This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/bZtAv7jof-AuwEu0cxY9E17KiEM.roa File: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (raw, json) Hash identifier: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA= Subject key identifier: 6D:9B:40:BF:B8:E8:7F:E0:2E:C0:4B:B4:73:16:3D:13:5E:CA:88:43 Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Certificate serial: 019B7BA4E1B4C99876CA39C799CAF25B19D4 Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/bZtAv7jof-AuwEu0cxY9E17KiEM.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 91.198.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e1:b4:c9:98:76:ca:39:c7:99:ca:f2:5b:19:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d9b40bfb8e87fe02ec04bb473163d135eca8843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:e2:1e:f2:49:5a:60:e1:fc:30:75:a1:de: 14:9a:fd:36:17:50:ae:a5:31:af:f0:99:77:c7:86: c5:a4:0a:85:d4:86:9d:0d:5c:af:85:59:1c:62:ac: 0a:d4:f1:65:19:0e:dc:05:8d:ff:14:9b:cf:a3:54: 40:5e:f0:76:a0:cb:33:0b:f6:a3:99:ef:7e:46:5d: 2e:e6:07:c7:36:50:1a:50:34:81:d2:ce:34:58:9d: da:d2:cc:a3:1c:38:8a:32:40:94:d2:d7:2a:1b:15: 56:60:75:fa:f7:a9:f2:b8:c9:01:18:67:91:98:24: 26:ac:81:a5:87:00:53:da:13:88:56:08:c4:3f:b8: 22:1b:a6:5f:7c:83:6e:1b:86:3d:70:25:77:98:95: 8e:8a:3e:fb:7b:38:d9:ce:a0:ab:8a:2c:89:fb:d8: 87:0e:80:86:0c:b7:1f:ae:89:95:b1:e3:04:09:65: cc:0c:b8:d8:12:25:94:be:eb:a8:14:18:85:eb:e7: 5c:5f:14:f0:5a:b9:9f:b8:96:f8:b1:e8:8f:1f:6d: 6e:54:36:b0:ae:ca:dc:00:71:18:24:20:bb:f1:3d: 87:15:d7:49:6e:1e:96:7c:28:10:41:d4:3f:7a:41: 5d:42:3b:64:41:1a:0a:88:03:2f:d9:ce:f0:e7:a0: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9B:40:BF:B8:E8:7F:E0:2E:C0:4B:B4:73:16:3D:13:5E:CA:88:43 X509v3 Authority Key Identifier: keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/bZtAv7jof-AuwEu0cxY9E17KiEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.154.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:87:0d:22:eb:15:26:98:43:28:95:ab:31:c3:82:9f:44:f3: 44:b6:2a:32:95:f2:42:9f:cf:25:43:7e:c2:17:a3:cd:f5:f9: 2b:94:08:5d:d0:02:78:1e:32:15:4b:96:c7:8f:c4:e0:fe:4a: 4c:ad:11:8d:96:c7:25:f6:01:1e:12:37:47:5a:42:ba:12:0e: 9e:08:bb:5d:d7:28:2c:e9:25:9a:41:a4:82:68:ac:17:bf:c8: 29:59:04:8b:67:d7:af:9c:36:c7:67:4b:7d:5e:9b:83:fc:d8: 9b:aa:72:8a:96:46:ea:f2:e0:6f:cd:e7:f6:73:b0:fb:b4:bd: 1f:b4:59:3a:ac:40:10:b9:6e:d6:9e:d5:c0:2a:2d:2e:cf:dd: db:38:ee:3b:d2:60:46:83:6e:18:9f:c1:dc:af:fe:98:70:3e: 3b:c6:87:3e:ff:2e:fc:26:20:64:15:83:62:0c:d4:69:2b:be: 98:c5:69:ab:f3:94:bf:87:91:f7:0e:46:ca:71:d7:d6:ba:58: 0e:9f:b7:0e:50:fb:2c:64:26:f7:f9:ee:92:d1:46:e8:21:bc: d0:fb:52:b9:20:6a:8e:c1:93:4d:9e:7e:10:cd:ee:b7:40:e3: d3:4f:b1:9a:9a:db:6b:b7:25:4a:ee:05:73:45:2a:a5:6d:6e: 06:4a:76:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOG0yZh2yjnHmcryWxnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1 N2ZkMTMwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDliNDBiZmI4ZTg3ZmUwMmVjMDRiYjQ3MzE2M2QxMzVlY2E4ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoXiHvJJWmDh/DB1od4Umv02F1Cu pTGv8Jl3x4bFpAqF1IadDVyvhVkcYqwK1PFlGQ7cBY3/FJvPo1RAXvB2oMszC/aj me9+Rl0u5gfHNlAaUDSB0s40WJ3a0syjHDiKMkCU0tcqGxVWYHX696nyuMkBGGeR mCQmrIGlhwBT2hOIVgjEP7giG6ZffINuG4Y9cCV3mJWOij77ezjZzqCriiyJ+9iH DoCGDLcfromVseMECWXMDLjYEiWUvuuoFBiF6+dcXxTwWrmfuJb4seiPH21uVDaw rsrcAHEYJCC78T2HFddJbh6WfCgQQdQ/ekFdQjtkQRoKiAMv2c7w56BkTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2bQL+46H/gLsBLtHMWPRNeyohDMB8GA1UdIwQY MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt MjlmMDlkODkzYWU3LzEvYlp0QXY3am9mLUF1d0V1MGN4WTlFMTdLaUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3 LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aaMA0G CSqGSIb3DQEBCwUAA4IBAQCbhw0i6xUmmEMolasxw4KfRPNEtioylfJCn88lQ37C F6PN9fkrlAhd0AJ4HjIVS5bHj8Tg/kpMrRGNlscl9gEeEjdHWkK6Eg6eCLtd1ygs 6SWaQaSCaKwXv8gpWQSLZ9evnDbHZ0t9XpuD/NibqnKKlkbq8uBvzef2c7D7tL0f tFk6rEAQuW7WntXAKi0uz93bOO470mBGg24Yn8Hcr/6YcD47xoc+/y78JiBkFYNi DNRpK76YxWmr85S/h5H3DkbKcdfWulgOn7cOUPssZCb3+e6S0UboIbzQ+1K5IGqO wZNNnn4Qze63QOPTT7GamttrtyVK7gVzRSqlbW4GSnah -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:08 2026 by rpki-client