This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/xIeAXdfn38yQDbyF7veotWoFZu0.roa File: xIeAXdfn38yQDbyF7veotWoFZu0.roa (raw, json) Hash identifier: PRijsI9u95zDDy86ofoQ6KFQuR5A71lxwPw9qkFWPs8= Subject key identifier: C4:87:80:5D:D7:E7:DF:CC:90:0D:BC:85:EE:F7:A8:B5:6A:05:66:ED Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019AAAC0D46A78077EF6E6121B3377D5A6EE Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/xIeAXdfn38yQDbyF7veotWoFZu0.roa Signing time: Sat 22 Nov 2025 08:49:15 +0000 ROA not before: Sat 22 Nov 2025 08:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 91.246.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:aa:c0:d4:6a:78:07:7e:f6:e6:12:1b:33:77:d5:a6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Nov 22 08:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c487805dd7e7dfcc900dbc85eef7a8b56a0566ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:c0:26:ef:fa:15:5f:24:3a:b5:87:ee:7f: 24:4e:da:c1:66:c3:ea:8d:f2:b2:b7:53:13:f9:2e: 3d:eb:00:bb:cf:d1:4a:1a:e0:dc:27:06:d3:98:30: 76:c8:00:cc:9d:8c:86:15:8f:fb:3e:e1:36:99:04: 26:41:1b:43:9f:95:7a:f4:3c:a9:73:e6:5f:08:67: 3b:f9:9b:65:6e:3a:54:68:66:38:1b:dd:0c:c5:7f: b4:87:dd:43:2f:0d:be:09:6d:e5:f6:5c:b9:c5:e5: a4:ac:fc:95:4e:48:82:a0:c4:c7:e9:0f:12:b1:9b: 6f:83:e0:6e:33:36:0c:66:ed:e4:d6:7f:4b:79:c0: 5f:f4:ec:25:0e:f3:13:90:84:2c:d2:04:bb:a7:2e: f6:86:e9:c2:ac:79:d8:b9:6d:eb:b7:c8:fa:6f:bc: e9:43:dd:3b:f6:12:3e:f0:59:09:e6:04:71:b9:f9: de:88:d4:dd:2f:bc:72:59:8b:ca:5a:b7:53:46:a4: ce:8f:91:57:25:49:3c:52:8e:b0:f0:b3:96:89:00: 34:85:db:8d:4d:ad:fa:b0:7e:1b:be:ef:88:76:7a: 96:11:ac:09:2d:41:b5:58:91:c1:79:f2:6e:f7:a4: 28:ec:db:5f:78:68:e2:8d:a6:bc:4c:c8:8a:0f:e6: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:87:80:5D:D7:E7:DF:CC:90:0D:BC:85:EE:F7:A8:B5:6A:05:66:ED X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/xIeAXdfn38yQDbyF7veotWoFZu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.55.0/24 Signature Algorithm: sha256WithRSAEncryption 27:40:ea:25:5a:0b:35:f0:76:0c:bc:bd:c7:44:26:54:9c:4e: c6:0c:bc:7a:ae:57:77:ff:f2:03:d6:32:d2:88:50:c3:4f:05: 0e:4e:95:88:0a:f6:b5:cc:87:8e:61:58:58:cb:fd:97:a7:61: 35:2a:96:6c:1f:56:1f:b2:99:64:48:44:e6:0b:51:f8:e7:70: 6b:38:45:71:90:2c:a5:06:6e:b4:2f:af:a3:84:10:f2:c3:10: c1:2b:65:37:59:3e:15:ec:ad:62:d9:ac:b2:18:c5:a9:bd:28: 8a:a9:d5:49:32:c4:08:4b:32:31:e5:f1:9a:a6:ce:34:d5:b7: 0d:ed:3d:56:26:bd:4d:3a:f1:62:a5:a4:2b:36:50:85:ad:96: 62:a3:79:3d:db:e3:52:5a:6b:a5:dd:7b:ab:31:8d:f7:be:16: da:b2:72:8c:fd:76:e8:2f:99:8b:63:b0:36:ab:1d:d0:b6:41: b8:2c:a3:3c:d1:63:fc:ee:d2:8e:cd:00:c0:a9:76:17:be:41: fe:eb:fd:ce:f0:3f:ce:d2:42:a6:96:8b:9c:c0:ad:aa:f2:19: 33:38:69:98:da:59:60:09:f6:83:3f:68:75:a6:14:d5:5c:cf: 84:9e:65:d0:05:29:c9:63:c1:75:2f:bc:1e:d7:85:15:2d:af: 90:5d:bc:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqqwNRqeAd+9uYSGzN31abuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjUxMTIyMDg0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDg3ODA1ZGQ3ZTdkZmNjOTAwZGJjODVlZWY3YThiNTZhMDU2NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLPAJu/6FV8kOrWH7n8kTtrBZsPq jfKyt1MT+S496wC7z9FKGuDcJwbTmDB2yADMnYyGFY/7PuE2mQQmQRtDn5V69Dyp c+ZfCGc7+ZtlbjpUaGY4G90MxX+0h91DLw2+CW3l9ly5xeWkrPyVTkiCoMTH6Q8S sZtvg+BuMzYMZu3k1n9LecBf9OwlDvMTkIQs0gS7py72hunCrHnYuW3rt8j6b7zp Q9079hI+8FkJ5gRxufneiNTdL7xyWYvKWrdTRqTOj5FXJUk8Uo6w8LOWiQA0hduN Ta36sH4bvu+IdnqWEawJLUG1WJHBefJu96Qo7NtfeGjijaa8TMiKD+aWDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSHgF3X59/MkA28he73qLVqBWbtMB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEveEllQVhkZm4zOHlRRGJ5Rjd2ZW90V29GWnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y3MA0G CSqGSIb3DQEBCwUAA4IBAQAnQOolWgs18HYMvL3HRCZUnE7GDLx6rld3//ID1jLS iFDDTwUOTpWICva1zIeOYVhYy/2Xp2E1KpZsH1YfsplkSETmC1H453BrOEVxkCyl Bm60L6+jhBDywxDBK2U3WT4V7K1i2ayyGMWpvSiKqdVJMsQISzIx5fGaps401bcN 7T1WJr1NOvFipaQrNlCFrZZio3k92+NSWmul3XurMY33vhbasnKM/XboL5mLY7A2 qx3QtkG4LKM80WP87tKOzQDAqXYXvkH+6/3O8D/O0kKmloucwK2q8hkzOGmY2llg CfaDP2h1phTVXM+EnmXQBSnJY8F1L7we14UVLa+QXbx7 -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:14 2025 by rpki-client