This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/rCBvEBQWjN8QJGM2FmJTOe7QYWA.roa File: rCBvEBQWjN8QJGM2FmJTOe7QYWA.roa (raw, json) Hash identifier: DfQCYLVTLDHaPYwEZnod4am8uTWdLzt8ct4fU6v77+k= Subject key identifier: AC:20:6F:10:14:16:8C:DF:10:24:63:36:16:62:53:39:EE:D0:61:60 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B179A0B3D6D33A0FBB84F7B305406F979 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/rCBvEBQWjN8QJGM2FmJTOe7QYWA.roa Signing time: Sat 13 Dec 2025 12:05:29 +0000 ROA not before: Sat 13 Dec 2025 12:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 91.230.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:9a:0b:3d:6d:33:a0:fb:b8:4f:7b:30:54:06:f9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Dec 13 12:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ac206f1014168cdf1024633616625339eed06160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:6d:c3:86:5d:86:2c:06:20:e2:55:4e:18: c6:9b:2e:69:3a:e4:f5:7e:18:1b:0d:b6:94:46:5c: 9c:df:07:68:6d:5f:16:5a:dc:be:bd:23:c0:39:ee: 61:64:c8:a2:6b:e1:c2:ed:2c:77:ba:bc:2f:a7:0f: fd:fe:73:57:52:f8:90:66:93:2f:d1:3d:33:67:13: a6:64:af:e6:aa:25:8a:7d:7e:ba:37:84:f8:a8:41: c3:b9:43:26:4c:80:88:b3:b7:e2:76:18:26:f7:06: 17:bf:37:09:c0:ed:6d:33:ab:d0:d4:dc:7e:7c:3e: 5d:c2:9f:8b:d5:5b:5b:25:cf:2e:24:52:0b:4a:69: 29:69:84:85:14:b4:14:cd:6a:bf:c2:18:c7:79:74: 64:07:bd:36:b5:67:1b:80:8f:bc:b3:40:8f:ff:b8: 92:15:fd:0c:45:fb:5f:b8:16:22:3c:12:8a:9a:27: 86:b5:98:bb:ce:fa:d3:03:e6:dc:65:60:5c:f0:d4: 3c:e1:63:a3:08:ae:78:80:cd:30:39:8b:66:15:23: dc:8c:9b:85:e9:ac:0b:f0:6f:c8:ad:82:22:40:da: f7:6b:6e:a0:d2:7b:6e:48:16:67:b3:a2:cd:24:5a: 04:f3:3d:a4:7d:32:38:64:a4:12:cf:2d:1c:0d:c1: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:20:6F:10:14:16:8C:DF:10:24:63:36:16:62:53:39:EE:D0:61:60 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/rCBvEBQWjN8QJGM2FmJTOe7QYWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.47.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:4e:97:9b:d6:f6:9d:db:c5:35:7b:99:94:a3:8a:c2:7c:56: 33:f5:d0:13:f3:2d:70:72:a7:43:5f:5e:24:f6:19:8f:d4:ae: 2b:19:7d:6b:dc:71:bd:23:38:46:ae:dc:69:83:18:e7:20:6f: 8f:5d:d8:f8:84:62:21:b6:1b:72:ad:38:b0:7d:e2:e2:f2:79: 18:88:20:47:73:7e:57:4a:a9:ee:2f:4a:a2:ef:34:d0:34:ba: 29:be:07:8e:27:91:c3:12:77:16:69:11:73:ce:71:47:ae:65: 62:3c:a8:e0:78:a4:12:17:08:97:05:92:f1:a9:ce:59:8f:c7: 61:bd:35:7d:de:39:9a:15:e0:88:2e:1f:24:86:7c:e3:b3:44: 13:6e:39:5c:e8:72:ae:47:e5:c5:ef:29:5a:83:ea:1a:3a:22: d5:c5:d7:76:d2:8c:26:5b:a0:68:8f:fd:e7:9d:5c:44:33:c1: 04:bf:58:f5:f8:35:4c:71:4b:51:5c:47:15:84:4f:9e:02:29: a4:7f:09:02:48:ec:9e:68:58:d8:a1:e3:ad:1e:3d:13:b7:50: 17:17:99:53:51:87:d8:a2:5e:58:19:f3:33:58:c0:98:fb:30: 98:85:23:2f:ad:2e:b9:a8:5b:f8:05:bc:c5:d5:68:1e:f3:35: d3:f9:fb:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsXmgs9bTOg+7hPezBUBvl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUxMjEzMTIwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzIwNmYxMDE0MTY4Y2RmMTAyNDYzMzYxNjYyNTMzOWVlZDA2MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJtw4ZdhiwGIOJVThjGmy5pOuT1 fhgbDbaURlyc3wdobV8WWty+vSPAOe5hZMiia+HC7Sx3urwvpw/9/nNXUviQZpMv 0T0zZxOmZK/mqiWKfX66N4T4qEHDuUMmTICIs7fidhgm9wYXvzcJwO1tM6vQ1Nx+ fD5dwp+L1VtbJc8uJFILSmkpaYSFFLQUzWq/whjHeXRkB702tWcbgI+8s0CP/7iS Ff0MRftfuBYiPBKKmieGtZi7zvrTA+bcZWBc8NQ84WOjCK54gM0wOYtmFSPcjJuF 6awL8G/IrYIiQNr3a26g0ntuSBZns6LNJFoE8z2kfTI4ZKQSzy0cDcFJ3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwgbxAUFozfECRjNhZiUznu0GFgMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvckNCdkVCUVdqTjhRSkdNMkZtSlRPZTdRWVdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+YvMA0G CSqGSIb3DQEBCwUAA4IBAQBMTpeb1vad28U1e5mUo4rCfFYz9dAT8y1wcqdDX14k 9hmP1K4rGX1r3HG9IzhGrtxpgxjnIG+PXdj4hGIhthtyrTiwfeLi8nkYiCBHc35X SqnuL0qi7zTQNLopvgeOJ5HDEncWaRFzznFHrmViPKjgeKQSFwiXBZLxqc5Zj8dh vTV93jmaFeCILh8khnzjs0QTbjlc6HKuR+XF7ylag+oaOiLVxdd20owmW6Boj/3n nVxEM8EEv1j1+DVMcUtRXEcVhE+eAimkfwkCSOyeaFjYoeOtHj0Tt1AXF5lTUYfY ol5YGfMzWMCY+zCYhSMvrS65qFv4BbzF1Wge8zXT+fvo -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:12 2025 by rpki-client