This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/rjXWPmSkIQn4DiTNE6XPf1HGXYM.roa File: rjXWPmSkIQn4DiTNE6XPf1HGXYM.roa (raw, json) Hash identifier: I0XKmy6kJPF5JUMuVfOLMBlmWwkJuYBjUKJtDfOHETE= Subject key identifier: AE:35:D6:3E:64:A4:21:09:F8:0E:24:CD:13:A5:CF:7F:51:C6:5D:83 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019BE97F441B0CAD33CDD97743CC49E53D7E Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/rjXWPmSkIQn4DiTNE6XPf1HGXYM.roa Signing time: Fri 23 Jan 2026 06:16:30 +0000 ROA not before: Fri 23 Jan 2026 06:16:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 91.217.166.0/24 maxlen: 24 185.113.10.0/24 maxlen: 24 195.254.165.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:7f:44:1b:0c:ad:33:cd:d9:77:43:cc:49:e5:3d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 23 06:16:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae35d63e64a42109f80e24cd13a5cf7f51c65d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:a0:bb:fc:58:ae:71:fe:0e:04:90:38:a4: 97:66:10:00:c8:ac:9f:35:33:52:ac:1e:e2:8e:4f: e9:cc:f2:b0:06:74:11:8e:1d:b9:c1:27:51:59:55: af:17:0d:4d:70:40:f1:a4:0b:6d:c1:34:40:c6:db: 10:8c:2e:a8:35:4d:bf:c4:3b:8d:1e:cf:40:ae:ae: d6:a5:d1:8f:b2:b6:e8:5e:64:04:83:d7:16:1a:6a: 30:c4:f8:b1:ca:16:6f:f3:15:10:93:71:37:23:b6: b1:6e:3c:a2:e0:f5:2e:27:af:a1:69:e9:fb:1c:a0: 2b:63:bb:0e:ba:29:b0:7d:05:99:0d:3b:d1:bd:b6: 09:c4:6d:1e:44:27:f1:88:eb:e9:eb:01:1f:d1:44: 4f:82:9e:8e:a3:6a:5c:f0:3d:92:4e:fa:0b:b5:ef: 83:3c:ae:b4:ef:71:48:5a:f1:42:7a:1e:77:19:a5: 19:db:f3:a3:00:8f:d5:7a:16:33:72:e3:d2:ab:e5: 51:ca:87:1f:8b:c7:ce:b2:01:e6:60:e5:d9:b6:34: 9d:39:d4:a4:dc:69:55:dc:83:8b:ac:00:a3:7b:e2: 28:17:6e:6f:ed:ca:41:4d:f9:08:db:1f:e5:8e:e2: b7:65:6a:29:58:01:21:2b:7a:7f:fb:14:28:0d:9c: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:35:D6:3E:64:A4:21:09:F8:0E:24:CD:13:A5:CF:7F:51:C6:5D:83 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/rjXWPmSkIQn4DiTNE6XPf1HGXYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.166.0/24 185.113.10.0/24 195.254.165.0/24 IPv6: 2a05:9080:5::/48 Signature Algorithm: sha256WithRSAEncryption 72:e9:0d:25:61:f1:ba:1f:c3:29:b9:66:02:41:0f:02:c8:62: 8b:2e:12:ad:28:a3:59:c6:46:0c:3e:ab:cf:71:2d:cf:1e:f6: 76:07:26:1e:6b:ed:74:4d:0f:1d:87:59:a0:43:6e:06:77:3a: b3:1a:25:27:25:70:9a:11:18:d4:35:11:20:d0:c0:56:7f:9d: 56:a7:0b:67:46:66:7e:e4:82:f3:60:8e:3a:59:e5:b8:e3:0a: 3c:d4:87:a5:60:34:cd:42:a2:67:8d:5d:23:de:6b:3f:f2:3e: 82:42:cd:a5:39:60:8c:5b:71:75:37:77:31:60:46:a6:f3:93: 52:8c:32:85:7b:2e:ec:f9:69:13:65:53:af:d2:fe:96:62:a5: cc:a7:78:86:78:ba:30:e0:91:b1:c4:23:9c:80:f6:dd:16:34: ec:1c:26:fa:f0:98:dc:2e:f1:0a:f0:7c:e0:1f:8c:2e:2c:41: 88:4e:f1:fb:06:56:5e:7d:a1:88:5c:19:3e:21:a1:b2:a3:c4: 72:71:64:1a:78:62:d5:29:7a:3e:aa:67:a9:d6:b2:0e:9a:8f: 32:0b:b3:29:30:53:89:6b:2d:b9:cf:31:42:34:58:a5:c8:00: 72:7b:8d:84:fd:cb:26:c9:b6:ad:8b:f0:0d:76:3c:68:55:95: c7:27:ed:e5 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZvpf0QbDK0zzdl3Q8xJ5T1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTIzMDYxNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTM1ZDYzZTY0YTQyMTA5ZjgwZTI0Y2QxM2E1Y2Y3ZjUxYzY1ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRGgu/xYrnH+DgSQOKSXZhAAyKyf NTNSrB7ijk/pzPKwBnQRjh25wSdRWVWvFw1NcEDxpAttwTRAxtsQjC6oNU2/xDuN Hs9Arq7WpdGPsrboXmQEg9cWGmowxPixyhZv8xUQk3E3I7axbjyi4PUuJ6+haen7 HKArY7sOuimwfQWZDTvRvbYJxG0eRCfxiOvp6wEf0URPgp6Oo2pc8D2STvoLte+D PK6073FIWvFCeh53GaUZ2/OjAI/VehYzcuPSq+VRyocfi8fOsgHmYOXZtjSdOdSk 3GlV3IOLrACje+IoF25v7cpBTfkI2x/ljuK3ZWopWAEhK3p/+xQoDZzQtQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFK411j5kpCEJ+A4kzROlz39Rxl2DMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvcmpYV1BtU2tJUW40RGlUTkU2WFBmMUhHWFlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAW9mmAwQA uXEKAwQAw/6lMA8EAgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBAHLp DSVh8bofwym5ZgJBDwLIYosuEq0oo1nGRgw+q89xLc8e9nYHJh5r7XRNDx2HWaBD bgZ3OrMaJSclcJoRGNQ1ESDQwFZ/nVanC2dGZn7kgvNgjjpZ5bjjCjzUh6VgNM1C omeNXSPeaz/yPoJCzaU5YIxbcXU3dzFgRqbzk1KMMoV7Luz5aRNlU6/S/pZipcyn eIZ4ujDgkbHEI5yA9t0WNOwcJvrwmNwu8QrwfOAfjC4sQYhO8fsGVl59oYhcGT4h obKjxHJxZBp4YtUpej6qZ6nWsg6ajzILsykwU4lrLbnPMUI0WKXIAHJ7jYT9yybJ tq2L8A12PGhVlccn7eU= -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:10 2026 by rpki-client