This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/S91SpqjKHj-9za4dXEoQ07MOmwY.roa File: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (raw, json) Hash identifier: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM= Subject key identifier: 4B:DD:52:A6:A8:CA:1E:3F:BD:CD:AE:1D:5C:4A:10:D3:B3:0E:9B:06 Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac Certificate serial: 019B7D5AFBC7D64A9E3C489F19AAFCA3B5AE Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/S91SpqjKHj-9za4dXEoQ07MOmwY.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198990 IP address blocks: 66.51.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fb:c7:d6:4a:9e:3c:48:9f:19:aa:fc:a3:b5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bdd52a6a8ca1e3fbdcdae1d5c4a10d3b30e9b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:ed:48:92:1f:cd:1a:66:38:26:83:1c:67: 25:cf:5d:45:d6:c8:33:48:c1:ec:75:7e:3d:11:9e: 0b:41:f4:3c:6f:10:87:3a:c2:74:94:58:f2:1c:c8: 83:a7:26:4c:68:4e:ee:2b:07:33:73:f1:8e:b9:6b: ed:70:e8:2a:3a:af:f0:38:f7:0c:52:eb:84:5b:42: 9b:87:7d:7b:fe:3a:07:ee:34:d5:5e:1a:9c:22:4d: 95:b1:6f:b6:10:e0:ee:02:97:d1:12:90:f9:42:33: 8d:bc:87:98:b2:6d:b9:9c:79:e1:07:df:21:fd:0b: b9:6c:38:c0:bd:44:3d:09:dc:16:82:82:9d:75:36: 51:c8:f6:bb:da:b6:89:5b:a0:01:34:87:35:df:b2: d1:4d:5e:de:14:83:27:48:eb:0c:5f:25:20:42:14: 21:02:e3:af:f7:a8:5c:56:d3:29:78:ba:d4:21:c2: 9c:eb:73:ce:04:de:0c:7c:aa:4c:5b:e6:cf:81:e8: c1:75:7e:17:9a:c1:90:98:5b:1b:b7:83:2a:8e:b6: 97:c9:4a:85:2e:45:6d:88:51:40:d9:d8:41:27:57: fd:47:89:e1:a7:60:53:5e:6a:1c:4f:11:a5:6a:05: ca:15:65:a1:20:b9:43:db:53:2f:42:67:fc:71:c8: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DD:52:A6:A8:CA:1E:3F:BD:CD:AE:1D:5C:4A:10:D3:B3:0E:9B:06 X509v3 Authority Key Identifier: keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/S91SpqjKHj-9za4dXEoQ07MOmwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.51.96.0/22 Signature Algorithm: sha256WithRSAEncryption 46:04:d9:8f:c9:82:c5:0d:e4:52:ae:2c:95:04:6f:b3:8e:e2: fd:09:a3:92:77:c5:76:bb:4c:08:53:13:e9:8e:a9:84:46:8d: b2:bb:22:e3:57:12:3d:ac:d9:e1:6f:f2:5d:2b:99:24:6a:41: a9:2e:c5:e4:dd:f9:96:4b:b8:33:ab:a8:28:2d:f9:1c:3f:17: c7:7f:cf:ea:40:c9:0f:3f:0b:a2:37:c0:98:f1:15:6a:2b:ca: 24:10:63:ad:58:cc:5b:ce:dc:c8:08:80:73:ba:e6:83:f9:93: d3:84:ae:d3:fe:12:6d:61:02:ec:a2:24:ff:fd:6e:43:3a:aa: 71:22:59:a0:9f:59:85:de:b6:bd:12:21:fd:a2:0c:b0:10:90: e4:1e:56:6f:5f:4f:0c:e1:73:97:49:2e:a0:5c:b6:df:53:6e: a8:7c:12:96:c5:a5:ec:3d:fa:f2:aa:ea:cd:7a:3c:ee:13:72: ce:76:2e:f9:cd:49:08:55:39:00:50:bf:93:91:c8:6f:c6:14: fd:63:a9:a1:33:3e:b2:0b:24:32:b1:84:fd:6f:17:55:28:92: 46:8b:0f:ca:ad:8c:2e:a3:c4:de:e0:b1:46:38:03:c3:d3:f7: df:3b:a9:c4:40:6e:c6:fa:86:15:a9:ff:38:17:dc:49:65:70: 2e:5d:0c:64 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9WvvH1kqePEifGar8o7WuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YmE0MWI2YWQ2ZTYzNzgwZWMzZjEyMTYwZTdjNGVkMGY3 NDY5YWMwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmRkNTJhNmE4Y2ExZTNmYmRjZGFlMWQ1YzRhMTBkM2IzMGU5YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOHtSJIfzRpmOCaDHGclz11F1sgz SMHsdX49EZ4LQfQ8bxCHOsJ0lFjyHMiDpyZMaE7uKwczc/GOuWvtcOgqOq/wOPcM UuuEW0Kbh317/joH7jTVXhqcIk2VsW+2EODuApfREpD5QjONvIeYsm25nHnhB98h /Qu5bDjAvUQ9CdwWgoKddTZRyPa72raJW6ABNIc137LRTV7eFIMnSOsMXyUgQhQh AuOv96hcVtMpeLrUIcKc63POBN4MfKpMW+bPgejBdX4XmsGQmFsbt4MqjraXyUqF LkVtiFFA2dhBJ1f9R4nhp2BTXmocTxGlagXKFWWhILlD21MvQmf8ccikMQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEvdUqaoyh4/vc2uHVxKENOzDpsGMB8GA1UdIwQY MBaAFPi6QbatbmN4DsPxIWDnxO0PdGmsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1McEJ0cTF1WTNnT3dfRWhZT2ZFN1E5MGFhdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2 LWFlNDQ5NzlmODFkZS8xL1M5MVNwcWpLSGotOXphNGRYRW9RMDdNT213WS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2LWFlNDQ5NzlmODFk ZS8xLzEtTHBCdHExdVkzZ093X0VoWU9mRTdROTBhYXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJCM2Aw DQYJKoZIhvcNAQELBQADggEBAEYE2Y/JgsUN5FKuLJUEb7OO4v0Jo5J3xXa7TAhT E+mOqYRGjbK7IuNXEj2s2eFv8l0rmSRqQakuxeTd+ZZLuDOrqCgt+Rw/F8d/z+pA yQ8/C6I3wJjxFWoryiQQY61YzFvO3MgIgHO65oP5k9OErtP+Em1hAuyiJP/9bkM6 qnEiWaCfWYXetr0SIf2iDLAQkOQeVm9fTwzhc5dJLqBctt9Tbqh8EpbFpew9+vKq 6s16PO4Tcs52LvnNSQhVOQBQv5ORyG/GFP1jqaEzPrILJDKxhP1vF1UokkaLD8qt jC6jxN7gsUY4A8PT9987qcRAbsb6hhWp/zgX3EllcC5dDGQ= -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:55 2026 by rpki-client