This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/75usjphnflTK9ekaeXTmIOUK9No.roa File: 75usjphnflTK9ekaeXTmIOUK9No.roa (raw, json) Hash identifier: 6EuKwuh4YvgBCa5Zr1EQEmvX8bawaDXoEyNUirI2tqE= Subject key identifier: EF:9B:AC:8E:98:67:7E:54:CA:F5:E9:1A:79:74:E6:20:E5:0A:F4:DA Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Certificate serial: 019B7DCA10F7F0E1D88FF38635C952773D71 Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/75usjphnflTK9ekaeXTmIOUK9No.roa Signing time: Fri 02 Jan 2026 08:19:13 +0000 ROA not before: Fri 02 Jan 2026 08:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196976 IP address blocks: 91.133.32.0/19 maxlen: 19 91.133.34.0/24 maxlen: 24 2a04:3100::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:10:f7:f0:e1:d8:8f:f3:86:35:c9:52:77:3d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef9bac8e98677e54caf5e91a7974e620e50af4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:93:19:b6:89:f2:88:07:67:55:3f:3e:28: a4:8b:ae:c5:9f:70:37:ae:f9:26:f1:ca:fd:12:2a: 68:55:ee:81:81:e1:c6:34:56:5f:c4:28:97:28:30: 13:f2:3a:fb:64:d5:a1:e5:3b:af:60:76:2b:41:6e: c3:9d:f9:d0:e4:01:c9:3b:da:fb:92:68:43:43:cf: 95:3d:5f:1b:53:aa:68:37:aa:5b:e9:97:fa:84:50: 48:e1:05:77:5a:43:c5:e7:e6:de:f9:77:81:3c:22: fd:50:16:24:e0:55:b5:e4:9d:75:93:93:41:46:51: 94:74:92:e5:2a:12:76:cc:48:80:2a:f4:7d:29:ee: cf:d9:90:b6:dc:86:fb:8d:c4:9e:b8:5d:30:69:81: 14:e1:8c:a1:b4:4b:19:ce:2d:42:f6:46:8c:91:9c: ba:e0:e5:fc:48:df:d5:ee:3c:d1:a7:88:8f:32:b1: 87:5a:16:07:98:ae:f4:03:53:3b:58:74:77:7d:28: 77:0b:2c:c0:55:3c:65:d9:11:2f:ac:09:0d:b7:14: 24:67:16:48:72:06:94:33:57:e3:b5:bf:f1:95:2f: 34:6c:44:45:d1:7c:37:6f:dc:a9:13:be:eb:44:86: 74:8b:1d:90:b3:94:56:19:f1:cf:77:da:11:d2:ec: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9B:AC:8E:98:67:7E:54:CA:F5:E9:1A:79:74:E6:20:E5:0A:F4:DA X509v3 Authority Key Identifier: keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/75usjphnflTK9ekaeXTmIOUK9No.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.133.32.0/19 IPv6: 2a04:3100::/29 Signature Algorithm: sha256WithRSAEncryption 97:c5:f7:3c:b8:a6:f9:9f:50:d5:7a:49:88:fe:bb:43:35:8f: fe:3f:f2:d1:38:3f:c4:eb:3f:05:bd:4e:4e:e3:44:02:79:e0: cc:79:f0:d0:2c:bf:a6:c8:90:e7:04:1a:8a:18:1b:9c:6c:e9: 31:5d:11:e8:f6:39:9e:80:d5:a1:56:98:7d:84:aa:4a:a5:dc: 61:cd:04:a9:c7:21:f2:28:0f:57:53:b3:05:ef:5f:b5:9d:ea: 18:87:0b:6c:d4:8e:57:fa:3d:22:be:a2:02:61:78:b6:63:c7: f9:7c:88:8c:f4:5d:b8:c9:bf:40:9a:bd:f2:3e:c0:f6:d4:dc: 82:8b:23:93:23:f7:fa:60:cd:9d:ba:49:b3:50:4b:ac:f7:40: ad:a1:a0:dc:2b:58:2f:00:28:31:98:da:97:4d:73:bc:ce:24: 3c:c7:33:a1:5a:3a:80:7e:a1:09:a4:b1:c0:27:af:35:27:03: 77:3d:77:77:fe:85:ed:4e:88:32:87:31:a4:ba:19:19:bc:90: 11:dd:fa:d2:82:40:90:70:80:6a:bb:38:bb:0f:09:68:18:bb: 52:9a:86:7b:29:18:8f:02:ee:b4:25:fa:ce:07:86:2b:ea:f8: a0:75:3c:74:d7:1a:d2:2f:8f:15:fc:f1:46:b9:f6:c9:57:a0: 14:f2:0d:62 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yhD38OHYj/OGNclSdz1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl NzUxNjQwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjliYWM4ZTk4Njc3ZTU0Y2FmNWU5MWE3OTc0ZTYyMGU1MGFmNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy2TGbaJ8ogHZ1U/Piiki67Fn3A3 rvkm8cr9EipoVe6BgeHGNFZfxCiXKDAT8jr7ZNWh5TuvYHYrQW7DnfnQ5AHJO9r7 kmhDQ8+VPV8bU6poN6pb6Zf6hFBI4QV3WkPF5+be+XeBPCL9UBYk4FW15J11k5NB RlGUdJLlKhJ2zEiAKvR9Ke7P2ZC23Ib7jcSeuF0waYEU4YyhtEsZzi1C9kaMkZy6 4OX8SN/V7jzRp4iPMrGHWhYHmK70A1M7WHR3fSh3CyzAVTxl2REvrAkNtxQkZxZI cgaUM1fjtb/xlS80bERF0Xw3b9ypE77rRIZ0ix2Qs5RWGfHPd9oR0uzyHQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO+brI6YZ35UyvXpGnl05iDlCvTaMB8GA1UdIwQY MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt M2U1OWNlNDQ1YjFjLzEvNzV1c2pwaG5mbFRLOWVrYWVYVG1JT1VLOU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFW4UgMA0E AgACMAcDBQMqBDEAMA0GCSqGSIb3DQEBCwUAA4IBAQCXxfc8uKb5n1DVekmI/rtD NY/+P/LROD/E6z8FvU5O40QCeeDMefDQLL+myJDnBBqKGBucbOkxXRHo9jmegNWh Vph9hKpKpdxhzQSpxyHyKA9XU7MF71+1neoYhwts1I5X+j0ivqICYXi2Y8f5fIiM 9F24yb9Amr3yPsD21NyCiyOTI/f6YM2dukmzUEus90CtoaDcK1gvACgxmNqXTXO8 ziQ8xzOhWjqAfqEJpLHAJ681JwN3PXd3/oXtTogyhzGkuhkZvJAR3frSgkCQcIBq uzi7DwloGLtSmoZ7KRiPAu60JfrOB4Yr6vigdTx01xrSL48V/PFGufbJV6AU8g1i -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:57 2026 by rpki-client