This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/bQ8JzKucNoy5y0sVHTuRHBPDq2E.roa File: bQ8JzKucNoy5y0sVHTuRHBPDq2E.roa (raw, json) Hash identifier: Vzo2HY5zSLFaP0LajL8wuixJXJWl1u/UqY8ZpfyfUCo= Subject key identifier: 6D:0F:09:CC:AB:9C:36:8C:B9:CB:4B:15:1D:3B:91:1C:13:C3:AB:61 Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13 Certificate serial: 019B797DF288132E9B2DDC0117B152685C38 Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/bQ8JzKucNoy5y0sVHTuRHBPDq2E.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 91.199.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f2:88:13:2e:9b:2d:dc:01:17:b1:52:68:5c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d0f09ccab9c368cb9cb4b151d3b911c13c3ab61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:1a:80:7d:57:9f:1b:ee:c7:bb:13:6c:a6: cb:b2:e3:4a:83:54:13:79:ba:63:d8:33:07:aa:69: 90:fc:72:0e:ad:ac:50:4e:0b:5c:9d:0a:07:9c:69: 13:12:87:61:34:6a:f2:65:84:ca:02:9d:e7:72:22: 52:c9:aa:eb:a3:1f:e0:2d:88:d6:23:b1:20:ab:98: f2:67:6a:ba:8c:de:ea:61:c5:77:3f:98:02:c6:4e: de:05:18:54:e1:09:db:a1:a6:12:ca:f9:cb:27:ee: 07:9d:19:54:7e:9b:45:a8:30:b3:5f:9d:63:e2:23: 0a:e8:c9:32:ac:db:dd:0c:6b:f1:62:c3:6f:ea:95: d8:ba:40:6c:87:84:56:4c:4a:db:a9:59:ff:34:8e: 96:34:75:c7:c0:c2:c7:31:66:86:50:eb:60:fc:83: 4b:0c:33:85:fa:ee:ca:41:82:60:ba:1d:95:03:5f: da:cf:40:19:37:dd:6d:84:ef:ec:10:26:5d:b2:01: b2:c5:a7:f4:f7:dd:22:4b:9c:30:a0:0c:32:d1:28: 91:c6:ee:6e:17:18:c9:42:08:df:3e:40:ee:50:0c: dd:74:e9:5c:50:37:a9:a0:d7:87:dc:a9:34:eb:f0: 21:44:88:dd:71:b1:bf:ba:f0:9a:44:fd:41:4c:84: 03:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0F:09:CC:AB:9C:36:8C:B9:CB:4B:15:1D:3B:91:1C:13:C3:AB:61 X509v3 Authority Key Identifier: keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/bQ8JzKucNoy5y0sVHTuRHBPDq2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.42.0/24 Signature Algorithm: sha256WithRSAEncryption 53:a0:5c:80:cf:2b:2c:4b:d0:7e:d5:64:ed:20:73:ff:48:10: a4:c9:1a:11:ac:7f:c9:d0:50:e5:e0:89:f6:00:2f:dc:e5:ed: 79:95:f2:4f:66:a4:ac:19:08:6c:49:0f:d5:81:56:17:09:35: 6a:60:61:27:cb:e5:da:13:d0:29:9d:9e:00:70:92:af:81:7d: bb:98:c3:c0:d6:b6:a3:33:56:5a:5b:47:af:e4:e4:41:93:91: 4e:3f:44:b7:f3:84:be:09:dd:73:fc:de:d7:65:8d:20:89:34: 43:57:60:e9:88:71:82:30:55:42:68:c7:80:a7:eb:7c:a7:61: 4f:e5:a5:e1:fe:08:6f:af:f9:35:bb:14:e7:30:ee:73:f0:43: d8:fd:ef:48:5f:c1:70:bd:27:fe:45:23:39:54:59:64:77:35: a4:f3:d4:57:9a:ca:d0:8a:a2:d9:03:75:03:19:8c:a7:dc:3b: d2:30:7b:a9:09:be:a6:d8:17:52:e5:a1:9b:79:ae:02:9e:46: 55:ae:ea:18:50:06:61:b7:14:28:99:bf:8a:32:05:1e:d3:b6: 94:eb:fb:a7:32:99:76:74:36:bb:47:24:4a:b4:27:b2:6b:55: d1:ce:e4:04:ff:b9:a5:8e:43:30:4e:47:0a:42:b1:11:d7:4b: d2:28:7a:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffKIEy6bLdwBF7FSaFw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0 ZmVjMTMwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDBmMDljY2FiOWMzNjhjYjljYjRiMTUxZDNiOTExYzEzYzNhYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqwagH1Xnxvux7sTbKbLsuNKg1QT ebpj2DMHqmmQ/HIOraxQTgtcnQoHnGkTEodhNGryZYTKAp3nciJSyarrox/gLYjW I7Egq5jyZ2q6jN7qYcV3P5gCxk7eBRhU4QnboaYSyvnLJ+4HnRlUfptFqDCzX51j 4iMK6MkyrNvdDGvxYsNv6pXYukBsh4RWTErbqVn/NI6WNHXHwMLHMWaGUOtg/INL DDOF+u7KQYJguh2VA1/az0AZN91thO/sECZdsgGyxaf0990iS5wwoAwy0SiRxu5u FxjJQgjfPkDuUAzddOlcUDepoNeH3Kk06/AhRIjdcbG/uvCaRP1BTIQDpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0PCcyrnDaMuctLFR07kRwTw6thMB8GA1UdIwQY MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct MDg1ZmEwYTU2MDUyLzEvYlE4SnpLdWNOb3k1eTBzVkhUdVJIQlBEcTJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cqMA0G CSqGSIb3DQEBCwUAA4IBAQBToFyAzyssS9B+1WTtIHP/SBCkyRoRrH/J0FDl4In2 AC/c5e15lfJPZqSsGQhsSQ/VgVYXCTVqYGEny+XaE9ApnZ4AcJKvgX27mMPA1raj M1ZaW0ev5ORBk5FOP0S384S+Cd1z/N7XZY0giTRDV2DpiHGCMFVCaMeAp+t8p2FP 5aXh/ghvr/k1uxTnMO5z8EPY/e9IX8FwvSf+RSM5VFlkdzWk89RXmsrQiqLZA3UD GYyn3DvSMHupCb6m2BdS5aGbea4CnkZVruoYUAZhtxQomb+KMgUe07aU6/unMpl2 dDa7RyRKtCeya1XRzuQE/7mljkMwTkcKQrER10vSKHom -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:11 2026 by rpki-client