This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/jTE7aus6FHt_I5mpklvVVf-KpAw.roa File: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (raw, json) Hash identifier: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY= Subject key identifier: 8D:31:3B:6A:EB:3A:14:7B:7F:23:99:A9:92:5B:D5:55:FF:8A:A4:0C Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66 Certificate serial: 019B78348D9340EBAF6B9B18834CFFE6B8F1 Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/jTE7aus6FHt_I5mpklvVVf-KpAw.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25229 IP address blocks: 46.150.64.0/19 maxlen: 24 91.237.6.0/23 maxlen: 24 91.237.12.0/22 maxlen: 23 176.111.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8d:93:40:eb:af:6b:9b:18:83:4c:ff:e6:b8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66 Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d313b6aeb3a147b7f2399a9925bd555ff8aa40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:bb:6e:e8:fd:91:bb:84:4b:e0:70:d2:0c: 6c:a2:84:13:7a:b5:3e:c5:4a:56:81:15:d0:35:f7: 4e:f9:d4:df:7d:0c:7c:21:ef:5d:6c:b4:94:31:b6: d9:4c:38:6e:a7:e3:c0:4d:c5:58:3c:03:f1:94:39: bb:77:a4:7e:67:ec:2a:41:d2:98:60:b3:27:dc:0f: 83:50:37:b9:52:ce:9a:47:98:01:b0:c4:5b:60:0c: 49:0a:09:b2:e3:d8:b8:f2:cf:b5:68:94:99:19:fe: bf:35:63:80:b7:8a:7f:c4:5c:96:dd:d0:cc:18:cd: b9:c0:5a:90:b9:40:50:40:50:89:46:85:00:40:11: e0:84:25:8a:ec:4e:1e:19:e6:f0:0f:29:f2:31:23: b0:fe:03:c2:e5:10:5c:7f:1f:c2:78:f3:54:99:99: 30:e9:76:39:c2:16:ef:56:5e:56:4c:95:f5:f6:5b: 94:49:3a:c6:05:72:86:fa:7d:b5:68:ec:61:d4:9a: 81:3c:5a:dd:cd:a2:73:ca:2f:59:97:19:80:35:33: 45:f4:79:9d:7b:da:22:10:a9:7b:a9:64:48:8f:88: 9a:5a:f4:72:63:a2:a6:8f:bd:7d:23:b9:fc:6f:2a: 99:ac:9d:04:bc:d4:44:c8:9e:58:5e:1b:b8:e6:79: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:3B:6A:EB:3A:14:7B:7F:23:99:A9:92:5B:D5:55:FF:8A:A4:0C X509v3 Authority Key Identifier: keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/jTE7aus6FHt_I5mpklvVVf-KpAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.150.64.0/19 91.237.6.0/23 91.237.12.0/22 176.111.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:d7:d3:e5:e1:af:fa:86:2c:bb:ec:ce:a3:1a:53:26:b1:c8: a4:9b:d0:f0:ba:6d:bf:f2:8a:91:04:3c:21:59:8e:4c:6d:34: 17:b8:67:ce:37:92:c0:29:7e:f0:0f:c9:a2:d6:72:f6:a7:50: 16:35:67:cd:28:2b:b1:04:dd:59:f2:e6:90:e6:9c:b5:ce:48: 22:38:b5:1e:e1:9c:bd:66:b4:9a:71:56:95:d3:67:04:0c:98: cc:e0:81:d3:75:ca:38:f6:14:35:7f:5f:4e:f0:78:05:f8:50: f8:81:6f:ea:39:b5:2b:d8:36:f5:da:46:f8:75:2f:d3:79:52: c0:6c:4b:09:6e:42:6d:68:71:d8:6e:ab:c7:df:ca:72:ad:cb: 74:d1:65:46:e9:6a:2b:ea:af:63:65:4a:8f:16:10:0f:33:99: c8:56:ec:c4:d0:7a:8b:47:7c:e3:69:1c:ee:4d:78:0a:b5:f6: f3:7b:d6:27:ca:8b:8f:c7:cc:0a:96:6f:25:db:8b:57:6b:88: af:e0:3e:18:f4:07:f9:f7:e6:f2:aa:5b:12:81:cf:4b:a9:40: 02:e9:02:34:50:54:50:d1:49:d9:34:c5:57:60:99:4d:f0:54: cd:13:3f:52:8f:d0:4c:da:ac:0e:f5:99:cc:e3:a3:87:af:aa: 73:0e:2f:6c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NI2TQOuva5sYg0z/5rjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj YWJkNjYwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDMxM2I2YWViM2ExNDdiN2YyMzk5YTk5MjViZDU1NWZmOGFhNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYC7buj9kbuES+Bw0gxsooQTerU+ xUpWgRXQNfdO+dTffQx8Ie9dbLSUMbbZTDhup+PATcVYPAPxlDm7d6R+Z+wqQdKY YLMn3A+DUDe5Us6aR5gBsMRbYAxJCgmy49i48s+1aJSZGf6/NWOAt4p/xFyW3dDM GM25wFqQuUBQQFCJRoUAQBHghCWK7E4eGebwDynyMSOw/gPC5RBcfx/CePNUmZkw 6XY5whbvVl5WTJX19luUSTrGBXKG+n21aOxh1JqBPFrdzaJzyi9ZlxmANTNF9Hmd e9oiEKl7qWRIj4iaWvRyY6Kmj719I7n8byqZrJ0EvNREyJ5YXhu45nldlQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI0xO2rrOhR7fyOZqZJb1VX/iqQMMB8GA1UdIwQY MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt NDA1YjBiZGEyYzI2LzEvalRFN2F1czZGSHRfSTVtcGtsdlZWZi1LcEF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2 LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFLpZAAwQB W+0GAwQCW+0MAwQEsG+wMA0GCSqGSIb3DQEBCwUAA4IBAQAP19Pl4a/6hiy77M6j GlMmscikm9Dwum2/8oqRBDwhWY5MbTQXuGfON5LAKX7wD8mi1nL2p1AWNWfNKCux BN1Z8uaQ5py1zkgiOLUe4Zy9ZrSacVaV02cEDJjM4IHTdco49hQ1f19O8HgF+FD4 gW/qObUr2Db12kb4dS/TeVLAbEsJbkJtaHHYbqvH38pyrct00WVG6Wor6q9jZUqP FhAPM5nIVuzE0HqLR3zjaRzuTXgKtfbze9YnyouPx8wKlm8l24tXa4iv4D4Y9Af5 9+byqlsSgc9LqUAC6QI0UFRQ0UnZNMVXYJlN8FTNEz9Sj9BM2qwO9ZnM46OHr6pz Di9s -----END CERTIFICATE-----Generated at Mon Jan 26 08:21:15 2026 by rpki-client