This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/a_2N7up7ge72iNFxhl27xYnKU30.roa File: a_2N7up7ge72iNFxhl27xYnKU30.roa (raw, json) Hash identifier: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g= Subject key identifier: 6B:FD:8D:EE:EA:7B:81:EE:F6:88:D1:71:86:5D:BB:C5:89:CA:53:7D Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Certificate serial: 019B7C125BC2EE138E0BD80FD98636B37265 Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/a_2N7up7ge72iNFxhl27xYnKU30.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 91.247.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5b:c2:ee:13:8e:0b:d8:0f:d9:86:36:b3:72:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bfd8deeea7b81eef688d171865dbbc589ca537d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:d3:e0:ec:65:83:78:a7:19:34:88:b6:09: 46:2a:65:f6:75:78:c9:80:75:7c:3c:81:25:ec:ce: 39:07:71:73:4a:0f:40:bb:69:7a:03:3e:cf:8d:d3: 83:ac:3e:44:da:78:64:ac:8b:3d:ab:5d:b1:61:fb: c1:24:f4:99:97:c1:9b:d4:43:0e:6d:12:1f:51:1b: 1e:a3:a3:46:0f:92:36:ce:4b:f3:91:0e:e3:d0:44: 93:62:ba:b3:59:26:27:6d:80:42:e6:40:50:f3:13: de:4a:1f:4a:96:3e:96:2b:c3:7a:03:b2:41:93:5d: 16:3d:fc:04:78:d7:02:59:14:b4:34:70:33:c2:5e: df:b0:25:78:66:63:1d:a6:d5:f5:a9:75:29:30:0b: f2:12:45:c2:38:d1:d8:89:39:1e:b2:f4:f4:8c:c9: 02:1b:5b:0c:83:c2:58:d8:6d:39:3b:4f:c0:38:13: fb:3c:2f:50:56:61:98:d0:7a:15:09:6d:ac:89:c1: da:a9:de:91:db:3a:21:43:e6:ed:11:63:6e:5e:50: 86:60:2d:e3:e8:eb:f7:5b:a2:61:d8:ee:2b:8a:f8: de:67:ce:4e:8c:67:49:9d:b3:73:78:dd:17:d0:6c: 76:52:0b:96:f5:c5:06:60:db:42:d5:55:70:c3:2c: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FD:8D:EE:EA:7B:81:EE:F6:88:D1:71:86:5D:BB:C5:89:CA:53:7D X509v3 Authority Key Identifier: keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/a_2N7up7ge72iNFxhl27xYnKU30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.181.0/24 Signature Algorithm: sha256WithRSAEncryption c8:cd:80:d0:72:e7:77:ad:1b:06:64:d2:4f:a3:84:19:b7:b5: 61:7e:d0:0b:47:fd:bc:85:69:39:16:b0:a5:91:bd:ea:c8:26: 13:f1:d9:54:e6:16:ad:f3:96:82:8d:28:d2:7e:07:6d:96:e4: b0:80:08:1b:ff:85:aa:33:da:de:e7:ce:bb:ca:aa:90:3b:bc: e7:de:ab:5c:12:5a:12:a3:27:cc:be:d0:ba:a1:3c:77:c7:ad: cf:bf:22:6a:2a:a9:05:b6:f0:da:cb:4b:f9:1c:ce:ff:fe:da: 99:e3:c7:c4:ac:7b:33:3e:70:ce:63:ff:1b:f9:df:a7:ec:03: f0:49:8d:3b:63:03:37:73:0e:34:47:ef:b5:86:f4:0a:6b:ff: 7a:eb:72:f9:c5:c0:df:ab:f4:bb:a4:4f:6d:60:3e:d1:88:42: ce:b1:40:93:a8:5f:44:22:c3:0d:b0:db:50:68:0d:d0:4a:83: 85:2c:70:92:43:31:8a:74:a4:c5:73:db:c8:77:6b:5e:18:9d: c7:53:26:6d:76:ec:b6:32:d9:13:d4:2b:19:af:bb:31:8f:ec: c8:ea:38:5a:ad:dc:13:9e:59:b6:99:79:a0:bd:42:1d:20:03: e3:bf:39:03:98:64:c6:09:f5:be:d0:f3:4f:ea:c1:05:e6:7d: 5d:57:20:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ElvC7hOOC9gP2YY2s3JlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1 ZjlmYTYwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmZkOGRlZWVhN2I4MWVlZjY4OGQxNzE4NjVkYmJjNTg5Y2E1MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXfT4Oxlg3inGTSItglGKmX2dXjJ gHV8PIEl7M45B3FzSg9Au2l6Az7PjdODrD5E2nhkrIs9q12xYfvBJPSZl8Gb1EMO bRIfURseo6NGD5I2zkvzkQ7j0ESTYrqzWSYnbYBC5kBQ8xPeSh9Klj6WK8N6A7JB k10WPfwEeNcCWRS0NHAzwl7fsCV4ZmMdptX1qXUpMAvyEkXCONHYiTkesvT0jMkC G1sMg8JY2G05O0/AOBP7PC9QVmGY0HoVCW2sicHaqd6R2zohQ+btEWNuXlCGYC3j 6Ov3W6Jh2O4rivjeZ85OjGdJnbNzeN0X0Gx2UguW9cUGYNtC1VVwwyxknQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGv9je7qe4Hu9ojRcYZdu8WJylN9MB8GA1UdIwQY MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt ZmQ2NDQ2NTdjYTJiLzEvYV8yTjd1cDdnZTcyaU5GeGhsMjd4WW5LVTMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/e1MA0G CSqGSIb3DQEBCwUAA4IBAQDIzYDQcud3rRsGZNJPo4QZt7VhftALR/28hWk5FrCl kb3qyCYT8dlU5hat85aCjSjSfgdtluSwgAgb/4WqM9re5867yqqQO7zn3qtcEloS oyfMvtC6oTx3x63PvyJqKqkFtvDay0v5HM7//tqZ48fErHszPnDOY/8b+d+n7APw SY07YwM3cw40R++1hvQKa/9663L5xcDfq/S7pE9tYD7RiELOsUCTqF9EIsMNsNtQ aA3QSoOFLHCSQzGKdKTFc9vId2teGJ3HUyZtduy2MtkT1CsZr7sxj+zI6jhardwT nlm2mXmgvUIdIAPjvzkDmGTGCfW+0PNP6sEF5n1dVyC7 -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:48 2026 by rpki-client