This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa File: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (raw, json) Hash identifier: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE= Subject key identifier: 44:90:D3:DD:43:94:9E:F4:43:75:4A:D4:B7:46:CD:CD:8A:4D:E8:66 Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Certificate serial: 019B7D5C65E01ADC274526204910E59B37D9 Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210514 IP address blocks: 91.225.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:65:e0:1a:dc:27:45:26:20:49:10:e5:9b:37:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4490d3dd43949ef443754ad4b746cdcd8a4de866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fd:21:88:74:43:a5:74:01:79:5a:f3:bd:b7: 18:7b:44:b1:c0:a6:40:6a:1f:d4:76:22:4a:6d:dc: 32:bb:b9:47:6a:a9:69:da:d1:62:c2:21:45:97:41: 2f:41:fe:05:e3:db:17:90:48:64:74:dc:39:d0:ef: 80:19:75:43:f8:5a:92:86:1a:c7:63:9d:54:f5:eb: 64:cf:5d:4b:18:92:12:3f:bd:0e:7d:13:6a:5a:bf: 41:fa:e5:a8:78:a4:05:ce:7b:de:9c:1d:0a:f6:06: c6:af:ad:8a:8a:3b:3f:18:e8:51:ef:ef:5f:00:ba: 40:a9:ed:23:53:bd:44:73:87:91:bf:0f:f9:ff:47: cb:6e:58:c8:ab:29:16:03:13:17:85:4a:db:40:11: e0:c9:55:49:ea:3f:52:fe:54:43:95:7c:6b:ea:07: 95:95:b4:58:f3:2a:e7:71:cb:6a:fc:eb:09:9c:25: f6:9d:0a:2c:98:5c:93:a4:83:2b:c8:61:d2:2e:6f: 8c:ea:e5:63:30:6e:d6:5e:54:89:09:8a:e2:4b:23: df:c2:dc:a1:ef:01:52:ee:02:c1:6e:d0:71:c5:f5: 3d:74:38:f7:b0:4c:24:63:69:3f:b1:85:b4:b3:ea: 7d:89:83:26:c9:92:0a:e5:25:bc:34:5d:6d:91:5d: a6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:90:D3:DD:43:94:9E:F4:43:75:4A:D4:B7:46:CD:CD:8A:4D:E8:66 X509v3 Authority Key Identifier: keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.203.0/24 Signature Algorithm: sha256WithRSAEncryption 79:c4:e8:bf:23:77:de:bf:5e:f9:f2:f8:ad:c6:ce:05:5a:da: e3:d2:66:8c:79:e2:b1:af:f2:21:34:b7:6a:62:47:65:8c:06: c0:84:34:bf:90:8a:55:04:5e:18:7e:fa:79:b0:77:9e:a6:33: 4e:82:8e:38:cc:85:c8:28:f3:f2:15:b9:bd:65:96:49:da:f5: 67:2f:63:c0:f7:9f:30:cc:16:28:ca:3a:2e:6a:0c:44:07:fc: b9:51:26:80:7e:47:1a:79:1f:cf:1c:2c:01:b0:ce:0a:e1:28: a4:df:98:7b:94:d3:3b:64:c3:a3:af:35:67:8e:04:36:d7:59: e2:91:09:a5:5e:78:d0:55:f4:10:19:55:6e:08:86:dd:54:5d: 22:99:64:44:39:d9:7d:20:0b:04:0f:70:54:2b:47:db:6f:01: d3:88:75:b1:3d:50:1d:75:0d:53:25:be:5c:01:92:e3:08:bf: 51:a7:de:68:fa:51:05:66:73:62:09:37:a6:0e:7a:36:f3:d4: 93:9f:cd:fe:58:6b:e1:37:4c:3a:2c:29:a8:e0:18:d6:47:c8: 43:45:b4:3d:3c:54:37:0e:94:32:33:6b:7e:a2:6f:d2:74:2b: be:40:0c:07:04:36:8c:14:3b:5f:3d:9c:da:26:f1:9d:12:e4: 4e:f6:dc:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XGXgGtwnRSYgSRDlmzfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4 ZjZhN2IwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDkwZDNkZDQzOTQ5ZWY0NDM3NTRhZDRiNzQ2Y2RjZDhhNGRlODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof0hiHRDpXQBeVrzvbcYe0SxwKZA ah/UdiJKbdwyu7lHaqlp2tFiwiFFl0EvQf4F49sXkEhkdNw50O+AGXVD+FqShhrH Y51U9etkz11LGJISP70OfRNqWr9B+uWoeKQFznvenB0K9gbGr62Kijs/GOhR7+9f ALpAqe0jU71Ec4eRvw/5/0fLbljIqykWAxMXhUrbQBHgyVVJ6j9S/lRDlXxr6geV lbRY8yrncctq/OsJnCX2nQosmFyTpIMryGHSLm+M6uVjMG7WXlSJCYriSyPfwtyh 7wFS7gLBbtBxxfU9dDj3sEwkY2k/sYW0s+p9iYMmyZIK5SW8NF1tkV2m7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFESQ091DlJ70Q3VK1LdGzc2KTehmMB8GA1UdIwQY MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt MmFlMzUxNzU3MTNjLzEvUkpEVDNVT1VudlJEZFVyVXQwYk56WXBONkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+HLMA0G CSqGSIb3DQEBCwUAA4IBAQB5xOi/I3fev1758vitxs4FWtrj0maMeeKxr/IhNLdq YkdljAbAhDS/kIpVBF4Yfvp5sHeepjNOgo44zIXIKPPyFbm9ZZZJ2vVnL2PA958w zBYoyjouagxEB/y5USaAfkcaeR/PHCwBsM4K4Sik35h7lNM7ZMOjrzVnjgQ211ni kQmlXnjQVfQQGVVuCIbdVF0imWREOdl9IAsED3BUK0fbbwHTiHWxPVAddQ1TJb5c AZLjCL9Rp95o+lEFZnNiCTemDno289STn83+WGvhN0w6LCmo4BjWR8hDRbQ9PFQ3 DpQyM2t+om/SdCu+QAwHBDaMFDtfPZzaJvGdEuRO9tzG -----END CERTIFICATE-----Generated at Mon Jan 26 12:37:17 2026 by rpki-client