This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/PaurkzffyErdpNi4ejYNr7FnWdc.roa File: PaurkzffyErdpNi4ejYNr7FnWdc.roa (raw, json) Hash identifier: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4= Subject key identifier: 3D:AB:AB:93:37:DF:C8:4A:DD:A4:D8:B8:7A:36:0D:AF:B1:67:59:D7 Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d Certificate serial: 019B7D5C8AAE7B38B7611643C127B0D04C1B Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/PaurkzffyErdpNi4ejYNr7FnWdc.roa Signing time: Fri 02 Jan 2026 06:19:35 +0000 ROA not before: Fri 02 Jan 2026 06:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 91.216.108.0/24 maxlen: 24 195.66.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:8a:ae:7b:38:b7:61:16:43:c1:27:b0:d0:4c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d Validity Not Before: Jan 2 06:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dabab9337dfc84adda4d8b87a360dafb16759d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:2d:a1:41:e1:8b:6f:92:78:1a:91:f3:97: 3f:f2:af:23:2c:cc:1a:12:0d:4d:89:c6:e6:c0:75: cf:4a:d5:37:c0:d9:54:c3:6c:a1:d0:9d:15:bd:7e: 92:49:ef:b5:3b:82:a1:e8:a5:cb:1e:d0:71:99:94: eb:4f:09:b3:ef:8c:8d:7a:0a:d7:47:18:9a:b9:39: 59:e5:2a:48:9e:9b:02:60:dd:21:cb:42:73:bc:c5: 5a:30:cb:12:36:18:d6:c5:87:22:d9:9c:e7:c1:60: f9:a2:9a:9f:3d:f7:8d:29:76:07:82:7b:4a:7e:bc: 0d:14:69:dd:db:d7:a7:d0:39:60:df:74:1d:95:08: c5:50:43:38:a7:e3:3c:79:1e:aa:98:df:cb:ff:93: 36:16:73:a8:cc:10:6f:bd:3b:ad:b2:4e:62:d9:a9: 2f:a6:92:86:89:8e:fa:47:c9:e9:91:a8:2c:9c:fd: 26:ec:7c:e7:f1:98:04:03:00:a6:b5:92:50:91:90: 18:81:41:0a:ef:25:44:9e:ea:c3:ff:07:e4:3a:43: 4b:28:09:48:00:8b:fd:93:d4:e6:fd:2c:d7:53:19: e8:a1:f1:9d:95:e6:c5:88:25:e6:99:af:e2:24:63: 93:b4:fc:a4:15:54:6c:89:e0:fb:39:4e:17:96:60: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:AB:93:37:DF:C8:4A:DD:A4:D8:B8:7A:36:0D:AF:B1:67:59:D7 X509v3 Authority Key Identifier: keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/PaurkzffyErdpNi4ejYNr7FnWdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.108.0/24 195.66.76.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:ce:98:d6:38:c0:ee:7c:0c:75:65:67:a6:62:fb:e0:c3:a5: 8f:d6:6d:d0:be:1b:1b:20:02:3f:af:15:01:cc:a6:b5:f2:ce: e6:53:50:2d:d9:28:e4:10:fc:24:b5:58:48:b4:dd:4d:5b:7f: 2d:a3:25:a6:62:7f:53:4a:c9:bd:fa:b9:2c:d4:26:f3:04:bb: 77:cb:10:68:14:dc:17:53:1a:65:54:02:f9:2e:90:ff:62:ad: f5:ce:3e:73:12:91:96:66:57:e2:24:4a:2d:84:00:23:9e:1f: 6b:5c:96:40:29:8b:de:66:02:57:99:64:b2:c5:d5:e5:5c:d8: 17:cc:db:01:fa:9a:fd:1b:24:03:18:72:6c:75:84:e5:17:f4: 6d:0e:bc:90:c7:f4:11:1b:45:df:a0:ff:20:48:c8:97:c4:e4: 26:ca:bc:aa:f9:a7:17:e7:c2:5c:ba:ac:77:03:b7:a5:2d:29: 6e:18:45:22:14:b9:2c:5e:bf:eb:3c:33:a9:17:17:f9:d7:34: 25:8d:34:1c:39:99:f1:ed:a1:62:3e:51:f5:56:bb:31:67:f2: f5:0b:6c:8f:e5:fa:33:f4:8d:f6:b8:66:37:b6:c4:fe:63:66: 0f:8d:dc:93:e6:a2:4c:31:1f:08:d7:e7:5f:b9:b4:1f:e9:a9: 69:35:d4:bb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XIquezi3YRZDwSew0EwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk ODhhMGQwHhcNMjYwMTAyMDYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGFiYWI5MzM3ZGZjODRhZGRhNGQ4Yjg3YTM2MGRhZmIxNjc1OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbstoUHhi2+SeBqR85c/8q8jLMwa Eg1NicbmwHXPStU3wNlUw2yh0J0VvX6SSe+1O4Kh6KXLHtBxmZTrTwmz74yNegrX RxiauTlZ5SpInpsCYN0hy0JzvMVaMMsSNhjWxYci2ZznwWD5opqfPfeNKXYHgntK frwNFGnd29en0Dlg33QdlQjFUEM4p+M8eR6qmN/L/5M2FnOozBBvvTutsk5i2akv ppKGiY76R8npkagsnP0m7Hzn8ZgEAwCmtZJQkZAYgUEK7yVEnurD/wfkOkNLKAlI AIv9k9Tm/SzXUxnoofGdlebFiCXmma/iJGOTtPykFVRsieD7OU4XlmAxfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD2rq5M338hK3aTYuHo2Da+xZ1nXMB8GA1UdIwQY MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt MjIyY2ViNmMzNDRjLzEvUGF1cmt6ZmZ5RXJkcE5pNGVqWU5yN0ZuV2RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9hsAwQA w0JMMA0GCSqGSIb3DQEBCwUAA4IBAQBtzpjWOMDufAx1ZWemYvvgw6WP1m3Qvhsb IAI/rxUBzKa18s7mU1At2SjkEPwktVhItN1NW38toyWmYn9TSsm9+rks1CbzBLt3 yxBoFNwXUxplVAL5LpD/Yq31zj5zEpGWZlfiJEothAAjnh9rXJZAKYveZgJXmWSy xdXlXNgXzNsB+pr9GyQDGHJsdYTlF/RtDryQx/QRG0XfoP8gSMiXxOQmyryq+acX 58Jcuqx3A7elLSluGEUiFLksXr/rPDOpFxf51zQljTQcOZnx7aFiPlH1VrsxZ/L1 C2yP5foz9I32uGY3tsT+Y2YPjdyT5qJMMR8I1+dfubQf6alpNdS7 -----END CERTIFICATE-----Generated at Fri Jan 9 17:23:24 2026 by rpki-client