This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/M-JitlZPwH3B4L15UahiMiPcXJU.roa File: M-JitlZPwH3B4L15UahiMiPcXJU.roa (raw, json) Hash identifier: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4= Subject key identifier: 33:E2:62:B6:56:4F:C0:7D:C1:E0:BD:79:51:A8:62:32:23:DC:5C:95 Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Certificate serial: 019B7AC93007087873904897309F929CD5D3 Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/M-JitlZPwH3B4L15UahiMiPcXJU.roa Signing time: Thu 01 Jan 2026 18:19:23 +0000 ROA not before: Thu 01 Jan 2026 18:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.209.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:30:07:08:78:73:90:48:97:30:9f:92:9c:d5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Validity Not Before: Jan 1 18:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33e262b6564fc07dc1e0bd7951a8623223dc5c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:f7:a6:49:7f:79:78:38:12:32:88:4f:9f: cc:78:80:d3:4a:10:3c:a7:30:11:02:b6:e7:42:63: aa:a2:15:c1:45:ab:c1:fa:e0:09:a0:e2:67:68:da: 48:48:41:52:cf:20:69:eb:3d:ba:17:8c:15:73:ae: 94:64:ce:e0:c3:e6:06:24:6c:01:77:d6:3a:83:4c: c6:ee:48:e1:8f:ae:22:41:ff:a7:4e:9a:5d:f7:4e: db:50:d6:9a:9c:4a:3a:e3:d4:b5:2f:7c:dd:80:f6: e9:4f:b9:98:91:ec:11:b8:01:5f:08:b0:8a:d9:2a: d6:ae:58:f2:4d:e9:77:43:ef:10:fd:8a:91:ce:e7: 9c:78:7a:d6:3b:d3:f7:0e:7f:b2:e4:5b:0f:a5:c5: 97:ba:3f:42:5e:0a:fd:0f:74:ad:88:a4:1e:8c:fc: 5a:b2:94:ed:4a:35:67:a4:43:1c:e2:f2:3c:a2:11: 26:d5:2e:c0:e7:5c:63:45:b7:03:71:b2:03:c8:9c: 4e:a2:02:ef:a0:ff:fb:a2:c0:2e:4d:cf:64:1b:59: 4f:3f:2f:4d:c5:83:40:3a:99:86:bb:97:c3:d5:5c: 80:03:14:60:3d:07:f9:62:a3:64:3a:39:a5:27:5a: ff:12:b5:48:1b:2c:a3:79:ab:fa:b0:3c:bf:e7:a9: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E2:62:B6:56:4F:C0:7D:C1:E0:BD:79:51:A8:62:32:23:DC:5C:95 X509v3 Authority Key Identifier: keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/M-JitlZPwH3B4L15UahiMiPcXJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.81.0/24 Signature Algorithm: sha256WithRSAEncryption 20:87:49:65:b8:67:f8:61:3b:0e:e4:41:31:b0:e0:85:c9:d0: 00:fb:4f:24:d5:a4:e4:d6:59:74:85:dc:62:47:63:0d:9f:8b: 5d:5a:25:5a:21:b1:eb:b1:8f:a1:57:32:66:33:3f:41:ac:b6: 18:13:0b:4f:97:3f:6e:38:91:39:80:eb:c6:4a:e0:85:f8:d4: de:01:a1:72:de:24:71:8b:e2:5b:93:f6:08:ce:02:bc:9e:77: 84:9b:aa:70:a5:7d:ce:5a:9c:74:a4:71:17:af:06:ce:ee:64: 76:71:81:f8:df:61:b9:3f:f2:6e:c4:d0:4f:11:44:de:18:c3: 50:25:79:f1:86:40:55:78:a2:49:5f:54:b0:4f:5a:85:0e:2f: 74:48:e7:43:06:29:61:66:14:9b:25:27:f7:c2:0e:97:f3:31: ca:9f:00:e4:c8:c7:c7:07:f1:af:c8:e8:7f:36:34:d9:03:a9: fb:25:14:6b:0a:3e:9c:18:bb:96:f1:40:f4:5a:e0:50:8f:c4: e7:60:2f:5e:74:ca:1f:ff:1e:b2:34:42:e6:e7:d1:9e:27:28: 5a:c6:1e:0e:fa:b1:10:25:47:0e:3d:60:c8:e1:b9:a3:3b:6b: 8c:9d:70:1f:e6:55:0a:04:40:dc:00:5f:a7:2d:04:66:1a:f7: e4:8e:c6:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTAHCHhzkEiXMJ+SnNXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4 NDEyNTYwHhcNMjYwMTAxMTgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2UyNjJiNjU2NGZjMDdkYzFlMGJkNzk1MWE4NjIzMjIzZGM1Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstr3pkl/eXg4EjKIT5/MeIDTShA8 pzARArbnQmOqohXBRavB+uAJoOJnaNpISEFSzyBp6z26F4wVc66UZM7gw+YGJGwB d9Y6g0zG7kjhj64iQf+nTppd907bUNaanEo649S1L3zdgPbpT7mYkewRuAFfCLCK 2SrWrljyTel3Q+8Q/YqRzueceHrWO9P3Dn+y5FsPpcWXuj9CXgr9D3StiKQejPxa spTtSjVnpEMc4vI8ohEm1S7A51xjRbcDcbIDyJxOogLvoP/7osAuTc9kG1lPPy9N xYNAOpmGu5fD1VyAAxRgPQf5YqNkOjmlJ1r/ErVIGyyjeav6sDy/56mjYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPiYrZWT8B9weC9eVGoYjIj3FyVMB8GA1UdIwQY MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt NWQ1YWVjMjBmYzlhLzEvTS1KaXRsWlB3SDNCNEwxNVVhaGlNaVBjWEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9FRMA0G CSqGSIb3DQEBCwUAA4IBAQAgh0lluGf4YTsO5EExsOCFydAA+08k1aTk1ll0hdxi R2MNn4tdWiVaIbHrsY+hVzJmMz9BrLYYEwtPlz9uOJE5gOvGSuCF+NTeAaFy3iRx i+Jbk/YIzgK8nneEm6pwpX3OWpx0pHEXrwbO7mR2cYH432G5P/JuxNBPEUTeGMNQ JXnxhkBVeKJJX1SwT1qFDi90SOdDBilhZhSbJSf3wg6X8zHKnwDkyMfHB/GvyOh/ NjTZA6n7JRRrCj6cGLuW8UD0WuBQj8TnYC9edMof/x6yNELm59GeJyhaxh4O+rEQ JUcOPWDI4bmjO2uMnXAf5lUKBEDcAF+nLQRmGvfkjsYH -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:41 2026 by rpki-client