This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/0-Du4a3wTcLjHP17S235eocvetM.roa File: 0-Du4a3wTcLjHP17S235eocvetM.roa (raw, json) Hash identifier: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4= Subject key identifier: D3:E0:EE:E1:AD:F0:4D:C2:E3:1C:FD:7B:4B:6D:F9:7A:87:2F:7A:D3 Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a Certificate serial: 019B7CEDFF1B8AC46ADD6FBA2549C1A10506 Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/0-Du4a3wTcLjHP17S235eocvetM.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199139 IP address blocks: 91.236.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ff:1b:8a:c4:6a:dd:6f:ba:25:49:c1:a1:05:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3e0eee1adf04dc2e31cfd7b4b6df97a872f7ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:97:54:b6:55:f7:37:31:ea:7b:25:6e:56: 78:7d:fc:f1:07:34:69:ed:3a:a1:f1:89:b5:c4:06: 23:44:5c:de:1a:19:23:60:af:ec:56:69:a3:17:92: da:29:b5:7a:b6:bd:f5:3f:7e:8b:67:46:e8:04:72: 51:c5:01:bb:7b:f0:ab:25:f1:5d:0a:0c:be:39:73: 4b:b1:f5:55:08:b6:0f:b5:b0:c3:bc:69:f3:28:73: 53:6c:8c:71:97:94:41:18:a8:d1:f8:0c:6d:56:2b: 9b:1f:a0:c8:9e:83:91:01:89:fe:19:58:10:14:5e: 32:b9:45:a6:3b:b8:bc:6f:63:13:a4:90:24:ba:49: a8:e3:05:5f:c8:bf:11:a6:0b:3b:b0:bc:f3:9c:d5: 32:fa:2e:a0:93:89:00:d2:9b:ef:64:63:50:15:bf: 43:7c:18:79:7c:35:0d:6e:29:89:87:23:5a:27:77: a3:53:7a:23:b4:86:30:bd:66:8c:47:71:79:67:4e: e4:b3:07:a2:27:9a:1c:a1:0a:2e:2a:2f:8d:cf:13: 52:ca:b2:1d:64:44:86:00:af:3b:09:93:f9:08:8e: ad:c0:57:c4:01:36:86:09:20:b8:a7:be:87:72:fd: ba:31:b0:32:0e:5d:b5:2b:13:56:93:33:f8:f4:05: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E0:EE:E1:AD:F0:4D:C2:E3:1C:FD:7B:4B:6D:F9:7A:87:2F:7A:D3 X509v3 Authority Key Identifier: keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/0-Du4a3wTcLjHP17S235eocvetM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.19.0/24 Signature Algorithm: sha256WithRSAEncryption 94:91:61:97:51:8b:db:d5:49:80:69:d8:cf:87:30:26:b0:80: 67:30:a2:5e:2d:30:16:fb:32:60:93:ba:6e:a1:1f:4c:15:62: cf:4f:d7:44:a7:bc:30:a2:71:82:3c:78:ce:68:e8:6d:45:c2: 0b:28:8d:c8:a0:17:85:92:52:31:b4:23:23:ed:79:b5:5c:4a: f8:40:7c:fb:3d:ff:bc:42:03:3c:a7:75:d3:58:47:dd:44:a0: f2:85:13:29:93:74:60:8a:92:78:85:4f:79:0d:ab:e4:97:98: 1a:55:f9:bc:12:4a:93:0f:ce:4f:e3:54:82:e6:bc:1f:bd:87: d6:02:1c:52:44:45:9a:4d:72:f5:a7:dd:8e:f0:e1:b9:10:01: 1c:af:eb:db:05:23:86:05:97:bd:80:9d:48:13:a9:c8:34:02: 55:ab:ba:39:47:28:dc:ac:6f:83:bd:62:ce:a7:74:56:b1:15: ad:15:9a:8e:cd:73:c0:40:71:32:f0:a2:bb:ed:0b:0a:55:a2: b9:27:1c:3e:2d:f4:66:e8:de:51:53:24:7f:b7:8c:06:58:e9: bd:e3:3e:df:53:91:78:66:17:99:ee:48:71:87:7f:48:c7:df: a1:2b:98:de:0d:14:6d:32:36:72:39:01:d8:37:01:f9:af:27: 2f:cc:c9:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87f8bisRq3W+6JUnBoQUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDZkMmQ0MGZiMWQ1YjJjZjk1NDI5YmZiOTMxOWZjMmIx Y2MyNGEwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2UwZWVlMWFkZjA0ZGMyZTMxY2ZkN2I0YjZkZjk3YTg3MmY3YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu6XVLZV9zcx6nslblZ4ffzxBzRp 7Tqh8Ym1xAYjRFzeGhkjYK/sVmmjF5LaKbV6tr31P36LZ0boBHJRxQG7e/CrJfFd Cgy+OXNLsfVVCLYPtbDDvGnzKHNTbIxxl5RBGKjR+AxtViubH6DInoORAYn+GVgQ FF4yuUWmO7i8b2MTpJAkukmo4wVfyL8Rpgs7sLzznNUy+i6gk4kA0pvvZGNQFb9D fBh5fDUNbimJhyNaJ3ejU3ojtIYwvWaMR3F5Z07ksweiJ5ocoQouKi+NzxNSyrId ZESGAK87CZP5CI6twFfEATaGCSC4p76Hcv26MbAyDl21KxNWkzP49AUELQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPg7uGt8E3C4xz9e0tt+XqHL3rTMB8GA1UdIwQY MBaAFBrW0tQPsdWyz5VCm/uTGfwrHMJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTct YmQ3MWVmZmI5YjM5LzEvMC1EdTRhM3dUY0xqSFAxN1MyMzVlb2N2ZXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTctYmQ3MWVmZmI5YjM5 LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+wTMA0G CSqGSIb3DQEBCwUAA4IBAQCUkWGXUYvb1UmAadjPhzAmsIBnMKJeLTAW+zJgk7pu oR9MFWLPT9dEp7wwonGCPHjOaOhtRcILKI3IoBeFklIxtCMj7Xm1XEr4QHz7Pf+8 QgM8p3XTWEfdRKDyhRMpk3RgipJ4hU95Davkl5gaVfm8EkqTD85P41SC5rwfvYfW AhxSREWaTXL1p92O8OG5EAEcr+vbBSOGBZe9gJ1IE6nINAJVq7o5RyjcrG+DvWLO p3RWsRWtFZqOzXPAQHEy8KK77QsKVaK5Jxw+LfRm6N5RUyR/t4wGWOm94z7fU5F4 ZheZ7khxh39Ix9+hK5jeDRRtMjZyOQHYNwH5rycvzMmk -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:05 2026 by rpki-client