This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/sRL6CnCxhQq6ZdaVeaCbbm7MtDQ.roa File: sRL6CnCxhQq6ZdaVeaCbbm7MtDQ.roa (raw, json) Hash identifier: ocUogSzS2q5PvMpjQDQo50YBnp7s/K+nDUKF8avfNic= Subject key identifier: B1:12:FA:0A:70:B1:85:0A:BA:65:D6:95:79:A0:9B:6E:6E:CC:B4:34 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C8068C87C9CBC340753AA3A838C884C Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/sRL6CnCxhQq6ZdaVeaCbbm7MtDQ.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 91.234.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:68:c8:7c:9c:bc:34:07:53:aa:3a:83:8c:88:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b112fa0a70b1850aba65d69579a09b6e6eccb434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4e:e6:27:0c:5d:7f:53:90:90:c9:6a:01:64: c5:98:0f:f9:44:22:86:88:43:1d:40:ab:95:fa:84: c0:fe:39:c8:da:11:45:88:d1:ac:6e:38:99:6c:59: 56:2e:b1:e2:ce:a2:2c:fb:06:d1:63:95:3b:bd:60: 3d:9d:81:2b:84:36:2e:0e:04:b0:69:e1:ff:56:57: c8:d9:27:33:2a:84:0a:58:2d:b7:47:64:b4:66:ec: 52:f5:de:dd:6d:f5:8c:19:64:c4:20:9d:8b:f1:e6: 5d:03:3c:65:c9:2c:b6:f5:01:82:b0:20:91:9b:e9: 6f:9e:34:4d:3e:20:6f:83:e4:78:49:24:31:bc:ac: 43:67:98:e5:ab:4a:5f:5d:e8:cc:90:7e:6e:a4:6b: fb:f8:ff:af:fd:b8:46:7e:99:e2:de:71:df:43:19: 6c:d9:56:ff:75:04:d2:ba:57:6c:14:61:69:6b:48: 02:29:07:fd:b7:e4:6e:98:75:b7:08:f2:9d:cf:16: ea:7f:9d:94:66:02:75:74:d4:a0:a8:22:8f:bb:bb: 06:57:8d:d2:5f:d5:4f:93:e3:32:4f:09:13:70:18: b9:f5:a4:dc:43:71:77:59:d2:bf:f0:99:28:15:01: b0:78:15:dd:50:fb:eb:df:1a:f7:94:f9:a5:31:a5: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:12:FA:0A:70:B1:85:0A:BA:65:D6:95:79:A0:9B:6E:6E:CC:B4:34 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/sRL6CnCxhQq6ZdaVeaCbbm7MtDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.255.0/24 Signature Algorithm: sha256WithRSAEncryption 83:26:09:3e:24:28:59:fe:b2:5a:df:61:9b:53:4a:62:9a:67: b4:bd:7b:03:27:b9:5e:30:92:89:38:0a:98:f9:a0:61:11:1f: fe:26:73:62:d8:ff:63:6a:c8:85:41:ee:9f:be:74:c0:3f:f2: 9c:fb:96:38:b8:3e:32:35:66:05:4c:2f:f7:18:64:69:cd:b3: 84:3a:0d:64:e1:52:a6:09:30:35:a9:cc:3c:66:70:84:a8:11: 9d:b1:75:ff:64:d5:c7:f2:96:64:46:2c:ae:9c:db:4d:4f:ca: 79:21:41:25:2d:94:17:89:90:99:02:5d:3a:45:c8:9e:c7:fd: fd:b6:eb:41:b2:75:98:d6:0d:c0:c9:b8:0d:11:86:bb:a6:90: c7:fd:88:b7:31:e5:bf:a2:19:6f:f9:04:a6:4b:90:b6:93:f7: 5d:c8:c9:d4:cc:44:54:d4:9b:e7:a7:1d:d1:1d:54:e2:08:91: c4:82:3a:59:51:fa:b6:ca:42:61:a6:2b:bc:06:dd:31:f0:3f: 8d:63:fd:ff:07:85:73:8b:11:55:62:8b:d6:74:af:7c:56:27: 6a:3e:19:03:90:3e:21:97:9f:db:1a:09:87:af:ea:a5:15:bd: d1:45:f3:3c:bb:dc:86:ab:3e:88:45:cf:a1:45:e7:2a:c6:5a: a9:29:67:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGjIfJy8NAdTqjqDjIhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTEyZmEwYTcwYjE4NTBhYmE2NWQ2OTU3OWEwOWI2ZTZlY2NiNDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8U7mJwxdf1OQkMlqAWTFmA/5RCKG iEMdQKuV+oTA/jnI2hFFiNGsbjiZbFlWLrHizqIs+wbRY5U7vWA9nYErhDYuDgSw aeH/VlfI2SczKoQKWC23R2S0ZuxS9d7dbfWMGWTEIJ2L8eZdAzxlySy29QGCsCCR m+lvnjRNPiBvg+R4SSQxvKxDZ5jlq0pfXejMkH5upGv7+P+v/bhGfpni3nHfQxls 2Vb/dQTSuldsFGFpa0gCKQf9t+RumHW3CPKdzxbqf52UZgJ1dNSgqCKPu7sGV43S X9VPk+MyTwkTcBi59aTcQ3F3WdK/8JkoFQGweBXdUPvr3xr3lPmlMaUK1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLES+gpwsYUKumXWlXmgm25uzLQ0MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvc1JMNkNuQ3hoUXE2WmRhVmVhQ2JibTdNdERRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+r/MA0G CSqGSIb3DQEBCwUAA4IBAQCDJgk+JChZ/rJa32GbU0pimme0vXsDJ7leMJKJOAqY +aBhER/+JnNi2P9jasiFQe6fvnTAP/Kc+5Y4uD4yNWYFTC/3GGRpzbOEOg1k4VKm CTA1qcw8ZnCEqBGdsXX/ZNXH8pZkRiyunNtNT8p5IUElLZQXiZCZAl06Rciex/39 tutBsnWY1g3AybgNEYa7ppDH/Yi3MeW/ohlv+QSmS5C2k/ddyMnUzERU1Jvnpx3R HVTiCJHEgjpZUfq2ykJhpiu8Bt0x8D+NY/3/B4VzixFVYovWdK98VidqPhkDkD4h l5/bGgmHr+qlFb3RRfM8u9yGqz6IRc+hRecqxlqpKWdu -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:40 2026 by rpki-client