This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/bHRNvhdXhQYwYXjggK5qteZPiXg.roa File: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (raw, json) Hash identifier: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI= Subject key identifier: 6C:74:4D:BE:17:57:85:06:30:61:78:E0:80:AE:6A:B5:E6:4F:89:78 Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397 Certificate serial: 019B7C11BAA507F4B36518430B2F6EA82B65 Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/bHRNvhdXhQYwYXjggK5qteZPiXg.roa Signing time: Fri 02 Jan 2026 00:18:15 +0000 ROA not before: Fri 02 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 91.213.227.0/24 maxlen: 24 185.38.64.0/24 maxlen: 24 185.38.65.0/24 maxlen: 24 2001:67c:1128::/48 maxlen: 48 2a04:7640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ba:a5:07:f4:b3:65:18:43:0b:2f:6e:a8:2b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397 Validity Not Before: Jan 2 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c744dbe17578506306178e080ae6ab5e64f8978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:b9:50:02:34:bf:f2:56:1d:c2:f7:c6:47: 4e:8a:97:65:31:87:8b:d7:a5:0a:c0:bb:34:e7:23: 3a:2e:92:6d:49:ef:44:e7:a6:e9:c1:32:53:29:5c: d6:8f:8b:78:77:4d:52:2a:98:02:ae:99:d9:98:a4: 6d:aa:96:c9:ac:ea:4a:77:b8:9d:a2:fa:f4:61:e5: 71:0e:cc:92:0c:f4:39:50:5d:db:4a:2d:1a:50:c7: 2c:65:ee:f4:ec:62:01:f6:e5:b7:88:dd:9b:a5:37: 1e:b4:24:8f:d2:af:60:42:45:9c:26:8c:d3:a6:94: 41:49:98:5e:96:96:44:97:9a:f2:c2:03:6c:cc:7a: 3f:c7:66:ed:4f:95:f1:a2:14:aa:a2:a9:9e:21:66: 48:0b:9d:01:d6:ef:6a:86:12:23:7e:36:c6:5a:2d: b5:1e:bc:a1:cd:df:32:05:89:13:00:f8:03:42:34: fc:87:ff:81:5a:6d:30:64:a2:f5:8f:64:37:64:17: ba:6e:f1:af:fc:a0:bd:9a:69:a2:a8:f7:28:77:dc: 03:85:f2:8f:a6:2f:7d:4e:34:e8:38:57:d6:87:4c: 3a:09:7e:ad:c0:6a:65:22:b1:9c:ee:b9:bc:56:4b: 2a:46:f6:69:89:84:25:bd:54:ed:c0:34:77:b4:90: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:74:4D:BE:17:57:85:06:30:61:78:E0:80:AE:6A:B5:E6:4F:89:78 X509v3 Authority Key Identifier: keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/bHRNvhdXhQYwYXjggK5qteZPiXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.227.0/24 185.38.64.0/23 IPv6: 2001:67c:1128::/48 2a04:7640::/48 Signature Algorithm: sha256WithRSAEncryption 93:c8:e0:98:33:c7:43:05:c4:85:d2:66:82:4e:4d:6e:4b:58: 32:b1:50:98:13:28:e9:f1:66:a3:18:3b:1a:4f:cd:c7:11:7a: 9d:3e:17:19:07:6b:a7:96:13:f4:36:77:ee:bb:60:de:7b:db: 3c:5c:2a:bc:cc:ac:99:d4:e7:18:0a:a2:9d:bf:88:c7:df:da: fd:89:f1:9f:48:6f:9f:5c:46:1a:c1:72:71:4d:07:ac:8f:0a: 63:68:13:4e:d0:4c:29:74:50:4b:f9:a2:cf:6b:3d:8c:0e:09: 98:1c:15:d2:da:fe:d3:a3:c4:50:bb:ff:50:40:76:05:3d:29: 99:d1:8b:a2:9d:60:20:c7:96:35:b9:a7:2f:aa:4d:4b:49:f7: 2c:b6:68:a1:f5:ae:8f:ed:ed:6e:fd:b0:1f:a7:4d:51:65:ff: 82:a7:8d:e3:b0:29:25:2b:c8:be:ea:ec:3f:76:e3:f9:55:9a: 4e:f6:6e:68:af:51:56:7b:85:06:3c:c0:ee:39:6d:98:84:38: f1:bf:02:32:88:44:0e:0b:0e:3d:2e:e2:2e:04:98:b9:62:4a: 74:06:15:c6:27:9b:a0:c6:e4:a1:14:ba:33:0c:08:7b:9c:15: 85:a1:db:9d:e7:32:0a:f4:8b:50:54:72:9a:97:ab:31:a5:e6: f6:22:6c:34 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8EbqlB/SzZRhDCy9uqCtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwY2VlYjI1Mzg0NWM2ZGNhMTkwZDM2MTZkYmEyM2YzN2Q4 YjYzOTcwHhcNMjYwMTAyMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yzc0NGRiZTE3NTc4NTA2MzA2MTc4ZTA4MGFlNmFiNWU2NGY4OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX65UAI0v/JWHcL3xkdOipdlMYeL 16UKwLs05yM6LpJtSe9E56bpwTJTKVzWj4t4d01SKpgCrpnZmKRtqpbJrOpKd7id ovr0YeVxDsySDPQ5UF3bSi0aUMcsZe707GIB9uW3iN2bpTcetCSP0q9gQkWcJozT ppRBSZhelpZEl5rywgNszHo/x2btT5XxohSqoqmeIWZIC50B1u9qhhIjfjbGWi21 Hryhzd8yBYkTAPgDQjT8h/+BWm0wZKL1j2Q3ZBe6bvGv/KC9mmmiqPcod9wDhfKP pi99TjToOFfWh0w6CX6twGplIrGc7rm8VksqRvZpiYQlvVTtwDR3tJCokQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGx0Tb4XV4UGMGF44ICuarXmT4l4MB8GA1UdIwQY MBaAFGDO6yU4RcbcoZDTYW26I/N9i2OXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUt OWY5MzIyZDY3MzJiLzEvYkhSTnZoZFhoUVl3WVhqZ2dLNXF0ZVpQaVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUtOWY5MzIyZDY3MzJi LzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAW9XjAwQB uSZAMBgEAgACMBIDBwAgAQZ8ESgDBwAqBHZAAAAwDQYJKoZIhvcNAQELBQADggEB AJPI4Jgzx0MFxIXSZoJOTW5LWDKxUJgTKOnxZqMYOxpPzccRep0+FxkHa6eWE/Q2 d+67YN572zxcKrzMrJnU5xgKop2/iMff2v2J8Z9Ib59cRhrBcnFNB6yPCmNoE07Q TCl0UEv5os9rPYwOCZgcFdLa/tOjxFC7/1BAdgU9KZnRi6KdYCDHljW5py+qTUtJ 9yy2aKH1ro/t7W79sB+nTVFl/4KnjeOwKSUryL7q7D924/lVmk72bmivUVZ7hQY8 wO45bZiEOPG/AjKIRA4LDj0u4i4EmLliSnQGFcYnm6DG5KEUujMMCHucFYWh253n Mgr0i1BUcpqXqzGl5vYibDQ= -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:26 2026 by rpki-client