This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa File: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (raw, json) Hash identifier: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU= Subject key identifier: 91:A4:64:C9:F5:75:33:0C:65:C2:C0:86:85:48:BF:5B:45:16:20:5F Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Certificate serial: 019B7BA4CF3B0232122E097815F925CAAB9E Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50399 IP address blocks: 91.209.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cf:3b:02:32:12:2e:09:78:15:f9:25:ca:ab:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91a464c9f575330c65c2c0868548bf5b4516205f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:bc:d4:44:df:b8:27:fb:21:c7:2f:b7:75:fe: 35:d2:26:12:73:8d:b6:9f:8a:a4:c9:ae:20:23:e0: 25:c4:ac:6d:64:73:48:e1:b0:90:4f:22:f5:c5:52: 2b:d4:c9:4c:0c:b3:8c:0f:76:7d:6c:bc:54:9a:39: a1:56:95:55:70:76:46:1f:2b:a5:f3:c3:f8:a4:1c: 07:8d:bc:34:71:13:3d:e5:f7:3f:a0:9d:65:fe:03: 4b:1b:3b:cb:47:04:2a:09:e3:a2:11:b2:c4:33:e1: 55:aa:9f:0d:84:a9:a0:a0:fb:45:49:e2:dc:5b:d1: fd:47:02:50:af:0d:18:45:f6:26:fb:57:ea:bf:20: c6:c8:e7:6b:8c:d4:ae:2d:e3:00:8b:3d:2c:09:2a: 16:1e:29:bd:88:c3:0b:6f:6d:bb:13:9c:11:d1:3b: 56:2e:bd:e6:97:c2:06:2c:f1:35:71:b3:3b:6e:0f: 42:10:45:70:97:b9:40:d6:2e:de:ad:cf:75:ee:a9: d3:e4:0d:d9:aa:9e:c7:7b:14:3a:c4:a0:90:d4:2c: b8:4b:70:60:79:29:d0:d7:1a:fc:c4:67:7a:ba:dd: df:62:84:95:e4:d1:8c:48:cc:27:19:5b:69:35:5f: 5d:5a:be:86:f3:8a:01:b5:fb:1c:41:06:a9:72:1f: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:64:C9:F5:75:33:0C:65:C2:C0:86:85:48:BF:5B:45:16:20:5F X509v3 Authority Key Identifier: keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.213.0/24 Signature Algorithm: sha256WithRSAEncryption a4:53:28:87:81:31:aa:bd:67:79:03:44:dc:40:71:e1:71:d4: 38:e2:9d:82:c6:23:ab:43:58:fa:af:80:39:b4:cd:62:5d:4d: 33:74:e1:e9:54:38:f8:51:99:46:95:76:3f:a6:7f:0d:44:85: cd:55:7b:2a:90:88:bf:5c:20:53:66:7b:6e:98:6d:69:3f:46: 72:00:cf:0e:84:33:2c:66:36:64:6f:1b:ae:3e:93:5f:42:03: 42:06:c8:01:ae:6a:91:79:fe:c2:0f:ba:b1:4b:9a:b3:4e:e6: 45:a4:70:d5:11:86:0f:3d:d8:18:10:07:b4:2f:88:6a:0e:68: 63:68:57:55:da:2e:45:45:55:6c:81:c6:24:0c:2b:fa:d5:2c: 8e:65:54:99:aa:ec:c9:f5:6e:3b:5d:1c:f2:49:69:1e:e4:77: bd:e9:92:05:84:b3:e2:7d:07:7c:da:72:a6:10:9e:be:61:53: 9d:6c:f5:f0:aa:db:38:4d:6b:1a:25:6f:7a:88:64:b5:9f:7a: 56:5e:6e:23:eb:71:2e:41:e0:11:86:0d:06:6e:41:8b:79:a2: 9c:12:2b:bb:5c:30:95:c1:83:af:85:57:b6:e1:fa:01:06:27: e7:9c:4b:25:27:91:f5:af:49:59:6b:f7:1e:06:83:17:fd:62: 18:e0:3a:e0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pM87AjISLgl4FfklyqueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx ZGVlMGEwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWE0NjRjOWY1NzUzMzBjNjVjMmMwODY4NTQ4YmY1YjQ1MTYyMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97zURN+4J/shxy+3df410iYSc422 n4qkya4gI+AlxKxtZHNI4bCQTyL1xVIr1MlMDLOMD3Z9bLxUmjmhVpVVcHZGHyul 88P4pBwHjbw0cRM95fc/oJ1l/gNLGzvLRwQqCeOiEbLEM+FVqp8NhKmgoPtFSeLc W9H9RwJQrw0YRfYm+1fqvyDGyOdrjNSuLeMAiz0sCSoWHim9iMMLb227E5wR0TtW Lr3ml8IGLPE1cbM7bg9CEEVwl7lA1i7erc917qnT5A3Zqp7HexQ6xKCQ1Cy4S3Bg eSnQ1xr8xGd6ut3fYoSV5NGMSMwnGVtpNV9dWr6G84oBtfscQQapch+LzQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJGkZMn1dTMMZcLAhoVIv1tFFiBfMB8GA1UdIwQY MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy LTVkYWM3MjAyMjNhYi8xL2thUmt5ZlYxTXd4bHdzQ0doVWlfVzBVV0lGOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEyLTVkYWM3MjAyMjNh Yi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb0dUw DQYJKoZIhvcNAQELBQADggEBAKRTKIeBMaq9Z3kDRNxAceFx1DjinYLGI6tDWPqv gDm0zWJdTTN04elUOPhRmUaVdj+mfw1Ehc1VeyqQiL9cIFNme26YbWk/RnIAzw6E MyxmNmRvG64+k19CA0IGyAGuapF5/sIPurFLmrNO5kWkcNURhg892BgQB7QviGoO aGNoV1XaLkVFVWyBxiQMK/rVLI5lVJmq7Mn1bjtdHPJJaR7kd73pkgWEs+J9B3za cqYQnr5hU51s9fCq2zhNaxolb3qIZLWfelZebiPrcS5B4BGGDQZuQYt5opwSK7tc MJXBg6+FV7bh+gEGJ+ecSyUnkfWvSVlr9x4Ggxf9YhjgOuA= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:37 2026 by rpki-client