This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa File: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (raw, json) Hash identifier: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM= Subject key identifier: 07:55:54:05:5C:42:BC:45:3C:AA:AB:3B:AC:02:49:9A:D7:4A:2F:31 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019B7F839EAC629C5E9E023BAFAEB421F11C Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213520 IP address blocks: 91.132.160.0/22 maxlen: 23 91.132.160.0/23 maxlen: 23 91.132.162.0/23 maxlen: 23 193.135.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9e:ac:62:9c:5e:9e:02:3b:af:ae:b4:21:f1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=075554055c42bc453caaab3bac02499ad74a2f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d8:e8:cc:b1:81:ae:c1:92:52:b2:1c:05:14: 8e:14:0e:4a:7e:cf:59:ab:e2:4d:03:7e:4e:87:39: a3:e9:9b:f1:d0:4b:aa:36:bb:4d:4b:07:cb:17:c2: 08:4d:6d:fb:90:c1:45:10:38:77:cd:b8:fe:fe:24: d8:82:e5:b9:23:19:7d:9a:db:80:18:ab:7a:7a:9f: e4:8e:94:a4:cf:83:52:7b:fc:0f:d0:97:e4:41:79: dc:9f:d9:41:f4:33:b0:c1:b5:27:1d:5b:80:53:1a: 4e:9c:57:db:d2:bb:99:20:ed:8d:4a:11:6b:1e:b1: e3:39:44:6b:7e:db:ad:ce:46:6f:1a:5f:8f:2d:be: 51:6c:cd:2e:36:f5:70:42:1f:35:6e:66:70:ac:06: db:68:79:bf:76:3c:ea:bd:bc:13:1d:df:82:06:f6: 57:97:e4:6d:c9:43:83:c3:ef:50:89:af:7d:da:4f: 97:28:af:9e:16:2b:b0:d7:3a:c3:83:c3:89:0b:4e: da:61:1b:e7:30:98:d2:08:23:59:72:0d:e6:4a:b5: 27:02:6d:47:ea:7f:23:18:91:e7:d6:87:6d:1c:b9: 3b:b1:fb:d0:c1:76:20:0c:a5:27:ea:bd:9e:df:b9: ba:fb:83:27:16:88:db:8e:2b:91:61:86:1d:20:9e: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:55:54:05:5C:42:BC:45:3C:AA:AB:3B:AC:02:49:9A:D7:4A:2F:31 X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.160.0/22 193.135.137.0/24 Signature Algorithm: sha256WithRSAEncryption 87:6f:70:a6:7c:50:e6:ea:1e:06:03:44:d2:a2:98:bc:0a:cf: ca:14:bb:91:db:6b:0e:ec:bb:fe:a8:fd:11:6d:ea:d7:36:68: 3a:68:be:51:f0:67:23:95:1f:64:c7:7a:11:a0:52:40:68:05: 02:b0:bb:40:2b:48:f7:83:fc:9b:61:1e:2a:44:84:84:e0:f5: 37:f7:f5:23:45:4e:67:6d:80:ef:32:0d:7f:5a:8b:21:9b:38: f6:42:89:fe:1a:5c:7c:7a:b4:17:7c:95:8e:f4:c9:69:cd:78: 50:1e:c8:97:9c:fe:0f:92:0a:e8:57:2d:a3:ba:3c:7f:fe:a8: ff:9f:19:7b:0c:90:52:dc:c6:bb:13:ac:82:9d:34:24:03:3e: ff:ad:b4:29:29:c5:87:b8:89:9d:74:20:4b:a7:db:76:0e:dc: 42:7e:9a:96:54:db:71:ca:34:ab:1a:00:ab:d6:ef:a7:3b:6c: f9:31:cf:1e:fa:66:71:8e:bc:d8:00:b9:58:ab:ed:07:f5:ca: ab:a6:0d:f9:f4:75:f4:94:22:46:33:f7:4a:d7:43:59:05:2f: 66:48:19:d7:7a:c4:db:e3:d9:c5:53:b8:82:7b:74:5b:44:8f: ba:19:4c:9f:91:b7:5e:8e:68:c3:d4:11:9c:59:7a:c3:c0:1f: 52:93:b1:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g56sYpxengI7r660IfEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzU1NTQwNTVjNDJiYzQ1M2NhYWFiM2JhYzAyNDk5YWQ3NGEyZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39jozLGBrsGSUrIcBRSOFA5Kfs9Z q+JNA35Ohzmj6Zvx0EuqNrtNSwfLF8IITW37kMFFEDh3zbj+/iTYguW5Ixl9mtuA GKt6ep/kjpSkz4NSe/wP0JfkQXncn9lB9DOwwbUnHVuAUxpOnFfb0ruZIO2NShFr HrHjOURrftutzkZvGl+PLb5RbM0uNvVwQh81bmZwrAbbaHm/djzqvbwTHd+CBvZX l+RtyUODw+9Qia992k+XKK+eFiuw1zrDg8OJC07aYRvnMJjSCCNZcg3mSrUnAm1H 6n8jGJHn1odtHLk7sfvQwXYgDKUn6r2e37m6+4MnFojbjiuRYYYdIJ6vOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAdVVAVcQrxFPKqrO6wCSZrXSi8xMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvQjFWVUJWeEN2RVU4cXFzN3JBSkptdGRLTHpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW4SgAwQA wYeJMA0GCSqGSIb3DQEBCwUAA4IBAQCHb3CmfFDm6h4GA0TSopi8Cs/KFLuR22sO 7Lv+qP0RberXNmg6aL5R8GcjlR9kx3oRoFJAaAUCsLtAK0j3g/ybYR4qRISE4PU3 9/UjRU5nbYDvMg1/Woshmzj2Qon+Glx8erQXfJWO9MlpzXhQHsiXnP4PkgroVy2j ujx//qj/nxl7DJBS3Ma7E6yCnTQkAz7/rbQpKcWHuImddCBLp9t2DtxCfpqWVNtx yjSrGgCr1u+nO2z5Mc8e+mZxjrzYALlYq+0H9cqrpg359HX0lCJGM/dK10NZBS9m SBnXesTb49nFU7iCe3RbRI+6GUyfkbdejmjD1BGcWXrDwB9Sk7F/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:51 2026 by rpki-client