This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/b06IK2jnqaGT2Aa6wapV_ItJbLk.roa File: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (raw, json) Hash identifier: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170= Subject key identifier: 6F:4E:88:2B:68:E7:A9:A1:93:D8:06:BA:C1:AA:55:FC:8B:49:6C:B9 Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5 Certificate serial: 019B7AC7D649E949C44525574F381CAF801E Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/b06IK2jnqaGT2Aa6wapV_ItJbLk.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210686 IP address blocks: 91.218.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d6:49:e9:49:c4:45:25:57:4f:38:1c:af:80:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f4e882b68e7a9a193d806bac1aa55fc8b496cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fc:d2:99:03:df:7e:c9:70:f4:ab:52:1f:94: ff:1f:c3:3c:e8:90:9d:69:6b:68:7e:ab:e2:98:b7: 4e:a2:17:99:de:34:13:08:31:4e:82:8f:27:44:8c: f1:78:55:20:5a:bf:b9:92:f1:89:d1:7b:a5:65:a8: e4:02:77:ee:aa:23:c0:80:95:43:cb:70:a6:14:a2: 80:eb:f3:48:b1:e6:8e:f5:6a:06:e8:ee:b2:ee:50: 2a:c6:a6:4a:2e:49:b9:7f:5b:7c:fb:da:33:a6:38: cf:86:3e:1d:ff:75:de:4e:4b:10:19:c4:9d:8b:48: c3:0a:10:d0:cb:54:e1:76:8c:94:5d:d3:ed:2c:3d: be:a8:fd:f4:ee:14:8c:db:2b:8a:97:46:c0:c3:20: 51:9a:47:6b:dc:60:62:df:78:99:5b:43:c2:1a:cc: c5:f3:57:13:6d:29:0a:48:4d:30:15:2a:12:be:b1: e8:1a:15:bf:6b:26:b4:04:be:c7:7a:3d:63:72:03: 9c:22:d3:92:63:44:35:e5:79:f5:23:61:d4:ca:7b: 01:c1:b1:70:ad:b9:3f:97:d7:e7:a7:6f:ef:34:16: fa:41:bb:ed:cc:e7:6d:b0:49:16:bf:82:90:b7:25: 78:2a:f9:0f:f6:89:1e:02:45:22:07:27:a9:4c:37: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4E:88:2B:68:E7:A9:A1:93:D8:06:BA:C1:AA:55:FC:8B:49:6C:B9 X509v3 Authority Key Identifier: keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/b06IK2jnqaGT2Aa6wapV_ItJbLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.180.0/24 Signature Algorithm: sha256WithRSAEncryption 05:21:43:b7:fc:aa:79:58:79:13:8f:4c:ec:a7:43:af:42:37: e2:b8:ca:bc:16:20:ac:23:61:2c:8c:0d:dd:9a:d5:48:91:51: 0b:90:56:79:1a:7a:8a:51:67:e1:4e:df:02:48:c9:a4:af:10: ca:45:fc:78:23:bd:18:e5:18:b8:46:f9:1b:9a:07:f1:90:94: 07:08:b1:6b:ac:d4:64:8b:c9:12:56:6c:58:fe:94:f1:45:d7: b9:25:70:bf:b2:49:18:b9:31:db:29:75:54:ff:24:67:dc:db: 11:6d:99:20:d6:d7:7e:c1:32:b1:4f:21:73:c9:f1:47:f8:7f: a9:a1:44:a7:9f:42:0a:80:f5:39:60:94:d9:f5:4a:68:18:dc: e0:f2:08:62:23:e3:92:b6:13:31:17:13:ae:ff:fb:57:21:46: a1:d6:4a:2f:cf:c5:c6:34:b8:c4:0a:87:c7:4e:1d:bb:b4:da: 90:9b:39:f1:f1:f9:b5:b3:14:dc:dd:50:bb:00:bf:79:51:be: 6d:ee:8a:9f:bb:d5:3d:51:a7:0e:61:c8:de:ca:b5:57:16:07: d6:e6:07:cd:d1:85:68:0d:29:96:62:54:65:01:8f:53:47:84: 92:41:54:3d:8b:a2:2d:9c:9f:da:46:b8:82:68:e9:c7:80:f9: 38:ad:5c:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9ZJ6UnERSVXTzgcr4AeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDI0ZTA4YzU3NjA3Y2FlYmNjMTljODU1MmVhZTJlOTM1 ZTgyZTUwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjRlODgyYjY4ZTdhOWExOTNkODA2YmFjMWFhNTVmYzhiNDk2Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/zSmQPffslw9KtSH5T/H8M86JCd aWtofqvimLdOoheZ3jQTCDFOgo8nRIzxeFUgWr+5kvGJ0XulZajkAnfuqiPAgJVD y3CmFKKA6/NIseaO9WoG6O6y7lAqxqZKLkm5f1t8+9ozpjjPhj4d/3XeTksQGcSd i0jDChDQy1ThdoyUXdPtLD2+qP307hSM2yuKl0bAwyBRmkdr3GBi33iZW0PCGszF 81cTbSkKSE0wFSoSvrHoGhW/aya0BL7Hej1jcgOcItOSY0Q15Xn1I2HUynsBwbFw rbk/l9fnp2/vNBb6QbvtzOdtsEkWv4KQtyV4KvkP9okeAkUiByepTDenSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9OiCto56mhk9gGusGqVfyLSWy5MB8GA1UdIwQY MBaAFDzSTgjFdgfK68wZyFUuri6TXoLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgt MzZmZDcyM2EzODBhLzEvYjA2SUsyam5xYUdUMkFhNndhcFZfSXRKYkxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgtMzZmZDcyM2EzODBh LzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9q0MA0G CSqGSIb3DQEBCwUAA4IBAQAFIUO3/Kp5WHkTj0zsp0OvQjfiuMq8FiCsI2EsjA3d mtVIkVELkFZ5GnqKUWfhTt8CSMmkrxDKRfx4I70Y5Ri4RvkbmgfxkJQHCLFrrNRk i8kSVmxY/pTxRde5JXC/skkYuTHbKXVU/yRn3NsRbZkg1td+wTKxTyFzyfFH+H+p oUSnn0IKgPU5YJTZ9UpoGNzg8ghiI+OSthMxFxOu//tXIUah1kovz8XGNLjECofH Th27tNqQmznx8fm1sxTc3VC7AL95Ub5t7oqfu9U9UacOYcjeyrVXFgfW5gfN0YVo DSmWYlRlAY9TR4SSQVQ9i6ItnJ/aRriCaOnHgPk4rVyO -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:44 2026 by rpki-client