:76:6A:03:A3:CA:E6 Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019B7A5AAF19A4EF35C33EA99E8DDBBF8428 Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/cSi7_OAuX-rLMOiqKcF2agOjyuY.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44571 IP address blocks: 91.202.60.0/24 maxlen: 24 91.202.61.0/24 maxlen: 24 91.202.62.0/24 maxlen: 24 91.202.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:af:19:a4:ef:35:c3:3e:a9:9e:8d:db:bf:84:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7128bbfce02e5feacb30e8aa29c1766a03a3cae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:55:e2:cf:1d:dc:6f:d5:0a:12:45:e5:97: 74:c6:13:c8:5f:17:dd:2d:7a:74:01:78:73:24:a4: 08:88:5e:f5:9b:82:5a:97:f8:48:59:95:17:d1:aa: 1e:2e:b2:b1:f8:57:ba:e4:6f:7a:93:0a:93:b0:34: ec:39:f3:30:78:09:e4:52:70:08:1c:e9:1f:f6:83: b3:a6:2b:54:3c:23:c6:9b:9a:9c:02:c3:39:70:96: 60:fc:f0:49:9d:83:6b:09:c9:98:dd:07:11:69:ab: 39:b2:c9:5b:ca:fa:9b:02:e6:d8:47:d1:21:dd:06: bb:f0:45:00:f1:9e:53:e3:9a:0e:ab:be:b4:e6:d4: 2c:7c:33:4c:09:b3:9a:52:b0:31:30:b3:c2:61:42: 72:c5:1f:38:6f:45:a1:05:dd:07:5a:4c:19:9f:dc: 82:83:b7:88:85:5e:7a:1c:77:5f:e2:ec:94:9a:22: 3e:52:fd:91:e8:53:19:33:37:63:aa:34:c6:79:54: e8:f6:b5:eb:28:e0:94:fa:e1:93:66:ff:8b:07:7e: b7:f4:41:be:f0:2a:aa:5a:51:07:c7:00:14:15:c5: 25:01:4d:68:e8:7e:bb:bc:e8:e1:c0:a4:be:dc:10: fd:ec:0d:9a:26:cc:f7:cd:11:19:b1:8b:d2:d2:c0: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:28:BB:FC:E0:2E:5F:EA:CB:30:E8:AA:29:C1:76:6A:03:A3:CA:E6 X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/cSi7_OAuX-rLMOiqKcF2agOjyuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.60.0/22 Signature Algorithm: sha256WithRSAEncryption b2:b9:1c:34:9a:97:6d:9c:dd:50:15:0a:05:e8:fb:20:38:5e: 8b:a8:64:64:ff:de:79:b1:19:18:b5:45:f6:a6:0b:17:ee:6e: 47:c2:90:93:70:ef:8f:fe:f5:e5:2c:26:8c:2b:56:01:5f:2b: ea:38:ba:d9:a2:82:18:27:cb:c5:ca:ec:e5:5b:8e:29:f8:5c: 7a:da:94:30:4f:cf:6a:d7:59:73:8c:c0:e5:a0:cc:91:d1:04: 4b:00:a6:47:26:6a:b5:39:b9:30:ff:86:3c:70:c8:3f:cc:9f: 2b:62:14:86:2b:13:f5:18:5e:c3:64:c4:1a:d7:1b:0e:e1:8e: 5d:ca:65:3d:3d:e0:3f:06:1d:95:64:f4:8f:1d:ce:58:bf:ba: 27:97:70:41:64:89:4b:1e:d8:0c:13:db:34:eb:ff:c3:75:71: d1:e5:b1:c6:7b:88:47:d9:40:95:e8:8d:61:7a:ce:b7:31:cf: ec:1f:97:f5:e8:d5:41:60:66:5f:e5:91:75:a6:4e:22:d6:56: 6d:2e:92:6c:ea:30:e8:d0:fc:d7:05:57:48:c4:d7:c7:f5:d2: 01:dc:c5:33:bb:08:a9:2c:dd:27:db:98:05:bc:62:7e:a9:1c: e0:17:dc:b4:fd:1e:3e:d3:da:48:71:b9:8d:ba:ef:9e:61:48: 27:16:54:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wq8ZpO81wz6pno3bv4QoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTI4YmJmY2UwMmU1ZmVhY2IzMGU4YWEyOWMxNzY2YTAzYTNjYWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb5V4s8d3G/VChJF5Zd0xhPIXxfd LXp0AXhzJKQIiF71m4Jal/hIWZUX0aoeLrKx+Fe65G96kwqTsDTsOfMweAnkUnAI HOkf9oOzpitUPCPGm5qcAsM5cJZg/PBJnYNrCcmY3QcRaas5sslbyvqbAubYR9Eh 3Qa78EUA8Z5T45oOq7605tQsfDNMCbOaUrAxMLPCYUJyxR84b0WhBd0HWkwZn9yC g7eIhV56HHdf4uyUmiI+Uv2R6FMZMzdjqjTGeVTo9rXrKOCU+uGTZv+LB3639EG+ 8CqqWlEHxwAUFcUlAU1o6H67vOjhwKS+3BD97A2aJsz3zREZsYvS0sCcWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEou/zgLl/qyzDoqinBdmoDo8rmMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvY1NpN19PQXVYLXJMTU9pcUtjRjJhZ09qeXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8o8MA0G CSqGSIb3DQEBCwUAA4IBAQCyuRw0mpdtnN1QFQoF6PsgOF6LqGRk/955sRkYtUX2 pgsX7m5HwpCTcO+P/vXlLCaMK1YBXyvqOLrZooIYJ8vFyuzlW44p+Fx62pQwT89q 11lzjMDloMyR0QRLAKZHJmq1Obkw/4Y8cMg/zJ8rYhSGKxP1GF7DZMQa1xsO4Y5d ymU9PeA/Bh2VZPSPHc5Yv7onl3BBZIlLHtgME9s06//DdXHR5bHGe4hH2UCV6I1h es63Mc/sH5f16NVBYGZf5ZF1pk4i1lZtLpJs6jDo0PzXBVdIxNfH9dIB3MUzuwip LN0n25gFvGJ+qRzgF9y0/R4+09pIcbmNuu+eYUgnFlR9 -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:26 2026 by rpki-client