This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/s9paXHBMcHwPpUAhDzEk7fWyjI4.roa File: s9paXHBMcHwPpUAhDzEk7fWyjI4.roa (raw, json) Hash identifier: 6LvRMh7M/YPi7YR17wVKUzvm8pgqSzx1sR9wUzsZ/wE= Subject key identifier: B3:DA:5A:5C:70:4C:70:7C:0F:A5:40:21:0F:31:24:ED:F5:B2:8C:8E Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Certificate serial: 019B7BA468165A4BD10146A2DB55D4C86F5F Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/s9paXHBMcHwPpUAhDzEk7fWyjI4.roa Signing time: Thu 01 Jan 2026 22:18:50 +0000 ROA not before: Thu 01 Jan 2026 22:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35413 IP address blocks: 91.195.180.0/24 maxlen: 24 91.195.181.0/24 maxlen: 24 193.239.252.0/24 maxlen: 24 193.239.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:68:16:5a:4b:d1:01:46:a2:db:55:d4:c8:6f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Validity Not Before: Jan 1 22:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3da5a5c704c707c0fa540210f3124edf5b28c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:8c:0e:d8:07:b6:44:30:cd:ef:0b:a2:3c: 20:69:70:34:ec:f5:3b:df:5d:d5:45:0c:3e:55:50: 44:fb:7c:81:e9:be:8b:55:9f:cf:98:7f:3e:55:e4: 17:0a:13:3b:19:2d:83:f4:f1:3b:91:6f:fe:b4:9f: 82:2f:46:42:c3:50:78:7a:f4:c1:0c:9c:af:17:26: 5a:83:53:ab:c7:ef:69:ec:c0:ad:24:a5:d1:b8:67: 30:c2:76:e4:41:be:bc:cf:aa:de:2d:06:cd:56:e9: 55:aa:f2:2d:f5:b2:60:e0:81:42:cc:c1:7a:3c:7e: 36:6d:74:3f:47:ac:15:19:df:b1:3f:df:4f:20:94: 89:2d:ce:55:08:4a:f9:4a:d1:1c:17:2c:94:1b:28: 4e:de:b2:d4:5b:a4:37:0d:e4:29:6a:09:b5:44:9d: a1:17:5a:4a:62:44:03:7c:64:1e:a4:c6:78:ac:fd: 9b:52:fd:93:3b:37:38:da:8e:17:30:09:86:d2:dc: 69:ca:a1:75:28:ea:2d:8e:9e:48:a7:45:c8:17:38: 7e:2c:58:17:1f:d9:0a:79:76:7d:d5:74:d0:f2:c7: aa:3e:95:3a:d0:60:bc:60:82:59:63:a7:89:d2:cf: 47:8b:65:fb:f6:be:d6:2f:91:73:7c:cf:bf:ab:87: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:5A:5C:70:4C:70:7C:0F:A5:40:21:0F:31:24:ED:F5:B2:8C:8E X509v3 Authority Key Identifier: keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/s9paXHBMcHwPpUAhDzEk7fWyjI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.180.0/23 193.239.252.0/23 Signature Algorithm: sha256WithRSAEncryption 73:02:15:13:98:c7:e9:0f:b5:a3:63:48:7c:14:4e:c8:85:cc: 91:8f:a8:ef:7f:9c:b8:bc:f9:c5:22:b2:ed:69:61:b9:fa:74: 73:f3:8b:f0:e7:86:91:7a:54:d4:9c:08:18:82:ac:e8:e7:3a: 0a:b4:56:05:d3:32:9b:48:52:d4:37:5a:f4:a9:90:0a:b5:e5: 26:25:3e:63:19:46:e3:e1:89:42:6f:47:df:4c:ae:dc:c3:32: 52:e7:09:a4:10:2e:51:eb:52:9a:0a:51:83:18:c0:ba:94:0e: 66:2e:66:75:ba:ee:94:f8:3a:61:62:4f:ec:0a:75:ac:43:71: 6c:f8:f1:13:28:f8:c8:b4:1b:05:46:55:7f:24:f8:7c:5a:0e: 63:70:07:95:b1:8a:43:3f:47:21:e4:72:39:4b:bd:85:a1:19: 1a:cd:16:85:43:7f:2b:97:bf:af:62:86:bc:5e:39:65:a4:60: 65:20:72:44:07:2f:4b:ef:f9:4f:b3:ac:c2:73:3f:75:a9:f6: d7:85:79:75:09:9b:36:6a:ce:06:54:61:e9:b6:2f:45:1d:75: d9:63:64:e1:43:17:6d:84:b1:d1:4a:85:14:92:82:aa:1e:b8: e9:23:6d:df:1c:f5:4a:07:21:2c:b9:e3:dc:15:aa:88:98:b4: 77:30:84:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pGgWWkvRAUai21XUyG9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzU4ZTg4ZmVhZjhkNjcwNTlkYzg3ODdhMmU1ZjMxYTA2 YWMxZTkwHhcNMjYwMTAxMjIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2RhNWE1YzcwNGM3MDdjMGZhNTQwMjEwZjMxMjRlZGY1YjI4YzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbiMDtgHtkQwze8LojwgaXA07PU7 313VRQw+VVBE+3yB6b6LVZ/PmH8+VeQXChM7GS2D9PE7kW/+tJ+CL0ZCw1B4evTB DJyvFyZag1Orx+9p7MCtJKXRuGcwwnbkQb68z6reLQbNVulVqvIt9bJg4IFCzMF6 PH42bXQ/R6wVGd+xP99PIJSJLc5VCEr5StEcFyyUGyhO3rLUW6Q3DeQpagm1RJ2h F1pKYkQDfGQepMZ4rP2bUv2TOzc42o4XMAmG0txpyqF1KOotjp5Ip0XIFzh+LFgX H9kKeXZ91XTQ8seqPpU60GC8YIJZY6eJ0s9Hi2X79r7WL5FzfM+/q4etPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLPaWlxwTHB8D6VAIQ8xJO31soyOMB8GA1UdIwQY MBaAFK91joj+r41nBZ3IeHouXzGgasHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTct MWUyMjMwZGYwNzQ2LzEvczlwYVhIQk1jSHdQcFVBaER6RWs3Zld5akk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTctMWUyMjMwZGYwNzQ2 LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8O0AwQB we/8MA0GCSqGSIb3DQEBCwUAA4IBAQBzAhUTmMfpD7WjY0h8FE7IhcyRj6jvf5y4 vPnFIrLtaWG5+nRz84vw54aRelTUnAgYgqzo5zoKtFYF0zKbSFLUN1r0qZAKteUm JT5jGUbj4YlCb0ffTK7cwzJS5wmkEC5R61KaClGDGMC6lA5mLmZ1uu6U+DphYk/s CnWsQ3Fs+PETKPjItBsFRlV/JPh8Wg5jcAeVsYpDP0ch5HI5S72FoRkazRaFQ38r l7+vYoa8XjllpGBlIHJEBy9L7/lPs6zCcz91qfbXhXl1CZs2as4GVGHpti9FHXXZ Y2ThQxdthLHRSoUUkoKqHrjpI23fHPVKByEsuePcFaqImLR3MIT8 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:45 2026 by rpki-client