This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/ra29butMifiezKtKfx76h0-beS4.roa File: ra29butMifiezKtKfx76h0-beS4.roa (raw, json) Hash identifier: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE= Subject key identifier: AD:AD:BD:6E:EB:4C:89:F8:9E:CC:AB:4A:7F:1E:FA:87:4F:9B:79:2E Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Certificate serial: 019B7BA4EB49C444C73DE3FB990265549C8F Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/ra29butMifiezKtKfx76h0-beS4.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42405 IP address blocks: 91.213.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:eb:49:c4:44:c7:3d:e3:fb:99:02:65:54:9c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adadbd6eeb4c89f89eccab4a7f1efa874f9b792e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:04:d7:5a:9e:3b:fd:c0:dc:92:dc:79:c8: 54:f5:77:77:79:69:dd:4c:26:01:c4:1a:65:81:14: bf:c9:6a:f8:aa:df:27:fa:c5:f6:78:df:2e:dd:fa: 21:bf:3a:73:7a:62:1b:a9:61:0a:24:8a:a2:3c:2a: ac:07:08:6e:4d:88:fa:51:67:42:c3:0e:0a:38:77: 99:2f:57:76:90:fb:94:f5:84:16:63:a8:53:57:c6: fe:03:fa:34:55:f1:24:57:ed:b6:f9:d9:75:58:06: 8b:44:47:6d:92:f6:ab:14:75:69:2c:e4:14:c9:74: bc:ab:3b:a7:88:46:b9:e8:21:8d:ef:c5:d9:16:07: 34:00:56:46:86:17:d5:6a:6b:81:42:21:5f:09:fc: 4d:f2:da:bc:a2:be:c0:92:41:64:cc:96:89:9d:f7: c7:5b:d1:dc:23:6c:a9:75:be:78:a2:84:cf:30:db: 90:8c:92:1d:53:03:24:d6:cc:23:82:f1:14:8a:94: f8:0c:28:cd:eb:1f:ad:e1:88:6d:d8:b8:96:5c:30: eb:63:c9:22:fb:ce:76:11:42:05:9a:97:83:6a:d0: 00:30:3d:77:ba:81:da:ce:9b:4a:d8:69:4f:75:d8: 4c:2c:26:e4:38:a2:5b:a1:85:5b:61:34:2f:48:ab: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AD:BD:6E:EB:4C:89:F8:9E:CC:AB:4A:7F:1E:FA:87:4F:9B:79:2E X509v3 Authority Key Identifier: keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/ra29butMifiezKtKfx76h0-beS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.135.0/24 Signature Algorithm: sha256WithRSAEncryption 96:c8:7c:04:f4:f0:57:d4:7b:f3:15:52:75:11:db:12:82:f7: 33:96:ca:1e:f1:46:d8:31:00:a8:38:2f:81:12:9b:cb:22:d4: f0:b6:89:33:d0:e0:57:a8:28:27:7f:3c:7c:ca:2a:56:ff:66: 8c:fb:a4:06:05:bd:9e:ae:bc:ef:d7:90:e2:5b:59:3d:3c:b0: 15:b9:2a:b4:25:51:72:e5:ee:7a:bc:92:02:8f:82:81:e3:31: b1:ad:a8:2e:c4:21:2a:f7:ad:8a:75:c4:c1:0c:c7:25:a3:13: c8:ee:d2:e2:e1:fb:3a:b1:8a:6c:49:3f:f3:7a:34:e3:f6:af: 4d:26:7a:33:db:e4:db:2a:d0:15:0b:6c:91:f1:1e:49:29:56: 24:06:46:1d:ae:97:1e:39:f2:b7:33:4f:d8:09:91:fc:9c:fc: 2f:4d:18:a6:17:f3:1e:2d:43:6c:6d:37:59:b4:27:ef:fc:89: 60:ba:fc:a4:c2:bd:58:9a:fc:6c:05:f3:82:ef:16:96:40:f5: 9c:05:50:d0:0b:36:ac:84:7b:9a:a6:46:9b:f7:13:6c:fd:72: 10:9c:a4:51:94:52:be:6c:bc:1a:61:a7:d9:04:0b:44:d8:14: 74:65:09:0b:71:79:2f:a7:a0:a7:46:e6:61:51:d6:60:2a:5d: 18:37:1b:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOtJxETHPeP7mQJlVJyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz YTE5OTYwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGFkYmQ2ZWViNGM4OWY4OWVjY2FiNGE3ZjFlZmE4NzRmOWI3OTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcwE11qeO/3A3JLcechU9Xd3eWnd TCYBxBplgRS/yWr4qt8n+sX2eN8u3fohvzpzemIbqWEKJIqiPCqsBwhuTYj6UWdC ww4KOHeZL1d2kPuU9YQWY6hTV8b+A/o0VfEkV+22+dl1WAaLREdtkvarFHVpLOQU yXS8qzuniEa56CGN78XZFgc0AFZGhhfVamuBQiFfCfxN8tq8or7AkkFkzJaJnffH W9HcI2ypdb54ooTPMNuQjJIdUwMk1swjgvEUipT4DCjN6x+t4Yht2LiWXDDrY8ki +852EUIFmpeDatAAMD13uoHazptK2GlPddhMLCbkOKJboYVbYTQvSKs4PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2tvW7rTIn4nsyrSn8e+odPm3kuMB8GA1UdIwQY MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct NzFhZWE1NGFmODU4LzEvcmEyOWJ1dE1pZmllekt0S2Z4NzZoMC1iZVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4 LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9WHMA0G CSqGSIb3DQEBCwUAA4IBAQCWyHwE9PBX1HvzFVJ1EdsSgvczlsoe8UbYMQCoOC+B EpvLItTwtokz0OBXqCgnfzx8yipW/2aM+6QGBb2errzv15DiW1k9PLAVuSq0JVFy 5e56vJICj4KB4zGxraguxCEq962KdcTBDMcloxPI7tLi4fs6sYpsST/zejTj9q9N Jnoz2+TbKtAVC2yR8R5JKVYkBkYdrpceOfK3M0/YCZH8nPwvTRimF/MeLUNsbTdZ tCfv/Ilguvykwr1YmvxsBfOC7xaWQPWcBVDQCzashHuapkab9xNs/XIQnKRRlFK+ bLwaYafZBAtE2BR0ZQkLcXkvp6CnRuZhUdZgKl0YNxsh -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:19 2026 by rpki-client