This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa File: bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa (raw, json) Hash identifier: nNRgBnyPBnuWyk/W/uELLwEd7uoijhFF49TNbx1XS78= Subject key identifier: 6D:D3:90:7C:05:9D:2F:BC:22:C1:51:10:A1:83:AE:50:16:3F:7F:DA Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b Certificate serial: 019B76EB077247FBA743FD32686D81F1C7E5 Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa Signing time: Thu 01 Jan 2026 00:17:52 +0000 ROA not before: Thu 01 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20900 IP address blocks: 91.231.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:07:72:47:fb:a7:43:fd:32:68:6d:81:f1:c7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dd3907c059d2fbc22c15110a183ae50163f7fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:16:bb:6b:c6:9c:41:ae:ac:b6:0b:59:13: 09:c4:56:38:44:e2:31:ee:6f:d9:db:bf:24:90:d2: df:c5:4a:41:59:b9:50:ab:c5:4c:74:22:b4:e8:fc: d7:4f:43:ec:14:b3:3a:de:76:f6:9e:8e:8d:46:fb: 24:44:92:1d:da:c8:22:db:f8:3f:b1:c4:0e:25:6b: c4:0c:69:a5:bb:da:a1:06:b0:63:d6:d1:3e:71:95: f2:9c:15:e1:49:50:a2:ae:00:a8:18:0d:23:59:02: d1:d3:fd:09:13:cd:3a:eb:7d:4d:45:03:ec:88:9f: 1c:96:f1:19:00:0d:10:ec:76:5d:8f:4e:17:9d:fa: dd:3b:14:94:70:d3:18:b4:92:9a:f3:66:c2:c2:56: 6d:7f:58:e3:7f:58:1f:1e:7c:55:32:c4:9e:b7:48: 1d:ea:b6:fd:80:39:a4:a7:05:90:92:ed:56:b7:ee: f2:86:6e:27:a1:5b:f2:c8:5e:9a:ff:e4:f0:f6:f7: 7e:13:d6:c9:25:4e:16:96:a0:90:34:d2:8e:0b:45: c2:d5:28:5e:9b:28:4c:9f:e7:6c:8f:69:c9:01:00: f1:37:d6:66:1c:15:ae:82:fd:5e:b6:39:44:d3:7c: 96:21:f9:d9:5a:da:4c:06:09:9a:18:cf:71:5b:b5: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D3:90:7C:05:9D:2F:BC:22:C1:51:10:A1:83:AE:50:16:3F:7F:DA X509v3 Authority Key Identifier: keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/bdOQfAWdL7wiwVEQoYOuUBY_f9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.175.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:17:f5:67:ab:b2:1c:e2:10:f2:f7:52:18:8f:e0:bf:0d:9a: 90:43:01:ba:b2:bf:a4:10:aa:94:c0:1f:79:72:92:aa:dc:51: 2a:d7:82:78:c2:3c:22:f5:cd:0b:19:45:14:73:1b:0d:75:24: aa:32:81:c9:c9:01:5f:a7:55:da:31:f1:54:c8:10:30:99:e4: 84:1e:24:33:f4:60:62:c9:4d:02:0e:38:e5:37:27:7a:65:bc: ba:92:4e:e3:a3:74:4b:af:c8:37:8a:11:81:58:ae:bf:34:2d: 25:18:1e:94:91:b2:ae:49:ac:05:11:9f:a2:ff:0b:4e:24:1d: dd:63:3b:61:e5:bd:67:30:23:d4:c9:00:3c:3d:86:13:50:65: 77:12:09:17:8f:85:8b:2a:ae:f7:9a:b9:61:7e:a5:89:ad:c9: 1c:7c:84:a0:5d:3e:7b:c9:c9:38:f7:79:3c:8e:40:de:71:a1: dc:d6:c4:cf:49:51:94:17:57:d1:7a:8f:83:2e:64:3c:25:5c: 55:fb:df:5d:09:e7:2c:16:10:eb:c4:22:17:04:80:1f:a5:9e: 20:70:66:1a:70:6e:14:39:1f:ab:91:73:58:1a:7f:64:5b:3f: 91:fe:42:a7:a4:7b:e7:2b:70:ac:5b:bd:ce:65:e6:16:47:25: 38:34:0c:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wdyR/unQ/0yaG2B8cflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDI2MDQwNmU4MzdhZTM4MzgwZmNjOGQ5OTJiOTNkMGRl MWE4M2IwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGQzOTA3YzA1OWQyZmJjMjJjMTUxMTBhMTgzYWU1MDE2M2Y3ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2kWu2vGnEGurLYLWRMJxFY4ROIx 7m/Z278kkNLfxUpBWblQq8VMdCK06PzXT0PsFLM63nb2no6NRvskRJId2sgi2/g/ scQOJWvEDGmlu9qhBrBj1tE+cZXynBXhSVCirgCoGA0jWQLR0/0JE806631NRQPs iJ8clvEZAA0Q7HZdj04XnfrdOxSUcNMYtJKa82bCwlZtf1jjf1gfHnxVMsSet0gd 6rb9gDmkpwWQku1Wt+7yhm4noVvyyF6a/+Tw9vd+E9bJJU4WlqCQNNKOC0XC1She myhMn+dsj2nJAQDxN9ZmHBWugv1etjlE03yWIfnZWtpMBgmaGM9xW7XE/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG3TkHwFnS+8IsFREKGDrlAWP3/aMB8GA1UdIwQY MBaAFB0CYEBug3rjg4D8yNmSuT0N4ag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzIt OGMwZmFjYTNjYmQ4LzEvYmRPUWZBV2RMN3dpd1ZFUW9ZT3VVQllfZjlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zNDAwMzEtMzY1Yi00ZmQyLTg3MzItOGMwZmFjYTNjYmQ4 LzEvSFFKZ1FHNkRldU9EZ1B6STJaSzVQUTNocURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+evMA0G CSqGSIb3DQEBCwUAA4IBAQAqF/Vnq7Ic4hDy91IYj+C/DZqQQwG6sr+kEKqUwB95 cpKq3FEq14J4wjwi9c0LGUUUcxsNdSSqMoHJyQFfp1XaMfFUyBAwmeSEHiQz9GBi yU0CDjjlNyd6Zby6kk7jo3RLr8g3ihGBWK6/NC0lGB6UkbKuSawFEZ+i/wtOJB3d Yzth5b1nMCPUyQA8PYYTUGV3EgkXj4WLKq73mrlhfqWJrckcfISgXT57yck493k8 jkDecaHc1sTPSVGUF1fReo+DLmQ8JVxV+99dCecsFhDrxCIXBIAfpZ4gcGYacG4U OR+rkXNYGn9kWz+R/kKnpHvnK3CsW73OZeYWRyU4NAwn -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:43 2026 by rpki-client